The machinery between the statute and the laboratory

This article is a practitioner article. It is written for the principal investigator who signed an award without reading the terms and conditions, for the research administrator who fields the same panicked questions every grant cycle, and for the journalist trying to report accurately on a research scandal, a funding freeze, or a new security rule. It consolidates material that is scattered across more than a dozen agency websites, the Code of Federal Regulations, agency policy manuals, and OMB guidance documents. The information exists in public. It does not exist in one place, and the people who need it most rarely know which pieces to look for. The NSF’s Proposal and Award Policies and Procedures Guide runs to several hundred pages and changes annually; the NIH Grants Policy Statement is a separate, differently organized compendium; the Department of Energy publishes its own guides; and beneath all three sit the government-wide regulations at 2 CFR Part 200 and the FAR, each with agency supplements. A principal investigator working under two agencies is, in a real sense, working under two regulatory systems that share a vocabulary but differ in procedure. This article does not replace any of those sources, and it does not pretend that a single article could. Its purpose is orientation: a map of the whole terrain, drawn accurately enough that the reader can find the right document when it matters. Two boundaries are worth stating. This article covers the federal funding of research, not the parallel regimes of state law, institutional policy, or foreign funders, each of which adds its own layer. And it is descriptive rather than prescriptive: it explains what the law requires and how the machinery operates, leaving the reader’s own compliance counsel to answer what a particular situation demands.

The core problem is simple to state and difficult to fix. Congress authorizes research funding in statutes, and appropriations acts supply the money, but the rules that actually govern daily life in a funded laboratory live somewhere else entirely. They live in uniform regulations that apply across agencies, in agency-specific rules that differ in consequential details, and in compliance regimes that universities and hospitals build on top of the federal floor. Most researchers never learn this machinery. Graduate training teaches methods, statistics, and writing. It does not teach 2 CFR Part 200. The result is a workforce of extraordinarily skilled scientists who manage millions of dollars under legal instruments they have never read, in a system whose rules they discover only when something goes wrong: a rejected budget, a disallowed cost, a halted protocol, an audit finding. The research administrator who supports them operates under a different pressure. Under federal law, the institution, not the investigator, is the legal recipient of the award in most assistance cases, which means the university bears the compliance risk for the scientist’s decisions. Effort reporting, subrecipient monitoring, and the certifications an institutional official signs each carry legal weight that the signature line does not advertise. This article gives administrators the statutory and regulatory grounding behind the policies they enforce, so that enforcement reads as law rather than as bureaucracy.

That gap is not an accident of bad training alone. It reflects the structure of the law itself. Federal research funding law is, at its base, implementation law. The statutes that create NIH, NSF, and the Department of Energy’s research programs are authorization statutes; they say what the agencies may fund and how much. Appropriations acts then supply the money, usually with their own directives and limitations, which is why experienced administrators read the report language accompanying appropriations bills as closely as the bills themselves. The operative legal regime, the part that decides whether a particular expenditure is lawful, whether a particular consent form suffices, whether a particular investigation follows due process, sits in the layers beneath both. Reading an authorization statute against the uniform regulation that implements it is a distinct analytical skill, and a guide to how to read a federal statute walks through the method. This article takes those layers as its subject. It explains the six mechanisms that, taken together, are how federal research funding law actually works in practice.

The first mechanism is the most important, and it is the one this article leads with. Before any question about costs, compliance, or disclosure can be answered, one question must be answered first: what instrument is the funding? Federal research money reaches recipients through one of three instruments, and the Federal Grant and Cooperative Agreement Act of 1977 sorted the three with a clarity the statute’s own findings say the system previously lacked. A grant transfers money to support the recipient’s own research project, with the agency in the role of sponsor rather than customer. A cooperative agreement is also assistance, but the agency anticipates substantial involvement in carrying out the work, which changes the relationship between scientist and program officer. A procurement contract is something else again: the government is buying research as a service, the Federal Acquisition Regulation applies, and the recipient is a contractor with obligations that do not exist under assistance instruments. This sorting is not a technicality. As the Comptroller General observed when interpreting the 1977 act, very different requirements and consequences flow from the use of one instrument rather than another. The instrument is the switch that sets everything downstream. The distinction between a grant and a cooperative agreement turns on a specific legal test: whether the agency anticipates substantial involvement in carrying out the work. That test is not answered by the parties’ labels or their preferences; Public Law 95-224 instructs each executive agency to examine the principal purpose of the relationship and the degree of agency participation, and to select the instrument accordingly. The practical tell is in the work itself. When the agency merely funds an investigator’s proposed project and monitors progress through reports, the relationship is a grant. When agency scientists sit on steering committees, approve protocols, or direct aspects of a multi-site trial, as in the large cooperative research programs NIH and other agencies run, the substantial-involvement condition is met and the cooperative agreement is the correct instrument. Agencies that get this wrong invite protests, audits, and legal challenges over the validity of the award, which is why the sorting exercise at the start of a program is one of the most consequential legal decisions in the funding process.

