Biosecurity Modernization and Innovation Act of 2026
- Sponsor
- Sen. Cotton, Tom [R-AR]
- Committees
- Commerce, Science, and Transportation Committee (primary)
- Last action
- Jan 29, 2026
Bottom line
The bill aims to modernize and streamline federal oversight of gene synthesis technology to mitigate biosecurity risks while fostering responsible innovation and maintaining U.S. leadership in biotechnology.
What it actually does
This bill mandates the Secretary of Commerce to establish comprehensive regulations for nucleic acid synthesis security, requiring covered providers to implement screening protocols for sequences of concern and customer legitimacy. It also directs the National Institute of Standards and Technology (NIST) to develop supporting technical standards and establishes a biotechnology governance sandbox for testing innovations. Furthermore, the bill requires the Office of Science and Technology Policy (OSTP) to assess and streamline fragmented federal biosecurity and biosafety authorities.
Proponents argue
Supporters argue that the bill is crucial for national security, preventing malicious actors from misusing increasingly accessible gene synthesis technology to create dangerous pathogens. They contend that standardizing and mandating screening protocols, coupled with streamlining fragmented federal authorities, will close existing gaps and ensure the United States maintains its competitive edge in biotechnology.
Opponents contend
Critics might express concerns that overly stringent or poorly designed regulations could stifle innovation in the rapidly advancing biotechnology sector, increase compliance costs for legitimate research, and potentially drive some research and development activities to less regulated environments abroad. There could also be concerns regarding the technical feasibility and privacy implications of data sharing for split order detection.
The bill is concise and clearly structured, allowing for a thorough understanding of its provisions within a reasonable timeframe.
Section 4(a)
Mandatory Nucleic Acid Synthesis Security Regulations
This provision requires the Secretary of Commerce to establish regulations within one year, mandating that 'covered providers' (those who synthesize/sell synthetic nucleic acids or equipment) implement screening protocols. These protocols must screen for 'sequences of concern' and verify customer identity and legitimacy. The Secretary must also create and regularly update a list of sequences of concern and establish a conformity assessment system, including auditing and adversarial testing, to ensure compliance.
Supporters argue
Supporters argue these mandatory regulations are essential for national security, preventing the misuse of increasingly accessible gene synthesis technology by bad actors to create dangerous pathogens. They contend that a standardized, enforceable screening system will close existing gaps in voluntary guidelines and provide a critical layer of defense against biothreats.
Critics contend
Critics might argue that overly stringent or poorly designed regulations could stifle innovation in the rapidly advancing biotechnology sector, increase costs for legitimate research, and potentially drive some activities offshore. Concerns could also be raised about the potential for false positives in screening or the administrative burden on smaller providers.
Tradeoffs
This provision balances the imperative of national security against the need to foster innovation and avoid undue regulatory burden on the biotechnology industry. It seeks to prevent misuse while allowing legitimate research and commercial activity to flourish.
Section 4(b)
NIST Role in Developing Biosecurity Standards
This section directs the Under Secretary of Commerce for Standards and Technology (NIST) to develop best practices, technical standards, and other tools necessary to support the new nucleic acid synthesis security regulations. This includes testing and evaluating screening protocols, assessing sequences for the 'list of sequences of concern,' and conducting research on sequence-to-function models to enhance threat detection.
Section 5
Establishment of a Biotechnology Governance Sandbox
This section requires the Under Secretary to establish a biotechnology governance sandbox environment within one year. This sandbox will provide a secure space for testing innovations and tools aimed at advancing biosecurity, biosafety, and responsible biotechnology. It will also foster participation from non-governmental experts in developing and testing governance methods and conduct biological measurement research.
Section 6
Assessment and Plan for Streamlining Federal Biosecurity Authorities
This section mandates the Director of the Office of Science and Technology Policy (OSTP) to conduct an assessment of current federal biosecurity and biosafety oversight within 90 days of enactment. Based on this assessment, OSTP must develop an implementation plan to make federal oversight more effective and efficient. The assessment will identify existing authorities, overlaps, gaps, and challenges, and the plan will recommend legislative or administrative actions for consolidation and improvement.
Section 4(f)
Civil Penalties for Non-Compliance
This provision authorizes the Attorney General to bring civil actions against any person who violates the nucleic acid synthesis security requirements, including through providing false or misleading information. Courts can enjoin violations or award statutory damages. These damages are set at a maximum of $500,000 for individuals and $750,000 for non-individuals, with annual adjustments for inflation.
Requires screening protocols to include a mechanism for privacy-preserving submission of information regarding orders for potential sequences of concern to facilitate effective split order detection across covered providers.
Section 4(a)(1)(A)
Why it matters:It is a technical specification within a larger regulatory mandate. The privacy aspect is a critical design constraint for the technical solution.
Case for: Proponents argue this is essential to prevent bad actors from circumventing screening by splitting large orders for dangerous sequences across multiple providers. The 'privacy-preserving' aspect is vital for addressing industry concerns about data sharing and protecting proprietary or sensitive research information.
Case against: Critics might raise concerns about the technical feasibility and true privacy guarantees of such a system, fearing that any data sharing, even if labeled 'privacy-preserving,' could still lead to data breaches, misuse of information, or create an overly complex system that hinders legitimate transactions.
Estimated impact: This provision represents a significant operational and technical challenge for covered providers and the designated central mechanism, but it is crucial for closing a major loophole in biosecurity screening.
Requires that any person who receives Federal funds can only purchase nucleic acid synthesis products from a covered provider that is in compliance with the new security regulations.
Section 4(a)(7)
Why it matters:It is standard legislative practice to use federal funding as a lever for compliance, often placed among other regulatory details to ensure comprehensive enforcement.
Case for: Proponents argue this provision provides a powerful incentive for covered providers to comply with the regulations, as it links compliance directly to access to a significant market segment (federally funded research). This ensures a broad base of compliance across the industry.
Case against: Critics might argue this could create an unfair advantage for larger, more established covered providers who can more easily absorb compliance costs, potentially disadvantaging smaller or newer providers who rely on federally funded customers and may struggle to meet the new requirements quickly.
Estimated impact: This provision could lead to a significant market shift, ensuring that providers serving the extensive federally funded research community adhere to the new biosecurity standards.
States that the new mandatory regulations established under Section 4(a) shall supplant any existing voluntary Federal guidelines or recommendations relating to nucleic acid synthesis screening that were in effect before the date of the enactment of this Act.
Section 4(e)
Why it matters:It is a necessary legal clarification to establish the supremacy of the new mandatory regulatory framework over previous, less stringent voluntary guidelines.
Case for: Proponents argue this is essential to ensure a uniform and mandatory standard across the industry, eliminating the inconsistencies and loopholes inherent in a voluntary system. It provides clarity for both regulators and industry, strengthening the overall biosecurity posture.
Case against: Some might argue that voluntary guidelines offer flexibility that can adapt more quickly to technological changes, and supplanting them entirely could remove valuable, albeit non-binding, best practices that have evolved over time and are well-understood by the industry.
Estimated impact: This provision shifts the industry from a patchwork of voluntary compliance to a single, enforceable federal standard, significantly raising the regulatory floor and ensuring consistent application of biosecurity measures.