Secs. 211-213, Title II, Pub. L. 107-188, 116 Stat. 647 (7 U.S.C. 8401).
(a) The regulations in this part are effective on February 11, 2003. On and after that date, any person possessing, using, or transferring any agent or toxin listed in § 121.3 must be in compliance with the provisions of this part. However, so as not to disrupt research or educational projects involving listed agents or toxins that were underway as of the effective date of this part, any person possessing such agents or toxins as of the effective date (current possessors) will be afforded additional time to reach full compliance with this part. Any provision not specifically cited in paragraphs (a)(1) through (a)(6) of this section will be applicable as of February 11, 2003. In addition, any person who does not possess listed agents or toxins by the effective date of this part, but who wishes to initiate a research or educational project prior to November 12, 2003, must be in compliance with the provisions of this part that are applicable for current possessors at the time of application, as provided in paragraphs (a)(1) through (a)(5) of this section.
(1) During the period from February 11, 2003, to November 12, 2003, biological agents or toxins listed in § 121.3 may only be transferred to an individual or entity that is not registered under this part if:
(i) The individual or entity is registered by CDC for that specific overlap agent or toxin in accordance with 42 CFR part 72; or
(ii) The individual or entity has been issued a permit by the Administrator under part 122 of this subchapter to import or move interstate that specific agent or toxin. If an individual or entity has not been issued a permit under part 122 of this subchapter, the individual or entity may apply for a permit. To receive an agent or toxin, an individual or entity will also be required to submit APHIS Form 2041, in accordance with § 121.14(c). Because USDA permits do not cover intrastate movement, unless registered by CDC under 42 CFR part 72, an individual or entity may not receive a listed agent or toxin that is being moved intrastate until that individual or entity is registered in accordance with this part.
(2) By March 12, 2003, the responsible official must submit the registration application package as required in § 121.9. In addition, the responsible official must submit to the Attorney General the names and identifying information for the responsible official; alternate responsible official, where applicable; entity; and, where applicable, the individual who owns or controls the entity.
(3) By April 11, 2003, the responsible official must submit to the Attorney General the names and identifying information for all individuals whom the responsible official has identified as having a legitimate need to handle or use listed agents or toxins, and who have the appropriate training and skills to handle such agents or toxins, as required in § 121.11.
(4) By June 12, 2003, the responsible official must submit the security section of the Biosafety and Security Plan required in § 121.12 to APHIS or, for overlap agents or toxins, to APHIS or CDC.
(5) By September 12, 2003, the responsible official must implement the security section of the Biosafety and Security Plan, as required in § 121.12, and provide security training in accordance with 9 CFR 121.13.
(6) By November 12, 2003, the registration application process must be complete and the entity in full compliance with the regulations in this part, except as otherwise provided in paragraphs (b) and (c) of this section.
(b)
(i) The Attorney General has received all of the information, including fingerprint cards, required by the Attorney General to conduct a security risk assessment of the entity, including any
(ii) The entity otherwise meets all of the requirements of this part.
(2) Notwithstanding the provisions in paragraph (a) of this section, APHIS may issue a provisional registration certificate to individuals and entities that did not possess listed biological agents or toxins as of February 11, 2003, if, as of November 12, 2003:
(i) The Attorney General has received all of the information, including fingerprint cards, required by the Attorney General to conduct a security risk assessment of the entity, including any individual who owns or controls the entity;
(ii) The entity otherwise meets all of the requirements of this part; and
(iii) The Administrator finds that circumstances warrant such action in the interest of the health of plants or plant products or national security.
(3) A provisional registration certificate will be effective until APHIS either issues a certificate of registration or suspends or revokes the provisional registration.
(c) Notwithstanding the provisions in paragraph (a) of this section, APHIS may issue a provisional grant of access for individuals identified by an entity as having a legitimate need to handle or use agents or toxins listed in § 121.3 if, as of November 12, 2003, the Attorney General has received all of the information, including fingerprint cards, required by the Attorney General to conduct a security risk assessment of that individual. A provisional grant of access will be effective until APHIS grants or denies access to biological agents or toxins listed in § 121.3.
