The FDA's 12-Digit NDC: What Changes on US Drug Barcodes, and When

On 5 March 2026 the FDA published a final rule with an unglamorous title — Revising the National Drug Code Format and Drug Label Barcode Requirements — and most coverage since has focused on the half of it that involves counting digits.

That is the less interesting half. The rule does two things. It makes the National Drug Code twelve digits in a single fixed shape, and it removes the requirement that the barcode carrying it be a linear barcode. The second change is what ends a twenty-year oddity in American pharmacy: the fact that a prescription pack has had to carry two separate barcodes saying overlapping things.

The Short Answer

• The NDC becomes 12 digits, in one uniform 6-4-2 shape: a 6-digit labeler code, a 4-digit product code, a 2-digit package code.
• Drug label barcodes may now be 2D. The old rule required a linear barcode; the revised rule permits linear or non-linear symbologies that conform to FDA-recognised standards.
• Nothing happens for years. The rule takes effect 7 March 2033, with a transition period running to 7 March 2036.
• From the effective date, one 2D Data Matrix can satisfy both the drug label barcode requirement and the DSCSA product identifier requirement.

Why a US Drug Pack Currently Carries Two Barcodes

This is the piece of context that makes the rest of the rule make sense, and it is missing from most of the write-ups.

Two separate requirements have been operating on the same box. The FDA's bar code label rule at 21 CFR 201.25 required that most prescription drugs and certain over-the-counter drugs carry a barcode containing the NDC, and it required that barcode to be linear — the familiar striped kind, meeting EAN/UCC or HIBCC standards. Separately, the Drug Supply Chain Security Act requires a product identifier on prescription drug packages: the product code, a serial number, the lot and the expiry date. That is far too much data for a linear symbol, so in practice it is carried in a 2D GS1 DataMatrix, and has been on manufacturer packs since late 2017.

So the pack got both. A linear barcode to satisfy the labelling rule, and a Data Matrix to satisfy DSCSA — the second one already containing everything the first one said, and more. The linear code stayed not because anyone needed it, but because the regulation said "linear".

The March 2026 rule removes that word. Once it takes effect, a single Data Matrix that encodes the NDC can do both jobs.

The New NDC Format: 6-4-2

Today the FDA assigns NDCs as 10 digits in three different segment configurations, which is the root of a great deal of downstream confusion:

Ten digits in three shapes means that, given a bare 10-digit string, you cannot reliably tell where one segment ends and the next begins without knowing which configuration the labeler was assigned. The new format removes the ambiguity by fixing the shape once and giving the labeler segment room to grow — the practical driver, since 4- and 5-digit labeler codes were running out.

The Three-NDC Problem, and Why the Rule Does Not Fully Solve It

Here is the part that will cause the most operational pain, and it deserves stating plainly because the celebratory coverage skates over it.

There is already more than one NDC in circulation for the same product. The FDA assigns a 10-digit code. Billing under HIPAA has long used an 11-digit representation in a 5-4-2 shape, produced by padding whichever segment is short with a leading zero. So the same drug is 10 digits in the FDA's listing data, 11 digits on a pharmacy claim, and — from 2033 — 12 digits on the label.

The FDA's rule governs FDA-assigned NDCs. It does not, by itself, change the HIPAA billing standard: that sits with a different authority and would need its own update. Until that happens, anyone building or maintaining systems that touch drug identifiers should assume they must handle multiple representations concurrently rather than migrate cleanly from one to another.

If your systems currently infer segment boundaries from string length, that assumption breaks. It is worth finding those code paths well before 2033.

The Timeline

Seven years of notice is unusually generous, and it reflects how deep NDCs sit in American healthcare data — in claims systems, formularies, dispensing software, wholesaler catalogues and electronic health records. A shorter runway would have been unworkable.

The risk with a long runway is the obvious one. A 2033 date invites everyone to do nothing until 2031, and the systems inventory — finding every place a drug identifier is parsed, stored or padded — is the slow part.

What This Means If You Scan Drug Barcodes

For pharmacies, hospitals and anyone doing goods-in verification, the practical consequence arrives gradually rather than on a single date. Between 2033 and 2036 the installed base will contain packs with 10-digit NDCs and packs with 12-digit NDCs, some with a linear barcode, some with a Data Matrix, some with both while manufacturers work through artwork changes.

Two things follow. Scanning hardware and software must read 2D symbologies, not just linear ones — a Data Matrix on a curved vial label is a different proposition from a straight striped code. And any validation logic that assumes a fixed NDC length needs to accept both.

