48 Days to the BCC List: The BIOSECURE Act's Real Choke Point Is Federal Procurement, Not Commercial Deals

The US BIOSECURE Act requires the Office of Management and Budget to publish its first list of Biotechnology Companies of Concern (BCC) by 18 December 2026. As of 31 October the list has not appeared, leaving 48 days on the clock. Enacted on 18 December 2025 as part of the FY2026 NDAA, the law replaced naming five Chinese companies outright with a recurring list mechanism and a two-and-a-half to three-year phased implementation. WuXi AppTec was added to the Section 1260H list in June, sued, and won a preliminary injunction; on its 27 October call management said it had received no OMB notice but acknowledged it could still be designated through an independent review. This piece maps the statute, the two designation routes, the actual scope of the restriction, and three indicators worth tracking.

As of 31 October, one statutory deadline is 48 days away: the White House Office of Management and Budget (OMB) must publish its first list of Biotechnology Companies of Concern (BCC) by 18 December 2026. No list has been released, and no draft has surfaced publicly. For global CXOs, this is the last unpriced factor of 2026.

But framing it as a countdown to decoupling misreads the statute. The law lands in a much narrower place, and on a much slower schedule, than the headlines suggest. It restricts federal procurement and federal funding, not commercial collaboration. Its effective dates sit in 2028, not next month. What matters is who the narrow gate eventually closes on.

The statute: from naming five companies to a standing list

The BIOSECURE Act was signed into law on 18 December 2025 as part of the FY2026 National Defense Authorization Act. The critical change from earlier drafts: the bill once named BGI, MGI, Complete Genomics, WuXi AppTec and WuXi Biologics directly. The final text stripped the names and instead directed OMB to publish a BCC list within one year of enactment, drawing on Department of Defense recommendations.

The significance of that switch is often underrated. Naming is static, litigable and bounded. A standing list is dynamic, renewable, and bounded only by administrative discretion. For a company, the first is a one-time verdict; the second is an annual physical.

There are two routes onto the list. The first is piggybacking: an entity is placed on the Defense Department's Section 1260H list of Chinese military companies, OMB confirms it operates in biotechnology equipment or services, and it is added to the BCC list. The second is an independent review: OMB leads an interagency process and designates a company as a biotechnology company of concern on its own findings. That route does not depend on Section 1260H, and is not constrained by the outcome of 1260H litigation.

WuXi AppTec sits precisely at that fork. On 8 June 2026 the Defense Department added the company to the formal 1260H list. On 11 June it sued in the US District Court for the District of Columbia, arguing the designation was erroneous and unsupported. On 7 August the chief judge granted a preliminary injunction barring enforcement of the designation while the case proceeds. On the 27 October earnings call, general counsel Howard Wu was careful: under the company's reading of the legal process, OMB cannot use a 1260H designation already enjoined to place the company directly on the BCC list; but as of that day the company had received no proposed designation or notice from OMB, had seen no published list, and acknowledged it could still be named.

In other words, the injunction removed the automatic transmission from one route. It did not remove the manual one.

Scope: federal procurement, not a commercial ban

The statute bars federal agencies from entering into, extending or renewing contracts for biotechnology equipment or services with BCC entities, from providing them grants, and restricts certain federal loan funding. It does not prohibit commercial companies from working with a BCC entity.

In practice that gap becomes a grey zone. Whether a US biotech keeps using a given Chinese CDMO remains a commercial decision in law. But once that biotech holds BARDA, ARPA-H or state funding, or its investors carry federal money, compliance preference drifts conservative on its own. The list's real function is not to sever transactions; it is to hand procurement teams a citable reason, synchronising thousands of dispersed commercial decisions at once.

That is also why the share-price reaction on publication day usually exceeds the real revenue impact. What it reprices is the discount rate on expectation, not the current order book.

The commercial counter-evidence: orders accelerating, not retreating

Set against the policy limbo, WuXi AppTec's third-quarter results are a useful counterweight. First-nine-month revenue reached RMB 45.54bn (+38.6%), with continuing operations growing more than 46%; net profit attributable to shareholders was RMB 19.40bn (+60.6%). Backlog in continuing operations stood at RMB 76.74bn (+36.4%), new orders grew more than 60% year on year, and third-quarter new orders alone exceeded RMB 27bn. The company raised full-year revenue guidance from RMB 58.5–60.5bn to RMB 61.0–61.9bn, and lifted the capex floor from RMB 7.5bn to RMB 8.0bn within an RMB 8.0–8.5bn range.

The geography of that capex is the more telling detail. The Middletown, Delaware site (budgeted at RMB 4.753bn) is due to start operations in Q4 2026 with oral solid dosage, extending into sterile injectables in Q4 2027. The Singapore site (RMB 7.8bn) starts phase one in 2027, supporting commercial API for small molecules and TIDES. The new 800-tonne Changzhou base, at RMB 10.109bn across roughly 630 mu, has been pulled forward.

Being added to 1260H while opening your largest US site is itself the answer: what customers want is not to leave China, but to hold a second production line under any policy scenario.

Editor's note: three indicators to watch

First, whether the 18 December list names the WuXi entities. If it does, the citation matters: a 1260H basis can be challenged with the same injunction, whereas an independent review implies OMB has built its own factual record, making a challenge materially harder.

Second, how the June 2027 implementation guidance defines a federal funding beneficiary. If the definition reaches subawards, cooperative agreements and federally funded foundation grants, exposure widens from direct contractors to the entire funding chain, and the BCC list's practical force will far exceed its letter.

Third, whether the June 2028 FAR revision imposes flow-down obligations on prime contractors. If it does, every prime holding a federal contract must push BCC screening into its supply chain, which would genuinely rewrite large pharma's supplier qualification process.

Read together, the remaining 48 days of 2026 look less like an ending than a recalibration of risk pricing. What CXOs actually need to prepare is a compliance file that can be audited at any point in 2027–2028: the federal funding share of the customer base, cross-border paths for data and samples, and substitute capacity. The list will arrive. Delivery capability still decides the outcome.