(1) Death, disease, or other biological malfunction in a human, an animal, a plant, or another living organism;
(2) Deterioration of food, water, equipment, supplies, or material of any kind; or
(3) Deleterious alteration of the environment.
(1) Any poisonous substance or biological product that may be engineered as a result of biotechnology produced by a living organism; or
(2) Any poisonous isomer or biological product, homolog, or derivative of such a substance.
(a) This part sets forth the requirements for possession, use, and transfer of biological agents or toxins that have been determined to have the potential to pose a severe threat to both human and animal health, to animal health, or to animal products. The purpose of this part is to ensure the safe handling of such agents or toxins, and to protect against the use of such agents or toxins in domestic or international terrorism or for any other criminal purpose.
(b) Accordingly, this part provides that any individual or entity that possesses, uses, or transfers any agent or toxin listed in § 121.3 must register in accordance with § 121.7. To register, each entity must designate an individual who has the authority and control to ensure compliance with the regulations to be the responsible official. The responsible official must complete and submit the registration application package to APHIS or, for overlap agents or toxins, to APHIS or CDC. As part of registration, the responsible official, the entity, and, where applicable, the individual who owns or controls such entity will be subject to a security risk assessment by the Attorney General.
(c) The responsible official is responsible for ensuring compliance with the safety procedures in this part, including implementing the Biosafety and Security Plan in accordance with § 121.12, providing the proper training to individuals who handle or use agents or toxins listed in § 121.3, and providing proper laboratory facilities to contain and dispose of such agents or toxins. In addition, the responsible official is responsible for ensuring compliance with the safeguard and security measures in this part, including restricting access to only those individuals who have a legitimate need to handle or use agents or toxins and who have been approved in accordance with § 121.11, and transferring such agents or toxins only to registered individuals or entities in accordance with § 121.13.
(a) Except as provided in paragraphs (f) and (g) of this section, the Administrator has determined that the biological agents and toxins listed in this section have the potential to pose a severe threat to both human and animal health, to animal health, or to animal products.
(b)
(c) Genetic elements, recombinant nucleic acids, and recombinant organisms of overlap agents or toxins:
(1) Biological agent viral nucleic acids (synthetic or naturally derived, contiguous or fragmented, in host chromosomes or in expression vectors) that can encode infectious and/or replication competent forms of any of the biological agent viruses.
(2) Nucleic acids (synthetic or naturally derived) that encode for the functional form(s) of any of the toxins listed in paragraph (b) of this section, if the nucleic acids:
(i) Are in a vector or host chromosome;
(ii) Can be expressed
(iii) Are in a vector or host chromosome and can be expressed in
(3) Viruses, bacteria, fungi, and toxins listed in paragraph (b) of this section that have been genetically modified.
(d)
(e) The Administrator has determined that it would be impractical to regulate a biological agent or toxin that is in its naturally occurring environment. Therefore, any biological agent or toxin listed in this section that is in its naturally occurring environment will not be subject to the requirements of this part, provided that the biological agent or toxin has not been intentionally introduced, cultivated, collected, or otherwise extracted from its natural source.
(f) The Administrator has determined that biological agents or toxins that meet any of the following criteria do not have the potential to pose a severe threat to both human and animal health, or to animal health or animal products. Therefore, an individual or entity that only possesses, uses, or transfers an agent or toxin that meets any of the following criteria will not be subject to the requirements of this part:
(1) Nonviable agents or fixed tissues that are, bear, or contain agents or toxins listed in this section.
(2) Genetic elements or subunits of agents or toxins listed in paragraph (d) of this section, if the genetic elements or subunits are not capable of causing disease.
