Beginning not later than January 1, 2015, a manufacturer shall have systems in place to enable the manufacturer to comply with the following requirements:
``(A) Suspect product.--
``(i) In general.--Upon making a determination that a product in the possession or control of the manufacturer is a suspect product, or upon receiving a request for verification from the Secretary that has made a determination that a product within the possession or control of a manufacturer is a suspect product, a manufacturer shall--
``(I) quarantine such product within the possession or control of the manufacturer from product intended for distribution until such product is cleared or dispositioned; and
``(II) promptly conduct an investigation in coordination with trading partners, as applicable, to determine whether the product is an illegitimate product, which shall include validating any applicable transaction history and transaction information in the possession of the manufacturer and otherwise investigating to determine whether the product is an illegitimate product, and, beginning 4 years after the date of enactment of the Drug Supply Chain Security Act, verifying the product at the package level, including the standardized numerical identifier.
``(ii) Cleared product.--If the manufacturer makes the determination that a suspect product is not an illegitimate product, the manufacturer shall promptly notify the Secretary, if applicable, of such determination and such product may be further distributed.
``(iii) Records.--A manufacturer shall keep records of the investigation of a suspect product for not less than 6 years after the conclusion of the investigation.
``(B) Illegitimate product.--
``(i) In general.--Upon determining that a product in the possession or control of a manufacturer is an illegitimate product, the manufacturer shall, in a manner consistent with the systems and processes of such manufacturer--
``(I) quarantine such product within the possession or control of the manufacturer from product intended for distribution until such product is dispositioned;
``(II) disposition the illegitimate product within the possession or control of the manufacturer;
``(III) take reasonable and appropriate steps to assist a trading partner to disposition an illegitimate product not in the possession or control of the manufacturer; and
``(IV) retain a sample of the product for further physical examination or laboratory analysis of the product by the manufacturer or Secretary (or other appropriate Federal or State official) upon request by the Secretary (or other appropriate Federal or State official), as necessary and appropriate.
``(ii) Making a notification.--
``(I) Illegitimate product.--Upon determining that a product in the possession or control of the manufacturer is an illegitimate product, the manufacturer shall notify the Secretary and all immediate trading partners that the manufacturer has reason to believe may have received such illegitimate product of such determination not later than 24 hours after making such determination.
``(II) High risk of illegitimacy.--A manufacturer shall notify the Secretary and immediate trading partners that the manufacturer has reason to believe may have in the trading partner's possession a product manufactured by, or purported to be a product manufactured by, the manufacturer not later than 24 hours after determining or being notified by the Secretary or a trading partner that there is a high risk that such product is an illegitimate product. For purposes of this subclause, a `high risk' may include a specific high risk that could increase the likelihood that illegitimate product will enter the pharmaceutical distribution supply chain and other high risks as determined by the Secretary in guidance pursuant to subsection (h).
``(iii) Responding to a notification.--Upon the receipt of a notification from the Secretary or a trading partner that a determination has been made that a product is an illegitimate product, a manufacturer shall identify all illegitimate product subject to such notification that is in the possession or control of the manufacturer, including any product that is subsequently received, and shall perform the activities described in subparagraph (A).
``(iv) Terminating a notification.--Upon making a determination, in consultation with the Secretary, that a notification is no longer necessary, a manufacturer shall promptly notify immediate trading partners that the manufacturer notified pursuant to clause (ii) that such notification has been terminated.
``(v) Records.--A manufacturer shall keep records of the disposition of an illegitimate product for not less than 6 years after the conclusion of the disposition.
``(C) Requests for verification.--Beginning 4 years after the date of enactment of the Drug Supply Chain Security Act, upon receiving a request for verification from an authorized repackager, wholesale distributor, or dispenser that is in possession or control of a product such person believes to be manufactured by such manufacturer, a manufacturer shall, not later than 24 hours after receiving the request for verification or in other such reasonable time as determined by the Secretary, based on the circumstances of the request, notify the person making the request whether the product identifier, including the standardized numerical identifier, that is the subject of the request corresponds to the product identifier affixed or imprinted by the manufacturer. If a manufacturer responding to a request for verification identifies a product identifier that does not correspond to that affixed or imprinted by the manufacturer, the manufacturer shall treat such product as suspect product and conduct an investigation as described in subparagraph (A). If the manufacturer has reason to believe the product is an illegitimate product, the manufacturer shall advise the person making the request of such belief at the time such manufacturer responds to the request for verification.
``(D) Electronic database.--A manufacturer may satisfy the requirements of this paragraph by developing a secure electronic database or utilizing a secure electronic database developed or operated by another entity. The owner of such database shall establish the requirements and processes to respond to requests and may provide for data access to other members of the pharmaceutical distribution supply chain, as appropriate. The development and operation of such a database shall not relieve a manufacturer of the requirement under this paragraph to respond to a request for verification submitted by means other than a secure electronic database.
``(E) Saleable returned product.--Beginning 4 years after the date of enactment of the Drug Supply Chain Security Act
(except as provided pursuant to subsection (a)(5)), upon receipt of a returned product that the manufacturer intends to further distribute, before further distributing such product, the manufacturer shall verify the product identifier, including the standardized numerical identifier, for each sealed homogeneous case of such product or, if such product is not in a sealed homogeneous case, verify the product identifier, including the standardized numerical identifier, on each package.
``(F) Nonsaleable returned product.--A manufacturer may return a nonsaleable product to the manufacturer or repackager, to the wholesale distributor from whom such product was purchased, or to a person acting on behalf of such a person, including a returns processor, without providing the information described in paragraph (1)(A)(i).
