Introduction

Germany's national biosecurity governance framework establishes legal, institutional and administrative safeguards for preventing the misuse of biological materials, pathogens, toxins and biotechnology research. Its purpose is to protect public health, national security, laboratory personnel and the environment while allowing legitimate scientific research and biotechnology development.

German biosecurity governance operates through several connected legal frameworks rather than one comprehensive biosecurity statute. These include the Infection Protection Act (Infektionsschutzgesetz – IfSG), the Biological Agents Ordinance (Biostoffverordnung – BioStoffV), the Genetic Engineering Act (Gentechnikgesetz – GenTG), the Foreign Trade and Payments Act (Außenwirtschaftsgesetz – AWG) and the EU Dual-Use Regulation 2021/821.

Legal framework governing national biosecurity

The Infection Protection Act provides the foundation for preventing and controlling infectious diseases. It establishes responsibilities for public health authorities and regulates the reporting, investigation and management of infectious disease risks. The Robert Koch Institute (RKI) plays a central scientific and public health role, particularly in disease surveillance and outbreak assessment.

The Biological Agents Ordinance regulates occupational activities involving microorganisms and other biological agents. Employers must assess biological risks, implement appropriate protective measures and ensure that employees receive suitable information and instruction. The ordinance also establishes requirements for containment, hygiene and safe working practices.

The Genetic Engineering Act regulates genetic engineering activities, including contained use and deliberate environmental release of genetically modified organisms. It requires appropriate safety measures, risk assessments and regulatory oversight.

The Foreign Trade and Payments Act, together with the Foreign Trade and Payments Ordinance (Außenwirtschaftsverordnung – AWV), controls certain exports and transfers involving sensitive biological materials and technologies. The EU Dual-Use Regulation establishes controls on items, software and technology that may have both civilian and military applications.

Institutional structure and regulatory authorities

Germany's biosecurity framework involves several federal institutions and specialised authorities.

Robert Koch Institute (RKI): The RKI provides scientific expertise on infectious diseases, epidemiological surveillance and public health protection. It supports national preparedness and helps assess biological threats.

Federal Office for Civil Protection and Disaster Assistance (BBK): The BBK coordinates aspects of civil protection and disaster preparedness. Its responsibilities include supporting federal and state authorities in preparing for major emergencies, including biological incidents.

Federal Office for Economic Affairs and Export Control (BAFA): BAFA administers important export-control procedures. It assesses applications involving controlled dual-use goods, technologies and biological materials under the applicable EU and German rules.

Federal Institute for Occupational Safety and Health (BAuA): BAuA supports the development and implementation of occupational safety rules, including those concerning biological agents.

Federal Office of Consumer Protection and Food Safety (BVL): The BVL has important responsibilities in the regulation of genetic engineering activities and certain biotechnology-related regulatory procedures.

Federal ministries, Länder authorities, public health offices and research institutions also contribute to implementation. This shared structure allows Germany to address biological risks from public health, workplace safety, environmental protection and national security perspectives.

Laboratory biosafety and institutional responsibility

Laboratories working with biological agents must establish risk-management systems appropriate to the nature of their activities. Under the BioStoffV, employers are responsible for conducting risk assessments and selecting protective measures.

The applicable requirements depend on the biological agent, its classification and the nature of the work. Laboratories must maintain appropriate containment arrangements, access controls, hygiene procedures and emergency-response systems.

Institutions must also ensure that employees receive suitable training and understand their responsibilities. Where genetic engineering activities are involved, additional requirements under the GenTG and GenTSV may apply.

These obligations are important because biosecurity is not limited to preventing accidental exposure. It also involves institutional responsibility, controlled access to sensitive materials, accountability and prevention of unauthorised use.

Dual-use research and export controls

A significant part of German biosecurity governance concerns dual-use research. Certain biological technologies can support medical research, vaccine development and industrial biotechnology but may also create security risks if misused.

The EU Dual-Use Regulation 2021/821 establishes controls on listed biological materials, equipment and related technology. Germany applies these requirements through its foreign trade legislation and BAFA's administrative procedures.

Exporters and research institutions must determine whether their activities involve controlled items or technology. Depending on the circumstances, authorisation may be required for exports, technical assistance or other regulated transfers.

The framework also requires attention to intangible technology transfers, including certain electronic transfers of controlled technical information. However, not every biological research activity or scientific publication is automatically subject to export licensing. The relevant control-list entries, transfer conditions and applicable exemptions must be examined.

National preparedness and biological incident response

Germany's biosecurity governance also includes preparedness for biological emergencies. The RKI provides scientific assessments and epidemiological information, while public health authorities carry out surveillance and relevant response functions.

The IfSG establishes mechanisms for reporting infectious diseases, investigating outbreaks and implementing legally authorised public health measures. The BBK supports civil protection planning and coordination in major emergencies.

The German National Pandemic Preparedness Plan and related public health arrangements support coordination between federal and Länder institutions. These systems are designed to improve information exchange, risk assessment and continuity of essential public services during biological emergencies.

Important case laws

1. Kalkar Decision, Federal Constitutional Court, BVerfGE 49, 89 (1978)

The Kalkar decision concerned the legal framework for nuclear technology rather than biological security. Nevertheless, it is relevant to the broader governance of technologically complex and potentially hazardous activities. The Federal Constitutional Court recognised the importance of administrative risk assessment, scientific evaluation and preventive state responsibility when regulating activities involving significant risks. Its reasoning provides a broader constitutional context for precautionary regulation, although it is not a direct biosecurity judgment.

2. Commission v United Kingdom, Case C-300/95 (1997)

This case concerned the classification of certain biological products under European medicinal-product legislation. The Court examined the application of EU regulatory requirements to products with biological characteristics. It demonstrates the importance of consistent European regulatory classification and oversight, which is relevant to the governance of biological products and associated safety controls.

3. National Farmers' Union, Case C-157/96 (1998)

The Court of Justice considered precautionary measures adopted during the BSE crisis. It recognised that protective measures may be justified where scientific uncertainty exists and a serious risk to public or animal health is identified. The judgment is relevant to German biosecurity governance because it supports evidence-based preventive action in response to biological threats.

4. Pfizer Animal Health SA v Council, Case T-13/99 (2002)

The General Court examined the precautionary principle in the context of scientific uncertainty and public health protection. It recognised that EU institutions may adopt protective measures where a risk assessment identifies potential dangers, even where scientific evidence is not conclusive. The judgment is relevant to biosecurity policy because it explains how authorities can respond to uncertain biological risks while remaining subject to legal and scientific review.

5. Schecke and Eifert, Joined Cases C-92/09 and C-93/09 (2010)

The Court of Justice examined the proportionality of public disclosure requirements involving personal data. Although the case did not concern biological security directly, it is relevant to biosecurity governance where public health surveillance and biological incident investigations involve sensitive personal information. It highlights the need to balance public interests with privacy and data-protection rights.

Conclusion

Germany's national biosecurity governance framework is based on coordinated legislation covering infectious disease prevention, laboratory safety, genetic engineering, export controls and civil protection. The IfSG, BioStoffV, GenTG, AWG and EU Dual-Use Regulation provide the principal legal foundations.

Institutions such as the RKI, BBK, BAFA, BAuA and BVL contribute specialised oversight and scientific support. The case law on precautionary regulation, technological risk and proportionality helps establish the legal principles governing preventive action. Together, these arrangements seek to protect public health and national security while preserving legitimate scientific research and biotechnology innovation.