Buying and sourcing
Lot numbers and traceability: the field that matters most
On this page
- The regulator's own definition is the clearest one
- Four things break at once when the lot is missing
- One: the certificate stops describing your container
- Two: a recall cannot reach you
- Three: counterfeit warnings become unusable
- Four: your own record loses its spine
- Traceability is a system, not a string
- What a lot number does not establish
- The minimum record
US regulations define a lot number as any distinctive combination of characters from which the complete history of manufacture, processing, packing, holding and distribution of a batch can be determined. That is a definition of a join key.
It is the field that decides whether a certificate of analysis describes your container or a different one, and whether a recall notice reaches you.
Traceability is a chain, not a number. Manufacturing records, distribution records and — in regulated supply chains — serialisation and verification systems are what make a lot number resolvable.
Outside those systems the number is still worth recording, but it resolves to nothing. It is a label without a database behind it.
This page explains an identifier and the systems that make it meaningful. It does not verify any product, endorse any seller, or tell you whether a container you hold is genuine. Where a lot can be checked, this page says where; where it cannot, it says that too.
The regulator's own definition is the clearest one
US drug manufacturing regulations define the terms directly. A batch is a specific quantity of a drug or other material intended to have uniform character and quality within specified limits, produced according to a single manufacturing order during the same cycle of manufacture. A lot is a batch, or a specific identified portion of a batch, with the same uniformity requirement.1
And a lot number, control number or batch number means any distinctive combination of letters, numbers or symbols from which the complete history of the manufacture, processing, packing, holding and distribution of a batch or lot can be determined. Read that clause again: the number is defined by what it lets you determine. It is not a serial for its own sake. It is a pointer into records.1
The packaging regulation states the operational consequence — a drug product must be identified with a lot or control number that permits determination of the history of the manufacture and control of the batch — and the distribution-records regulation requires records by lot for products shipped, so that any lot can be traced to where it went.23
Four things break at once when the lot is missing
One: the certificate stops describing your container
A laboratory report describes the sample it received, identified by whatever the submitter attached to it. The only thing that connects that report to the container in your hand is the lot. If the certificate carries no lot, or a lot that does not appear on your container, the document describes different material — and no amount of accreditation, method detail or impressive purity figure repairs that, because the mismatch is upstream of all of it.8
Two: a recall cannot reach you
Recalls are issued and communicated by lot. FDA publishes recalls, market withdrawals and safety alerts, and the identifying detail in almost every drug entry is a lot number or a range of them. A person who did not record which lot they received cannot act on a notice even after reading it, and cannot rule themselves out either.7
Three: counterfeit warnings become unusable
The clearest illustration in this market is FDA's warning about counterfeit Ozempic found in the U.S. supply chain. That notice told wholesalers, retail pharmacies, health care practitioners and patients to check what they had received against a specific lot number and serial number, and not to distribute, use or sell it. Two identifiers, at two levels of granularity — the batch, and the individual package.5
The check the notice asks for is only possible for someone who kept the packaging or wrote the numbers down. It is a small act with a very asymmetric payoff.5
Four: your own record loses its spine
Inside a personal record, the lot is what lets separate facts refer to the same object. The certificate, the purchase, the arrival condition, the storage location, the date of entry, and any excursion all attach to it. Without it they attach to a container described as "the one from a while ago", and that is not a record anyone can reason about later — including you.3
Traceability is a system, not a string
A lot number is only as good as the records behind it, which is why regulated supply chains build machinery on top of it. Under the Drug Supply Chain Security Act the United States has been putting in place an interoperable, electronic system to identify and trace prescription drugs as they are distributed, with product identifiers, transaction information and verification obligations across trading partners.4
The European approach solves the same problem differently. The delegated regulation on safety features requires a unique identifier carried in a two-dimensional barcode — including the batch number and expiry date alongside a product code and a randomised serial number — together with an anti-tampering device, verified against a repositories system at dispensing.6
The common structure is worth extracting. In both systems the number on the pack is a key; the value comes from a database that can be queried and a set of parties obliged to keep it accurate. Take away the database and the obligation, and what remains is ink.46
What a lot number does not establish
- That the contents match the label. A lot number identifies a batch; it does not test one.
