NIH Proposes to Scrap 50-Year-Old Biosafety Rules, Extend Federal Oversight to Wild-Type Pathogens

The National Institutes of Health put forward the most significant rewrite of U.S. laboratory biosafety rules in nearly five decades, releasing a draft policy on Aug. 19 that would retire the NIH Guidelines for Research Involving Recombinant DNA Molecules and replace them with a broader, risk-based framework covering virtually every category of biological hazard in a research lab.

The stakes are structural. Under current rules, a lab working with an unmodified, naturally dangerous pathogen sits entirely outside federal biosafety oversight provided no recombinant or synthetic DNA is involved. As Global Biodefense reported in its Sept. 2 analysis, that gap has existed since NIH first wrote its rules in response to the emerging science of gene splicing, and most institutions have quietly patched it by voluntarily extending internal review to unmodified pathogens anyway. The draft closes that gap by formal federal mandate, not institutional goodwill.

According to the official request for comment published by NIH's Office of Science Policy (notice NOT-OD-26-112), the new policy would cover all biomedical research in laboratory settings involving biohazards, defined to include known or potential risks to human health. That's a meaningful scope change: the current rules are technique-based, anchored to recombinant or synthetic nucleic acid molecules. The draft shifts to a risk-based model that would extend to wild-type biological agents, toxins, and prions.

Two enforcement-adjacent changes in the draft deserve close reading. First, the incident-reporting window would compress from 30 days to 24 hours, according to reporting by Global Biodefense. That's not a marginal adjustment. A 30-day window is functionally a record-keeping exercise; a 24-hour window is a live-notification regime. Second, the draft formalizes the Biosafety Officer role with federally defined duties, including what Global Biodefense described as active verification of containment practices against the approved protocol, not just a walkthrough. Institutions without a formally designated Biosafety Officer would have to assign those duties to someone. That's a new compliance burden for smaller grantee institutions that have historically treated biosafety staffing as discretionary.

The scope expansion may also reach labs that don't directly receive NIH funding for biohazard work. As Global Biodefense noted, the current guidelines apply institution-wide once a facility receives NIH funding for recombinant DNA research, covering all such research regardless of who funds each individual project. If the same logic carries into the new policy, a university running an NIH-funded synthetic biology program could see federal biosafety requirements attach to an entirely separate pathogen-research project funded by a private foundation or a defense contract.

NIH framed the proposal in its own notice as a response to the increasingly multi-disciplinary, cross-sector, and global nature of modern science. The agency noted it announced the modernization initiative in September 2025 and ran regional listening sessions before drafting the proposal. According to Safety Partners LLC's analysis of the draft, the agency's position is that emerging biotechnologies, synthetic biology, and advanced cell engineering require an oversight framework capable of addressing a broader spectrum of risks than gene splicing alone.

The dual-use angle here is real and the agency doesn't fully resolve it. A framework that formally brings wild-type pathogens into IBC review is a biosecurity gain: it means more eyes on what's in more labs. But a tighter oversight net can also push researchers toward less transparent arrangements, particularly outside the U.S., if compliance costs become prohibitive. A UNSW Sydney policy review flagged by Global Biodefense this week makes a parallel point about DURC governance, cautioning that poorly calibrated oversight carries measurable costs to scientific output. That's a live tension, not a hypothetical one.

Public comments are due October 19, according to the NIH Office of Science Policy. NIH has indicated it intends to publish a final policy in fall 2026. Whether the current administration, which has proposed cuts of $18 billion to NIH and $3.6 billion to CDC in its FY 2026 budget request according to a CSIS analysis, will provide the enforcement infrastructure a broader oversight mandate actually requires is a question the draft does not answer.

Sources cited:
- NIH Office of Science Policy, NOT-OD-26-112 (Request for Comment: Draft NIH Biosafety Policy for Research Involving Biohazards) (https://grants.nih.gov/grants/guide/notice-files/NOT-OD-26-112.html)
- NIH Office of Science Policy, NIH Releases Draft Biosafety Policy for Public Comment (https://osp.od.nih.gov/nih-releases-draft-biosafety-policy-for-research-involving-biohazards-for-public-comment/)
- Global Biodefense, A Proposed Biosafety Rewrite Could Reshape Oversight for Every US Lab (Sept. 2, 2026) (https://globalbiodefense.com/2026/09/02/a-proposed-biosafety-rewrite-could-reshape-oversight-for-every-us-lab/)
- Global Biodefense Today, September 2, 2026 (https://globalbiodefense.com/2026/09/02/global-biodefense-today-september-2-2026/)
- Safety Partners LLC, NIH's Draft Biosafety Policy: What EHS Professionals Need to Know (https://safetypartnersinc.com/nihs-draft-biosafety-policy-what-ehs-professionals-need-to-know/)
- CSIS, Opportunities to Strengthen U.S. Biosecurity from AI-Enabled Bioterrorism (https://www.csis.org/analysis/opportunities-strengthen-us-biosecurity-ai-enabled-bioterrorism-what-policymakers-should)