US pharmaceutical supply-chain and market-access teams have learned to read the 2026 EU Pharma Package as an exclusivity story. The regulatory-data-protection clock, the product-based orphan math, the widened Bolar carve-out: each asks how long a molecule earns and when a competitor can enter. That reading captures one half of the reform. The other half is about supply rather than exclusivity, and it does not map onto the frameworks a US team imports by reflex. The United States runs security of supply through the Strategic National Stockpile, through federal preparedness contracting, and through the discontinuance-and-interruption notification duty at 21 U.S.C. § 356c, while the Drug Supply Chain Security Act and its serialization requirements govern the integrity of the distribution chain rather than its adequacy. The principal US antimicrobial pull-incentive proposal, the still-unenacted PASTEUR Act, is built on a subscription model. The Package takes up the subscription idea for antimicrobials but builds a different machine around it. It converts a crisis-era, EMA-coordinated critical-medicines role into standing law, it writes a voluntary joint cross-border procurement design into the primary text, and it ties both to a patent carve-out that lets a competitor sit inside a public tender while the originator's protection still runs. None of it is in force yet. The reform rests on the final compromise texts confirmed on 6 March 2026, with formal adoption expected later in 2026. Under the timetable the final compromise text sets out, most of the Regulation will apply only after a further transition, around 2028 or 2029, while the supply-side provisions will apply earlier, from entry into force or within six months of it. The sections below describe the texts as drafted, not law in operation. For a US sponsor whose product reaches European patients through a distributor, and for that distributor's general counsel, the supply-side half is where the unmodeled obligations live.
1. The Reinforced Critical-Medicines Role in the Regulation's Supply Chapter
The natural place to look for the reinforced role is Art. 178 of the Regulation,1Council doc ST-6366/26 (24 February 2026, confirmed by Coreper on 6 March 2026), EU Pharma Package Regulation final compromise text. which amends Regulation (EU) 2022/123,2Regulation (EU) 2022/123 on a reinforced role for the EMA in crisis preparedness [2022] OJ L20/1. the 2022 instrument that first gave the EMA a reinforced role in crisis preparedness and created both the MSSG and the ESMP. Art. 178 of the Regulation, however, does only two narrow things: it adds a single paragraph to Art. 18 of Regulation (EU) 2022/123, giving the procedure for a temporary emergency marketing authorization under the new Regulation priority over the older mechanism, and it deletes two provisions of that Regulation. The reinforced critical-medicines role is built into the new Regulation's own chapter on availability and security of supply, which takes the shortage rules out of the 2022 Regulation's emergency setting and makes them ordinary, standing law.
That chapter, Chapter X of the Regulation, reaches further than the crisis instrument it draws from. Under Art. 117 of the Regulation, marketing-authorization holders of prescription products must have a shortage-prevention plan in place and keep it up to date, and Art. 126(2b) of the Regulation lets the Commission extend that duty by delegated act to further products. Under Art. 131 of the Regulation the Commission, taking into account a proposal from the MSSG, adopts the Union list of critical medicinal products; the MSSG evaluates the vulnerability of those supply chains under Art. 132 of the Regulation, and on that basis the Commission specifies, to the extent possible, the products, including their active substances, that are vulnerable because of a high level of dependency on a single or a limited number of countries outside the Union. Art. 122 of the Regulation requires the Agency to expand the ESMP's scope within a year of entry into force. Art. 125a of the Regulation holds a voluntary solidarity mechanism in reserve, as a last resort, for a Member State whose critical shortage cannot be resolved nationally. And Art. 134(2) of the Regulation lets the Commission, where that is necessary to ensure the smooth functioning of the internal market, draw up recommendations for national measures to improve the security of supply of products on that list, but only, under Art. 134(2a) of the Regulation, where it identifies a highly likely disruption of the internal market that strongly and negatively affects the security of supply of critical medicinal products; the compromise text strikes the implementing act through which the Commission could have imposed contingency-stock requirements on marketing-authorization holders, wholesale distributors, or other relevant entities. The notification duties point the same way: a permanent cessation carries its own advance-notice duty of twelve months (Art. 116(1)(a) of the Regulation), and a supply disruption expected, on the holder's own demand forecast, to exceed two weeks must be notified as soon as possible and in any event no less than six months before it begins (Art. 116(1)(d) of the Regulation); notice as soon as the holder becomes aware is allowed only where exceptional circumstances directly related to the disruption, duly identified and substantiated to the competent authority, prevented the holder from meeting that deadline. Most of them attach in ordinary commercial operation, not only during a declared emergency.