(3) Overlap toxins under the control of a principal investigator (or equivalent), if the total aggregate amount does not, at any time, exceed the following amounts: 0.5 mg of Botulinum neurotoxins (types A-G), 100 mg of
(g)
(1) If APHIS or CDC determines that a specific attenuated strain does not pose a severe threat to human and animal health, or to animal health or animal products, an individual or entity will not be subject to the requirements of this part. This determination will be limited to the specific attenuated strain and to the specific activities involving that attenuated strain.
(2) An individual or entity may request a review by writing to the Administrator or, for overlap agents, by writing to the Administrator or CDC.
(3) If it is determined that a specific attenuated strain does not pose a severe threat, APHIS or CDC will notify the applicant and publish a notice in the
(4) An individual or entity may request reconsideration of an adverse decision in writing to the Administrator. The request for reconsideration must state all of the facts and reasons upon which the individual or entity relies upon to show the decision was incorrect. The Administrator will grant or deny the request for reconsideration as promptly as circumstances allow and will state, in writing, the reasons for the decision. If there is a conflict as to any material fact, the individual or entity may request a hearing to resolve the conflict.
(a) Clinical or diagnostic laboratories and other entities possessing, using, or transferring overlap agents or toxins that are contained in specimens presented for diagnosis or verification will be exempt from the requirements of this part, provided that:
(1) The identification of such agents or toxins is immediately reported to APHIS or CDC, and to other appropriate authorities when required by Federal, State, or local law; and
(2) Within 7 days after identification, the agents or toxins are transferred or inactivated, and APHIS Form 2040 is submitted to APHIS or CDC.
(b) Clinical or diagnostic laboratories and other entities possessing, using, or transferring overlap agents or toxins that are contained in specimens presented for proficiency testing will be exempt from the requirements of this part, provided that:
(1) The identification of such agents or toxins, and their derivatives, is immediately reported to the APHIS or CDC, and to other appropriate authorities when required by Federal, State, or local law; and
(2) Within 90 days of receipt, the agents or toxins are transferred or inactivated, and APHIS Form 2040 is submitted to APHIS or CDC. A copy of the completed form must be maintained for 3 years.
(c) Unless the Administrator by order determines that additional regulation of a specific product is necessary to protect animal or plant health, or animal or plant products, an individual or entity possessing, using, or transferring products that are, bear, or contain overlap agents or toxins will be exempt from the requirements of this part if the products have been cleared, approved, licensed, or registered pursuant to:
(1) The Federal Food, Drug, and Cosmetic Act (21 U.S.C. 301
(2) Section 351 of Public Health Service Act (42 U.S.C. 262);
(3) The Virus-Serum-Toxin Act (21 U.S.C. 151-159); or
(4) The Federal Insecticide, Fungicide, and Rodenticide Act (7 U.S.C. 131
(d) An individual or entity possessing, using, or transferring investigational products that are, bear, or contain overlap agents or toxins may be exempt from the requirements of this part if such product is being used in an investigation authorized by any Federal law and the Administrator determines that additional regulation under this part is not necessary to protect animal or plant health, and animal or plant products.
(1) An individual or entity possessing, using, or transferring such investigational products may apply for an exemption from the requirements of this part by submitting APHIS Form 2042 to APHIS or CDC.
(2) For investigational products authorized under any of the Federal laws specified in paragraph (c) of this section, the Administrator shall make a determination regarding an exemption within 14 days after receipt of the application and notification that the investigation has been authorized under a Federal law.
(e) The Administrator may exempt an individual or entity from the requirements of this part, in whole or in part, for 30 days if it is necessary to respond to a domestic or foreign agricultural emergency involving an overlap agent or toxin. The Administrator may extend the exemption once for an additional 30 days.
(f) Upon request of the Secretary of Health and Human Services, the Administrator may exempt an individual or entity from the requirements of this part, in whole or in part, for 30 days if the Secretary of Health and Human Services has granted an exemption for a public health emergency involving an overlap agent or toxin. The Administrator may extend the exemption once for an additional 30 days.
