42 CFR Part 73 — Select Agents and Toxins

law://us/cfr/42/73@2026-11-14

42 CFR Part 73 — Select Agents and Toxins

In force

This text since 16 Jan 2025law://us/cfr/42/73@2026-11-14

Contents

73.0Applicability and related requirements.#

All individuals and entities that possess SARS-CoV, Lujo virus, or Chapare virus must provide notice to CDC regarding their possession of SARS-CoV, Lujo virus, or Chapare virus on or before December 4, 2012. Currently registered individuals and entities possessing SARS-CoV, Lujo virus, or Chapare virus must meet all the requirements of this part by December 4, 2012. All previously unregistered individuals and entities possessing SARS-CoV, Lujo virus, or Chapare virus must meet all of the requirements of this part by April 3, 2013.

73.1Definitions.#

For purposes of this part: Administrator means the Administrator, Animal and Plant Health Inspection Service, or any person authorized to act for the Administrator. Animal and Plant Health Inspection Service (APHIS) means the Animal and Plant Health Inspection Service of the U.S. Department of Agriculture. Attorney General means the Attorney General of the United States or any person authorized to act for the Attorney General. Biological agent means any microorganism (including, but not limited to, bacteria, viruses, fungi, rickettsiae, or protozoa), or infectious substance, or any naturally occurring, bioengineered, or synthesized component of any such microorganism or infectious substance, capable of causing death, disease, or other biological malfunction in a human, an animal, a plant, or another living organism; deterioration of food, water, equipment, supplies, or material of any kind; or deleterious alteration of the environment. CDC means Centers for Disease Control and Prevention of the Department of Health and Human Services. Conotoxins means short, paralytic alpha conotoxins containing the following amino acid sequence X1CCX2PACGX3X4X5X6CX7, whereas: (1) C = Cysteine residues are all present as disulfides, with the 1st and 3rd Cysteine, and the 2nd and 4th Cysteine forming specific disulfide bridges; (2) The consensus sequence includes known toxins α-MI and α-GI (shown above) as well as α-GIA, Ac1.1a, α-CnIA, α-CnIB; (3) X1 = any amino acid(s) or Des-X; (4) X2 = Asparagine or Histidine; (5) P = Proline; (6) A = Alanine; (7) G = Glycine; (8) X3 = Arginine or Lysine; (9) X4 = Asparagine, Histidine, Lysine, Arginine, Tyrosine, Phenylalanine or Tryptophan; (10) X5 = Tyrosine, Phenylalanine, or Tryptophan; (11) X6 = Serine, Threonine, Glutamate, Aspartate, Glutamine, or Asparagine; (12) X7 = Any amino acid(s) or Des X; and (13) “Des X” = “an amino acid does not have to be present at this position.” For example if a peptide sequence were XCCHPA then the related peptide CCHPA would be designated as Des-X. Diagnosis means the analysis of specimens for the purpose of identifying or confirming the presence or characteristics of a select agent or toxin provided that such analysis is directly related to protecting the public health or safety, animal health or animal products, or plant health or plant products. Entity means any government agency (Federal, State, or local), academic institution, corporation, company, partnership, society, association, firm, sole proprietorship, or other legal entity. HHS means the Department of Health and Human Services. HHS Secretary means the Secretary of the Department of Health and Human Services or his or her designee, unless otherwise specified. HHS select agent and/or toxin means a biological agent or toxin included in § 73.3. Information security means protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide—

(1)Integrity, which means guarding against improper information modification or destruction, and includes ensuring information authenticity;

(2)Confidentiality, which means preserving authorized restrictions on access and disclosure, including means for protecting personal privacy and proprietary information; and

(3)Availability, which means ensuring timely and reliable access to and use of information. Occupational exposure means any reasonably anticipated skin, eye, mucous membrane, parenteral contact, or respiratory aerosol exposure to select agents or toxins that may result from the performance of an employee's duties. Overlap select agent and/or toxin means a biological agent or toxin listed in § 73.4 and 9 CFR part 121.4. Principal investigator means the one individual who is designated by the entity to direct a project or program and who is responsible to the entity for the scientific and technical direction of that project or program. Proficiency testing means the process of determining the competency of an individual or laboratory to perform a specified test or procedure. Recombinant nucleic acids means:

(1)Molecules that are chemically or by other means synthesized or amplified, including those that are chemically or otherwise modified but can base pair with naturally occurring nucleic acid molecules (i.e., synthetic nucleic acids) or

(2)Molecules that result from the replication of those described in paragraph (1) of this definition. Toxin means the toxic material or product of plants, animals, microorganisms (including, but not limited to, bacteria, viruses, fungi, rickettsiae, or protozoa), or infectious substances, or a recombinant or synthesized molecule, whatever their origin and method of production, and includes any poisonous substance or biological product that may be engineered as a result of biotechnology, produced by a living organism; or any poisonous isomer or biological product, homolog, or derivative of such a substance. United States means all of the States. USDA means the United States Department of Agriculture. Validated inactivation procedure means a procedure, whose efficacy is confirmed by data generated from a viability testing protocol, to render a select agent non-viable but allows the select agent to retain characteristics of interest for future use; or to render any nucleic acids that can produce infectious forms of any select agent virus non-infectious for future use. Viability testing protocol means a protocol to confirm the validated inactivation procedure by demonstrating the material is free of all viable select agent. Verification means the demonstration of obtaining established performance (e.g., accuracy, precision, and the analytical sensitivity and specificity) specifications for any procedure used for diagnosis.

73.10Restricting access to select agents and toxins; security risk assessments.#

(a)An individual or entity required to register under this part may not provide an individual access to a select agent or toxin, and an individual may not access a select agent or toxin, unless the individual is approved by the HHS Secretary or Administrator, following a security risk assessment by the Attorney General.

(b)An individual will be deemed to have access at any point in time if the individual has possession of a select agent or toxin (e.g., ability to carry, use, or manipulate) or the ability to gain possession of a select agent or toxin.

(c)Each individual with access to select agents or toxins must have the appropriate education, training, and/or experience to handle or use such agents or toxins.

(d)To apply for access approval, each individual must submit the information necessary to conduct a security risk assessment to the Attorney General.

(e)A person with a valid approval from the HHS Secretary or Administrator to have access to select agents and toxins may request, through his or her Responsible Official, that the HHS Secretary or Administrator provide their approved access status to another registered individual or entity for a specified period of time. A Responsible Official must immediately notify the Responsible Official of the visited entity if the person's access to select agents and toxins has been terminated.

(f)An individual's security risk assessment may be expedited upon written request by the Responsible Official and a showing of good cause (e.g., public health or agricultural emergencies, national security, or a short term visit by a prominent researcher). A written decision granting or denying the request will be issued.

(g)An individual's access approval will be denied or revoked if the individual is within any of the categories described in 18 U.S.C. 175b,

(h)An individual's access approval may be denied, limited, or revoked if:

(1)The individual is reasonably suspected by any Federal law enforcement or intelligence agency of committing a crime specified in 18 U.S.C. 2332b(g)(5), knowing involvement with an organization that engages in domestic or international terrorism (as defined in 18 U.S.C. 2331) or with any other organization that engages in intentional crimes of violence, or being an agent of a foreign power (as defined in 50 U.S.C. 1801), or

(2)It is determined such action is necessary to protect public health and safety.

(i)An individual may appeal the HHS Secretary's decision to deny, limit, or revoke access approval under § 73.20.

(j)Access approval is valid for a maximum of three years.

(k)The Responsible Official must immediately notify CDC or APHIS when an individual's access to select agents or toxins is terminated by the entity and the reasons therefore.

73.11Security.#

(a)An individual or entity required to register under this part must develop and implement a written security plan. The security plan must be sufficient to safeguard the select agent or toxin against unauthorized access, theft, loss, or release.

(b)The security plan must be designed according to a site-specific risk assessment and must provide graded protection in accordance with the risk of the select agent or toxin, given its intended use. A current security plan must be submitted for initial registration, renewal of registration, or when requested.

(c)The security plan must:

(1)Describe procedures for physical security, inventory control, and information systems control,

(2)Contain provisions for the control of access to select agents and toxins including the safeguarding of animals (including arthropods) or plants intentionally or accidentally exposed to or infected with a select agent, against unauthorized access, theft, loss or release.

(3)Contain provisions for routine cleaning, maintenance, and repairs,

(4)Establish procedures for removing unauthorized or suspicious persons,

(5)Describe procedures for addressing loss or compromise of keys, keycards, passwords, combinations, etc. and protocols for changing access permissions or locks following staff changes,

(6)Contain procedures for reporting unauthorized or suspicious persons or activities, loss or theft of select agents or toxins, release of select agents or toxins, or alteration of inventory records, and

(7)Contain provisions for ensuring that all individuals with access approval from the HHS Secretary or Administrator understand and comply with the security procedures.