The second mechanism is the one that governs money. The Uniform Guidance, codified at 2 CFR Part 200, is the federal government’s single set of administrative requirements, cost principles, and audit requirements for federal awards. It is the reason a university cannot simply charge its rent to a grant, the reason salary charges must be supported by records that reflect the work actually performed, and the reason equipment bought with federal funds carries conditions after the award ends. The framework also contains the audit regime: recipients that expend a threshold amount of federal funds in a fiscal year must undergo a single audit examining their financial statements and their compliance with federal requirements, and audit findings can trigger repayment demands years after the research was completed. Woven into this framework is the indirect cost system, the mechanism by which institutions recover the costs of the research infrastructure itself: buildings, utilities, libraries, the offices that process the awards. The indirect cost rate, negotiated between each institution and the federal government, is one of the most misunderstood numbers in science policy. It is not overhead in the colloquial sense of waste; it is the price of the platform the research stands on. Journalists who report a fifty percent indirect rate as a scandal have usually misunderstood what the number contains, and researchers who ignore it misunderstand what their institution actually charges for.

The third mechanism is merit review, the process by which proposals are selected. The public image of this process is often reductive: smart people read proposals and pick the best. The reality is a formal legal and administrative apparatus with statutory roots, agency regulations, and documented procedures. NSF panels evaluate proposals against two explicit criteria, intellectual merit and broader impacts, and the agency’s process is codified in its Proposal and Award Policies and Procedures Guide. NIH uses a dual review system in which study sections score applications and advisory councils provide a second level of review, a structure that reflects both the scale of the NIH portfolio and the legal demand that funding decisions be defensible against charges of arbitrariness. Both systems exist to answer a legal question as much as a scientific one: given that Congress appropriated these funds for research, by what defensible procedure does the agency decide which research receives them? Understanding merit review matters for reasons beyond winning grants. When funding decisions are challenged, when Congress questions agency priorities, and when applicants suspect bias, the answer runs through these procedures. The history of this tension is instructive: Congress has repeatedly considered directing funds to particular projects or institutions through earmarks, and the research community’s defense has consistently been the merit review system itself, presented as the mechanism that keeps the allocation of science funding accountable to expertise rather than to politics. A reader who understands the review apparatus can evaluate those debates on their terms instead of their slogans.

The fourth mechanism is the protection of human subjects, the oldest and most institutionalized of the compliance regimes. The Common Rule, the federal policy codified at 45 CFR Part 46, sets the requirements for research involving human participants: institutional review board review, informed consent, and the categorization of risk. Its roots run through the National Research Act of 1974 and the Belmont Report, but its daily operation is a matter of institutional machinery that every funded university maintains. In practice, the Common Rule’s most-used provisions are its categories: exempt research, expedited review categories, and the elements of informed consent, which together determine whether a study faces full board review or a lighter path. Researchers who learn these categories at the design stage save months; researchers who learn them after data collection face the harder problem of retroactive compliance. For researchers, this regime is the one they are most likely to encounter directly, because no protocol means no data collection. For administrators, it is the compliance area with the most visible enforcement history, including the suspension of entire institutions’ research programs when the Office for Human Research Protections found systemic failures in their protections. Understanding the Common Rule as a legal regime, rather than as a bureaucratic obstacle to be cleared, changes how a researcher approaches study design, and it changes how a journalist should read a story about a controversial experiment.