Vulnerability Evaluation and the Solidarity Mechanism
Two features of the chapter sharpen the point for a US sponsor. The first is the vulnerability evaluation. Working from a common Union methodology, national authorities identify the products they treat as critical under Art. 127 of the Regulation, the Commission adopts the resulting Union long list, and the MSSG proposes the separate Union list of critical medicinal products for coordinated Union-level action; the Commission then specifies, to the extent possible, which of those products, including their active substances, are vulnerable in the sense set out above. For a sponsor whose active-pharmaceutical-ingredient supply runs through one Asian source, that designation is not hypothetical, and the measures that can follow, from MSSG recommendations on supplier diversification and inventory management that the marketing-authorization holder must take into account to Commission recommendations for national measures, attach to a product the sponsor may have assumed was commercially unremarkable. The second is the solidarity mechanism, which is expressly a last resort, conditioned among other things on there being no or insufficient therapeutic alternatives in the Member State concerned and a risk of stockout there within a month or less, with the MSSG setting the procedural rules for its activation. Neither is a routine step. Both are standing risks that turn on facts about the supply chain that the marketing authorization and the distribution agreement rarely reveal.
This is a deliberate migration rather than an invention. The Commission's October 2023 communication on addressing medicine shortages3Commission, 'Addressing medicine shortages in the EU' (Communication) COM(2023) 672 final. had already floated a first informal Union list of critical medicines and a European voluntary solidarity mechanism, in anticipation of exactly this codification. The two provisions Art. 178 of the Regulation deletes, on the Agency's protection against cyber attacks and on confidentiality, are consolidated rather than abandoned, since the new Regulation carries its own equivalents at its Art. 167 and Art. 168. The migration that matters happens elsewhere: the machinery the 2022 Regulation carried under a crisis heading acquires a permanent home in the Package's supply chapter. For a US sponsor, the supply obligations that result fall on the marketing-authorization holder in the ordinary course, and in a typical US structure that holder is the sponsor's European subsidiary or its distributor, not the US parent.
The reinforced critical-medicines role turns a temporary crisis regime into standing obligations that attach in ordinary operation, to an entity that in many US structures is the distributor rather than the sponsor.
2. Joint Cross-Border Procurement: Art. 43a of the Regulation and the Subscription Turn
The Package's one hard-wired joint cross-border procurement design sits at Art. 43a of the Regulation. It lets contracting authorities from different Member States act jointly, under Art. 39 of Directive 2014/24/EU,4Directive 2014/24/EU on public procurement [2014] OJ L94/65. the Union public-procurement directive that governs cross-border joint award, to purchase antimicrobials through a multi-year subscription that at least partly delinks the developer's funding from the volume of sales. Whether those subscription economics will actually pull antimicrobial development, and how they sit against the transferable exclusivity voucher, are worked through in GAWEL Legal's analysis of the antimicrobial pull incentive. The concern here is the design of the procurement mechanism.
