Why Greece’s 2025 safety-feature update matters for regulated cannabis-derived medicines
Greece’s pharmaceutical supply chain entered a new compliance era in 2025. With the EU-wide Falsified Medicines Directive (FMD) framework already established, Greece had a longer transition period before the EU end-to-end verification model became fully operational domestically. That changed in early 2025.
Greece aligned national practice with Commission Delegated Regulation (EU) 2016/161 (the “Safety Features Regulation”) through Ministerial Decision Δ3(α) 6030/2025 (FEK 407/Β/07.02.2025) and a key EOF (National Organization for Medicines) circular dated 20.02.2025 (Circular No. 21036/20.02.2025). Follow-up clarifications were issued in March 2025 (Circular No. 30784/13.03.2025) to support implementation.
For companies importing, distributing, repackaging, or dispensing cannabis-derived medicines in Greece, this update is not “generic pharma news.” These products are typically prescription-only, higher scrutiny, and frequently involve cross-border supply chains—exactly the scenario where serialization, verification, and controlled repackaging are most critical.
This article explains the practical impact of Greece’s 2025 rules on:
- Unique identifier (2D DataMatrix) and tamper-evident requirements
- End-to-end verification and decommissioning steps for MAHs, wholesalers, pharmacies, and repackagers
- How repackaging and parallel trade intersects with safety features
- EOF oversight expectations and deviation documentation
- A packaging/IT checklist to get audit-ready before product release
Informational only; not legal advice.
The legal and operational framework: what changed in Greece in 2025
EU baseline: FMD + Safety Features Regulation
Across the EU, prescription medicines within scope must carry two safety features:
- A unique identifier (UI) encoded in a 2D DataMatrix
- An anti-tampering device (ATD) enabling visible tamper evidence
The technical and procedural requirements are set out in Commission Delegated Regulation (EU) 2016/161.
External reference:
Greece’s 2025 alignment: Ministerial Decision 6030/2025 + EOF Circular (Feb 2025)
Greece implemented and tightened national controls via:
- Ministerial Decision Δ3(α) 6030/2025 (published in FEK 407/Β/07.02.2025)
- EOF Circular No. 21036/20.02.2025 on implementation and supervisory expectations
- EOF Circular No. 30784/13.03.2025 providing further clarifications
While the EU Regulation is directly applicable, these Greek instruments matter because they:
- Clarify how repackaging/covering/removal of safety features must be handled under EOF oversight
- Reinforce documentation and “before you touch the pack” verification expectations
- Provide operational instructions to supply-chain actors as Greece transitions from legacy mechanisms to the EU verification approach
Official sources (Greek regulator and verification organization):
What “serialization” means in Greece: unique identifier + EMVS connectivity
What must be on-pack (unique identifier)
For in-scope prescription medicines, the 2D DataMatrix must include four mandatory data elements under the EU model:
- Product code (commonly GTIN)
- Serial number
- Batch/lot number
- Expiry date
HMVO summarizes these requirements and clarifies that Greece’s national reimbursement/identification number is handled via system data (not as a “fifth” DataMatrix element).
Source:
Repository model: EMVS, EU Hub, and the Greek system
Greece participates in the broader European Medicines Verification System (EMVS) managed through the EMVO European Hub, with national verification executed via the Greek system operated by HMVO.
Source:
Practical takeaway for cannabis-derived medicines
If your product is supplied as a regulated medicinal product (not a supplement, not a compounded preparation), and it is prescription-only and within scope, you should assume:
- UI + ATD are required on the outer packaging
- Your serialization and master data must be uploaded to EMVS in the correct format and timelines
- Pharmacies will be expected to verify and decommission at dispense (or earlier where applicable)
In other words, “Greece medical cannabis serialization 2025” is not a niche requirement—it is a core gating item for lawful release.
Tamper evidence (ATD): the second safety feature that can’t be treated as an afterthought
The anti-tampering device is not just a packaging quality feature; it is part of compliance. If the ATD is missing, damaged, or replaced incorrectly during relabeling/repackaging, downstream actors may treat the pack as suspicious.
For higher-risk categories such as cannabis-derived prescription medicines, ATD failures can cause:
- Delays at wholesaler receiving
- Dispensing blocks at pharmacy
- Investigation and documentation burdens
- Quarantine/returns and potential reporting obligations
Verification and decommissioning: who scans what, when, and why
Dispensers (pharmacies) – end-of-chain decommissioning
Under the EU model, the person authorized to supply to the public typically:
- Verifies the unique identifier against the repository
- Decommissions (marks as supplied/dispensed) at the point of dispensing
This is the “end-to-end” protection concept: the pack’s serial cannot be reused after dispensing.
