The Regulatory Landscape
A single CRISPR-edited mushroom can require approval from three different federal agencies.
A single CRISPR-edited mushroom can require approval from three different federal agencies. A gene therapy for sickle cell disease requires a fourth. A clinical trial for the same therapy gets reviewed by a fifth body. A vaccine developed during a pandemic might use a sixth emergency pathway. And a state government can override most of it for in-state activity.
This isn't bureaucratic dysfunction. It's the system working as designed.
US biotech regulation is one of the most fragmented governance systems in the world — and it was built that way deliberately, in 1986, by a framework that assumed biotechnology would be small, slow, and easy to slot into existing regulatory categories. That assumption was wrong by the early 1990s and is catastrophically wrong today. This module is the map of how American biotech governance actually works, why it looks the way it does, and where the cracks are forming.
---
Why US Biotech Regulation Is Fragmented
The first thing to understand about US biotech regulation: there is no single biotech regulator. There is no Department of Biotechnology. There is no Biotechnology Act.
Instead, biotech is regulated through whatever pre-existing statute and agency happens to cover the product — drugs, food, pesticides, devices, environmental releases. A genetically engineered tomato is regulated as a food. A genetically engineered drug-producing tomato might be regulated as a drug. A genetically engineered tomato designed to resist a pest is regulated as a pesticide. Same tomato, three legal categories, three agencies.
This approach is called the product-based framework — regulation based on what the product is and does, not on how it was made. Its alternative — a process-based framework, where any genetically modified organism is regulated specifically because of its modification — is what the European Union uses, and the two approaches produce dramatically different outcomes (BP4 covers this in detail).
The product-based framework was formalized in 1986 by the Reagan administration in a document called the Coordinated Framework for Regulation of Biotechnology. The goal was explicitly to avoid creating new regulations or new agencies — to demonstrate that existing law could handle biotechnology and that the United States was open for biotech business.
For its time, it was a reasonable bet. In 1986, biotechnology meant a handful of recombinant DNA products in pharmaceutical pipelines and the first hesitant agricultural applications. The framework's authors couldn't anticipate CRISPR, gene drives, synthetic biology, AI-designed proteins, or any of the technologies that now dominate the field. Almost forty years later, we're still using their framework.
---
The Three Main Federal Agencies
Three agencies do the bulk of US biotech regulation.
The Food and Drug Administration (FDA). Regulates drugs, biologics, medical devices, food, cosmetics, and tobacco. Within biotech, the FDA handles:
- Pharmaceutical drugs (small molecules, biologics, gene therapies, vaccines)
- Medical devices and in vitro diagnostics
- Food safety, including most genetically engineered foods
- The clinical trial process from start to finish
The FDA is the most powerful biotech regulator and the one with the deepest scientific bench. It's also the slowest and most cautious. BP2 covers it in detail.
The US Department of Agriculture (USDA). Specifically its Animal and Plant Health Inspection Service (APHIS) division. Regulates:
- Genetically engineered plants that could pose pest risks
- Genetically engineered animals (in some categories)
- Field trial permits for experimental crops
- Importation of biological materials
USDA's main authority comes from the Plant Protection Act. Its 2020 SECURE rule dramatically narrowed which gene-edited plants require oversight, creating the deregulation cascade BP4 examines.
The Environmental Protection Agency (EPA). Regulates:
- Pesticides, including plant-incorporated protectants (proteins genetically engineered into plants to kill pests — the most famous being Bt crops)
- Microbial products with industrial or environmental applications
- Environmental release of engineered organisms
EPA's authority comes from the Federal Insecticide, Fungicide, and Rodenticide Act (FIFRA) and the Toxic Substances Control Act (TSCA).
These three agencies have overlapping jurisdictions. A genetically engineered crop that produces its own pesticide is regulated by USDA (plant), EPA (pesticide trait), and FDA (food safety). Companies must clear all three to bring such a product to market. This three-way review is the famous "coordinated framework" in action — and it's both slower than anyone wants and, paradoxically, less rigorous than a single comprehensive review would be.
---
The Other Federal Players
Three agencies don't capture the full picture. Several other federal bodies have important biotech roles:
National Institutes of Health (NIH). Doesn't regulate biotech in the legal sense, but funds most US biomedical research and sets policy for federally funded work. The NIH Guidelines for Research Involving Recombinant or Synthetic Nucleic Acid Molecules govern how universities and federally funded labs handle genetic engineering. The Office of Biotechnology Activities oversees compliance. Until 2019, NIH also operated the Recombinant DNA Advisory Committee (RAC), which reviewed gene therapy protocols — that role has since shifted to the FDA.
Centers for Disease Control and Prevention (CDC). Operates the Select Agent Program jointly with USDA. Tracks possession and use of pathogens and toxins that could be used for bioterrorism. Critical to biosecurity policy (BP5).
Department of Health and Human Services (HHS). Parent of FDA, NIH, and CDC. Coordinates policy across the health agencies. Drives major biotech policy initiatives like the 2024 update to Dual-Use Research of Concern (DURC) policy.