- That the batch was uniform in fact. Uniformity within specified limits is the regulatory definition of a batch, not a guarantee delivered by the number.
- That the number was assigned by anyone who kept records. Outside a regulated chain, nothing requires that.
- That any certificate quoting it is genuine. A lot number can be copied into a document as easily as into a print run.
- Anything at all about the individual container beyond which batch it claims to belong to.18
The minimum record
The practical output of this page is short. When a container arrives, transcribe from the container itself — not from an invoice, not from a listing, not from memory:
- The lot or batch number exactly as printed, including case and any punctuation.
- Any serial number or unique identifier on the outer packaging, where one exists.
- The product name and the manufacturer or labeller as printed.
- The expiry date as printed, and the storage statement as printed.
- The date received, and the condition on arrival.
- Which certificate, if any, claims to describe this lot, and where you got that certificate from.125
Packaging gets thrown away in the first five minutes and the numbers are gone permanently at that point. Transcription costs a minute and is the difference between a container you can ask questions about and one you cannot.
The certificate has a lot number but my vial does not. Is that a problem?
It means the certificate cannot be connected to your container by anyone, including you. The document may be entirely genuine and still describe different material. A certificate whose lot cannot be matched to the container in hand is, for your purposes, a document about someone else's sample.
Can I look up a lot number myself?
Sometimes. For approved products in regulated supply chains, manufacturers operate verification routes and regulators publish recalls by lot, so a number can be checked against a public notice or with the manufacturer. Outside those chains there is generally nothing to query, because there is no obliged party and no repository.
Why record a lot number if I can't verify it?
Because the value shows up later and asymmetrically. A recorded number lets you act on a recall or counterfeit notice, lets a clinician tie an event to a specific batch, and lets you tell whether two containers were the same material. An unrecorded one forecloses all of that permanently, and there is no way to recover it after the packaging is gone.
Sources
- Regulatory21 CFR 210.3 — Definitions (batch, lot, lot number)U.S. Electronic Code of Federal Regulations, 2026www.ecfr.gov/current/title-21/chapter-I/subchapter-C/part-210/se ↗↩ Back to text
- Regulatory21 CFR 211.130 — Packaging and labeling operationsU.S. Electronic Code of Federal Regulations, 2026www.ecfr.gov/current/title-21/chapter-I/subchapter-C/part-211/su ↗↩ Back to text
- Regulatory21 CFR 211.196 — Distribution recordsU.S. Electronic Code of Federal Regulations, 2026www.ecfr.gov/current/title-21/chapter-I/subchapter-C/part-211/su ↗↩ Back to text
- RegulatoryDrug Supply Chain Security Act (DSCSA)U.S. Food and Drug Administration, 2026www.fda.gov/drugs/drug-supply-chain-integrity/drug-supply-chain- ↗↩ Back to text
- RegulatoryFDA warns consumers not to use counterfeit Ozempic (semaglutide) found in U.S. drug supply chainU.S. Food and Drug Administration, 2023www.fda.gov/drugs/drug-alerts-and-statements/fda-warns-consumers ↗↩ Back to text
- RegulatoryCommission Delegated Regulation (EU) 2016/161 — safety features on the packaging of medicinal products for human useOfficial Journal of the European Union, 2016eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0161 ↗↩ Back to text
- RegulatoryRecalls, Market Withdrawals, & Safety AlertsU.S. Food and Drug Administration, 2026www.fda.gov/safety/recalls-market-withdrawals-safety-alerts ↗↩ Back to text
- RegulatoryISO/IEC 17025:2017 General requirements for the competence of testing and calibration laboratoriesInternational Organization for Standardization, 2017www.iso.org/standard/66912.html ↗↩ Back to text