The BIOSECURE Act and the peptide supply chain

The BIOSECURE Act is a US federal measure that bars federal agencies and their contractors from using biotechnology products and services from designated Chinese companies. It was first introduced as standalone legislation in 2024. The bill stalled that year, then became law on December 18, 2025, when it was signed as part of the Fiscal Year 2026 National Defense Authorization Act (NDAA). Its practical scope is still taking shape: which companies get formally designated, how enforcement works, and how long the transition periods run all depend on a designation process that is still playing out.

What the BIOSECURE Act provides

The law targets Chinese contract development and manufacturing organizations (CDMOs) and other biotech firms. It does this by restricting federal contractors from dealing with entities designated as "biotechnology companies of concern" (BCCs), under a process run by the Office of Management and Budget (OMB) and informed by the Department of Defense. Under the enacted text, US government contractors, including pharmaceutical companies that take federal funding, would be barred from signing new agreements that use biotechnology equipment or services from designated BCCs. Existing contracts get a phase-out window.

The prohibitions are not immediate. Law-firm analyses of the enacted text (Ropes & Gray, Goodwin, and the FDA Law Blog, all June 2026) describe a sequence: OMB must publish a formal BCC list, reportedly due within one year of enactment, by roughly December 2026. Then comes implementing guidance and a revision of the Federal Acquisition Regulation (FAR) by the FAR Council, with prohibitions taking effect a set period after that revision. Several analysts point out that if the government uses the full statutory timeline, the restrictions may not bind contractors until 2028 or later. Contracts that predate the FAR revision are reported to get a multi-year grace period.

Unlike earlier drafts of the bill, the enacted law does not hard-code a list of company names. The designation pathway instead draws on the existing DoD Section 1260H list of Chinese military companies. At enactment, BGI Group and affiliated entities (including MGI Tech, Complete Genomics, and Forensic Genomics International) were on that list. WuXi AppTec, prominently named in the 2024 draft but absent from the list at enactment, was added to the updated 1260H list published by DoD on June 8, 2026 (with the accompanying Federal Register notice dated that week). WuXi Biologics, also named in earlier drafts, is not on the current 1260H list. Being on the 1260H list is widely described as a precursor that raises the odds of BCC designation, but it is a separate step from a formal BCC listing under the act.

The stated rationale is national security and data privacy. Legislators argue that genetic and health data processed by these firms could be accessed by the Chinese government under existing Chinese law. The act makes no specific allegations of product misconduct. It runs on a structural concern about legal jurisdiction.

Where peptides enter the picture

A large share of research peptides and active pharmaceutical ingredients (APIs) used by Western companies are synthesized in China, with the big CDMOs near the top of that stack. Even peptide manufacturers that are not themselves designated under the act may source raw amino acids, resins, or coupling reagents from Chinese suppliers further up the chain.

The table below summarizes the supply chain layers most relevant to the legislation:

Established manufacturers such as Bachem, PolyPeptide Group, and CordenPharma have been expanding peptide capacity. The build-out is driven heavily by demand for GLP-1 drugs and, increasingly, by Western pharma rethinking where it sources. These companies have announced significant capital investment in peptide production. None has committed to absorbing fully displaced Chinese volume, and analysts note that qualified large-scale peptide synthesis capacity cannot be built quickly.

Implications for quality and testing

Supply chain disruption has historically raised the risk of substitution, even when policy rather than a quality event drives it. A gap in supply from a primary manufacturer can open the door for lower-quality or unverified material to enter distribution. That is the context in which third-party analytical testing becomes more relevant, not less.

Independent laboratories, including those that publish certificate-of-analysis data for research peptides, provide one layer of verification that does not depend on where a peptide was synthesized. Purity, sequence confirmation, and the absence of common impurities can all be tested regardless of which CDMO produced the compound. None of this speaks to safety or suitability for human use. Research peptides are sold for laboratory research use only and are not approved for human consumption.

As of this writing, regulatory bodies including the FDA have not issued specific guidance on BIOSECURE Act implications for peptide buyers. The designation process and transition timelines remain active. Buyers and researchers tracking this area should consult primary legislative sources and DoD 1260H list updates directly rather than rely on vendor characterizations.

Sources

• finnrick.com — independent peptide purity and identity testing data
• bachem.com — Bachem AG, large-scale GMP peptide manufacturer, public statements on supply capacity
• polypeptide.com — PolyPeptide Group, European CDMO with public investor communications
• fda.gov — FDA regulatory guidance and enforcement actions related to API sourcing
• nih.gov — NIH resources on research integrity and compound sourcing considerations
• vialaudit.com — vendor reputation signals and sourcing transparency data for research peptides