If you want to see what a given pack actually carries today, you can scan the Data Matrix and read the raw payload. It arrives as a run of GS1 Application Identifiers — the product code, serial, lot and expiry packed into one string — and our free GS1 barcode decoder splits that into labelled fields in the browser. The barcode validator will check a GTIN's check digit if you need to confirm one by hand.

How This Fits With Sunrise 2027 and the EU

This rule is one instance of a much broader shift from linear to 2D barcodes, and it helps to see the three big programmes side by side, because they are frequently confused with one another.

The distinction that matters most: GS1 Sunrise 2027 is a capability milestone agreed across industry, not a legal deadline — nobody is fined for missing it, and linear barcodes keep working afterwards. The FDA rule is law, with a compliance date and the possibility of regulatory action behind it. Europe, meanwhile, has required a Data Matrix on prescription packs since 2019, which is why an EU medicine box already looks the way an American one will in the 2030s.

The same direction of travel shows up in the EU Digital Product Passport for non-pharmaceutical goods. Broadly: more data, carried in 2D, resolved through a database rather than printed on the pack.

What to Do Now

• Inventory where NDCs are parsed. Any code that assumes 10 or 11 characters, or infers segments from length, is a future defect. This is the long pole.
• Check that scanning hardware reads Data Matrix. Linear-only scanners at goods-in or at the dispensing bench will need replacing; many sites already did this for DSCSA.
• Plan artwork once, not twice. If packaging is being redesigned before 2033 anyway, designing for a single 2D carrier now avoids paying for the change twice.
• Watch the HIPAA side. The billing format is the loose end, and it is not the FDA's to tie.
• Do not rush. There is no benefit to putting a 12-digit NDC on a label before the FDA assigns one.

Frequently Asked Questions

When does the 12-digit NDC take effect?

The rule takes effect on 7 March 2033, with a transition period through 7 March 2036. Nothing on packaging is required to change before the effective date.

What is the new NDC format?

Twelve digits in a fixed 6-4-2 shape: a 6-digit labeler code, a 4-digit product code and a 2-digit package code. This replaces the current 10-digit code, which is assigned in three different configurations — 4-4-2, 5-3-2 and 5-4-1.

Does the FDA now require a 2D barcode on drug labels?

No. It permits one. The revised requirement allows either a linear or a non-linear barcode, provided the format conforms to standards the FDA recognises. A manufacturer may keep using a linear barcode carrying the NDC if it prefers.

Can one Data Matrix satisfy both the FDA barcode rule and DSCSA?

From the effective date, yes. Because a DSCSA product identifier already encodes the product code that contains the NDC, a single 2D Data Matrix carrying it can meet both requirements — which is what makes the second, linear barcode redundant.

What happens to existing 10-digit NDCs?

The FDA has said it will convert drug listing data to the 12-digit format on the effective date, so existing products receive a 12-digit representation rather than a new code. Labels bearing 10-digit NDCs are expected to be tolerated through the transition period ending in March 2036.

Does this change the 11-digit NDC used for billing?

Not directly. The 11-digit 5-4-2 representation used on claims comes from a different standard, outside the FDA's authority, and would require its own update. Until that happens, systems should expect to handle more than one NDC representation at the same time.

Why is the compliance date so far away?

NDCs are embedded in claims processing, formularies, dispensing systems, wholesaler catalogues and health records across the entire US healthcare system. Changing an identifier that widely used is a multi-year data migration for thousands of organisations, not a labelling change.

Will my phone be able to read the new codes?

It already can, if you have an app that supports Data Matrix — most built-in phone cameras look only for QR codes, which is why a medicine pack often appears unscannable. What a phone cannot do is tell you whether a pack is genuine: that check runs against closed verification databases that dispensers, not consumers, have access to.

Is this the same as GS1 Sunrise 2027?

No. Sunrise 2027 is a voluntary industry milestone for retail point-of-sale systems to be able to read 2D codes; it is not law and carries no penalty. The FDA rule is a federal regulation with a compliance date.

The Short Version

The FDA has given American drug packaging a longer identifier and, more importantly, permission to carry it in a square instead of stripes. The digits story is the one being reported; the barcode story is the one that changes what a pack looks like. Both land on 7 March 2033, and the work that takes longest — finding every system that assumes an NDC is ten characters — is the work to start early.

For a wider view of which symbol turns up where and why, see our guides to the types of barcodes and to GS1 DataMatrix specifically.

This article summarises a federal regulation for a general audience and is not legal or regulatory advice. Where any summary — including this one — disagrees with the rule as published in the Federal Register, the published text governs. Compliance decisions should be taken with qualified advice.