Signal Watch

Week of March 9, 2026

The BIOSECURE Act was signed into law in December 2025. Most biotech companies are treating it like a 2027 problem.

It isn't.

Here's what the timeline actually looks like:

→ December 2026: OMB publishes the full restricted list of Chinese biotech companies of concern → +180 days: OMB issues implementing guidance for federal agencies → +1 year: FAR Council revises procurement rules. Restrictions become enforceable. → +5 years: Safe harbor window closes for existing contracts with designated entities

Sounds like plenty of time. It isn't — because FDA manufacturing site transfers take 2–4 years. By the time the list drops and companies scramble to switch suppliers, the window to act cleanly has already closed.

Who's most exposed:

CROs and CDMOs with deep Chinese manufacturing dependency. US life sciences companies that outsourced early and built their FDA approvals around a specific site. Early-stage biotechs running lean — they have the least redundancy and the fewest options.

The companies quietly repositioning right now — before the list is published — have leverage. After December 2026, it becomes a compliance emergency, not a strategic decision.

The restricted list drops in nine months. The repositioning is happening now.

molecule tracks the behavior, not the press release.