The Public Health Security and Bioterrorism Preparedness and Response Act of 2002 requires food facilities to register with the FDA, importers to submit advance notice before food shipments enter the country, food businesses to keep records that trace products one step forward and one step back through the supply chain, community water systems to conduct vulnerability assessments, and facilities handling dangerous biological agents to register and meet strict security standards. The law was a direct response to the September 11 attacks and the anthrax mailings that followed, and it reshaped how the federal government monitors threats to the food supply, drinking water, and public health infrastructure.
Food Facility Registration
Any domestic or foreign facility that manufactures, processes, packs, or holds food for human or animal consumption in the United States must register with the FDA. This covers a broad range of operations: food manufacturers, processing plants, packaging facilities, and storage warehouses all fall under the requirement. Farms and restaurants are among the few exemptions.
Registered facilities must provide detailed information including the facility’s name, full address, phone number, and a unique facility identifier recognized by the FDA. They must also supply the name and contact details of the owner, operator, or agent in charge, along with an emergency contact phone number and email address. Foreign facilities are required to designate a U.S. agent who can serve as the point of contact with the FDA. The registration must list all trade names the facility uses, the food product categories it handles, and the type of activity conducted for each category.
One significant element: registered facilities must provide an assurance that the FDA will be permitted to inspect the facility at the times and in the manner allowed by law. This requirement was added by the Food Safety Modernization Act (FSMA) in 2011, which built on the original 2002 framework. FSMA also introduced biennial renewal, meaning food facilities must renew their registration every other year during the period from October 1 through December 31 of each even-numbered year.
Prior Notice for Imported Food
The Act requires anyone importing food into the United States to submit prior notice to the FDA before the shipment arrives. The specific timeframe depends on how the food is being transported:
- By road: at least 2 hours before arriving at the port of entry
- By rail: at least 4 hours before arrival
- By air: at least 4 hours before arrival
- By sea: at least 8 hours before arrival
This advance notification gives the FDA time to review incoming shipments and target inspections toward food that may pose a safety risk. Before the Act, there was no systematic way for the agency to know what food was entering the country or when it would arrive.
Recordkeeping and Traceability
The Act established what’s known as “one-up, one-back” recordkeeping. Every entity in the food supply chain must be able to identify the immediate previous source of any food it receives and the immediate subsequent recipient of any food it sends out. If a contamination event occurs, this creates a traceable path that investigators can follow quickly rather than spending days or weeks trying to reconstruct where a product came from and where it went.
These requirements remain in effect today and apply broadly across the food industry. They were later supplemented by FSMA’s Food Traceability Rule, which added more detailed recordkeeping for certain high-risk foods, but the original one-up, one-back framework from the 2002 Act still serves as the baseline obligation for food businesses.
Administrative Detention of Food
Before the Bioterrorism Act, the FDA had limited authority to hold food it suspected was unsafe. The Act gave the agency the power to administratively detain any food product found during an inspection, examination, or investigation if an FDA officer has reason to believe the food is adulterated or misbranded. This means the FDA can prevent a suspicious product from moving through the supply chain while it investigates, rather than relying solely on voluntary recalls by the company involved.
Drinking Water Security
Title IV of the Act addressed the security of the nation’s drinking water. It amended the Safe Drinking Water Act to require every community water system serving more than 3,300 people to conduct a vulnerability assessment, certify its completion, and submit a written copy to the EPA for secure storage. The assessments were designed to identify weak points in water infrastructure that could be exploited in a deliberate attack.
These original requirements have since been updated. In 2018, America’s Water Infrastructure Act replaced the vulnerability assessment framework with a broader mandate for risk and resilience assessments. Community water systems serving more than 3,300 people now must evaluate risks from both intentional attacks and natural hazards, covering everything from source water and treatment facilities to computer systems, chemical storage, and financial infrastructure. They must also develop emergency response plans.
Regulation of Biological Agents and Toxins
The Act created a federal registration and oversight system for laboratories and other facilities that possess, use, or transfer certain dangerous biological agents and toxins, known as “select agents.” These are pathogens and toxins that could potentially be weaponized, and the law gave the CDC and the USDA’s Animal and Plant Health Inspection Service joint authority to regulate them through the Federal Select Agent Program.
Facilities working with select agents must register with the program and meet requirements for biosafety, physical security, local oversight, reporting, and staff training. Every individual who works with these agents must undergo a security risk assessment performed by the FBI. The program’s goal is to prevent unauthorized access, theft, loss, or release of the most dangerous biological materials.
Penalties for Violations
The Act carries significant penalties. For violations related to the possession, use, or transfer of regulated biological agents, civil fines can reach $250,000 for an individual and $500,000 for an organization. Criminal penalties are steeper: knowingly possessing a select agent without proper registration, or transferring one to an unregistered person, can result in up to 5 years in prison, a fine, or both.
On the food safety side, failing to register a food facility or failing to submit prior notice for imported food can result in the FDA refusing entry of food shipments and taking enforcement action. The administrative detention authority also gives the FDA a practical tool to hold suspect food without needing a court order first, making enforcement faster in urgent situations.