(a) Diagnostic laboratories and other entities possessing, using, or transferring agents or toxins that are contained in specimens presented for diagnosis or verification will be exempt from the requirements of this part, provided that:
(1) The identification of such agents or toxins is immediately reported to the Administrator and to other appropriate authorities when required by Federal, State, or local law; and
(2) Within 7 days after identification, the agents or toxins are transferred or inactivated, and APHIS Form 2040 is submitted to the Administrator.
(b) Diagnostic laboratories and other entities possessing, using, or transferring agents or toxins that are contained in specimens presented for proficiency testing will be exempt from the requirements of this part, provided that:
(1) The identification of such agents or toxins, and their derivatives, is immediately reported to the Administrator, and to other appropriate authorities when required by Federal, State, or local law; and
(2) Within 90 days of receipt, the agent or toxins are transferred or inactivated, and APHIS Form 2040 is submitted to the Administrator. A copy of the completed form must be maintained for 3 years.
(c) An individual or entity receiving diagnostic reagents and vaccines that are, bear, or contain listed agents or toxins, also known as high consequence livestock pathogens or toxins, that are produced at USDA diagnostic facilities
(d) Unless the Administrator by order determines that additional regulation is necessary to protect animal health or animal products, an individual or entity possessing, using, or transferring products that are, bear, or contain listed agents or toxins will be exempt from the requirements of this part if the products have been cleared, approved, licensed, or registered pursuant to:
(1) The Federal Food, Drug, and Cosmetic Act (21 U.S.C. 301
(2) Section 351 of Public Health Service Act (42 U.S.C. 262);
(3) The Virus-Serum-Toxin Act (21 U.S.C. 151-159); or
(4) The Federal Insecticide, Fungicide, and Rodenticide Act (7 U.S.C. 131
(e) An individual or entity possessing, using, or transferring experimental products that are, bear, or contain listed agents or toxins may be exempt from the requirements of this part if such product is being used in an investigation authorized by any Federal law and the Administrator determines that additional regulation under this part is not necessary to protect animal or plant health, and animal or plant products. An individual or entity possessing, using, or transferring such experimental products may apply for an exemption from the requirements of this part by submitting APHIS Form 2042 to APHIS.
(f) In addition to the exemptions provided in paragraphs (a) through (e) of this section, the Administrator may grant a specific exemption upon a showing of good cause and upon his or her determination that such exemption is consistent with protecting animal health and animal products. An individual or entity that possesses, uses, or transfers agents or toxins may request in writing an exemption from the requirements of this part. If granted, such exemptions are valid for a maximum of 3 years; thereafter, an individual or entity must request a new exemption. If a request for exemption is denied, an individual or entity may request reconsideration in writing to the Administrator. The request for reconsideration must state all of the facts and reasons upon which the individual or entity relies to show that the exemption was wrongfully denied. The Administrator will grant or deny the request for reconsideration as promptly as circumstances allow and will state, in writing, the reasons for the decision. If there is a conflict as to any material fact, the individual or entity may request a hearing to resolve the conflict.
(a) Unless exempted under §§ 121.4 or 121.5, any individual or entity that possesses, uses, or transfers any agent or toxin listed in § 121.3 must register with APHIS or, for overlap agents or toxins, APHIS or CDC.
(b) Each entity must designate an individual to be its responsible official. The responsible official must have the authority and control to ensure compliance with the regulations. The responsible official must complete and sign the registration application package, and will be the individual contacted by APHIS or CDC if any questions arise concerning the application or subsequent compliance with the regulations in this part. As part of registration, the responsible official and the entity will be subject to a security risk assessment by the Attorney General. While most registrants are likely to be entities, in the event that an individual applies for and is granted a certificate of registration, APHIS will consider the individual to be the responsible official.
