August 19, 2026
None
NATIONAL INSTITUTES OF HEALTH (NIH)
Background
As the world's largest public funder of biomedical research, the National Institutes of Health (NIH) is committed to ensuring that gold-standard science is conducted under gold-standard biosafety conditions. To achieve this goal, NIH is proposing a new policy that modernizes and strengthens biosafety practices to ensure that oversight keeps pace with evolving risks. NIH is requesting public input on a new, comprehensive biosafety policy proposal that, when finalized, will replace the current NIH Guidelines for Research Involving Recombinant or Synthetic Nucleic Acid Molecules.
Nearly 50 years ago, NIH introduced the foundational Guidelines for Research Involving Recombinant DNA Molecules, which established the biosafety framework for much of today's research enterprise. However, the increasingly multi-disciplinary, cross-sector, and global nature of modern science calls for a paradigm shift and, on September 9, 2025, NIH announced it was beginning a process to modernize and strengthen the oversight of biosafety, to ensure that it is transparent, adaptive, and accountable.
To inform the initial policy proposal, NIH undertook an intensive community outreach and engagement effort, hearing from researchers, biosafety professionals, members of the public, and more. Comments were solicited through six regional listening sessions, smaller engagements with groups throughout the United States, and an on-demand portal to receive individual comments for the duration of the community engagement effort.
The feedback received to date has informed a new policy proposal that expands the scope of the NIH Guidelines to all biohazards while removing red tape for low-risk research. As part of this modernization, NIH also seeks to strengthen the role of Institutional Biosafety Committees (IBCs) and reinforce consistency with Institutional Review Boards and Institutional Animal Care and Use Committees, which serve as three foundational pillars of institutional oversight of biomedical research.
Through this draft policy, NIH aims to augment public safety, transparency, and accountability in its stewardship of the biomedical research enterprise. NIH recognizes that resources and guidance will be required to achieve successful implementation of a modernized biosafety policy. Thus, NIH intends to provide additional supplemental materials for the community through implementation resources. These materials will include information about IBC functions, as well as content drawn from existing information, such as biosafety considerations for research with gene drive modified organisms, Risk Group (RG) classifications (currently articulated in Appendix B of the NIH Guidelines); and additional information about requirements for containment practices, occupational health plans, and training for research with RG3 influenza viruses (currently articulated in Section III-D-7 and Appendix G-II-C-5 of the NIH Guidelines).
Request for Information
NIH seeks public input on its Draft NIH Biosafety Policy for Research Involving Biohazards, which, when finalized, will supersede the NIH Guidelines for Research Involving Recombinant or Synthetic Nucleic Acid Molecules. Respondents are free to address any or all of the topics listed or any other relevant topics for NIH to consider. Respondents should not feel compelled to address all items. NIH will consider all comments received. Comments are welcome on all aspects of the draft policy, including the scope, risk assessment, categories of oversight based on risk, roles and responsibilities, IBC functions, and procedures. NIH is also seeking comments on draft incident reporting and IBC meeting minute templates which can be found here.
NIH also seeks comments on specific topics listed below:
How to Submit a Response
Comments should be submitted electronically to the following webpage: https://osp.od.nih.gov/comment-form-draft-nih-biosafety-policy-for-research-involving-biohazards/ Responses will be accepted through October 19, 2026. Responses to this RFI are voluntary and may be submitted anonymously. You may also voluntarily include your name and contact information with your response. Other than your name and contact information, please do not include in the response any personally identifiable information or any information that you do not wish to make public. Proprietary, classified, confidential, or sensitive information should not be included in your response. After the Office of Science Policy (OSP) has finished reviewing the responses, the responses may be posted to the OSP website without redaction.
DRAFT NIH BIOSAFETY POLICY FOR RESEARCH INVOLVING BIOHAZARDS
Section I.