(8)Describe procedures for how the Responsible Official will be informed of suspicious activity that may be criminal in nature and related to the entity, its personnel, or its select agents or toxins; and describe procedures for how the entity will notify the appropriate Federal, State, or local law enforcement agencies of such activity.

(9)Contain provisions for information security that:

(i)Ensure that all external connections to systems which manage security for the registered space are isolated or have controls that permit only authorized and authenticated users;

(ii)Ensure that authorized and authenticated users are only granted access to select agent and toxin related information, files, equipment (e.g., servers or mass storage devices) and applications as necessary to fulfill their roles and responsibilities, and that access is modified when the user's roles and responsibilities change or when their access to select agents and toxins is suspended or revoked;

(iii)Ensure that controls are in place that are designed to prevent malicious code (such as, but not limited to, computer virus, worms, spyware) from compromising the confidentiality, integrity, or availability of information systems which manage access to spaces registered under this part or records in § 73.17;

(iv)Establish a robust configuration management practice for information systems to include regular patching and updates made to operating systems and individual applications; and

(v)Establish procedures that provide backup security measures in the event that access control systems, surveillance devices, and/or systems that manage the requirements of section 17 of this part are rendered inoperable.

(10)Contain provisions and policies for shipping, receiving, and storage of select agents and toxins, including documented procedures for receiving, monitoring, and shipping of all select agents and toxins. These provisions must provide that an entity will properly secure containers on site and have a written contingency plan for unexpected shipments.

(d)An individual or entity must adhere to the following security requirements or implement measures to achieve an equivalent or greater level of security:

(1)Allow access only to individuals with access approval from the HHS Secretary or Administrator,

(2)Allow individuals not approved for access from the HHS Secretary or Administrator to conduct routine cleaning, maintenance, repairs, or other activities not related to select agents or toxins only when continuously escorted by an approved individual if the potential for access to select agents or toxins exists,

(3)Provide for the control of select agents and toxins by requiring freezers, refrigerators, cabinets, and other containers where select agents or toxins are stored to be secured against unauthorized access (e.g., card access system, lock boxes),

(4)Inspect all suspicious packages before they are brought into or removed from the area where select agents or toxins are used or stored,

(5)Establish a protocol for intra-entity transfers under the supervision of an individual with access approval from the HHS Secretary or Administrator, including chain-of-custody documents and provisions for safeguarding against theft, loss, or release,

(6)Require that individuals with access approval from the HHS Secretary or Administrator refrain from sharing with any other person their unique means of accessing a select agent or toxin (e.g., keycards or passwords),

(7)Require that individuals with access approval from the HHS Secretary or Administrator immediately report any of the following to the Responsible Official:

(i)Any loss or compromise of keys, passwords, combination, etc.,

(ii)Any suspicious persons or activities,

(iii)Any loss or theft of select agents or toxins,

(iv)Any release of a select agent or toxin, and

(v)Any sign that inventory or use records for select agents or toxins have been altered or otherwise compromised, and

(vi)Any loss of computer, hard drive or other data storage device containing information that could be used to gain access to select agents or toxins.

(8)Separate areas where select agents and toxins are stored or used from the public areas of the building.

(e)Entities must conduct complete inventory audits of all affected select agents and toxins in long-term storage when any of the following occur:

(1)Upon the physical relocation of a collection or inventory of select agents or toxins for those select agents or toxins in the collection or inventory;

(2)Upon the departure or arrival of a principal investigator for those select agents and toxins under the control of that principal investigator; or

(3)In the event of a theft or loss of a select agent or toxin, all select agents and toxins under the control of that principal investigator.

(f)In addition to the requirements contained in paragraphs (c) and (d) of this section, the security plan for an individual or entity possessing a Tier 1 select agent or toxin must also:

(1)Describe procedures for conducting a pre-access suitability assessment of persons who will have access to a Tier 1 select agent or toxin;

(2)Describe procedures for how an entity's Responsible Official will coordinate their efforts with the entity's safety and security professionals to ensure security of Tier 1 select agents and toxins and share, as appropriate, relevant information; and

(3)Describe procedures for the ongoing assessment of the suitability of personnel with access to a Tier 1 select agent or toxin. The procedures must include:

(i)Self- and peer-reporting of incidents or conditions that could affect an individual's ability to safely have access to or work with select agents and toxins, or to safeguard select agents and toxins from theft, loss, or release;

(ii)The training of employees with access to Tier 1 select agents and toxins on entity policies and procedures for reporting, evaluation, and corrective actions concerning the assessment of personnel suitability; and

(iii)The ongoing suitability monitoring of individuals with access to Tier 1 select agents and toxins.

(4)Entities with Tier 1 select agents and toxins must prescribe the following security enhancements:

(i)Procedures that will limit access to a Tier 1 select agent or toxin to only those individuals who are approved by the HHS Secretary or Administrator, following a security risk assessment by the Attorney General, have had an entity-conducted pre-access suitability assessment, and are subject to the entity's procedures for ongoing suitability assessment;

(ii)Procedures that limit access to laboratory and storage facilities outside of normal business hours to only those specifically approved by the Responsible Official or designee;

(iii)Procedures for allowing visitors, their property, and vehicles at the entry and exit points to the registered space, or at other designated points of entry to the building, facility, or compound that are based on the entity's site-specific risk assessment;

(iv)A minimum of three security barriers where each security barrier adds to the delay in reaching secured areas where select agents and toxins are used or stored. One of the security barriers must be monitored in such a way as to detect intentional and unintentional circumventing of established access control measures under all conditions (day/night, severe weather, etc.) The final barrier must limit access to the select agent or toxin to personnel approved by the HHS Secretary or Administrator, following a security risk assessment by the Attorney General.

(v)All registered space or areas that reasonably afford access to the registered space must be protected by an intrusion detection system (IDS) unless physically occupied;

(vi)Personnel monitoring the IDS must be capable of evaluating and interpreting the alarm and alerting the designated security response force or law enforcement;

(vii)For powered access control systems, describe procedures to ensure that security is maintained in the event of the failure of access control systems due to power disruption affecting registered space;

(viii)The entity must:

(A)Determine that the response time for security forces or local police will not exceed 15 minutes where the response time is measured from the time of an intrusion alarm, or report of a security incident, to the arrival of the responders at the first security barrier or;

(B)Provide security barriers that are sufficient to delay unauthorized access until the response force arrives in order to safeguard the select agents and toxins from theft, intentional release, or unauthorized access. The response time is measured from the time of an intrusion alarm, or report of a security incident, to the arrival of the responders at the first security barrier.

(5)Entities that possess Variola major virus and Variola minor virus must have the following additional security requirements:

(i)Require personnel with independent unescorted access to Variola major or Variola minor virus to have a Top Secret security clearance;

(ii)Require Variola major or Variola minor virus storage locations to be under the surveillance of closed circuit television that is monitored;

(iii)After hours access procedures for Variola major or Variola minor virus must require notification of the entity's security staff prior to entry into the Variola laboratory and upon exit;

(iv)Require that observation zones be maintained in outdoor areas adjacent to the physical barrier at the perimeter of the entity and be large enough to permit observation of the activities of people at that barrier in the event of its penetration;

(v)Provide for a minimum of four barriers for the protection of the Variola major or Variola minor virus, one of which must be a perimeter fence;

(vi)Require a numbered picture badge identification subsystem to be used for all individuals who are authorized to access Variola major or Variola minor without escort;

(vii)Require the use, at all times, of properly trained and equipped security force personnel able to interdict threats identified in the site specific risk assessment;

(viii)Identify security force personnel designated to strengthen onsite response capabilities, and that will be onsite and available at all times to carry out their assigned response duties;

(ix)Provide for security patrols to periodically check external areas of the registered areas to include physical barriers and building entrances;

(x)Require that all on-duty security force personnel shall be capable of maintaining continuous communication with support and response assets by way of security operations center;

(xi)Require that Variola major and Variola minor material in long term storage be stored in tamper-evident systems;

(xii)Require that all spaces containing working or permanent Variola major or Variola minor stocks be locked and protected by an intrusion alarm system that will alarm upon the unauthorized entry of a person anywhere into the area;

(xiii)Require that alarms required pursuant to this section annunciate in a continuously manned security operations center located within the facility; and

(xiv)Require that the security operations center shall be located within a building so that the interior is not visible from the perimeter of the protected area.

(g)In developing a security plan, an individual or entity should consider the document entitled, “Security Guidance for Select Agent or Toxin Facilities.” This document is available on the National Select Agent Registry at http://www.selectagents.gov/.

(h)The plan must be reviewed annually and revised as necessary. Drills or exercises must be conducted at least annually to test and evaluate the effectiveness of the plan. The plan must be reviewed and revised, as necessary, after any drill or exercise and after any incident. Drills or exercises must be documented to include how the drill or exercise tested and evaluated the plan, any problems that were identified and corrective action(s) taken, and the names of registered entity personnel participants.