(c) An entity may designate one or more individuals to be an alternate responsible official, who may act for the responsible official when he/she is unavailable. These individuals must have the authority and control to ensure compliance with the regulations when acting as the responsible official. These individuals will also be subject to a security risk assessment by the Attorney General as part of registration.
(a) Unless exempted under §§ 121.4 or 121.5, an individual or entity shall not possess, use, or transfer any agent or toxin listed in § 121.3 without a certificate of registration issued by APHIS or CDC.
(b) A certificate of registration may be issued upon:
(1) Approval of the responsible official; the alternate responsible official, where applicable; the entity; and, where applicable, the individual who owns or controls the entity following a security risk assessment by the Attorney General;
(2) Approval of the biosafety, containment, and security of the entity. The entity's biosafety, containment, and security procedures must be commensurate with the risk of the agent or toxin, given its intended use. APHIS or CDC will review the Biosafety and Security Plan, and may inspect and evaluate the premises and records to determine compliance with the regulations and the biosafety, containment, and security requirements; and
(3) A determination by the Administrator that the individual or entity seeking to register has a lawful purpose to possess, use, or transfer such agents or toxins.
(c) For overlap agents, APHIS and CDC will review applications for registration and amendments to a certificate of registration, and a certificate of registration or amendment to a certificate of registration will only be issued if APHIS and CDC concur.
(d) A certificate of registration will be valid for only the specific agents or toxins listed in the certificate and specific activities and locations. A certificate of registration may cover more than one listed agent or toxin, and it may be amended to cover additional listed agents or toxins.
(e) A certificate of registration may be amended to reflect changed circumstances (
(f) If a responsible official wishes to discontinue possessing, using, or transferring a particular agent or toxin, the responsible official may inactivate the agent or toxin or he/she may transfer the agent or toxin to a registered individual or entity in accordance with § 121.13. The responsible official must notify APHIS or, for overlap agents or toxins, APHIS or CDC, 5 business days prior to the planned inactivation so that we may have the opportunity to observe the inactivation of the agents or toxins. APHIS or CDC will notify the responsible official if we wish to observe the inactivation of the agents or toxins.
(g) A certificate of registration will be valid for a maximum of 3 years.
(a) APHIS may deny an application for registration or revoke registration if:
(1) The Attorney General identifies the responsible official, entity, or individual who owns or controls the entity as within any of the categories described in 18 U.S.C. 175b; or
(2) The Attorney General identifies the responsible official, entity, or individual who owns or controls the entity as reasonably suspected by any Federal law enforcement or intelligence agency of:
(i) Committing a crime set forth in 18 U.S.C. 2332b(g)(5); or
(ii) Knowing involvement with an organization that engages in domestic or international terrorism (as defined in 18 U.S.C. 2331) or with any other organization that engages in intentional crimes of violence; or
(iii) Being an agent of a foreign power as defined in 50 U.S.C. 1801; or
(3) The responsible official does not have a lawful purpose to possess, use, or transfer agents or toxins listed in § 121.3; or
(4) The responsible official is an individual who handles or uses agents or toxins listed in § 121.3 and he/she does not have the necessary training or skills to handle such agents or toxins; or
(5) The entity does not meet the biosafety, containment, and security requirements prescribed by the Administrator;
(6) There are egregious or repeated violations of the biosafety, containment, or security requirements; or
(7) The Administrator determines that such action is necessary to protect animal or plant health, and animal or plant products.
(b) For overlap agents or toxins, APHIS or CDC shall deny an application for registration or revoke registration if the Attorney General identifies the responsible official, entity, or individual who owns or controls the entity as within any of the categories described in 18 U.S.C. 175b. APHIS or CDC may also deny registration or revoke registration for the reasons set forth in paragraphs (a)(2) through (a)(7) of this section.
(c) APHIS may summarily revoke or suspend registration for any of the reasons set forth in paragraphs (a) and (b) of this section.