Purpose
As the world's largest public funder of biomedical research, NIH is committed to ensuring that gold-standard science is conducted under gold-standard biosafety conditions. The purpose of the NIH Biosafety Policy for Research Involving Biohazards (the Policy) is to achieve this goal by setting forth requirements for federal and local institutional oversight of biomedical research involving biohazards, and to help ensure the safe, responsible, and secure conduct of such research.
Section II.
Scope
The NIH Biosafety Policy covers all biomedical research, in laboratory settings, involving biohazards.
For the purpose of the scope of this Policy, research involving biohazards is defined as research involving known or potential risk to human health and any of the following:
This Policy applies to research supported in whole or in part by NIH, regardless of NIH funding level or funding mechanism, including the NIH Intramural Research Program. This Policy is applicable to all competing award applications, competitive revisions, proposals for contracts, and other funding agreements (e.g., Other Transactions, Cooperative Agreements) on or after [effective date will be 6 months from publication of the final Policy], and all existing awards and agreements as of that date. This Policy is applicable to all intramural research projects conducted on or after [effective date will be 6 months from publication of final Policy], including on-going or new studies. This Policy is also applicable to non-NIH funded research that is conducted on or after [effective date will be 6 months from publication of final Policy] at an institution that receives any NIH funding.
Based on risk, different categories of research will require different levels of oversight as described in Section IV.
Any research subject to this Policy that is also under the regulation or purview of another federal agency may proceed under the oversight of the other federal agency once approvals or other applicable clearances have been obtained.
Compliance and Enforcement
All institutions conducting NIH-supported research will be required to comply with this Policy, which will be included in the applicable terms and conditions of the award or agreement and included in applicable NIH intramural policies and procedures. As a term and condition for NIH funding, institutions shall ensure that any research conducted at or sponsored by the institution, irrespective of the source of funding, shall comply with this Policy, as specified in applicable terms and conditions of the award or agreement.
Failure to comply may provide a basis for enforcement actions, including, but not limited to, additional special terms and conditions, or termination, consistent with applicable grant regulations; applicable NIH policies and procedures, including NIH intramural policies and procedures; the Federal Acquisition Regulations; and/or other authorities, as appropriate. Enforcement actions may affect future funding decisions for the recipient institution, as authorized in the NIH Grants Policy Statement (GPS). In cases where NIH proposes to suspend, limit, or terminate financial assistance because of noncompliance with the Policy, applicable HHS and Public Health Service procedures shall govern.
Voluntary Compliance
This Policy outlines fundamental biosafety principles and practices that serve as a foundation for biomedical research. The Policy may serve globally as a model framework for biosafety oversight, and entities not otherwise subject are encouraged to follow the Policy principles and implement commensurate oversight procedures to enable safe, responsible, and secure research regardless of funding source.
General Definitions
The following terms, which are used throughout the NIH Biosafety Policy, are defined as follows:
Biological agent: Bacteria, viruses, fungi or parasites that cause human disease.
Biomedical research: Research on a topic that is within the mission of the NIH, including applicability to: research supported by NIH, and non-NIH funded research that is conducted at an institution that receives any NIH funding.
Biosafety Assurance: Documentation from an institution, through the Authorized Organizational Representative (AOR), assuring institutional compliance with this Policy.
Emerging agent or organism: An agent or organism newly identified in nature.
Gene drive: Technology whereby a particular heritable element biases inheritance in its favor, resulting in the heritable element becoming more prevalent than predicted by Mendelian laws of inheritance in a population over successive generations.
Genetic modification:
Institutional Biosafety Committee (IBC): A committee that meets the requirements for membership, and reviews, approves, and oversees projects in accordance with the responsibilities defined in Section III-B.
Laboratory research: Research conducted within Biosafety Level/Animal Biosafety Level (BSL/ABSL) 1-4 containment facilities, including spaces such as vivarium, core facilities, or clinical settings. It does not include the deliberate release of a biohazard outside of biocontainment, such as field release research.