The fifth mechanism is research misconduct, the regime that governs what happens when the integrity of the research record itself is at issue. The federal definition is deliberately narrow: fabrication, falsification, and plagiarism, with intent or reckless disregard, in proposing, performing, or reviewing research or in reporting research results. It excludes honest error and differences of opinion, and that exclusion is as important as the definition. The Office of Research Integrity at the Department of Health and Human Services, together with agency offices at NSF and elsewhere, sets the procedural requirements that institutions must follow when allegations arise: separation of the inquiry from the investigation, confidentiality protections, and the standard of evidence. This architecture grew out of the misconduct controversies of the 1980s, which showed that neither informal handling nor criminal prosecution fit the problem, and the federal definition issued through the Office of Science and Technology Policy in 2000 was deliberately drawn to keep the category narrow. For researchers, this is the regime most likely to end a career, and the one least likely to be understood before it is needed. For journalists, it is the regime behind every retraction scandal, and reporting on such scandals without understanding the definition produces the recurring error of treating every retraction as fraud. A related error appears in reporting on funding policy itself: the conflation of authorization with appropriation, so that a bill that authorizes a program is reported as though it funded one; the treatment of an indirect cost rate as evidence of waste; the assumption that a suspended award means a finding of misconduct. Each of these mistakes is avoidable with the map this article provides, and each of them misinforms the public debate about how research money works.

The sixth mechanism is the newest and the most politically charged: the requirements around public access, disclosure, and research security. Public access policies require that peer-reviewed manuscripts from federally funded research be made available to the public, and data-sharing requirements have extended that obligation to the underlying research data, a regime built through appropriations riders and agency implementation rather than through a single authorization statute. Disclosure requirements, principally the financial conflict of interest regulations issued by HHS and NSF, require institutions to identify and manage situations where an investigator’s financial interests could bias the research. Research security requirements, driven by national security policy directives and implementing agency rules, address foreign talent recruitment programs, undisclosed foreign appointments, and the vetting of international collaboration. These three strands are often discussed as though they were one policy, and they are not; they have different legal bases, different enforcement mechanisms, and different consequences. But they share a practical feature: each of them reaches past the laboratory into the researcher’s relationships, affiliations, and obligations outside the funded project. This sixth mechanism is also the one where the boundary between law and policy is most contested. Research security rules implicate open-science norms that the research community regards as foundational, and each new requirement generates the same debate: how much of the openness that makes science work can the system trade for security without changing what the research is. The law does not resolve that debate; it only sets the current terms. This article presents those terms as they stand, with the legal sources each requirement rests on, so the debate can proceed from facts.

Six mechanisms, then, and a question the article will return to repeatedly: how do they connect? The answer is the claim stated at the outset, and it is the claim this article asks the reader to carry through every section. The instrument decides the rules. Whether an award is a grant, a cooperative agreement, or a procurement contract determines which regulatory framework applies, which cost principles govern, what the agency may and may not require, who owns the resulting intellectual property, and what happens when the relationship breaks down. It even determines where disputes go: a contractor’s claim under a procurement contract is governed by the Contract Disputes Act, with its own boards and its own procedures, while a dispute over a grant follows the agency’s administrative process and, ultimately, a different judicial path. Two researchers doing identical bench work under different instruments can face different rules on costs, different obligations on invention disclosure, and different forums for resolving the same disagreement with the agency. That is not a flaw in the system; it is the system. The same instrument sensitivity governs the ending of an award. A procurement contract may be terminated for the government’s convenience, with a defined settlement procedure under the FAR; a grant may be suspended or terminated by the agency for cause or, in some circumstances, ended at the recipient’s request, under the administrative requirements of 2 CFR Part 200 and the agency’s own terms. The remedies available, the notice required, and the appeals open to the recipient all follow from the instrument, which is why experienced counsel ask for the award document before offering any advice about a funding dispute. The Uniform Guidance applies to grants and cooperative agreements; procurement contracts live under the Federal Acquisition Regulation instead. A cooperative agreement permits the agency’s substantial involvement in the science; a grant does not. The Bayh-Dole Act’s patent provisions, which allow universities and small businesses to elect title to inventions made with federal support, attach differently depending on the instrument and the agency, and the march-in and government-use rights that temper those provisions are another instrument-sensitive layer. Every compliance regime in this article is shaped, at the margin or at the core, by the instrument through which the money flowed. Researchers who learn one thing from this article should learn this: identify the instrument first, and the rest of the machinery becomes legible.

