Special Issue: BIOSECURE Act Signed Into Law — What BD Teams Need to Know Now

This Week's Top Takeaway

The BIOSECURE Act is now law. Signed December 18, 2025 as Section 851 of the FY2026 NDAA, it directs OMB to publish a list of Biotechnology Companies of Concern within 12 months and restricts federal procurement and grants involving BCC-provided biotechnology equipment or services. The clock starts now.

The Three BCC Designation Categories

Category A — DoD 1260H List Entities: Companies already on the Department of Defense's Section 1260H list of "Chinese military companies" that are involved in biotechnology. Currently: BGI Genomics (华大基因) and MGI Tech (华大智造). These are near-certain BCC designees. Category B — OMB Interagency Designation: Companies identified through an OMB-led interagency review process based on national security criteria. This is where WuXi AppTec's (药明康德) fate will be decided. The criteria include foreign adversary control, data security risk, and military-civil fusion concerns. Category C — Subsidiaries, Parents & Successors: Subsidiaries, parent companies, and successor entities of Category A and B companies. This is the sleeper risk — it means corporate restructuring designed to evade designation (e.g., WuXi XDC's planned IPO) may not provide the structural isolation its architects intend.

Implementation Timeline

December 18, 2025: BIOSECURE Act signed into law (NDAA Sec. 851)
By December 2026: OMB must publish the BCC list
By June 2027: OMB must issue implementation guidance (180 days after BCC list)
By June 2028: FAR Council must revise the Federal Acquisition Regulation
60 days after FAR revision: Restrictions take effect for 1260H-listed companies
Five-year grandfathering: Pre-existing contracts with non-1260H BCCs get a 5-year wind-down

Critical nuance: The 5-year grandfathering period is NOT available for contracts with companies already on the 1260H list as of December 18, 2025. BGI and MGI get the strictest treatment.

Congressional Pressure on WuXi

On the same day the Act was signed, chairs of multiple Senate and House committees — including the House Select Committee on China — sent a letter to the Department of Defense recommending that WuXi AppTec, WuXi Biologics (药明生物), and WuXi XDC be added to the 1260H list. If DoD accepts this recommendation, all three WuXi entities would become BCCs under Category A, bypassing the OMB Category B process entirely.

What this means: WuXi's BIOSECURE exposure is no longer just a Category B question. Congressional leadership is actively pushing for the faster Category A pathway via 1260H listing.

Takeaways for BD Teams

The BIOSECURE Act is law. Stop treating it as hypothetical. Every supply chain assessment, CDMO contract renewal, and due diligence process should now include a BIOSECURE section. The question is no longer "will it pass?" but "when will restrictions take effect?"

Map your exposure by BCC category. Category A (BGI) has no grandfathering. Category B (potential WuXi designation) has a longer timeline but shorter than you think. Category C (subsidiaries) could cascade unpredictably. Your compliance plan should be calibrated to categories, not headlines.

The grant restriction is the overlooked risk. If your organization receives NIH, BARDA, or DARPA funding, your BCC exposure analysis must include every subcontractor and service provider in the grant-funded workflow. Universities and academic medical centers are directly affected.

Start CDMO transition planning conversations now. A full tech transfer takes 18-24 months. The December 2026 BCC list deadline is 12 months away. Companies that wait for designation to begin planning will face capacity constraints and timeline delays.

This is a special issue of China Biotech Weekly. Regular Thursday publication begins January 2, 2026. For questions or tips, reach out at antony@chinabiointel.com. — Antony Tan