National Biosafety Data and Safety Analysis Center: A Federally Funded Research and Development Center (FFRDC) established under this policy to independently aggregate, de-identify, and analyze laboratory biosafety incident data, near-misses, and anomalies for the purpose of advancing the metascience of biosafety.
NIH-supported research: All research funded in whole or in part by NIH. This includes research conducted by the NIH intramural research program, and funded or conducted by extramural grants, contracts, other transactions, or other funding agreements, regardless of NIH funding level or funding mechanism.
Novel agent or organism: An agent or organism not existing in nature, deliberately designed, and possibly derived from multiple, different natural or synthetic sources (e.g., chimeras, or organisms generated by synthetic biology in conjunction with artificial intelligence).
Prions and self-aggregating proteins: Misfolded forms of proteins that can self-propagate and cause neurodegenerative disease in humans or animals.
Toxin: A protein or peptide produced by living organisms that causes harm in humans.
Wild type: Naturally occurring organisms, cells, or viruses without deliberately introduced genetic modifications.
Zoonotic: An agent reasonably suspected of transmission from animals to humans with the potential to cause human disease.
Section III. Roles and Responsibilities
Section III-A. Responsibilities of the Institution
An institution conducting or sponsoring research subject to the NIH Biosafety Policy is responsible for ensuring that such research is conducted in full compliance with the Policy as a term and condition of NIH funding. No research subject to this Policy may be conducted until the institution conducting the research has provided a written Biosafety Assurance through the Authorized Organizational Representative (AOR) that has been approved by NIH, setting forth compliance with this Policy. Assurances are approved by NIH for a period of up to four years. Assurance submissions will include:
The institution must maintain all IBC records in accordance with Section 8.4.2 of the NIH GPS, which requires recipients of awards to maintain appropriate documentation in accordance with record retention requirements in 2 CFR 200.334, which states "the recipient and subrecipient must retain all Federal award records for three years from the date of submission of their final financial report." In addition, IBC meeting minutes and incident reports must be publicly posted for a minimum of five years. Records may need to be retained for longer durations in accordance with other requirements of the NIH GPS as applicable. When incident reports or meeting minutes contain records related to awards, they must be maintained for at least as long as stated in this requirement and must be made available to the public during this time if requested.
Incident reports may contain records related to multiple protocols which may be in different stages of the grant cycle.
The institution is responsible for ensuring appropriate training regarding laboratory safety and implementation for the IBC Chair and members, the BSO and other containment experts (when applicable), Principal Investigators (PI), and laboratory staff.
The institution may be required to establish and maintain an occupational health and safety program (OHSP) based on other regulations and policies. If an OHSP is required under those regulations and policies, or if it is needed based on research conducted, it should be maintained as part of the overall biosafety program. The role of the OHSP to support biosafety will depend on the facility, research activities, and biohazards involved.
Section III-B. Responsibilities of the Institutional Biosafety Committee (IBC)
The institution shall establish an IBC to meet the criteria outlined in this Policy. Additional responsibilities may be added, as needed by the institution, whose responsibilities need not be restricted to research within the scope of the Policy. The IBC must meet the following minimum requirements.
IBC Membership
The IBC must have at least five members who have appropriate expertise, experience, and the capability to assess research involving biohazards and identify any potential risk to institutional personnel, public health, or the environment, and to determine the appropriate biosafety, and biosecurity measures, when appropriate, to mitigate those risks. The IBC should include individuals with expertise in biological safety and physical containment, and include, or have available on an ad hoc basis, individuals knowledgeable in institutional commitments and policies, applicable law, security, standards of professional conduct and practice, community attitudes, and the environment, as appropriate.
The following individuals must be appointed as voting members:
The institution should appoint other individuals to the IBC, as needed for the types of research conducted at the institution, or use ad hoc consultants, as appropriate.
IBC Functions
The IBC, or its delegate as applicable, is responsible for:
The IBC may not approve the lowering of biocontainment for such research until authorized by NIH and any other applicable Federal, State or local entities.