73.12Biosafety.#

(a)An individual or entity required to register under this part must develop and implement a written biosafety plan that is commensurate with the risk of the select agent or toxin, given its intended use. The biosafety plan must contain sufficient information and documentation to describe the biosafety and containment procedures for the select agent or toxin, including any animals (including arthropods) or plants intentionally or accidentally exposed to or infected with a select agent. The current biosafety plan must be submitted for initial registration, renewal of registration, or when requested. The biosafety plan must include the following provisions:

(1)The hazardous characteristics of each agent or toxin listed on the entity's registration and the biosafety risk associated with laboratory procedures related to the select agent or toxin;

(2)Safeguards in place with associated work practices to protect entity personnel, the public, and the environment from exposure to the select agent or toxin including, but not limited to: Personal protective equipment and other safety equipment; containment equipment including, but not limited to, biological safety cabinets, animal caging systems, and centrifuge safety containers; and engineering controls and other facility safeguards;

(3)Written procedures for each validated method used for disinfection, decontamination or destruction, as appropriate, of all contaminated or presumptively contaminated materials including, but not limited to: Cultures and other materials related to the propagation of select agents or toxins, items related to the analysis of select agents and toxins, personal protective equipment, animal caging systems and bedding (if applicable), animal carcasses or extracted tissues and fluids (if applicable), laboratory surfaces and equipment, and effluent material; and

(4)Procedures for the handling of select agents and toxins in the same spaces with non-select agents and toxins to prevent unintentional contamination.

(b)The biosafety and containment procedures must be sufficient to contain the select agent or toxin (e.g., physical structure and features of the entity, and operational and procedural safeguards).

(c)In developing a biosafety plan, an individual or entity should consider:

(1)The CDC/NIH publication, “Biosafety in Microbiological and Biomedical Laboratories.” This document is available on the National Select Agent Registry Web site at http://www.selectagents.gov.

(2)The “NIH Guidelines for Research Involving Recombinant or Synthetic Nucleic Acid Molecules,” (NIH Guidelines). This document is available on the National Select Agent Registry Web site at http://www.selectagents.gov.

(d)The biosafety plan must include an occupational health program for individuals with access to Tier 1 select agents and toxins, and those individuals must be enrolled in the occupational health program.

(e)The plan must be reviewed annually and revised as necessary. Drills or exercises must be conducted at least annually to test and evaluate the effectiveness of the plan. The plan must be reviewed and revised, as necessary, after any drill or exercise and after any incident. Drills or exercises must be documented to include how the drill or exercise tested and evaluated the plan, any problems that were identified and corrective action(s) taken, and the names of registered entity personnel participants.

73.13Restricted experiments.#

(a)An individual or entity may not conduct, or possess products resulting from, the following experiments unless approved by and conducted in accordance with the conditions prescribed by the HHS Secretary:

(1)Experiments that involve the deliberate transfer of, or selection for, a drug resistance trait to select agents that are not known to acquire the trait naturally, if such acquisition could compromise the control of disease agents in humans, veterinary medicine, or agriculture.

(2)Experiments involving the deliberate formation of synthetic or recombinant DNA containing genes for the biosynthesis of select toxins lethal for vertebrates at an LD[50] <100 ng/kg body weight.

(3)Experiments that involve the creation of SARS-CoV/SARS-CoV-2 chimeric viruses resulting from any deliberate manipulation of SARS-CoV-2 to incorporate nucleic acids coding for SARS-CoV virulence factors or vice versa.

(b)The HHS Secretary may revoke approval to conduct any of the experiments in paragraph (a) of this section, or revoke or suspend a certificate of registration, if the individual or entity fails to comply with the requirements of this part.

(c)To apply for approval to conduct any of the experiments in paragraph (a) of this section, an individual or entity must submit a written request and supporting scientific information. A written decision granting or denying the request will be issued.

73.14Incident response.#

(a)An individual or entity required to register under this part must develop and implement a written incident response plan based upon a site specific risk assessment. 2 The incident response plan must be coordinated with any entity-wide plans, kept in the workplace, and available to employees for review. The current incident response plan must be submitted for initial registration, renewal of registration, or when requested. 2 Nothing in this section is meant to supersede or preempt incident response requirements imposed by other statutes or regulations.

(b)The incident response plan must fully describe the entity's response procedures for the theft, loss, or release of a select agent or toxin; inventory discrepancies; security breaches (including information systems); severe weather and other natural disasters; workplace violence; bomb threats and suspicious packages; and emergencies such as fire, gas leak, explosion, power outage, and other natural and man-made events.

(c)The response procedures must account for hazards associated with the select agent or toxin and appropriate actions to contain such select agent or toxin, including any animals (including arthropods) or plants intentionally or accidentally exposed to or infected with a select agent.

(d)The incident response plan must also contain the following information:

(1)The name and contact information (e.g., home and work) for the individual or entity (e.g., responsible official, alternate responsible official(s), biosafety officer, etc.),

(2)The name and contact information for the building owner and/or manager, where applicable,

(3)The name and contact information for tenant offices, where applicable,

(4)The name and contact information for the physical security official for the building, where applicable,

(5)Personnel roles and lines of authority and communication,

(6)Planning and coordination with local emergency responders,

(7)Procedures to be followed by employees performing rescue or medical duties,

(8)Emergency medical treatment and first aid,

(9)A list of personal protective and emergency equipment, and their locations,

(10)Site security and control,

(11)Procedures for emergency evacuation, including type of evacuation, exit route assignments, safe distances, and places of refuge, and

(12)Decontamination procedures.

(e)Entities with Tier 1 select agents and toxins must have the following additional incident response policies or procedures:

(1)The incident response plan must fully describe the entity's response procedures for failure of intrusion detection or alarm system; and

(2)The incident response plan must describe procedures for how the entity will notify the appropriate Federal, State, or local law enforcement agencies of suspicious activity that may be criminal in nature and related to the entity, its personnel, or its select agents or toxins.

(f)The plan must be reviewed annually and revised as necessary. Drills or exercises must be conducted at least annually to test and evaluate the effectiveness of the plan. The plan must be reviewed and revised, as necessary, after any drill or exercise and after any incident. Drills or exercises must be documented to include how the drill or exercise tested and evaluated the plan, any problems that were identified and corrective action(s) taken, and the names of registered entity personnel participants.

73.15Training.#

(a)An individual or entity required to register under this part must provide information and training on biocontainment, biosafety, security (including security awareness), and incident response to:

(1)Each individual with access approval from the HHS Secretary or Administrator. The training must address the particular needs of the individual, the work they will do, and the risks posed by the select agents or toxins. The training must be accomplished prior to the individual's entry into an area where a select agent is handled or stored, or within 12 months of the date the individual was approved by the HHS Secretary or the Administrator for access, whichever is earlier.

(2)Each individual not approved for access to select agents and toxins by the HHS Secretary or Administrator before that individual enters areas under escort where select agents or toxins are handled or stored (e.g., laboratories, growth chambers, animal rooms, greenhouses, storage areas, shipping/receiving areas, production facilities, etc.). Training for escorted personnel must be based on the risk associated with accessing areas where select agents and toxins are used and/or stored. The training must be accomplished prior to the individual's entry into where select agents or toxins are handled or stored (e.g., laboratories, growth chambers, animal rooms, greenhouses, storage areas, shipping/receiving areas, production facilities, etc.).

(b)Entities with Tier 1 select agents and toxins must conduct annual insider threat awareness briefings on how to identify and report suspicious behaviors.

(c)Refresher training must be provided annually for individuals with access approval from the HHS Secretary or Administrator or at such time as the registered individual or entity significantly amends its security, incident response, or biosafety plans.

(d)The Responsible Official must ensure a record of the training provided to each individual with access to select agents and toxins and each escorted individual (e.g., laboratory workers, visitors, etc.) is maintained. The record must include the name of the individual, the date of the training, a description of the training provided, and the means used to verify that the employee understood the training.

(e)The Responsible Official must ensure and document that individuals are provided the contact information of the HHS Office of Inspector General Hotline and the USDA Office of Inspector General Hotline so that they may anonymously report any safety or security concerns related to select agents and toxins.

73.16Transfers.#

(a)Except as provided in paragraphs (c) and (d) of this section, a select agent or toxin may only be transferred to individuals or entities registered to possess, use, or transfer that agent or toxin. A select agent or toxin may only be transferred under the conditions of this section and must be authorized by CDC or APHIS prior to the transfer. 4 4 This section does not cover transfers within an entity when the sender and the recipient are covered by the same certificate of registration.

(b)A transfer may be authorized if:

(1)The sender:

(i)Has at the time of transfer a certificate of registration that covers the particular select agent or toxin to be transferred and meets all requirements in this part,

(ii)Meets the exemption requirements for the particular select agent or toxin to be transferred, or

(iii)Is transferring the select agent or toxin from outside the United States and meets all import requirements.

