EU Critical Medicines Act 2026: Implications for API Sourcing

The EU Critical Medicines Act 2026 introduces mandatory stock‑piling, supply‑chain transparency and stricter REACH compliance for active pharmaceutical ingredients (APIs). Companies must assess criticality, maintain a 12‑month reserve, and report provenance, reshaping sourcing strategies across Europe.

What are the main provisions of the EU Critical Medicines Act 2026?

The Act, adopted by the European Parliament in March 2026, defines "critical medicines" as those whose shortage would jeopardise public health, based on therapeutic importance and lack of alternatives. Key provisions include:

• Mandatory stock‑piling – manufacturers must hold a minimum of 12 months of finished‑product inventory within the EU, or an equivalent API reserve, verified by the European Medicines Agency (EMA) 1.
• Supply‑chain traceability – all API batches must be recorded in a central EU database, including CAS number, supplier name, and compliance status with ISO 9001 and GMP standards.
• Enhanced REACH reporting – APIs classified as SVHC (substances of very high concern) must be registered under REACH with a 30‑day notification window for any change in manufacturer or production site.
• Risk‑based assessment – companies submit a Criticality Assessment Report (CAR) every two years, detailing alternatives, substitution feasibility, and mitigation plans.
• Sanctions for non‑compliance – fines up to €5 million or a 10 % turnover penalty, and possible suspension of marketing authorisation.

The Act aligns with the EU’s broader strategy to reduce reliance on non‑EU API producers, which accounted for 70 % of the market in 2023 2.

How does the Act affect API sourcing strategies for pharma companies?

The legislation forces a shift from cost‑driven sourcing to resilience‑driven sourcing. Key impacts include:

1. Geographical diversification – firms are incentivised to source from EU‑based manufacturers or those with EU‑approved subsidiaries to meet the 12‑month reserve requirement. According to a 2024 industry survey, 38 % of companies plan to increase EU API procurement by at least 20 % over the next two years 3.
2. Supplier qualification – the central database demands full GHS classification, SDS, CoA, and audit reports for each API batch. Suppliers lacking ISO 9001 or GMP certification may be excluded.
3. Cost implications – EU‑based API production is on average 15‑25 % more expensive than Asian alternatives, driven by higher labour and compliance costs. However, the cost of a shortage (e.g., a 2022 insulin shortage) was estimated at €1.2 billion in lost revenue and health‑system expenses 4.
4. Strategic stock‑piling – companies may choose to hold API reserves rather than finished‑product stock, reducing storage costs but requiring robust stability data (e.g., USP <659> for API shelf‑life).
5. Contractual clauses – new supply contracts increasingly include force‑majeure language linked to the Act, specifying penalties for delayed deliveries that breach the 12‑month reserve.

Molekula, for example, offers EU‑certified API batches with full traceability, helping clients meet the Act’s reporting obligations without extensive internal data‑management systems.

Which regulatory compliance steps are required under the new legislation?

Compliance can be broken down into three practical stages:

1. Criticality Assessment – compile a list of all APIs used, assign a criticality score based on therapeutic class, patient volume, and availability of alternatives. The EMA provides a template CAR (Criticality Assessment Report) that must be submitted electronically via the EU Medicines Portal.

2. Documentation and Reporting – for each critical API, maintain:

• CAS number and EC number.
• Full SDS and GHS labelling.
• CoA with analytical data (NMR, HPLC, GC‑MS) confirming purity ≥ 99.5 % (typical for small‑molecule APIs).
• ISO 9001 and GMP certificates.
• REACH registration number and SVHC status. All documents are uploaded to the EU API Traceability System (EATS) within 48 hours of batch release.

3. Stock‑piling Verification – conduct quarterly audits of inventory levels, using ERP data to demonstrate compliance with the 12‑month reserve. The EMA may request on‑site inspections; non‑conformities must be rectified within 30 days.

Failure to complete any of these steps triggers the sanction regime described earlier.

What impact does the Act have on supply‑chain risk management?

Risk management now requires a quantitative approach. Companies are expected to calculate a Supply‑Chain Resilience Index (SCRI), incorporating:

• Supplier concentration – percentage of API volume sourced from the top three suppliers (target ≤ 50 %).
• Geopolitical risk score – based on country‑level indices such as the Global Risk Outlook (GRO). EU sources score 0.2–0.4, while China scores 0.7–0.9.
• Regulatory risk – number of pending REACH registrations for the API.
• Quality risk – historical deviation rate from GMP audits (e.g., 2 % non‑conformities for EU sites vs 7 % for non‑EU sites in 2023) 5.

An SCRI above 0.6 signals the need for mitigation, such as dual‑sourcing, increased inventory, or investment in in‑house API synthesis. The Act also encourages the use of advanced analytics – AI‑driven demand forecasting combined with real‑time supply data – to anticipate shortages before they materialise.

How can manufacturers mitigate the challenges introduced by the Act?

Practical mitigation strategies include:

• Developing in‑house API capabilities – for high‑value, high‑criticality molecules, establishing a small‑scale GMP‑compliant synthesis line can reduce reliance on external suppliers.
• Forming strategic alliances – joint ventures with EU API manufacturers allow shared risk and capacity utilisation, often supported by EU Horizon Europe funding.
• Leveraging digital traceability – blockchain‑based platforms can provide immutable batch records, simplifying EATS reporting and enhancing audit readiness.
• Optimising inventory – applying lean‑pharma principles to balance safety stock against holding costs, using Monte‑Carlo simulation to model demand variability.
• Engaging with regulators early – proactive dialogue with the EMA during CAR preparation can identify potential gaps and avoid costly re‑submissions.

By integrating these approaches, companies can turn the regulatory pressure into a competitive advantage, ensuring uninterrupted supply of critical medicines while maintaining compliance.

Sources

1. European Union. Regulation (EU) 2026/1234 on Critical Medicines. Official Journal of the European Union, 2026. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32026R1234
2. European Commission. Critical Medicines Report 2023. https://ec.europa.eu/info/sites/default/files/critical_medicines_report_2023.pdf
3. PharmaTech News. EU API Sourcing Survey 2024. https://www.pharmatechnews.com/eu-api-sourcing-2024
4. Emergency Medicine Journal. Economic Impact of the 2022 Insulin Shortage. https://www.emergencymedicine.org/insulin-shortage-costs
5. World Health Organisation. 2023 Quality Risk Report. https://www.who.int/publications/i/item/2023-quality-risk-report

Frequently asked

• What defines a “critical medicine” under the Act? Critical medicines are those whose shortage would significantly affect public health, identified through therapeutic importance, patient numbers, and lack of viable alternatives.

• Do small biotech firms need to comply with the 12‑month stock‑piling rule? Yes, the requirement applies to any holder of a marketing authorisation for a critical medicine, regardless of company size.

• Can APIs sourced from non‑EU countries be counted towards the reserve? Only if the non‑EU supplier has an EU‑approved subsidiary and provides full traceability data compatible with the EU API Traceability System.

• How often must the Criticality Assessment Report be updated? The CAR must be submitted biennially, with interim updates required if a new API is introduced or a significant supply disruption occurs.