If treatment is provided to an exposed individual due to the potential presence of adventitious agents (e.g., non-human primate Herpes B or blood borne pathogen prophylaxis) and not agent(s) deliberately involved in the research, no report is required unless a LAI results from the exposure, in which case the incident must be reported to NIH.
Minor spills of low-risk agents, that do not involve a breach of containment and that were properly cleaned and decontaminated, generally do not need to be reported.
Biological Safety Officer (BSO)
A BSO must be appointed when the institution conducts research subject to the Policy i) at BSL-3 or 4, or ii) involving GDMOs.
The BSO's duties include but are not limited to:
If an institution does not designate a BSO, the institution must assign another official to take on these responsibilities.
Section III-C. Responsibilities of the Principal Investigator (PI)
The responsibilities of the PI include:
Institutions are further authorized and encouraged to submit voluntary, confidential reports regarding near-misses, secondary failures, or procedural issues to the National Biosafety Data and Safety Analysis Center (NBDSAC). The NIH shall not utilize the voluntarily submitted data for enforcement or action on funding, provided the incident did not result in an environmental release or a LAI. All data maintained within the NBDSAC repository must be de-identified to protect individual and institutional privacy, but institutions have flexibility in what scientific information they choose to share.
Section III-D. Responsibilities of the National Institutes of Health (NIH)
NIH is responsible for:
Section IV. Categories of Oversight for Research Based on Risk
The scope of biohazards defined in the Policy is broad; however, different categories of research will require different levels of oversight based on risk. Certain research associated with higher levels of risk or uncertainty must be reviewed and approved at the Federal level by NIH. This research also must be reviewed and approved by the IBC, who may require additional biosafety provisions based upon its risk assessment of the research and local knowledge of facilities features and personnel capacities. Other research must be reviewed and approved by the IBC or delegated for review and approval by an individual or sub-group of the IBC for research of lower risk.
Section IV-1. Research That Requires NIH and IBC Approval Before Initiation
Review and approval for determination of appropriate containment and biosafety practices and procedures must be obtained from NIH for higher risk research including:
Initiation of research may proceed after approvals from both NIH and the IBC. The IBC may stipulate higher containment or additional biosafety precautions.
Section IV-2. Research That Requires IBC Review and Approval Before Initiation
For initial submissions of research within the scope of the policy, and not otherwise specified in other sections, review and approval must be obtained from the IBC before initiation. This would include:
Clinical research cannot be initiated until IBC, and all other applicable institutional and regulatory authorization(s) and approvals have been obtained.
The deliberate transfer of a clinical product, that would otherwise fall under the scope of this Policy, into one human research participant conducted under a Food and Drug Administration (FDA) regulated individual patient expanded access Investigational New Drug (IND), or protocol, including for emergency use, is not research subject to this Policy and does not need to be submitted to an IBC for review and approval.
Section IV-3. Research That Requires Review and Approval Before Initiation and May Be Delegated to an Individual or Subgroup of IBC Members
Review and approval must be obtained before initiation from an individual or a subgroup of IBC members for minor amendments to previously IBC approved submissions or for research including:
Individuals or a subgroup of IBC members conducting delegated reviews may elevate review and approval to the full IBC as necessary. The IBC must be notified of all approvals granted by delegated review when granted, and the approval must be reported in full to the IBC at its next scheduled meeting for inclusion in the minutes.
Section V. Risk Assessment and Mitigation for Research Involving Biohazards
Investigators and IBCs must conduct a comprehensive risk assessment prior to initiating research involving biohazards. Conducting a risk assessment is required as a key part of the responsibilities of investigators and IBCs to provide for the safe conduct of the research. A risk assessment is essential to identify the likelihood of an accidental exposure to, or release of, a biohazard during the conduct of research, and the potential severity of harm to research personnel, the public, or the environment. Based on the risk assessment, an appropriate risk mitigation strategy must be developed to lower the risks associated with the research to an acceptable level.