(d) APHIS will notify the responsible official in writing if an application for registration is denied or a certificate of registration is revoked or suspended. For overlap agents or toxins, APHIS or CDC will notify the responsible official in writing if an application for registration is denied or a certificate of registration is revoked or suspended.
(e) Denial of an application for registration, revocation of registration, and suspension of registration may be appealed under § 121.17.
(a) To apply for a certificate of registration, the responsible official must submit all of the information and documentation required in the registration application package to APHIS, including the name, source, and characterization data for each agent or toxin to be registered. For overlap agents or toxins, the responsible official must submit all of the information and documentation required in the registration package to either APHIS or CDC. The responsible official must submit the registration application package to APHIS in cases where he/she is seeking registration for both animal and overlap agents and toxins.
(b) For animal agents and toxins, the registration application package may be obtained by calling (301) 734-3277 or faxing a request to (301) 734-3652. It is also available on the Internet at
(c) For overlap agents and toxins, the registration application package may be obtained by contacting APHIS, as set forth in paragraph (b) of this section, or by calling CDC at (404) 498-2255; faxing a request to (404) 498-2265; or writing to Select Agent Program, Centers for Disease Control and Prevention, 1600 Clifton Road, NE, Mail Stop E 79, Atlanta, GA 30333. It is also available on the Internet at
(a) The responsible official is responsible for ensuring compliance with the regulations, including:
(1) Developing and implementing a Biosafety and Security Plan in accordance with § 121.12;
(2) Allowing only approved individuals within the entity to have access to any agents or toxins listed in § 121.3 in accordance with § 121.11;
(3) Providing appropriate training in biosafety, containment, and security procedures for all personnel in accordance with § 121.13;
(4) Transferring agents or toxins only to registered individuals or entities in accordance with § 121.14;
(5) Ensuring that all visitors are informed of and follow the entity's security requirements and procedures;
(6) Notifying APHIS or, for overlap agents or toxins, APHIS or CDC, of changes in circumstances in accordance with § 121.7;
(7) Providing timely notice of any theft, loss, or release of a biological agent or toxin in accordance with § 121.17;
(8) Maintaining detailed records of information necessary to give a complete accounting of all of the activities related to agents or toxins listed in § 121.3 in accordance with § 121.15.
(b) In addition to the requirements in paragraph (a) of this section, the responsible official for a diagnostic laboratory or other entities possessing, using, or transferring agents or toxins listed in § 121.3 that are contained in specimens presented for diagnosis must immediately report the identification of such agents or toxins to the Administrator and to other appropriate authorities when required by Federal, State, or local law.
(c) In addition to the requirements in paragraph (a) of this section, the responsible official must ensure that the following experiments are not conducted unless approved by the Administrator, after consultation with experts:
(1) Experiments utilizing recombinant DNA that involve the deliberate transfer of a pathogenic trait or drug resistance trait to biological agents that are not known to acquire the trait naturally, if such acquisition could compromise the use of the drug to control disease agents in humans, veterinary medicine, or agriculture.
(2) Experiments involving the deliberate formation of recombinant DNA containing genes for the biosynthesis of toxins lethal for vertebrates at an LD
(a) An individual may not have access to biological agents or toxins listed in § 121.3 unless approved by APHIS or CDC. APHIS will grant, limit, or deny access of individuals to listed agents or toxins. APHIS or CDC will grant, limit, or deny access of individuals to overlap agents or toxins.
(b) The responsible official is responsible for ensuring that only approved individuals within the entity have access to any agents or toxins listed in § 121.3. The responsible official must request such access for only those individuals who have a legitimate need to handle or use agents or toxins, and who have the appropriate training and skills to handle such agents or toxins.
(c) The responsible official must provide appropriate training in biosafety, containment, and security procedures to all individuals with access to agents and toxins listed in § 121.3.
