The most dangerous gap in American biosafety is not a missing lock on a freezer door — it is the absence of anyone whose job it is to add up the risk of hundreds of labs at once.
Key Points
- The Government Accountability Office has repeatedly found that no single federal agency is responsible for tracking the cumulative, national-level risk of high-containment laboratory expansion.
- The number of U.S. labs cleared to handle the deadliest pathogens grew from a handful before 2001 to well over a thousand facilities registered under the Federal Select Agent Program by the 2010s.
- A 2009 federal task force called for a coordinating entity and a national facility registry; over a decade later, no comprehensive public registry exists.
- Individual labs do face inspections and biosafety rules — the dispute is not whether any oversight exists, but whether it adds up to system-level accountability.
- Global expansion of BSL-3 and BSL-4 facilities is outpacing any comparable international coordination, leaving risk assessment fragmented across dozens of national systems.
How a Patchwork Became a System
High-containment laboratories exist to do necessary, even indispensable, work: studying anthrax, Ebola, novel influenza strains, and other pathogens capable of mass casualties, so that vaccines, diagnostics, and countermeasures can be developed before an outbreak forces the issue. The classification system — BSL-3 for airborne agents that are treatable, BSL-4 for agents with no cure or vaccine — governs the engineering and procedural controls inside a given facility. What it does not govern is how many such facilities should exist, where they should be sited, or who is accountable when their combined footprint grows faster than anyone is counting.
That expansion has been dramatic. GAO’s 2007 investigation found the number of BSL-4 facilities in the United States had risen from five before the 2001 anthrax attacks to fifteen, with more in planning. By the time GAO revisited the subject in 2014, it noted that BSL-3 and BSL-4 labs had proliferated “across federal, state, academic, and private sectors” since the late 1990s, accelerating sharply after 2001. Separate tallies put the number of CDC Select Agent Program–registered BSL-3 entities in the hundreds, and one analysis cites U.S. high-containment biological laboratories numbering well over a thousand when all categories are included — making the United States, by a wide margin, the world’s largest holder of this capacity.
The Core Finding: Nobody Is Adding It Up
This is where the evidence is least ambiguous. GAO’s testimony did not merely suggest weak coordination — it stated flatly that “no agency is responsible for determining the aggregate risks associated with the expansion of these labs,” and that experts warned the risk would only increase as expansion continued. In 2014, GAO went further: “No federal entity is responsible for strategic planning and oversight of high-containment laboratories,” and the expansion that had occurred since the 1990s “was not based on a government-wide coordinated strategy”. GAO characterized the resulting system in blunt terms — fragmented, and “largely self-policing”.
A 2009 Trans-Federal Task Force, convened specifically to address these concerns, reached a parallel conclusion and proposed concrete fixes: designate a federal entity to coordinate biosafety oversight, build a national registry of every high- and maximum-containment research facility, and require a thorough risk assessment of every protocol that might need such containment. The task force did not describe a system functioning adequately with minor gaps; it described “lapses in biosafety, lack of timely reporting of incidents, and lack of Federal oversight” as active areas of concern. GAO’s own 2009 recommendations called for the National Security Advisor to name a lead for a government-wide strategic evaluation — a recommendation that presumes no such evaluation existed.
Where the Rebuttal Holds — and Where It Doesn’t
It would be wrong to claim these laboratories operate lawlessly. Facilities working with the most dangerous select agents must register with the CDC and USDA, submit to periodic federal inspection, and follow biorisk management frameworks that require documented hazard identification and monitoring. The task force itself is proof that formal governance mechanisms exist and were actively being built out, not proof of a vacuum. Framing the sector as having “no rules” overstates the case; individual labs answer to real inspectors and real paperwork.
But that rebuttal answers a different question than the one GAO actually raised. Distributed compliance at the facility level is not the same thing as national accountability for the system as a whole, and nothing in the available record shows that a government-wide registry, a designated coordinating authority, or an aggregate risk model was ever established to close the gap GAO identified. The task force recommended a registry precisely because none existed; a decade-plus later, no consolidated public inventory of every BSL-3 and BSL-4 facility, its agents, and its incident history has surfaced. Multiple regulators each policing their own piece of the system is not the same as one entity capable of answering the question GAO posed: what is the cumulative risk of all this expansion, taken together? On the specific claim in dispute, the evidence favors GAO’s finding, largely uncontested on its own terms.
Why the Fragmentation Persists
The honest explanation is bureaucratic, not sinister. Expansion after 2001 was driven by urgent biodefense need — GAO itself credited the anthrax attacks as the catalyst — and in an emergency, speed took priority over coordination. Agencies built capacity to their own mission requirements, funded through their own budget cycles, without a shared national needs assessment. That produced exactly the pattern seen across other high-risk infrastructure sectors: rapid, mission-driven growth that outstrips the slower, harder work of building centralized visibility and standardized rules. The National Academies added a further wrinkle — that risk isn’t just internal to a lab’s procedures, but depends on local context: population density, endemic disease burden, and the reliability of surrounding utilities, factors no facility-level inspection regime is designed to weigh at a national scale.
A Global Version of the Same Problem
The oversight gap is not uniquely American. Reporting on the global picture describes a “boom” in BSL-4 and BSL-3+ construction worldwide, with no treaty and no single authority overseeing the sector internationally. Some countries maintain tight paper regulation; others effectively none, and there is no mechanism to reconcile the two into a coherent global risk picture. That asymmetry matters because pathogens do not respect the jurisdictional boundaries that current oversight is organized around — a containment failure anywhere is, in principle, a risk everywhere.
What Would Actually Resolve the Question
The fix identified by GAO, the task force, and outside reviewers has not changed in over a decade: a consolidated national registry of high-containment facilities, a designated coordinating authority, standardized incident reporting, and periodic independent audits testing whether reforms are actually implemented rather than merely recommended. None of that requires slowing legitimate biodefense research. It requires someone, somewhere in government, to finally be handed the job GAO said nobody currently holds — adding up the risk of a system that has grown, by any measure, far faster than its ability to be counted.
Years ago, I personally read –but sadly did not save– a study on vaccines for Corona viruses done at Galveston National Laboratory (GNL) at the University of Texas Medical Branch (UTMB). This study was done prior to the COVID-19 era. This study was done on Ferrets as I recall.…
— David Brown (@BoDogBrown) July 21, 2026
Sources:
youtube.com, gao.gov, ars.usda.gov, help.senate.gov, nationalacademies.org, hse.gov.uk