A risk assessment is a multistep process that involves consideration of:
All of these steps are critical to assessing the risks associated with constructing or handling the biohazard. The risks are addressed in the risk mitigation strategy through determination of appropriate physical and biological containment, laboratory safety procedures and practices, personal protective equipment, and training.
Based on the specific research to be conducted, the factors to consider in the risk assessment will differ. The considerations for risk assessment in this document are harmonized with the BMBL, and the BMBL should serve as a primary handbook for conducting risk assessments. Additional requirements and considerations specific to NIH-supported research, including genetic modification of agents or organisms and manipulations, are presented here.
Section V-A. Requirements and Considerations for Risk Assessment of the Characteristics of the Biohazard
The first step of risk assessment must be to understand the risks associated with the types of biohazards involved in the research. The characteristics of wild-type bacteria, viruses, fungi, or parasites must be evaluated for their ability to cause disease in humans, population impact, and the availability of countermeasures for that disease. Certain transgenic animals or GDMOs present different risks and may also impact populations or the environment. Risks associated with handling cells or tissues in vitro culture may vary depending on whether the research involves a well-established cell line, or primary cells, or tissues that may harbor adventitious agents, which may carry additional risks. Work with many proteins presents risks more akin to chemical hazards because they are incapable of replicating. Prions, and other proteins that aggregate, are capable of spreading and causing neurodegenerative diseases. Risks associated with toxins may differ depending on the potency, amounts used, and whether they are in a form allowing intracellular access (e.g., toxin single subunit or holoenzyme).
Biological agents that cause disease in humans are classified into four RGs based on pathogen characteristics and population impacts. Pathogen characteristics include severity of illness, case fatality rate, route of exposure, infectious dose, rate of transmission, and environmental prevalence and stability. Population impacts include status of immunity in humans, availability of preventive or therapeutic countermeasures, vulnerable individuals or groups within populations, and burden on health care systems.
Representative genera and species of bacteria, viruses, fungal and parasitic agents are classified into RGs based on the potential effect on a healthy human adult; however, some individuals may have increased susceptibility, due to preexisting conditions, prescribed medications, compromised immunity, pregnancy, or breast feeding (which may increase exposure of infants to some biological agents), among other factors. Absence of agent specification in the list of RG2- RG4 does not imply automatic or implicit classification as RG1. A risk assessment must be conducted based on the known and potential properties of the agents not listed and their relationship to agents that are listed. Special attention should be given to novel, emerging, or zoonotic agents (Refer to Section IV-1 of this Policy "Research That Requires NIH and IBC Approval Before Initiation").
Additional resources can be found in the agent summary statements and minimum BSL recommendations in the BMBL. The BMBL also provides information regarding prions and some agents that infect animals. The Federal Select Agent Program oversees the possession, use, and transfer of Select Agents and Toxins, which pose a threat to the public and animal or plant health. All entities must follow the requirements laid out in the Select Agent Regulations.
Section V-B. Requirements and Considerations for Risk Assessment for Genetically Modified Biological Agents, Cells, or Organisms
The starting point for risk assessment must be based on the risks associated with the parent agent, cell, or organism; but those risks may be affected by changes due to genetic modifications, which must also be assessed. Changes to agent pathogenicity, transmissibility, host or tissue range, etc., may increase risks compared to the parent. Genetic modifications may be used to create attenuated or replication-defective agents with less risk than the parent. Modifications may affect toxicity, physiological activity, or allergenicity. The source and function of the nucleic acid sequence altered, introduced, or deleted in a genetically modified biohazard affects risk (e.g., modifications to RG 2-4 agents versus introduction of RG 2-4 sequence into non-pathogenic prokaryotes or lower eukaryotes).
Research involving GDMOs requires risk assessments that incorporate a broader scope of considerations because of greater uncertainty of the technology and potential uncertainty of the impact of the newly modified organism or biological agent. Specific attention must be paid to risks of an unintended release from the laboratory and the potential impact on humans, other populations of organisms, and the environment.