(2)At the time of transfer, the recipient has a certificate of registration that includes the particular select agent or toxin to be transferred and meets all of the requirements of this part.

(c)A select agent or toxin that is contained in a specimen for proficiency testing may be transferred without prior authorization from CDC or APHIS provided that, at least seven calendar days prior to the transfer, the sender reports to CDC or APHIS the select agent or toxin to be transferred and the name and address of the recipient.

(d)On a case-by-case basis, the HHS Secretary may authorize a transfer of a select agent or toxin, not otherwise eligible for transfer under this part under conditions prescribed by the HHS Secretary.

(e)To obtain authorization for transfer, APHIS/CDC Form 2 must be submitted.

(f)After authorization is provided by APHIS or CDC, the packaging of the select agent(s) and toxin(s) is performed by an individual approved by the HHS Secretary or Administrator to have access to select agents and toxins and is in compliance with all applicable laws concerning packaging.

(g)The sender must comply with all applicable laws governing packaging and shipping.

(h)Transportation in commerce starts when the select agent(s) or toxin(s) are packaged for shipment and ready for receipt by a courier transporting select agent(s) or toxin(s) and ends when the package is received by the intended recipient who is an individual approved by the HHS Secretary or Administrator to have access to select agents and toxins, following a security risk assessment by the Attorney General.

(i)The recipient must submit a completed APHIS/CDC Form 2 within two business days of receipt of a select agent or toxin.

(j)The recipient must immediately notify CDC or APHIS if the select agent or toxin has not been received within 48 hours after the expected delivery time, or if the package containing select agents or toxins has been damaged to the extent that a release of the select agent or toxin may have occurred.

(k)An authorization for a transfer shall be valid only for 30 calendar days after issuance, except that such an authorization becomes immediately null and void if any facts supporting the authorization change (e.g., change in the certificate of registration for the sender or recipient, change in the application for transfer).

(l)A registered individual or entity transferring an amount of a HHS toxin otherwise excluded under the provisions of § 73.3(d) must:

(1)Transfer the amounts only after the transferor uses due diligence and documents that the recipient has a legitimate need (e.g., prophylactic, protective, bona fide research, or other peaceful purpose) to handle or use such toxins. Information to be documented includes, but is not limited, to the recipient information, toxin and amount transferred, and declaration that the recipient has legitimate purpose to store and use such toxins.

(2)Report to CDC if they detect a known or suspected violation of Federal law or become aware of suspicious activity related to a toxin listed in § 73.3(d) of this part.

73.17Records.#

(a)An individual or entity required to register under this part must maintain complete records relating to the activities covered by this part. Such records must include:

(1)An accurate, current inventory for each select agent (including viral genetic elements, recombinant and/or synthetic nucleic acids, and organisms containing recombinant and/or synthetic nucleic acids) held in long-term storage (placement in a system designed to ensure viability for future use, such as in a freezer or lyophilized materials), including:

(i)The name and characteristics (e.g., strain designation, GenBank Accession number, etc.),

(ii)The quantity acquired from another individual or entity (e.g., containers, vials, tubes, etc.), date of acquisition, and the source,

(iii)Where stored (e.g., building, room, and freezer or other storage container),

(iv)When moved from storage and by whom and when returned to storage and by whom,

(v)The select agent used, purpose of use, and, when applicable, final disposition,

(vi)Records created under § 73.16 and 9 CFR 121.16 (Transfers),

(vii)For intra-entity transfers (sender and the recipient are covered by the same certificate of registration), the select agent, the quantity transferred, the date of transfer, the sender, and the recipient, and

(viii)Records created under § 73.19 and 9 CFR part 121.19 (Notification of theft, loss, or release),

(2)An accurate, current accounting of any animals or plants intentionally or accidentally exposed to or infected with a select agent (including number and species, location, and appropriate disposition);

(3)Accurate, current inventory for each toxin held, including:

(i)The name and characteristics,

(ii)The quantity acquired from another individual or entity (e.g., containers, vials, tubes, etc.), date of acquisition, and the source,

(iii)The initial and current quantity amount (e.g., milligrams, milliliters, grams, etc.),

(iv)The toxin used and purpose of use, quantity, date(s) of the use and by whom,

(v)Where stored (e.g., building, room, and freezer or other storage container),

(vi)When moved from storage and by whom and when returned to storage and by whom including quantity amount,

(vii)Records created under § 73.16 and 9 CFR part 121.16 (Transfers),

(viii)For intra-entity transfers (sender and the recipient are covered by the same certificate of registration), the toxin, the quantity transferred, the date of transfer, the sender, and the recipient,

(ix)Records created under § 73.19 and 9 CFR part 121.19 (Notification of theft, loss, or release), and

(x)If destroyed, the quantity of toxin destroyed, the date of such action, and by whom,

(4)A current list of all individuals that have been granted access approval from the HHS Secretary or Administrator,

(5)Information about all entries into areas containing select agents or toxins, including the name of the individual, name of the escort (if applicable), and date and time of entry,

(6)Accurate, current records created under § 73.9 and 9 CFR part 121.9 (Responsible Official), § 73.11 and 9 CFR part 121.11 (Security), § 73.12 and 9 CFR part 121.12 (Biosafety), § 73.14 and 9 CFR part 121. 14 (Incident response), and § 73.15 and 9 CFR part 121.15 (Training), and

(7)A written explanation of any discrepancies.

(8)For select agents or material containing select agents or regulated nucleic acids that can produce infectious forms of any select agent virus that have been subjected to a validated inactivation procedure or a procedure for removal of viable select agent:

(i)A written description of the validated inactivation procedure or viable select agent removal method used, including validation data;

(ii)A written description of the viability testing protocol used;

(iii)A written description of the investigation conducted by the entity Responsible Official involving an inactivation or viable select agent removal failure and the corrective actions taken;

(iv)The name of each individual performing the validated inactivation or viable select agent removal method;

(v)The date(s) the validated inactivation or viable select agent removal method was completed;

(vi)The location where the validated inactivation or viable select agent removal method was performed; and

(vii)A certificate, signed by the Principal Investigator, that includes the date of inactivation or viable select agent removal, the validated inactivation or viable select agent removal method used, and the name of the Principal Investigator. A copy of the certificate must accompany any transfer of inactivated or select agent removed material.

(b)The individual or entity must implement a system to ensure that all records and data bases created under this part are accurate and legible, have controlled access, and authenticity may be verified.

(c)The individual or entity must promptly produce upon request any information that is related to the requirements of this part but is not otherwise contained in a record required to be kept by this section. The location of such information may include, but is not limited to, biocontainment certifications, laboratory notebooks, institutional biosafety and/or animal use committee minutes and approved protocols, and records associated with occupational health and suitability programs. All records created under this part must be maintained for 3 years.

73.18Inspections.#

(a)Without prior notification, the HHS Secretary, shall be allowed to inspect any site at which activities regulated by this part are conducted and shall be allowed to inspect and copy any records relating to the activities covered by this part.

(b)Prior to issuing a certificate of registration to an individual or entity, the HHS Secretary may inspect and evaluate the premises and records to ensure compliance with this part.

73.19Notification of theft, loss, or release.#

(a)Upon discovery of the theft or loss of a select agent or toxin, an individual or entity must immediately notify CDC or APHIS and appropriate Federal, State, or local law enforcement agencies. Thefts or losses must be reported even if the select agent or toxin is subsequently recovered or the responsible parties are identified.

(1)The theft or loss of a select agent or toxin must be reported immediately by telephone, facsimile, or e-mail. The following information must be provided:

(i)The name of the select agent or toxin and any identifying information (e.g., strain or other characterization information),

(ii)An estimate of the quantity lost or stolen,

(iii)An estimate of the time during which the theft or loss occurred,

(iv)The location (building, room) from which the theft or loss occurred, and

(v)The list of Federal, State, or local law enforcement agencies to which the individual or entity reported, or intends to report the theft or loss.

(2)A completed APHIS/CDC Form 3 must submitted within seven calendar days.

(b)Upon discovery of a release of an agent or toxin causing occupational exposure or release of a select agent or toxin outside of the primary barriers of the biocontainment area, an individual or entity must immediately notify CDC or APHIS.

(1)The release of a select agent or toxin must be reported by telephone, facsimile, or e-mail. The following information must be provided:

(i)The name of the select agent or toxin and any identifying information (e.g., strain or other characterization information),

(ii)An estimate of the quantity released,

(iii)The time and duration of the release,

(iv)The environment into which the release occurred (e.g., in building or outside of building, waste system),

(v)The location (building, room) from which the release occurred,

(vi)The number of individuals potentially exposed at the entity,

(vii)Actions taken to respond to the release, and

(viii)Hazards posed by the release.

(2)A completed APHIS/CDC Form 3 must be submitted within seven calendar days.

