Biosecurity Modernization and Innovation Act
- Sponsor
- Rep. Pfluger, August [R-TX-11]
- Committees
- Energy and Commerce Committee (primary)
- Last action
- Aug 31, 2026
Bottom line
The bill creates a comprehensive federal regulatory framework for nucleic acid synthesis to mitigate biosecurity risks, imposing new compliance burdens on the biotechnology industry.
What it actually does
This bill mandates that entities involved in synthesizing and selling nucleic acids or related equipment establish robust biosecurity programs. These programs must verify buyer identity, ascertain purchase purpose, identify high-risk 'covered sequences,' implement risk-based refusal criteria, and report suspicious activities to the Secretary of Commerce. It also establishes a process for the Secretary to create and update a list of covered sequences and provides enforcement authority.
Proponents argue
Proponents argue that the rapid advancement and increasing accessibility of synthetic biology technologies, including benchtop synthesizers, necessitate a modernized and mandatory federal framework to prevent the misuse of nucleic acids for malicious purposes, thereby enhancing national security and public safety. They contend that this bill provides essential safeguards against biothreats while fostering responsible innovation.
Opponents contend
Critics may contend that the bill's broad scope and stringent requirements could impose significant administrative and financial burdens on biotechnology companies, particularly smaller firms and academic institutions, potentially stifling innovation and research. Concerns might also be raised about the potential for over-regulation of benign sequences or the practical challenges of implementing identity and purpose verification for all transactions, especially for benchtop synthesizers.
The bill is moderately complex due to its technical subject matter and regulatory details, requiring a dedicated read to understand its full implications for the biotechnology sector and national security.
Section 2(a)
Mandatory Biosecurity Protocols for Covered Entities
This provision requires all 'covered entities' (those synthesizing/selling nucleic acids or related equipment) to establish a program of administrative and technical protocols. These protocols must verify buyer identity, determine the purpose of the purchase, identify 'covered sequences' (high-risk sequences designated by the Secretary), establish criteria for refusing sales, and notify the Secretary of suspicious activities. Entities must also conduct regular independent compliance assessments and maintain records for at least five years.
Supporters argue
Supporters argue that these mandatory protocols are crucial for preventing the malicious use of synthetic DNA, closing existing security gaps in the voluntary screening system, and protecting the nation from emerging biothreats. They believe these measures are a necessary modernization of biosecurity.
Critics contend
Opponents or concerned stakeholders might argue that these requirements could be overly burdensome, especially for smaller companies and academic labs, potentially slowing down legitimate research and development. They may question the practicality and cost-effectiveness of verifying every buyer's identity and purpose for all nucleic acid sequences.
Tradeoffs
The provision balances national security imperatives against the potential for increased regulatory burden and its impact on the pace and cost of biotechnology innovation.
Section 2(f)
Establishment and Management of the Covered Sequence List
This provision directs the Secretary of Commerce to determine which nucleic acid sequences are 'covered sequences' (high-risk) and to establish and regularly update a list of these sequences. The Secretary must explain the basis for each determination and make the list available to covered entities and stakeholders in a secure manner. It also establishes a public process for recommending additions or removals from the list, with confidentiality protections for submissions.
Section 2(g)
Enforcement Authority and Civil Penalties
This provision grants the Secretary of Commerce broad authority to enforce the biosecurity requirements, including the power to inspect records, compel information via subpoena, and conduct investigations both domestically and internationally. For violations of the mandatory protocols, the Secretary may initiate civil actions in federal court, seeking penalties up to $750,000 per violation. Importantly, it includes a 'right to cure' provision, allowing entities 30 days to rectify an alleged violation before a civil action can be initiated, provided it's their first offense for that specific violation.
Section 2(i)
Federal Preemption of State Laws
This provision establishes that federal requirements under the bill supersede any state or local laws, rules, or regulations that cover the same ground as the federal biosecurity protocols. However, it includes several exceptions, explicitly stating that it does not preempt state or local laws related to contract, tort, product liability, consumer protection, data privacy, data security, general public health, or the procurement/use of nucleic acids by state/local governments.
Defines 'covered process' as a specific public consultation procedure involving Federal Register publication, a 60-day public comment period, public inspection of non-confidential comments, and demonstration of consideration of comments by the Secretary.
Section 2(l)(3)
Why it matters:This is standard legislative practice for defining terms that apply throughout the bill, but its placement can obscure its significance for public engagement.
Case for: Supporters argue that this definition ensures transparency and public participation in the development of critical guidance and lists, allowing stakeholders to provide valuable input and ensuring that the Secretary's decisions are informed by diverse perspectives.
Case against: No specific opposition is typically raised against this provision, as it enhances transparency. However, some might argue that the 60-day comment period could slow down urgent policy responses, or that the process itself could be burdensome for the agency.
Estimated impact: High, as it dictates the level of public engagement and transparency for all major regulatory actions under the bill.
Establishes a 'right to cure' for covered entities, meaning the Secretary must provide written notice of an alleged violation and allow at least 30 days for the entity to cure it before initiating a civil action. If cured within this period, the requirements are considered satisfied for that instance.
Section 2(g)(2)(C)
Why it matters:This is a common legislative technique to provide due process within enforcement provisions, but its detailed placement can make it less visible than the headline enforcement powers.
Case for: Proponents argue that the 'right to cure' provision is essential for fairness, allowing entities to correct inadvertent errors without immediately facing severe penalties. It encourages compliance by providing a clear pathway for remediation, especially for first-time or minor violations.
Case against: Some might argue that a 30-day cure period could delay enforcement actions against entities that are deliberately non-compliant or that pose an immediate risk, potentially compromising national security. However, the provision specifies that it applies to an 'alleged violation' and does not preclude immediate action in cases of imminent threat.
Estimated impact: High, as it significantly impacts the enforcement process and the financial risk for covered entities.
Excludes from the definition of 'covered entity' any person who produces, distributes, sells, or resells synthetic acids within a commercial entity solely for the internal use of that commercial entity.
Section 2(l)(2)(B)
Why it matters:This is a common legislative practice to precisely define the scope of a regulation, but it can be easily missed if a reader focuses only on the main definition.
Case for: Supporters argue that this exception prevents unnecessary regulation of internal R&D activities within companies, where biosecurity risks are typically managed through internal corporate policies and controls. It focuses the regulatory burden on commercial transactions that introduce materials into broader commerce.
Case against: Some might argue that this exception creates a potential loophole, as large commercial entities could synthesize high-risk sequences internally without external oversight. However, proponents would counter that internal use typically implies a higher degree of control and accountability than external sales.
Estimated impact: High, as it significantly narrows the universe of entities directly regulated by the bill, exempting a potentially large segment of internal corporate biotechnology activities.