The order of the sections that follow tracks the life of an award. The instruments come first because the instrument is chosen at the moment of award and conditions everything after. The cost principles and the merit review system follow, because they govern how the money may be spent and how it was assigned. Human subjects protection, research misconduct, and the disclosure regimes run through the life of the research itself, and the article treats them in the order a researcher is likely to encounter them: the protocol before the data, the allegation after the publication, the disclosure obligations throughout.

That is where the article begins in earnest. The next section takes up the three instruments in full: the 1977 act that defines them, the legal test that distinguishes a grant from a cooperative agreement from a procurement contract, and the practical consequences of each choice for the researcher who receives the award. Before the instruments, though, it is worth naming the historical arc that produced them. In the decades before Public Law 95-224, agencies used the words grant, contract, and cooperative agreement loosely, and the confusion the statute’s findings describe was not theoretical: the same relationship might be called a grant at one agency and a contract at another, with different rules attaching by accident of nomenclature. The 1977 act imposed a discipline of classification. Four decades later, the Uniform Guidance imposed a discipline of consolidation, merging the cost principles and administrative requirements that had previously been spread across a set of OMB circulars. The machinery described in this article is the product of both disciplines, and each section below should be read with that history in mind: first the law learned to name the instruments, then it learned to write one rulebook for them.

The Three Instruments the 1977 Act Commands Agencies to Choose Among

Every federal research award travels through one of three legal channels, and the choice is not stylistic. The Federal Grant and Cooperative Agreement Act of 1977, Public Law 95-224, enacted February 3, 1978, tells each executive agency that it shall use a particular instrument for a particular relationship, using mandatory language that leaves no room for habit or preference. The statute, now recodified at 31 U.S.C. 6303 to 6305, defines the grant, the cooperative agreement, and the procurement contract by the purpose of the relationship and the expected degree of federal participation, and it assigns each instrument a section of the code. A grant reflects a relationship whose principal purpose is to transfer money, property, services, or anything of value to a state, a local government, or another recipient in order to accomplish a public purpose of support or stimulation authorized by federal statute, with no substantial involvement anticipated between the agency and the recipient during performance. A cooperative agreement reflects the same transfer-for-public-purpose relationship, but with substantial federal involvement expected during the performance of the contemplated activity. A procurement contract reflects a relationship whose principal purpose is acquisition, by purchase, lease, or barter, of property or services for the direct benefit or use of the federal government. The PL number alone records the congressional intent: before this law, agencies labeled assistance and acquisition instruments inconsistently, and the 1977 act imposed a uniform, purpose-based taxonomy. Grants and cooperative agreements are financial assistance instruments. They fall under the administrative requirements and cost principles of the Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards at 2 CFR Part 200, agency supplements, and the program’s authorizing statute. Procurement contracts are acquisition instruments. They fall under the Federal Acquisition Regulation and the contract clauses the agency inserts, which govern inspection, delivery, payment, disputes, and termination in ways assistance rules do not. Misclassifying the instrument therefore misplaces the award in the wrong regulatory regime, and the consequences reach audit liability, intellectual property treatment, and the government’s lawful role in the work.

The Grant: Transfer Without Substantial Federal Involvement

The grant is the instrument of investigator-initiated research. Its defining feature is that the government selects, funds, and then stands back. The National Institutes of Health R01 award, the National Science Foundation standard grant, and comparable basic research awards from the Department of Energy Office of Science are grants because the principal investigator proposes the question, the peer review system evaluates the approach, and the agency’s subsequent role is limited to routine oversight that the statute and case practice do not count as substantial involvement. Routine oversight includes reviewing annual progress reports, monitoring financial expenditure reports, conducting site visits, providing standard technical assistance, and enforcing the terms and conditions of the award. These activities, because they are monitoring and compliance functions rather than direction of the research, preserve the grant character of the award. A program officer who suggests a helpful citation during a site visit has not converted the grant into a cooperative agreement. An agency that dictates the experimental design has.

The grant recipient retains broad control over how the work is performed. The principal investigator decides the methods, the sequence of experiments, the personnel, and the allocation of funds among the approved budget categories, subject to the rebudgeting rules and prior-approval requirements that each agency publishes. The recipient also generally holds title to inventions arising under the award under the patent rights provisions of the Bayh-Dole framework, with the government retaining a paid-up, nonexclusive license and march-in rights. This combination, control of the science plus ownership of the resulting intellectual property, is why universities and research institutes prefer grants. Because the grant assumes no substantial involvement, the agency’s leverage during performance is deliberately limited. It can reduce or terminate funding for nonperformance, require corrective action on compliance findings, and withhold future support. It cannot reassign the project to a different laboratory, order the investigator to pursue a different hypothesis, or insert government personnel into the research team as working members. When an agency discovers midstream that it needs that level of direction, the award was the wrong instrument from the beginning, and the statute says the agency should have used a cooperative agreement instead.