Wholesalers – risk-based verification and specific decommissioning events
Wholesalers have defined obligations to verify authenticity under certain scenarios (risk-based and transaction-based). In some cases (e.g., certain exports or supplies to specific institutions), the unique identifier may need to be decommissioned by a wholesaler.
For Greece, the transition period created practical complexity because legacy mechanisms existed historically. EOF’s 2025 communications emphasize proper handling during the transition and real-time reporting expectations where applicable.
Reference:
MAHs and manufacturers – correct data in, correct status out
For marketing authorization holders and manufacturers, the success or failure of verification downstream often traces back to upstream data integrity:
- Correct product master data
- Correct commissioning (status active) in EMVS
- Correct pack-to-case relationships if aggregation is used (aggregation is not the same as EU UI requirements, but it materially affects warehouse operations)
Repackaging and relabeling: the compliance hotspot for Greece in 2025
Why repackaging is heavily controlled
Repackaging (including covering/removing existing safety features) is a primary diversion point for falsified products. That’s why the EU framework—and Greece’s 2025 alignment—treats it as a controlled activity.
In general, when you remove/cover safety features, you risk breaking the chain of authenticity unless you follow prescribed steps.
Core rule of thumb
Before removing or covering any existing safety feature, the responsible entity should ensure the pack is authenticated and handled under controlled, documented procedures—with EOF oversight expectations clearly signaled in the 2025 circular implementation messaging.
A helpful secondary discussion (industry legal analysis) summarizing Greece’s ministerial decision and EOF circulars:
Parallel trade and parallel distribution
Parallel trade (lawful intra-EU trade of medicines) often requires:
- Replacing outer packaging to meet language/labeling requirements
- Reapplying a compliant ATD
- Managing the UI lifecycle properly (including decommissioning/recommissioning steps as required)
The EU has also issued guidance on safety features and parallel trade repackaging in the broader context.
Where cannabis-derived medicines are involved, parallel trade may be more limited in practice due to controlled-substance handling rules, prescribing restrictions, or product-specific authorization pathways. Still, the pack-level safety-feature workflow remains relevant wherever repackaging occurs.
EOF oversight: documentation, deviations, and “if it isn’t written down, it didn’t happen”
EOF’s role as the national competent authority means inspections and investigations can focus on:
- Whether you had validated procedures for serialization and ATD application
- Whether repackaging/relabeling was performed under a compliant workflow
- Whether personnel were trained and access to serialization systems was controlled
- How you handled exceptions, alerts, and suspected tampering
Deviation handling expectations (practical approach)
When something goes wrong—scan failures, mismatched master data, damaged ATD, unexpected decommissioned status—companies should be ready to show:
- Deviation ticket with date/time, pack identifiers, and location
- Quarantine decision and physical segregation method
- Investigation outcome (root cause and impact assessment)
- Corrective and preventive actions (CAPA)
- Any required notifications to partners and, where applicable, competent authorities/HMVO processes
Implications specifically for cannabis-derived medicines (importers, MAHs, and supply chain)
1) Import release planning must include serialization readiness
If you import cannabis-derived medicines into Greece, you need more than import permits and GDP arrangements. The pack cannot move smoothly through the lawful channel if:
- UI data is missing from EMVS
- ATD does not meet expectations
- Pharmacy scanning fails at dispense
2) Repackaging for Greek language or local market requirements must be planned early
Common triggers include:
- Greek labeling and leaflet requirements
- Local reimbursement identifiers/market-specific details
- Packs intended for multiple EU markets
If relabeling/repackaging is needed, treat it like a regulated manufacturing-quality activity with serialization controls—not as a late-stage artwork tweak.
3) Higher scrutiny on chain-of-custody integrity
These products often come with heightened oversight across:
- Secure storage and distribution
- Batch traceability and pharmacovigilance
- Recall readiness
Serialization adds pack-level traceability that can strengthen your compliance posture—but only if your data quality and SOPs match the operational reality.
Packaging & IT readiness checklist (Greece medical cannabis serialization 2025)
This checklist is designed for serialization vendors, MAHs, repackagers/parallel distributors, wholesalers, and pharmacies preparing to import, release, or dispense cannabis-derived medicines in Greece.
A) On-pack compliance (artwork + packaging engineering)
- Confirm the product is within the scope of EU safety features (often true for prescription medicines).