73.2Purpose and scope.#

This part implements the provisions of the Public Health Security and Bioterrorism Preparedness and Response Act of 2002 setting forth the requirements for possession, use, and transfer of select agents and toxins. The biological agents and toxins listed in this part have the potential to pose a severe threat to public health and safety, to animal health, or to animal products. Overlap select agents and toxins are subject to regulation by both CDC and APHIS.

73.20Administrative review.#

(a)An individual or entity may appeal a denial, revocation, or suspension of registration under this part. The appeal must be in writing, state the factual basis for the appeal, and be submitted to the HHS Secretary within 30 calendar days of the decision.

(b)An individual may appeal a denial, limitation, or revocation of access approval under this part. The appeal must be in writing, state the factual basis for the appeal, and be submitted to the HHS Secretary within 180 calendar days of the decision.

(c)The HHS Secretary's decision constitutes final agency action.

73.21Civil money penalties.#

(a)The Inspector General of the Department of Health and Human Services is delegated authority to conduct investigations and to impose civil money penalties against any individual or entity in accordance with regulations in 42 CFR part 1003 for violations of the regulations in this part, as authorized by the Public Health Security and Bioterrorism Preparedness and Response Act of 2002 (Pub. L. 107-188). The delegation of authority includes all powers contained in section 6 of the Inspector General Act of 1978 (5 U.S.C. App.).

(b)The administrative law judges in, assigned to, or detailed to the Departmental Appeals Board have been delegated authority to conduct hearings and to render decisions in accordance with 42 CFR part 1005 with respect to the imposition of civil money penalties, as authorized by the Public Health Security and Bioterrorism Preparedness and Response Act of 2002 (Pub. L. 107-188). This delegation includes, but is not limited to, the authority to administer oaths and affirmations, to subpoena witnesses and documents, to examine witnesses, to exclude or receive and give appropriate weight to materials and testimony offered as evidence, to make findings of fact and conclusions of law, and to determine the civil money penalties to be imposed.

(c)The Departmental Appeals Board of the Department of Health and Human Services is delegated authority to make final determinations with respect to the imposition of civil money penalties for violations of the regulations of this part.

73.3HHS select agents and toxins.#

(a)Except for exclusions under paragraphs (d) and (e) of this section, the HHS Secretary has determined that the biological agents and toxins listed in this section have the potential to pose a severe threat to public health and safety. The select agents and toxins marked with an asterisk (*) are designated as Tier 1 select agents and toxins and are subject to additional requirements as listed in this part.

(b)HHS select agents and toxins 1 are: (1) Abrin. (2) Bacillus cereus Biovar anthracis.* (3) Botulinum neurotoxins.* (4) Botulinum neurotoxin producing species of Clostridium.* (5) Conotoxins (Short, paralytic alpha conotoxins containing the following amino acid sequence X1CCX2PACGX3X4X5X6CX7). 2 (6) Coxiella burnetii. (7) Crimean-Congo hemorrhagic fever virus. (8) Diacetoxyscirpenol. (9) Eastern equine encephalitis virus. (10) Ebolavirus * (11) Francisella tularensis.* (12) Lassa fever virus. (13) Lujo virus. (14) Marburg virus.* (15) Monkeypox virus. (16) Reconstructed replication competent forms of the 1918 pandemic influenza A virus containing any portion of the coding regions of all eight gene segments (Reconstructed 1918 influenza A virus). (17) Ricin. (18) Rickettsia prowazekii. (19) Severe acute respiratory syndrome coronavirus (SARS-CoV). (20) SARS-CoV/SARS-CoV-2 chimeric viruses resulting from any deliberate manipulation of SARS-CoV-2 to incorporate nucleic acids coding for SARS-CoV virulence factors. (21) Saxitoxin. (22) South American hemorrhagic fever virus: Chapare. (23) South American hemorrhagic fever virus: Guanarito. (24) South American hemorrhagic fever virus: Junin. (25) South American hemorrhagic fever virus: Machupo. (26) South American hemorrhagic fever virus: Sabia. (27) Staphylococcal enterotoxins (subtypes A,B,C,D,E). (28) T-2 toxin. (29) Tetrodotoxin. (30) Tick-borne encephalitis virus: Far Eastern subtype. (31) Tick-borne encephalitis virus: Siberian subtype. (32) Kyasanur Forest disease virus. (33) Omsk haemorrhagic fever virus. (34) Variola major virus (Smallpox virus).* (35) Variola minor virus (Alastrim).* (36) Yersinia pestis.* 1 Please refer to https://www.selectagents.gov for current information on historical or proposed nomenclature for the HHS select agents on the list. 2 C = Cysteine residues are all present as disulfides, with the 1st and 3rd Cysteine, and the 2nd and 4th Cysteine forming specific disulfide bridges; The consensus sequence includes known toxins a-MI and a-GI (shown above) as well as a-GIA, Ac1.1a, a-CnIA, a-CnIB; X1 = any amino acid(s) or Des-X; X2 = Asparagine or Histidine; P = Proline; A = Alanine; G = Glycine; X3 = Arginine or Lysine; X4 = Asparagine, Histidine, Lysine, Arginine, Tyrosine, Phenylalanine or Tryptophan; X5 = Tyrosine, Phenylalanine, or Tryptophan; X6 = Serine, Threonine, Glutamate, Aspartate, Glutamine, or Asparagine; X7 = Any amino acid(s) or Des X and; “Des X” = “an amino acid does not have to be present at this position.” For example, if a peptide sequence were XCCHPA then the related peptide CCHPA would be designated as Des-X.

(c)Genetic Elements, Recombinant and/or Synthetic Nucleic Acids, and Recombinant and/or Synthetic Organisms:

(1)Nucleic acids that can produce infectious forms of any of the select agent viruses listed in paragraph (b) of this section.

(2)Recombinant and/or Synthetic nucleic acids that encode for the toxic form(s) of any of the toxins listed in paragraph (b) of this section if the nucleic acids:

(i)Can be expressed in vivo or in vitro, or

(ii)Are in a vector or recombinant host genome and can be expressed in vivo or in vitro.

(3)HHS select agents and toxins listed in paragraph (b) of this section that have been genetically modified.

(d)HHS select agents or toxins that meet any of the following criteria are excluded from the requirements of this part:

(1)Any HHS select agent or toxin that is in its naturally occurring environment provided the select agent or toxin has not been intentionally introduced, cultivated, collected, or otherwise extracted from its natural source.

(2)Non-viable HHS select agents or nontoxic HHS toxins.

(3)A select agent or toxin that has been subjected to decontamination or a destruction procedure when intended for waste disposal.

(4)A select agent or regulated nucleic acids that can produce infectious forms of any select agent virus that has been subjected to a validated inactivation procedure that is confirmed through a viability testing protocol. Surrogate strains that are known to possess equivalent properties with respect to inactivation can be used to validate an inactivation procedure; however, if there are known strain-to-strain variations in the resistance of a select agent to an inactivation procedure, then an inactivation procedure validated on a lesser resistant strain must also be validated on the more resistant strains.

(5)Material containing a select agent that is subjected to a procedure that removes all viable select agent cells, spores, or virus particles if the material is subjected to a viability testing protocol to ensure that the removal method has rendered the material free of all viable select agent.

(6)A select agent or regulated nucleic acids that can produce infectious forms of any select agent virus not subjected to a validated inactivation procedure or material containing a select agent not subjected to a procedure that removes all viable select agent cells, spores, or virus particles if the material is determined by the HHS Secretary to be effectively inactivated or effectively removed. To apply for a determination an individual or entity must submit a written request and supporting scientific information to CDC. A written decision granting or denying the request will be issued.

(7)Except as required in § 73.16(l), the aggregate amount of the toxin under the control of a principal investigator, treating physician or veterinarian, or commercial manufacturer or distributor does not, at any time, exceed the following amounts: 1000 mg of Abrin; 1 mg of Botulinum neurotoxins; 200 mg of Conotoxins (Short, paralytic alpha conotoxins containing the following amino acid sequence X1CCX2PACGX3X4X5X6CX7); 10,000 mg of Diacetoxyscirpenol; 1000 mg of Ricin; 500 mg of Saxitoxin; 100 mg of Staphylococcal enterotoxins (subtypes A-E); 10,000 mg of T-2 toxin; or 500 mg of Tetrodotoxin. Provided that,

(i)The toxin is transferred only after the transferor uses due diligence and documents the identification of the recipient and the legitimate need (e.g., prophylactic, protective, bona fide research, or other peaceful purpose) claimed by the recipient to use such toxin. Information to be documented includes, but is not limited to, the recipient identity information, including the recipient's name, institution name, address, telephone number and email address; name of the toxin and the total amount transferred; and the legitimate need claimed by the recipient. Notwithstanding the provisions of paragraph (d) of this section, the HHS Secretary retains the authority to, without prior notification, inspect and copy or request the submission of the due diligence documentation to the CDC.