Section V-C. Requirements and Considerations for Risk Assessment for Synthetic Biological Agents or Emerging Technologies
As synthetic biology and other uses of emerging technologies move forward, it may become easier to develop an organism containing genetic sequences from multiple sources such that the parent agent may not be obvious when examined out of context. In such cases, the risk assessment must include at least three levels of analysis:
Investigators and IBCs must consider the highest RG classification of all agents that are the source of sequences included in the construct, the percentage of the genome contributed by each parent agent, and the predicted function or intended purpose of each contributing sequence. The initial assumption should be that all sequences will function as they did in the original host context.
The combination of certain sequences in a new biological context may result in an organism whose risk profile could be higher than that of the contributing organisms or sequences. The synergistic function of these sequences may be one of the key attributes to consider in deciding whether a higher containment level is warranted, at least until further assessments can be carried out. During risk assessment, it must be considered that there could be potentially new or unpredictable biosafety risks associated with an organism formed through combination of sequences from a number of organisms or due to the synergistic effect of combining transgenes that results in a new phenotype.
Section V-D. Requirements and Considerations for Risk Assessment of Manipulations of Biohazards
Manipulations of the biohazard must also be considered as they may alter the risks of personnel exposure or release to the environment. Different manipulations may introduce different levels of risk (e.g., use of sharps, generation of aerosols, tissue culture, animal procedures, large culture volumes). For work with biological agents, investigators and IBCs must assess whether handling could result in an exposure through possible routes of transmission (e.g., inoculation, animal bite, aerosolization of respiratory viruses, etc.).
Section V-E. Risk Mitigation Strategies and Laboratory Containment
Informed by the risk assessment, investigators and IBCs must develop a risk mitigation strategy to help minimize the identified risks of exposure or release of the biohazard. Combinations of mitigation measures to be applied include:
Four BSLs based on these combinations are described in the BMBL. The BMBL provides the elements for each BSL with protections that increase as the risks associated with the research increase. The BMBL also provides criteria for the animal biosafety level (ABSL) required for work with animals, including in loose housing or open pens. The agent summary sections of the BMBL include some recommendations for the minimum BSL for work with known wild-type agents, toxins, or prions using certain standard procedures. However, investigators and IBCs must conduct a risk assessment for each specific experiment. While both RGs and BSLs/ABSLs have four classification categories (RG1-RG4), these concepts are related but not equivalent. RGs describe the biological properties of the agent, and depending on the work proposed, the appropriate BSL/ABSL used to safely handle the agent may be lower or higher. For instance, while research with an RG3 agent often may be conducted at BSL-3, the research may be conducted at a lower or higher level of laboratory containment based on a thorough consideration of how the agent is going to be manipulated, and if applicable, what genetic modifications are applied to the agent. Also, depending on the specific research to be conducted, the BSL may be combined with enhancements (e.g., work with a respiratory virus in a BSL-2 laboratory may require additional respiratory PPE).
Certain research is required to be conducted at a minimum BSL.
Clinical research involving handling and administration of potentially biohazardous materials to research participants is most often conducted in clinical settings that do not conform to laboratory BSLs. However, precautions to protect personnel must include the use of universal precautions such as gloves, and eye and respiratory protection.
In addition to physical containment, biological or environmental risk mitigation strategies may be applicable for certain biohazards. Biological containment may involve genetically modified biohazards that have been altered to decrease risks by limiting infectivity or replication in specific hosts, or dissemination and survival in the environment outside the laboratory. Environmental containment strategies may include conducting research in a geographically isolated area, an environment in which biohazard organisms are not able to survive (e.g., tropical organism in an arctic climate) or a genetically isolated environment (e.g., an area with no native organisms that could mate with non-native laboratory organisms).
Please direct all inquiries to:
NIH Office of Science Policy