- Ensure every saleable pack has a 2D DataMatrix with:
- Product code (e.g., GTIN)
- Serial number
- Batch number
- Expiry date
- Validate print quality and scanning performance across lighting, angles, and wear.
- Implement a compliant anti-tampering device (ATD) appropriate to the carton design.
- Define handling rules for ATD damage detection (incoming, picking, dispensing).
B) Master data & EMVS connectivity (MAH / manufacturer / CMO)
- Confirm organizational onboarding with EMVO processes and connectivity.
- Confirm national onboarding and operational readiness for Greece via HMVO.
- Ensure product master data is complete and consistent (pack size, codes, market attributes).
- Validate commissioning process: serials are uploaded and show correct status.
- Build monitoring dashboards for error rates (upload failures, pack status mismatches).
C) Repackaging / relabeling controls (repackagers, parallel distributors, MAHs)
- Document when repackaging is permitted and when it is prohibited.
- Before any removal/covering of safety features:
- Require authentication/verification steps per SOP
- Require line clearance, reconciliation, and segregation controls
- Ensure ability to apply a new compliant ATD after repackaging.
- Ensure UI lifecycle actions are performed correctly (decommission/recommission where applicable).
- Maintain full batch/serial reconciliation and audit trails.
- Train operators and QA on alert handling and quarantine criteria.
D) Wholesaler operations (GDP + verification workflows)
- Confirm scanner hardware supports DataMatrix and is configured correctly.
- Update SOPs for:
- Risk-based verification checks
- Handling “alert” responses
- Quarantine, investigation, supplier escalation
- Confirm processes for export/intra-Community movements where decommissioning/reporting is required.
- Align warehouse WMS/ERP with serialization events to avoid “phantom inventory.”
E) Pharmacy dispensing readiness
- Ensure pharmacy software and scanners connect to the national verification route.
- Train staff on:
- What to do when verification fails
- What “decommissioned” or “unknown” status means
- Quarantine and escalation steps
- Validate workflow speed (scanning cannot create patient-service bottlenecks).
F) Quality system & audit readiness (all stakeholders)
- Maintain validated SOPs covering serialization data governance and ATD control.
- Implement deviation + CAPA procedures specifically for serialization/verification failures.
- Ensure supplier qualification for serialization vendors and packaging sites.
- Prepare inspection evidence packs: training records, validation, reconciliation logs, alert logs.
Key dates and compliance timeline (Greece)
- 07 Feb 2025: Ministerial Decision Δ3(α) 6030/2025 published (FEK 407/Β/07.02.2025)
- 09 Feb 2025: Greece begins full application of the EU safety-features framework (end of extended transition period referenced by HMVO and industry sources)
- 20 Feb 2025: EOF Circular No. 21036/20.02.2025 supports implementation and oversight expectations
- 13 Mar 2025: EOF Circular No. 30784/13.03.2025 adds clarifications
Context source (Greece transition end date referenced by HMVO):
Enforcement and business risk: what noncompliance looks like in practice
Greece’s 2025 shift makes serialization failures much more visible because verification happens at multiple points, especially at dispense.
Common operational “failure modes” include:
- Pack scans return “unknown” due to missing or incorrect master data
- Pack scans return “already supplied” due to erroneous decommissioning
- ATD damage triggers quarantine and investigation
- Repackaging breaks UI/ATD compliance, causing downstream blocks
For cannabis-derived medicines, these failures can translate into:
- Interrupted patient access
- Higher return and destruction costs
- Increased inspection exposure
- Potential GDP/GMP findings if root causes point to system weaknesses
Practical takeaways
- Greece medical cannabis serialization 2025 is essentially pharma serialization compliance applied to a high-scrutiny category.
- Assume you need UI + ATD and a working verification pathway before release.
- Repackaging is the highest-risk step: treat it as a controlled, validated process with strong documentation.
- Align packaging engineering, IT/EMVS data, GDP distribution, and pharmacy workflows—weak links will surface quickly at scanning points.
Next step: operationalize Greece compliance with CannabisRegulations.ai
If you are preparing to import, distribute, or repackage cannabis-derived medicines in Greece, the fastest path to readiness is a single compliance plan that connects packaging, serialization IT, GDP/GMP quality systems, and EOF/HMVO verification realities.
Use https://cannabisregulations.ai/ to track regulatory updates, build jurisdiction-specific compliance checklists, and standardize evidence packs for audits and inspections.