(ii)Reports to CDC if they detect a known or suspected violation of Federal law or become aware of suspicious activity related to a toxin listed in this part.

(8)An animal inoculated with or exposed to an HHS select toxin.

(9)An HHS select toxin identified in an original food sample or clinical sample.

(10)For those laboratories that are not exempt under § 73.5(a) and § 73.6(a), Botulinum neurotoxin that is produced as a byproduct in the study of Botulinum neurotoxin producing species of Clostridium so long as the toxin has not been intentionally cultivated, collected, purified, or otherwise extracted, and the material containing the toxin is rendered non-toxic and disposed of within 30 days of the initiation of the culture.

(11)Waste generated during the delivery of patient care by health care professionals from a patient diagnosed with an illness or condition associated with a select agent, where that waste is decontaminated or transferred for destruction by complying with state and Federal regulations within seven calendar days of the conclusion of patient care.

(12)Madariaga virus and any Clade II Monkeypox provided that the individual or entity can identify that the agent is within the exclusion category.

(e)An attenuated strain of a select agent or a select toxin modified to be less potent or toxic may be excluded from the requirements of this part based upon a determination by the HHS Secretary that the attenuated strain or modified toxin does not pose a severe threat to public health and safety.

(1)To apply for exclusion, an individual or entity must submit a written request and supporting scientific information. A written decision granting or denying the request will be issued. An exclusion will be effective upon notification to the applicant. Exclusions will be listed on the National Select Agent Registry Web site at http://www.selectagents.gov/.

(2)If an excluded attenuated strain or modified toxin is subjected to any manipulation that restores or enhances its virulence or toxic activity, the resulting select agent or toxin will be subject to the requirements of this part.

(3)An individual or entity may make a written request to the HHS Secretary for reconsideration of a decision denying an application for the exclusion of an attenuated strain of a select agent or a select toxin modified to be less potent or toxic. The written request for reconsideration must state the facts and reasoning upon which the individual or entity relies to show the decision was incorrect. The HHS Secretary will grant or deny the request for reconsideration as promptly as circumstances allow and will state, in writing, the reasons for the decision.

(f)Any HHS select agent or toxin seized by a Federal law enforcement agency will be excluded from the requirements of this part during the period between seizure of the select agent or toxin and the transfer or destruction of such agent or toxin provided that:

(1)As soon as practicable, the Federal law enforcement agency transfers the seized select agent or toxin to an entity eligible to receive such agent or toxin or destroys the agent or toxin by a recognized sterilization or inactivation process,

(2)The Federal law enforcement agency safeguards and secures the seized select agent or toxin against theft, loss, or release, and reports any theft, loss, or release of such agent or toxin, and

(3)The Federal law enforcement agency reports the seizure of the select agent or toxin to CDC or APHIS.

(i)The seizure of Bacillus cereus Biovar anthracis, Botulinum neurotoxins, Botulinum neurotoxin producing species of Clostridium, Ebola viruses, Francisella tularensis, Marburg virus, Variola major virus (Smallpox virus), Variola minor (Alastrim), or Yersinia pestis must be reported within 24 hours by telephone, facsimile, or e-mail. This report must be followed by submission of APHIS/CDC Form 4 within seven calendar days after seizure of the select agent or toxin.

(ii)For all other HHS select agents or toxins, APHIS/CDC Form 4 must be submitted within seven calendar days after seizure of the agent or toxin.

(iii)A copy of APHIS/CDC Form 4 must be maintained for three years.

(4)The Federal law enforcement agency reports the final disposition of the select agent or toxin by submission of APHIS/CDC Form 4. A copy of the completed form must be maintained for three years.

73.4Overlap select agents and toxins.#

(a)Except for exclusions under paragraphs (d) and (e) of this section, the HHS Secretary has determined that the biological agents and toxins listed in this section have the potential to pose a severe threat to public health and safety, to animal health, or to animal products. The select agents and toxins marked with an asterisk (*) are designated as Tier 1 select agents and toxins and are subject to additional requirements as listed in this part.

(b)Overlap select agents and toxins 1 are: (1) Bacillus anthracis.* (2) Bacillus anthracis Pasteur strain. (3) Burkholderia mallei.* (4) Burkholderia pseudomallei.* (5) Hendra virus. (6) Nipah virus.* (7) Rift Valley fever virus. (8) Venezuelan equine encephalitis virus. 1 Please refer to https://www.selectagents.gov for current information on historical or proposed nomenclature for the Overlap select agents on the list.

(c)Genetic Elements, Recombinant and/or Synthetic Nucleic Acids, and Recombinant and/or Synthetic Organisms:

(1)Nucleic acids that can produce infectious forms of any of the overlap select agent viruses listed in paragraph (b) of this section.

(2)Recombinant and/or synthetic nucleic acids that encode for the toxic form(s) of any overlap toxins listed in paragraph (b) of this section if the nucleic acids:

(i)Can be expressed in vivo or in vitro, or

(ii)Are in a vector or recombinant host genome and can be expressed in vivo or in vitro.

(3)Overlap select agents and toxins listed in paragraph (b) of this section that have been genetically modified.

(d)Overlap select agents or toxins that meet any of the following criteria are excluded from the requirements of this part:

(1)Any overlap select agent or toxin that is in its naturally occurring environment provided that the select agent or toxin has not been intentionally introduced, cultivated, collected, or otherwise extracted from its natural source.

(2)Non-viable overlap select agents or nontoxic overlap toxins.

(3)A select agent or toxin that has been subjected to decontamination or a destruction procedure when intended for waste disposal.

(6)A select agent or regulated nucleic acids that can produce infectious forms of any select agent virus not subjected to a validated inactivation procedure or material containing a select agent not subjected to a procedure that removes all viable select agent cells, spores, or virus particles if the material is determined by the HHS Secretary or Administrator to be effectively inactivated or effectively removed. To apply for a determination an individual or entity must submit a written request and supporting scientific information to CDC or APHIS. A written decision granting or denying the request will be issued.

(7)An overlap select toxin identified in an original food sample or clinical sample.

(8)Waste generated during the delivery of patient care by health care professionals from a patient diagnosed with an illness or condition associated with a select agent, where that waste is decontaminated or transferred for destruction by complying with state and Federal regulations within seven calendar days of the conclusion of patient care.

(9)Any subtypes of Venezuelan equine encephalitis virus except for Subtypes IAB or IC provided that the individual or entity can identify that the agent is within the exclusion category.

(e)An attenuated strain of a select agent, or a select toxin modified to be less potent or toxic, may be excluded from the requirements of this part based upon a determination by the HHS Secretary that the attenuated strain or modified toxin does not pose a severe threat to public health and safety.

(3)An individual or entity may make a written request to the HHS Secretary or Administrator for reconsideration of a decision denying an application for the exclusion of an attenuated strain of a select agent or a select toxin modified to be less potent or toxic. The written request for reconsideration must state the facts and reasoning upon which the individual or entity relies to show the decision was incorrect. The HHS Secretary or Administrator will grant or deny the request for reconsideration as promptly as circumstances allow and will state, in writing, the reasons for the decision.

(f)Any overlap select agent or toxin seized by a Federal law enforcement agency will be excluded from the requirements of this part during the period between seizure of the select agent or toxin and the transfer or destruction of such agent or toxin provided that:

(2)The Federal law enforcement agency safeguards and secures the seized select agent or toxin against theft, loss, or release, and reports any theft, loss, or release of such agent or toxin, and

(3)The Federal law enforcement agency reports the seizure of the overlap select agent or toxin to CDC or APHIS.

(i)The seizure of Bacillus anthracis, Burkholderia mallei and Burkholderia pseudomallei must be reported within 24 hours by telephone, facsimile, or e-mail. This report must be followed by submission of APHIS/CDC Form 4 within seven calendar days after seizure of the overlap select agent or toxin.

(ii)For all other overlap select agents or toxins, APHIS/CDC Form 4 must be submitted within seven calendar days after seizure of the select agent or toxin.

(iii)A copy of APHIS/CDC Form 4 must be maintained for three years.

(4)The Federal law enforcement agency reports the final disposition of the overlap select agent or toxin by the submission of APHIS/CDC Form 4. A copy of the completed form must be maintained for three years.