The Cooperative Agreement: Transfer With Substantial Federal Involvement

The cooperative agreement exists for work the government wants to support while actively shaping. Section 6305 of title 31 requires the instrument whenever the principal purpose is the same transfer for a public purpose, but substantial involvement is anticipated between the executive agency and the recipient during performance. The line between routine oversight and substantial involvement is the most litigated boundary in assistance law, and agencies articulate it in their own policy guidance. The Environmental Protection Agency, which publishes an explanatory page on the 1977 act, treats involvement as substantial when the agency’s project officer participates in project activities, while routine monitoring and technical assistance do not cross the line. Department of Energy guidance makes the same structural point: the distinguishing feature of the cooperative agreement is substantial involvement between the department and the recipient during performance of the funded activity.

In research practice, substantial involvement takes recognizable forms. The agency may participate in designing the research protocol, specifying data collection and analysis methods, or approving each stage of a multi-phase project before the recipient may proceed to the next stage. In clinical and field research, federal scientists may serve as co-investigators alongside the recipient’s team, with genuine scientific roles rather than observational ones. In center and facility awards, the agency may participate in program management, coordinate training of grantee staff, or direct how a shared facility allocates instrument time among user groups. The National Science Foundation’s cooperative agreements for large facilities, such as observatories, telescopes, and research vessels, and for its Science and Technology Centers, follow this pattern: the government is not buying a result for its own use, which would make the instrument a contract, but it is far too involved in steering the enterprise to call the relationship a grant. The National Institutes of Health uses cooperative agreements for clinical trial networks and large consortium programs in which agency scientists sit on steering committees and approve protocol amendments.

The instrument changes the compliance posture in specific ways. The award’s terms and conditions spell out the agency’s substantial involvement in unusual detail, because both sides need a written record of where government direction ends and recipient performance begins. The recipient reports to a program officer who is a participant rather than an observer, and disputes about the scope of involvement are resolved against that written record. Intellectual property treatment under cooperative agreements is generally the same as under grants for research institutions, since the Bayh-Dole framework applies to funding agreements broadly, but the agency’s deeper involvement often means more detailed data-sharing plans and, in consortium awards, interinstitutional agreements that allocate rights among multiple performers before the work begins.

The Procurement Contract: Acquisition for the Government’s Direct Benefit

The procurement contract is not assistance at all. Section 6303 of title 31 requires it whenever the principal purpose of the instrument is acquisition, by purchase, lease, or barter, of property or services for the direct benefit or use of the federal government. The statute adds a second trigger: the contract is also the proper instrument whenever an executive agency determines in a specific instance that a procurement contract is appropriate. The test is functional, not nominal. An award labeled “grant” that actually buys a specified deliverable for the government is a contract in substance, and courts, auditors, and the Government Accountability Office evaluate the substance of the relationship rather than the label the agency attached.

In research funding, the contract instrument appears wherever the government is the customer. The Defense Advanced Research Projects Agency and the military services award research contracts when a program office needs a specific technology developed to specification, with defined milestones, deliverables, and acceptance criteria. The Department of Energy’s national laboratory management and operating contracts are procurement contracts of enormous scale, under which contractors operate government-owned facilities to produce research outcomes the government directs and uses. Agency-sponsored studies with precise statements of work, such as a statistical survey an agency needs conducted to its own design or a technical evaluation commissioned to answer a question for its own decision-making, are contracts because the government is acquiring the answer for its own use rather than stimulating research the performer undertakes for a public purpose.

The contract regime is the most restrictive of the three. The Federal Acquisition Regulation governs, with its clauses on changes, inspection and acceptance, default, and disputes. The government may direct the work through contract modifications, subject to the equitable adjustment provisions of the changes clause. Intellectual property rights are governed by the FAR and Defense Federal Acquisition Regulation Supplement patent and data rights clauses rather than the assistance framework, and the government routinely obtains broader rights in technical data generated under contract than it obtains under a grant. Disputes go to the contracting officer and, if unresolved, to the boards of contract appeals or the Court of Federal Claims under the Contract Disputes Act, a forum structure that has no parallel in assistance law.

