Introduction
The BIOSECURE Act, signed into law on December 18, 2025 as part of the FY2026 National Defense Authorization Act, is the most significant regulatory intervention in the global biopharma supply chain in decades. What has happened since matters more: the prohibitions are not yet in force, the first attempt to name WuXi AppTec was blocked in court, and the reshoring capital meant to follow the law has slowed sharply.
What the BIOSECURE Act Does
The Act bars federal agencies from buying biotechnology equipment or services from a designated "biotechnology company of concern," from contracting with any entity that uses those services on a government contract, and from spending loan or grant funds on them. That third prong gives the law its reach, pulling federally funded research, government health programs, and federally funded trials inside the perimeter.
- Biotechnology Company of Concern
A designation under the BIOSECURE Act for foreign biotechnology companies judged to pose a national security risk, usually through potential transfer of US genomic data, manufacturing know-how, or clinical trial data to a foreign government. Two routes lead to it: automatic capture of companies on the Pentagon's Section 1260H list of Chinese military companies, and case-by-case designation by the Office of Management and Budget, whose initial list is due by December 18, 2026.
Designation has proved messier than the drafting implied. The Section 1260H list already captures BGI Group, MGI Tech, and Complete Genomics. The Pentagon added WuXi AppTec on June 8, 2026, but a federal judge enjoined that listing on August 7, 2026, finding the government's ownership and military-affiliation evidence factually deficient. WuXi Biologics, the arm Western biopharma depends on for biologics manufacturing, has not been listed at all.
OMB publishes the list
Designated companies named by December 18, 2026.
Implementing guidance
Up to 180 days more for OMB to tell agencies how the ban works.
Procurement rules rewritten
Up to a year beyond that for the FAR Council, reaching mid-2028.
Prohibitions take effect
60 days after the FAR change, 90 days for OMB designations.
That sequence is the law's most misunderstood feature. A five-year safe harbor then covers agreements signed before the effective date, so contracts running today survive into the 2030s, and the "transition through 2030" shorthand from 2025 understates the tail. One exception is worth carrying into an interview: companies already listed at enactment, the genomics names among them, get no safe harbor at all.
Winners and Losers
The BIOSECURE Act's impact on the CRO/CDMO landscape was supposed to sort the sector cleanly. The evidence since enactment is less tidy, not least because sponsors began diversifying away from Chinese providers in 2024, years ahead of any legal prohibition.
Winners: Western CRO/CDMO companies with capacity to absorb redirected demand. Samsung Biologics, Lonza, Catalent (now owned by Novo Holdings), FUJIFILM Diosynth, and Thermo Fisher's pharma services division lead, with Indian providers such as Syngene and Piramal taking share at a lower cost point. The capacity cycle behind that thesis is real but uneven: disclosed CDMO investment reached $24.86 billion in 2025, roughly three quarters of it in the US, then fell to about **$3.9 billion** in the first half of 2026, with the half's largest projects booked in Italy, Germany, and India.
Losers: the damage has not reached Chinese providers' reported numbers. WuXi AppTec grew first-half 2026 revenue 38.9% year over year and raised full-year guidance, carried by continued demand from Western customers. Pressure shows up as customer-level risk management, dual sourcing and technology transfer rights in new contracts, not revenue collapse. The clearer losers are biopharma companies with concentrated Chinese relationships, paying for duplicate validation runs.
M&A Implications
The Act still drives deal flow, but the underwriting case has changed. Capacity acquisitions by strategic and financial buyers remain active, and the $16.5 billion Novo Holdings acquisition of Catalent, driven primarily by GLP-1 fill-finish needs, also handed Novo a compliant Western footprint. Sponsors keep funding biologics expansion where constraints are acute and assembling CRO platforms that offer compliant end-to-end development.
What has changed is the duration risk a buyer must accept. An asset priced on BIOSECURE scarcity has to hold that pricing power through a rule change landing in 2028, a safe harbor running past 2030, and the possibility that courts narrow designation further. That argues for pricing on contracted backlog, modality mix, and switching costs rather than on policy, which is how CRO and CDMO valuation should have worked anyway.
This concludes the Market Intelligence section. The final section covers interviewing for healthcare IB and how to present this material under questioning.