73.5Exemptions for HHS select agents and toxins.#

(a)Clinical or diagnostic laboratories and other entities that possess, use, or transfer a HHS select agent or toxin that is contained in a specimen presented for diagnosis or verification will be exempt from the requirements of this part for such agent or toxin contained in the specimen, provided that:

(1)Unless directed otherwise by the HHS Secretary, within seven calendar days after identification of the select agent or toxin (except for Botulinum neurotoxin and/or Staphylococcal enterotoxin (Subtypes A-E)), or within 30 calendar days after identification of Botulinum neurotoxin and/or Staphylococcal enterotoxin (Subtypes A-E), the select agent or toxin is transferred in accordance with § 73.16 or destroyed on-site by a recognized sterilization or inactivation process,

(2)The select agent or toxin is secured against theft, loss, or release during the period between identification of the select agent or toxin and transfer or destruction of such agent or toxin, and any theft, loss, or release of such agent or toxin is reported, and

(3)Unless otherwise directed by the HHS Secretary, the clinical or diagnostic specimens collected from a patient infected with a select agent are transferred in accordance with § 73.16 or destroyed on-site by a recognized sterilization or inactivation process within seven calendar days after delivery of patient care by health care professionals has concluded, and

(4)The identification of the agent or toxin is reported to CDC or APHIS, the specimen provider, and to other appropriate authorities when required by Federal, State, or local law by telephone, facsimile, or email. This report must be followed by submission of APHIS/CDC Form 4 to APHIS or CDC within seven calendar days after identification.

(i)The identification of any of the following HHS select agents or toxins must be immediately reported by telephone, facsimile, or e-mail: Bacillus cereus Biovar anthracis,, Botulinum neurotoxins, Botulinum neurotoxin producing species of Clostridium, Ebola viruses, Francisella tularensis, Marburg virus, Variola major virus (Smallpox virus), Variola minor (Alastrim), or Yersinia pestis. This report must be followed by submission of APHIS/CDC Form 4 within seven calendar days after identification.

(ii)For all other HHS select agents or toxins, APHIS/CDC Form 4 must be submitted within seven calendar days after identification.

(iii)Less stringent reporting may be required based on extraordinary circumstances, such as a widespread outbreak.

(iv)A copy of APHIS/CDC Form 4 must be maintained for three years.

(b)Clinical or diagnostic laboratories and other entities that possess, use, or transfer a HHS select agent or toxin that is contained in a specimen presented for proficiency testing will be exempt from the requirements of this part for such agent or toxin contained in the specimen, provided that:

(1)Unless directed otherwise by the HHS Secretary, within 90 calendar days of receipt, the select agent or toxin is transferred in accordance with § 73.16 or destroyed on-site by a recognized sterilization or inactivation process,

(2)The select agent or toxin is secured against theft, loss, or release during the period between identification of the select agent or toxin and transfer or destruction of such agent or toxin, and the theft, loss, or release of such agent or toxin is reported, and

(3)The identification of the select agent or toxin, and its derivative, is reported to CDC or APHIS and to other appropriate authorities when required by Federal, State, or local law. To report the identification of a select agent or toxin, APHIS/CDC Form 4 must be submitted within 90 calendar days of receipt of the select agent or toxin. A copy of the completed form must be maintained for three years.

(c)Unless the HHS Secretary issues an order making specific provisions of this part applicable to protect public health and safety, products that are, bear, or contain listed select agents or toxins that are cleared, approved, licensed, or registered under any of the following laws, are exempt from the provisions of this part insofar as their use meets the requirements of such laws:

(1)The Federal Food, Drug, and Cosmetic Act (21 U.S.C. 301 et seq.),

(2)Section 351 of the Public Health Service Act pertaining to biological products (42 U.S.C. 262),

(3)The Act commonly known as the Virus-Serum-Toxin Act (21 U.S.C. 151-159), or

(4)The Federal Insecticide, Fungicide, and Rodenticide Act (7 U.S.C. 136 et seq.).

(d)The HHS Secretary may exempt from the requirements of this part an investigational product that is, bears, or contains a select agent or toxin, when such product is being used in an investigation authorized under any Federal Act and additional regulation under this part is not necessary to protect public health and safety.

(1)To apply for an exemption, an individual or entity must submit a completed APHIS/CDC Form 5.

(2)The HHS Secretary shall make a determination regarding the application within 14 calendar days after receipt, provided the application meets all of the requirements of this section and the application establishes that the investigation has been authorized under the cited Act. A written decision granting or denying the request will be issued.

(3)The applicant must notify CDC or APHIS when an authorization for an investigation no longer exists. This exemption automatically terminates when such authorization is no longer in effect.

(e)The HHS Secretary may temporarily exempt an individual or entity from the requirements of this part based on a determination that the exemption is necessary to provide for the timely participation of the individual or entity in response to a domestic or foreign public health emergency. With respect to the emergency involved, the exemption may not exceed 30 calendar days, except that one extension of an additional 30 calendar days may be granted.

73.6Exemptions for overlap select agents and toxins.#

(a)Clinical or diagnostic laboratories and other entities that possess, use, or transfer an overlap select agent or toxin that is contained in a specimen presented for diagnosis or verification will be exempt from the requirements of this part for such agent or toxin contained in the specimen, provided that:

(1)Unless directed otherwise by the HHS Secretary or Administrator, within seven calendar days after identification, the select agent or toxin is transferred in accordance with § 73.16 or 9 CFR part 121.16 or destroyed on-site by a recognized sterilization or inactivation process,

(3)Unless otherwise directed by the HHS Secretary or Administrator, the clinical or diagnostic specimens collected from a patient infected with a select agent are transferred in accordance with § 73.16 or destroyed on-site by a recognized sterilization or inactivation process within seven calendar days after delivery of patient care by health care professionals has concluded, and

(i)The identification of any of the following overlap select agents or toxins must be immediately reported by telephone, facsimile, or e-mail: Bacillus anthracis, Burkholderia mallei and Burkholderia pseudomallei. This report must be followed by submission of APHIS/CDC Form 4 within seven calendar days after identification.

(ii)For all other overlap select agents or toxins, APHIS/CDC Form 4 must be submitted within seven calendar days after identification.

(iii)Less stringent reporting may be required based on extraordinary circumstances, such as a widespread outbreak.

(iv)A copy of APHIS/CDC Form 4 must be maintained for three years.

(b)Clinical or diagnostic laboratories and other entities that possess, use, or transfer an overlap select agent or toxin that is contained in a specimen presented for proficiency testing will be exempt from the requirements of this part for such agent or toxin contained in the specimen, provided that:

(1)Unless directed otherwise by the HHS Secretary or Administrator, within 90 calendar days of receipt, the select agent or toxin is transferred in accordance with § 73.16 or 9 CFR part 121.16 or destroyed on-site by a recognized sterilization or inactivation process,

(2)The select agent or toxin is secured against theft, loss, or release during the period between identification of the select agent or toxin and transfer or destruction of such agent or toxin, and the theft, loss, or release of such agent or toxin is reported, and

(3)The identification of the select agent or toxin, and its derivative, is reported to CDC or APHIS and to other appropriate authorities when required by Federal, State, or local law. To report the identification of an overlap select agent or toxin, APHIS/CDC Form 4 must be submitted within 90 calendar days of receipt of the select agent or toxin. A copy of the completed form must be maintained for three years.

(1)The Federal Food, Drug, and Cosmetic Act (21 U.S.C. 301 et seq.),

(2)Section 351 of the Public Health Service Act pertaining to biological products (42 U.S.C. 262),

(3)The Act commonly known as the Virus-Serum-Toxin Act (21 U.S.C. 151-159), or

(4)The Federal Insecticide, Fungicide, and Rodenticide Act (7 U.S.C. 136 et seq.).

(d)The HHS Secretary, after consultation with Administrator, may exempt from the requirements of this part an investigational product that is, bears, or contains an overlap select agent or toxin, may be exempted when such product is being used in an investigation authorized under any Federal Act and additional regulation under this part is not necessary to protect public health and safety.

(1)To apply for an exemption, an individual or entity must submit a completed APHIS/CDC Form 5.

(3)The applicant must notify CDC or APHIS when an authorization for an investigation no longer exists. This exemption automatically terminates when such authorization is no longer in effect.

(e)The HHS Secretary may exempt an individual or entity from the requirements of this part based on a determination that the exemption is necessary to provide for the timely participation of the individual or entity in response to a domestic or foreign public health emergency. The HHS Secretary may extend the exemption once for additional 30 days.

(f)Upon request of the Administrator, the HHS Secretary may exempt an individual or entity from the requirements, in whole or in part, of this part for 30 calendar days if the Administrator has granted the exemption for agricultural emergency. The HHS Secretary may extend the exemption once for an additional 30 calendar days.

73.7Registration and related security risk assessments.#

(a)Unless exempted under § 73.5, an individual or entity shall not possess, use, or transfer any HHS select agent or toxin without a certificate of registration issued by the HHS Secretary. Unless exempted under § 73.6 or 9 CFR part 121.6, an individual or entity shall not possess, use, or transfer overlap select agents or toxins, without a certificate of registration issued by the HHS Secretary and Administrator.

(b)As a condition of registration, each entity is required to be in compliance with the requirements of this part for select agents and toxins listed on the registration regardless of whether the entity is in actual possession of the select agent or toxin. With regard to toxins, the entity registered for possession, use or transfer of a toxin must be in compliance with the requirements of this part regardless of the amount of toxin currently in its possession.