Art. 43a of the Regulation is the first provision of Union pharmaceutical law to bring the cross-border joint-procurement rules of Directive 2014/24/EU into the primary text as a standing, non-crisis mechanism, and it pairs them with Commission guidelines on how to value a subscription and how to design the model. On its face the provision is voluntary and confined to antimicrobials. As a design, it is a template. The contract it contemplates is a multi-year commitment among sovereign purchasers, with at least partial delinkage of funding from volume, criteria to support continuous and sufficient supply in pre-agreed quantities, and the possibility of parallel procurement. The evaluation clause makes the trajectory explicit, directing the Commission to assess, five years after application, whether the model could be improved by introducing a voluntary Union-level subscription for purchasing antimicrobials.
The subscription's legal shape is left largely to the parties. Beyond the elements Art. 39 of Directive 2014/24/EU already requires of a cross-border joint procurement, the agreement between the participating contracting authorities determines the practical arrangements governing the conditions of the subscription, including the length of the subscription contract and the possibility of parallel procurement, and the Member States may, where necessary, ask the Commission to convene joint meetings between their competent authorities, the Agency, and any other relevant parties as appropriate, including the bodies responsible for pricing and reimbursement. For a developer facing a bloc of purchasers that has aligned its pricing posture in advance, the negotiating asymmetry is plain, and the delinkage principle does not resolve it in the developer's favor. Delinking the reward from volume protects the purchaser's budget against a demand surge; it does not guarantee the developer a reward large enough to justify the supply it must underwrite. Where the valuation methodology sits in Commission guidelines the developer did not shape, the developer commits to continuous supply against a reward it cannot fully predict.
For a US developer's European distributor, a subscription award is not a normal tender win. Its supply commitment, continuous and sufficient supply in pre-agreed quantities, is a contractual overlay on the statutory shortage-prevention duty from the supply chapter, and the two were drafted by different hands for different purposes. The entity that holds the statutory obligation, the entity that signs the subscription, and the actors who set the reward methodology through the Commission's guidelines and national purchasing decisions may be three different parties, and their assumptions may be memorialized in three documents that were never read against one another. Whether a voluntary model stays voluntary in a market where the alternative is exclusion from a multi-state purchasing bloc is a further question the text does not answer.
3. Where the Bolar Tender Carve-Out Meets Procurement
The Package's Directive5Council doc ST-6367/26 (24 February 2026, confirmed by Coreper on 6 March 2026), EU Pharma Package Directive final compromise text. rewrites the patent-rights carve-out, the so-called Bolar exemption, and widens it. The mechanics of that expansion, and what they do to generic and biosimilar entry timing, are the subject of GAWEL Legal's separate analysis of the widened carve-out. Two elements of Art. 85 of the Directive matter on the procurement side. The first is that the carve-out extends to submitting an application on procurement tenders during the patent or supplementary-protection-certificate (SPC) term, provided the submission does not entail sale, offer for sale, or marketing of the product before that protection expires. The second is that the reference product's intellectual-property rights are declared not to be a valid ground to refuse, revoke, or suspend the decisions adopted in the tender, health-technology-assessment, and pricing processes the carve-out protects.
Placed against the Regulation-side design, these two elements interlock with the joint procurement of the previous section. A joint cross-border purchaser of the kind Art. 43a of the Regulation contemplates can run a tender that lawfully receives and evaluates a competitor's submission while the originator's patent or SPC still runs, and cannot be compelled by that originator's intellectual property to reject it. The supply the tender is built to secure can therefore be lined up to start the moment protection lapses, through the procurement process and not only through the marketing authorization. Seen from the purchaser's side, the same provision that shortens a competitor's preparation time is a way to build supply security into a tender that matures on schedule.
The friction is that the carve-out is harmonized while the twenty-seven national procurement systems into which it lands are not, and the provision permits the tender submission only in compliance with Union and national law. GAWEL Legal's analysis of the widened carve-out maps how a single submission can fall inside the exemption for one Member State's supply and outside it for another where patent or SPC expiry dates are not aligned. A voluntary subscription under Art. 43a of the Regulation is a concrete vehicle for that misalignment, gathering several sovereign purchasers, each with its own procurement law and its own expiry calendar, into one multi-year contract, so the sale-or-offer line Art. 85 of the Directive leaves to national law may be drawn differently for the same product on different sides of the same agreement. An originator that assumed its patent would keep a competitor out of the tender may find that the patent is no valid ground for refusal; a distributor joining the subscription may not know which participating state's law governs the line for its own product.