(d) For each individual identified by the responsible official as having a legitimate need to handle or use agents or toxins, the responsible official must submit that individual's name and identifying information to APHIS and the Attorney General. For overlap agents or toxins, the responsible official must submit this information to either APHIS or CDC and the Attorney General.
(e) In addition, the responsible official must submit information about the individual's training and skills to APHIS or, for overlap agents or toxins, APHIS or CDC (
(f) APHIS may expedite the access approval process for individuals upon request by the responsible official and a showing of good cause (
(g) APHIS will notify the responsible official if an individual is granted full or limited access, or denied access to listed agents or toxins. APHIS will also notify the individual if he/she is denied access or granted only limited access. For overlap agents or toxins, APHIS or CDC will provide the necessary notification.
(h) APHIS may deny or limit access of an individual to listed agents or toxins if:
(1) The Attorney General identifies the individual as within any of the categories described in 18 U.S.C. 175b;
(2) The Attorney General identifies the individual as reasonably suspected by any Federal law enforcement or intelligence agency of committing a crime set forth in 18 U.S.C. 2332b(g)(5); knowing involvement with an organization that engages in domestic or international terrorism (as defined in 18 U.S.C. 2331) or with any other organization that engages in intentional crimes of violence; or being an agent of a foreign power as defined in 50 U.S.C. 1801;
(3) The individual does not have a legitimate need to handle listed agents or toxins;
(4) The individual does not have the necessary training or skills to handle listed agents or toxins;
(5) The Administrator determines that such action is necessary to protect animal health or animal products.
(i) For overlap agents or toxins, APHIS or CDC will deny an individual access to such agents or toxins if the Attorney General identifies the individual as within any of the categories described in 18 U.S.C. 175b. APHIS or CDC may also deny or limit access of an individual for the reasons set forth in paragraphs (f)(2) through (f)(5) of this section.
(j) An individual may appeal the Administrator's decision to deny or limit access under § 121.17.
(k) Access approval is valid for 5 years; thereafter, the responsible official shall request renewal of access approval every 5 years for as long as the individual needs access to agents or toxins listed in § 121.3.
(l) The responsible official must immediately notify APHIS or, for overlap agents or toxins, APHIS or CDC, when an individual's access to agents or toxins listed in § 121.3 is terminated by the entity and the reasons therefore.
(a) As a condition of registration, the responsible official must develop and implement a Biosafety and Security Plan.
(1)
(2)
(i) The site-specific risk assessment should involve a threat assessment and risk analysis in which threats are defined, vulnerabilities examined, and risks associated with those vulnerabilities are identified.
(ii) The security systems and procedures must be tailored to address site-specific characteristics and requirements, ongoing programs, and operational needs and must mitigate the risks identified under paragraph (a)(2)(i) of this section.
(iii) The plan must describe inventory control procedures, personnel suitability for those individuals with access to agents or toxins listed in § 121.3, physical security, and cybersecurity. The plan must also contain provisions for routine cleaning, maintenance, and repairs; provisions for securing the area (
(iv) With respect to areas containing listed agents or toxins, an entity or individual must adhere to the following security requirements or implement measures to achieve an equivalent or greater level of security as the provisions below:
(A) Allow unescorted access only to approved individuals who are performing a specifically authorized function during hours required to perform that job;
(B) Allow individuals not approved under § 121.11 to conduct routine cleaning, maintenance, repairs, and other non-laboratory functions only when escorted and continually monitored by approved individuals;
(C) Provide for the control of access to containers where listed agents and toxins are stored by requiring that such containers be locked when not in the direct view of an approved individual and by using other monitoring measures, as needed;
(D) Require the inspection of all packages upon entry and exit;
(E) Establish a protocol for intra-entity transfers, including provisions for ensuring that the packaging and movement, is conducted under the supervision of an approved individual;
(F) Require that approved individuals do not share with any other person their unique means of accessing the area or listed agents or toxins; and
(G) Require that approved individuals immediately report any of the following to the responsible official:
(
(
(
(
(
(3)
(b) The Biosafety and Security Plan must be reviewed, performance tested,
(a) The responsible official must provide appropriate training in biosafety, containment, and security procedures to all individuals with access to agents and toxins listed in § 121.3.