Department of Defense (DoD) and DARPA. DARPA's Biological Technologies Office funds high-risk biotech research and has driven significant innovation (mRNA vaccines were partially DARPA-funded). DoD also operates its own biological defense programs.
Office of Science and Technology Policy (OSTP). Within the White House. Coordinates federal biotech strategy. Issued the Bioeconomy Executive Order (EO 14081) in September 2022, which directed agencies to update biotech regulation for emerging technologies.
Federal Trade Commission (FTC). Regulates direct-to-consumer health claims and false advertising. Has authority over DTC genetic testing companies (BP7).
This isn't a comprehensive list. The biotech regulatory landscape includes dozens of bodies depending on the application. The fragmentation isn't a bug. It's the entire architecture.
---
Federalism and State Power
Federal regulation is only part of the picture. US biotechnology is also regulated — sometimes in conflicting ways — by the fifty states.
The constitutional principle is that the federal government regulates interstate commerce, while states retain authority over public health, safety, and welfare under their police powers. In practice, this division is fuzzy and contested.
State-level biotech regulation tends to cluster around several areas:
Public health authority. States can mandate vaccines, require disease reporting, impose quarantines, and restrict practices that endanger public health. The foundational Supreme Court case, Jacobson v. Massachusetts (1905), established that states can mandate vaccination over individual objection. BP6 returns to this in depth.
Agricultural regulation. Many states have their own pesticide registration requirements, GMO labeling laws, and rules on crop introduction. Vermont's 2014 GMO labeling law triggered the federal National Bioengineered Food Disclosure Standard in 2016 — federal action driven by state action.
Genetic discrimination. GINA (the federal Genetic Information Nondiscrimination Act, 2008) only covers health insurance and employment. States have varied in extending protection to life insurance, disability insurance, and long-term care insurance. BP7 covers this.
Embryonic research. Federal law restricts certain stem cell and embryo research, but states can fund or restrict beyond federal rules. California's Proposition 71 (2004) created a $3 billion state stem cell agency in response to federal restrictions.
Telehealth and DTC medicine. Direct-to-consumer genetic testing, telemedicine prescribing of certain biologics, and similar emerging areas are increasingly regulated state by state.
The result: a company developing a biotech product must navigate not just multiple federal agencies but also potential state-by-state variation. A drug approved by the FDA can still be restricted by states. A GMO crop approved by USDA can still be banned by counties or cities. This federalism layer is one of the underappreciated complications of American biotech governance.
---
Wait, Actually...
The 1986 Coordinated Framework was based on a foundational principle that may have been wrong from the start.
The framework's central assumption was that biotechnology is not categorically different from traditional methods of producing food, drugs, or chemicals. Genetic engineering was simply a faster, more precise version of what humans had been doing through selective breeding for millennia. Therefore, products of genetic engineering didn't need their own regulatory category — they could be slotted into existing ones.
This was the substantial equivalence doctrine. It was promoted by industry, accepted by the Reagan administration, and codified in the Coordinated Framework. It became the foundation of every product-based biotech regulation in the United States.
Many scientists, especially in Europe, never accepted it. The argument: genetic engineering enables changes that traditional breeding never could — moving genes between species, into bacteria, into entirely new contexts. The risk profile of a transgenic crop expressing a bacterial toxin is fundamentally different from a conventionally bred plant. Treating them as equivalent obscures the differences that matter.
The EU rejected substantial equivalence and built a process-based framework instead. The US doubled down on it. Forty years later, US biotech is the world's most innovative biotech industry, and US biotech regulation has gaps that critics — including academic policy scholars like James Hodge — argue are increasingly dangerous as the technology accelerates.
Whether substantial equivalence was the right call in 1986 is now mostly a historical question. Whether it should remain the foundation of policy in 2026 is one of the most contested questions in the field.
---
What is the central principle of the 1986 Coordinated Framework for Regulation of Biotechnology?
Which agency regulates plant-incorporated protectants like Bt corn?
What is the constitutional basis for state authority over public health, including some biotech regulation?
Which of the following is not primarily a regulator of US biotechnology?
Map a Real Biotech Product
Pick a real biotech product that's currently on the market. Examples:
- CASGEVY (the CRISPR sickle cell therapy)
- AquAdvantage Salmon (genetically modified Atlantic salmon)
- Impossible Burger (genetically engineered heme protein)
- Bt corn (insect-resistant corn varieties)
- AbioCor artificial heart (a Class III medical device)
For your chosen product, document:
- Which federal agencies were involved in its approval, and what each one did
- What statute(s) provided the legal authority for each agency's review
- How long the approval process took from initial submission to market
- Any state-level regulation that applies after federal approval
- One ongoing controversy or gap in how this product is regulated
The Federal Register, FDA databases (Drugs@FDA, FDA-TRACK), USDA APHIS petition databases, and EPA pesticide databases are all publicly searchable. By the end, you'll know exactly how one biotech product moved through the regulatory maze — and where the maze itself has weak walls.
---