4. What the Three Mechanisms Mean for US Sponsors and Their EU Distributors
The three mechanisms converge on a single operational question: which entity in the chain from US sponsor to European patient actually carries the obligations, and whether the distribution or supply agreement says so. The shortage-prevention plan, the disruption notifications, and the consequences of a place on the vulnerability list attach to the marketing-authorization holder. In a large number of US structures that holder is the European subsidiary or the distributor. A US sponsor that has treated European regulatory responsibility as something the distributor simply handles may have allocated these standing supply duties without ever pricing them.
Most distribution and supply agreements in force as of April 2026 were drafted before the supply chapter existed. They allocate forecasting, minimum purchase quantities, and force majeure with care, and say little about the shortage-prevention-plan obligation, the cost of an inventory-management measure the MSSG may recommend, the consequence of a product landing on the vulnerability list, or the parallel-trade notification a Member State may impose when a product leaves its territory for another. A subscription commitment under Art. 43a of the Regulation widens the gap: an undertaking to support continuous and sufficient supply in pre-agreed quantities may exceed what the sponsor's own manufacturing and supply agreement upstream actually guarantees, so what the distributor has undertaken to a purchasing bloc may not be backed by what the sponsor has undertaken to the distributor.
None of this stays on the European side of the Atlantic. A vulnerability-list designation, or an enforcement event over a critical-shortage failure, can become a supply-chain risk factor in a 10-K or a material event in an 8-K, and the single-source active-pharmaceutical-ingredient dependency that invites an EU vulnerability evaluation is often the same concentration a US filing already describes and a US resilience narrative already flags. US directors-and-officers programs often carry sub-limits or exclusions that can reach foreign regulatory claims, so the board-level consequence of a European supply failure may be uninsured.
The agreement may assign responsibility for European regulatory compliance to the distributor. It cannot assign the regulatory consequence of a critical-shortage failure, which attaches to the marketing-authorization holder the authority chooses to pursue and, reputationally, to the sponsor whose name is on the product. That is the gap the supply-side half of the Package opens, and it is not a gap the exclusivity analysis was ever built to find.
5. Strategic Considerations for US Sponsors Supplying the EU Market
The questions that follow do not resolve from the text of the Package. The first is structural: in the sponsor's actual European corporate map, which entity is the marketing-authorization holder that will carry the shortage-prevention and notification duties, and was the distribution agreement's regulatory-compliance clause drafted against a framework that did not yet impose them? The second is commercial: if a voluntary joint-procurement subscription is offered, is it genuinely optional when the alternative is exclusion from a multi-state purchasing bloc, and how does its supply commitment sit against the manufacturing agreement upstream that is supposed to make the commitment deliverable? The third is jurisdictional in a way the harmonized carve-out does not cure: when a tender submission is Bolar-permitted in one participating Member State, does it cross into an offer for sale in another, given that Art. 85 of the Directive harmonizes the exemption but leaves the sale-or-offer line to national law? The fourth is predictive: how will the MSSG's vulnerability evaluation and the recommendations that can follow it bite in practice, and which products in the portfolio carry the single-country dependency that invites designation? And the fifth is temporal. The whole scheme rests on a final compromise text that has not been adopted. The general transition runs to roughly 2028 or 2029, but the supply chapter and the joint-procurement provision are scheduled to apply from entry into force or within six months of it, so at this stage the question is whether the agreements being signed before adoption anticipate obligations that will attach to products already on the market when the Regulation begins to apply. These are questions that turn on the specific corporate structure, the specific agreements, and the specific product portfolio, and they cannot be answered from the Package alone.