(b) The responsible official must provide information and training to an individual at the time the individual is assigned to work with a listed agent or toxin. The responsible official must provide refresher training annually.
Biological agents and toxins listed in § 121.3 may only be transferred to individuals or entities registered to possess, use, or transfer that particular agent or toxin. However, the sender of an agent or toxin may be an individual or entity that has a certificate of registration for the agent or toxin, an individual or entity that is exempt from the requirements of this part, or an individual or entity located outside of the United States. Biological agents or toxins may only be transferred under the conditions of this section and must be authorized by APHIS or, for overlap agents or toxins, by APHIS or CDC, prior to the transfer.
(a)
(b)
(c)
(2) APHIS or CDC will authorize the transfer based on a finding that the recipient has a certificate of registration covering the transfer of the listed agent or toxin.
(3) The responsible official for the recipient must notify the agency authorizing the transfer (either APHIS or CDC) and the sender upon receipt of the agent or toxin by mailing or faxing a completed APHIS Form 2041 to APHIS or CDC within 2 business days.
(4) The responsible official for the recipient must notify APHIS or CDC immediately if the agent or toxin has not been received within 48 hours after the expected delivery or if the package containing the agent or toxin is leaking or has been damaged.
(d) The sender must comply with all applicable laws governing packaging and shipping.
(a) The responsible official must maintain complete, up-to-date records of information necessary to give an accounting of all of the activities related to agents or toxins listed in § 121.3. Such records must include the following:
(1) The Biosafety and Security Plan;
(2) A current list of all individuals with access to agents or toxins listed in § 121.3;
(3) Training records for individuals with access to such agents or toxins;
(4) Accurate and current inventory records (including source and characterization data);
(5) Permits and transfer documents (APHIS Form 2041) issued by APHIS and CDC;
(6) Security records (
(7) Biosafety, containment, and security incident reports.
(b) The responsible official must maintain such records for 3 years.
(c) All records must be produced upon request to APHIS or CDC inspectors, and appropriate Federal, State, or local law enforcement authorities.
(a) To ensure compliance with the regulations, any APHIS or CDC inspector must be allowed, without previous notification, to enter and inspect the entire premises, all materials and equipment, and all records required to be maintained by this part.
(b) Prior to issuing a certificate of registration to an entity or individual, APHIS or CDC may inspect and evaluate the premises and records to ensure compliance with the regulations and the biosafety, containment, and security requirements.
(a) The responsible official must orally notify APHIS and appropriate Federal, State, or local law enforcement agencies immediately upon discovery of the theft or loss of agents or toxins listed in § 121.3. The oral notification must be followed by a written report (APHIS Form 2043) within 7 days.
(b) The responsible official must orally notify APHIS immediately upon discovery that a release of an agent or toxin has occurred outside of the biocontainment area. The oral notification shall be followed by a written report (APHIS Form 2043) within 7 days. Upon notification and a finding that the release poses a threat to animal or plant health, or animal or plant products, APHIS will notify relevant Federal, State, and local authorities, and the public, if necessary. If the release involves an overlap agent or toxin, APHIS will also notify the Secretary of Health and Human Services.
(c) The responsible official must orally notify APHIS of a theft, loss, or release of an agent or toxin by calling (866) 994-5698. A copy of APHIS Form 2043 may be obtained by writing to National Center for Import and Export, VS, APHIS, 4700 River Road Unit 40, Riverdale, MD 20737-1231; or by calling (301) 734-3277. The form is also available on the Internet at
An individual or entity may appeal a denial or revocation of registration under this part. An individual who has been denied access to listed agents or toxins or who has been granted only limited access to listed agents or toxins under this part may appeal that decision.