(c)As a condition of registration, each entity must designate an individual to be its Responsible Official. While most registrants are likely to be entities, in the event that an individual applies for and is granted a certificate of registration, the individual will be considered the Responsible Official.

(d)(1) As a condition of registration, the following must be approved by the HHS Secretary or Administrator based on a security risk assessment by the Attorney General:

(e)To apply for a certificate of registration that covers only HHS select agents or toxins, an individual or entity must submit the information requested in the registration application package (APHIS/CDC Form 1) to CDC. To apply for a certificate of registration that does not cover only HHS select agents or toxins (i.e., covers at least one overlap select agent and/or toxin, or covers any combination of HHS select agents and/or toxins and USDA select agents and/or toxins), an individual or entity must submit the information requested in the registration application package (APHIS/CDC Form 1) to CDC or APHIS, but not both.

(f)Prior to the issuance of a certificate of registration, the Responsible Official must promptly provide notification of any changes to the application for registration by submitting the relevant page(s) of the registration application.

(g)The issuance of a certificate of registration may be contingent upon inspection or submission of additional information, such as the security plan, biosafety plan, incident response plan, or any other documents required to be prepared under this part.

(h)A certificate of registration will be valid for one physical location (a room, a building, or a group of buildings) where the Responsible Official will be able to perform the responsibilities required in this part, for specific select agents or toxins, and for specific activities.

(i)A certificate of registration may be amended to reflect changes in circumstances (e.g., replacement of the Responsible Official or other personnel changes, changes in ownership or control of the entity, changes in the activities involving any select agents or toxins, or the addition or removal of select agents or toxins).

(1)Prior to any change, the Responsible Official must apply for an amendment to a certificate of registration by submitting the relevant page(s) of the registration application.

(2)The Responsible Official will be notified in writing if an application to amend a certificate of registration has been approved. Approval of the amendment may be contingent upon an inspection or submission of additional information, such as the security plan, biosafety plan, incident response plan, or any other documents required to be prepared under this part.

(3)No change may be made without such approval.

(ii)The Responsible Official, and

(i)For a private institution of higher education, an individual will be deemed to own or control the entity if the individual is in a managerial or executive capacity with regard to the entity's select agents or toxins or with regard to the individuals with access to the select agents or toxins possessed, used, or transferred by the entity.

(ii)For entities other than institutions of higher education, an individual will be deemed to own or control the entity if the individual:

(A)Owns 50 percent or more of the entity, or is a holder or owner of 50 percent or more of its voting stock, or

(B)Is in a managerial or executive capacity with regard to the entity's select agents or toxins or with regard to the individuals with access to the select agents or toxins possessed, used, or transferred by the entity.

(4)An entity will be considered to be an institution of higher education if it is an institution of higher education as defined in section 101(a) of the Higher Education Act of 1965 (20 U.S.C. 1001(a)), or is an organization described in 501(c)(3) of the Internal Revenue Code of 1986, as amended (26 U.S.C. 501(c)(3)).

(5)To obtain a security risk assessment, an individual or entity must submit the information necessary to conduct a security risk assessment to the Attorney General.

(iii)Unless otherwise exempted under this section, any individual who owns or controls the entity.

(2)Federal, State, or local governmental agencies, including public accredited academic institutions, are exempt from the security risk assessments for the entity and the individual who owns or controls such entity.

(3)An individual will be deemed to own or control an entity under the following conditions: 1 1 These conditions may apply to more than one individual.

(j)An entity must immediately notify CDC or APHIS if it loses the services of its Responsible Official. In the event that an entity loses the services of its Responsible Official, an entity may continue to possess or use select agents or toxins only if it appoints as the Responsible Official another individual who has been approved by the HHS Secretary or Administrator following a security risk assessment by the Attorney General and who meets the requirements of this part.

(k)A certificate of registration will be terminated upon the written request of the entity if the entity no longer possesses or uses any select agents or toxins and no longer wishes to be registered.

(l)A certificate of registration will be valid for a maximum of three years.

73.8Denial, revocation, or suspension of registration.#

(a)An application may be denied or a certificate of registration revoked or suspended if:

(1)The individual or entity, the Responsible Official, or an individual who owns or controls the entity is within any of the categories described in 18 U.S.C. 175b,

(2)The individual or entity, the Responsible Official, or an individual who owns or controls the entity as reasonably suspected by any Federal law enforcement or intelligence agency of:

(i)Committing a crime specified in 18 U.S.C. 2332b(g)(5),

(ii)Knowing involvement with an organization that engages in domestic or international terrorism (as defined in 18 U.S.C. 2331) or with any other organization that engages in intentional crimes of violence, or

(iii)Being an agent of a foreign power (as defined in 50 U.S.C. 1801).

(3)The individual or entity does not meet the requirements of this part, or

(4)It is determined that such action is necessary to protect public health and safety.

(b)Upon revocation or suspension of a certificate of registration, the individual or entity must:

(1)Immediately stop all use of each select agent or toxin covered by the revocation or suspension order,

(2)Immediately safeguard and secure each select agent or toxin covered by the revocation or suspension order from theft, loss, or release, and

(3)Comply with all disposition instructions issued by the HHS Secretary for the select agent or toxin covered by the revocation or suspension.

(c)Denial of an application for registration and revocation of registration may be appealed under § 73.20. However, any denial of an application for registration or revocation of a certificate of registration will remain in effect until a final agency decision has been rendered.

73.9Responsible Official.#

(a)An individual or entity required to register under this part must designate an individual to be the Responsible Official. The Responsible Official must:

(1)Be approved by the HHS Secretary or Administrator following a security risk assessment by the Attorney General,

(2)Be familiar with the requirements of this part,

(3)Have authority and responsibility to act on behalf of the entity,

(4)Ensure compliance with the requirements of this part,

(5)Have a physical (and not merely a telephonic or audio/visual) presence at the registered entity to ensure that the entity is in compliance with the select agent regulations and be able to respond in a timely manner to onsite incidents involving select agents and toxins in accordance with the entity's incident response plan, and

(6)Ensure that annual inspections are conducted for each registered space where select agents or toxins are stored or used in order to determine compliance with the requirements of this part. The results of each inspection must be documented, and any deficiencies identified during an inspection must be corrected and the corrections documented.

(7)Ensure that individuals are provided the contact information for the HHS Office of Inspector General Hotline and the USDA Office of Inspector General Hotline so that they may anonymously report any biosafety or security concerns related to select agents and toxins.

(8)Investigate to determine the reason for any failure of a validated inactivation procedure or any failure to remove viable select agent from material. If the Responsible Official is unable to determine the cause of a deviation from a validated inactivation procedure or a viable select agent removal method; or receives a report of any inactivation failure after the movement of material to another location, the Responsible Official must report immediately by telephone or email the inactivation or viable agent removal method failure to CDC or APHIS.

(9)Review, and revise as necessary, each of the entity's validated inactivation procedures or viable select agent removal methods. The review must be conducted annually or after any change in Principal Investigator, change in the validated inactivation procedure or viable select agent removal method, or failure of the validated inactivation procedure or viable select agent removal method. The review must be documented and training must be conducted if there are any changes to the validated inactivation procedure, viable select agent removal method, or viability testing protocol.

(b)An entity may designate one or more individuals to serve as an alternate Responsible Official, who acts for the Responsible Official in his/her absence. These individuals must have the authority and control to ensure compliance with the regulations when acting as the Responsible Official.

(c)The Responsible Official must report the identification and final disposition of any select agent or toxin contained in a specimen presented for diagnosis or verification.

(1)The identification of any of the following select agents or toxins must be immediately reported by telephone, facsimile, or e-mail: Bacillus anthracis,, Bacillus cereus Biovar anthracis,” Botulinum neurotoxins, Botulinum neurotoxin producing species of Clostridium, Burkholderia mallei, Burkholderia pseudomallei Francisella tularensis, Ebola viruses, , Marburg virus, Variola major virus (Smallpox virus), Variola minor (Alastrim), or Yersinia pestis. The final disposition of the agent or toxin must be reported by submission of APHIS/CDC Form 4 within seven calendar days after identification. A copy of the completed form must be maintained for three years.

(2)To report the identification and final disposition of any other select agent or toxin, APHIS/CDC Form 4 must be submitted within seven calendar days after identification. A copy of the completed form must be maintained for three years.

(3)Less stringent reporting may be required based on extraordinary circumstances, such as a widespread outbreak.

(d)The Responsible Official must report the identification and final disposition of any select agent or toxin contained in a specimen presented for proficiency testing. To report the identification and final disposition of a select agent or toxin, APHIS/CDC Form 4 must be submitted within 90 calendar days of receipt of the agent or toxin. A copy of the completed form must be maintained for three years.

United States Government work; public domain under 17 U.S.C. § 105.