How Agencies Determine Substantial Involvement in Practice

The statute announces the test but does not define it, so agencies define it through policy, program solicitations, and the written terms of individual awards. The operative question is always prospective: at the time the award is made, does the agency anticipate involvement that goes beyond routine monitoring and technical assistance during performance? The determination is made by the program office and the grants or contracts office together, and it is recorded in the funding announcement and the award document. By the time a solicitation reaches the public, the instrument has already been chosen.

The practical markers of substantial involvement cluster around decision rights. If the agency will approve the research protocol before work begins, or approve each phase before the next phase may start, that is substantial involvement. If agency scientists will participate in data collection, data analysis, or interpretation as working collaborators, that is substantial involvement. If the agency will coordinate the activities of multiple recipients in a consortium, assign tasks among them, or provide training to recipient staff that shapes how the work is done, that is substantial involvement. The gray zone is real, particularly in clinical research where an agency’s safety monitoring looks like involvement but functions as oversight, and in center awards where coordination can shade into direction. Agencies resolve the gray zone by writing the anticipated involvement into the solicitation and the award terms with specificity, so that the recipient knows before accepting exactly which decisions the government will make.

One persistent source of confusion deserves direct correction. An agency’s deep involvement in selecting the award does not determine the instrument. Peer review, programmatic selection, budget negotiation, and extensive presubmission discussions are selection activities, not performance activities, and the test looks only at what happens during performance. An intensely competitive award can still be a grant if the government stands back during performance, and a minimally competitive award can be a cooperative agreement if the agency will be deeply involved once work starts. Researchers who read an involved selection process as evidence of a cooperative agreement are reading the wrong part of the timeline.

How the Instrument Determines the Compliance Regime

The instrument choice cascades through the entire compliance structure of the award, which is why misclassification is expensive. Grants and cooperative agreements, as financial assistance, are administered under the Uniform Guidance at 2 CFR Part 200, which standardizes administrative requirements, cost principles, and audit requirements across federal agencies. The Uniform Guidance governs allowable costs, procurement standards for the recipient’s own purchasing, financial and performance reporting, records retention, and the single audit requirements for recipients expending federal funds above the statutory threshold. Agency supplements add program-specific terms, and the award’s own terms and conditions complete the picture. Procurement contracts operate under the Federal Acquisition Regulation, which imposes a different and generally more demanding set of requirements: cost accounting standards for certain contracts, the disputes process under the Contract Disputes Act, termination for default and for convenience, and the protest remedies available to competitors.

The recipient’s internal administration must track which regime applies to each award, because the rules on common transactions differ. A rebudgeting decision that requires no prior approval under a grant’s terms may require a contract modification under a procurement contract. A no-cost extension that an agency grants routinely for assistance may be structured differently under a contract. Cost allowability principles overlap but are not identical, and an auditor applying the wrong regime’s principles to an award will produce findings that do not map to the award’s actual terms. The accounting system of a university or research institute must therefore tag each award with its instrument and route compliance questions to the correct rule set, a discipline that sounds elementary and fails constantly in practice.

Intellectual property treatment follows the instrument as well. Under grants and cooperative agreements, the Bayh-Dole framework generally permits the recipient, when it is a small business or nonprofit organization, to elect title to inventions made with federal funding, subject to the government’s license and march-in rights. Under procurement contracts, the FAR and agency supplements govern patent rights and, importantly, rights in technical data and computer software, where the government commonly receives unlimited or government-purpose rights in data first produced under the contract. A research organization that assumes its standard Bayh-Dole election rights apply to a contract deliverable may discover that the data rights clause allocates rights differently, and the discovery usually arrives during a technology transfer negotiation, which is the worst possible time.

Concrete Examples Across the Research Enterprise

The three instruments map onto recognizable funding patterns. Investigator-initiated basic research is the province of the grant. A university professor who proposes a novel approach to quantum materials to the National Science Foundation, or a biomedical hypothesis to the National Institutes of Health, receives a grant when the agency’s role after award is limited to monitoring progress and enforcing terms. The researcher owns the scientific direction, the agency owns the oversight function, and the public purpose is the advancement of knowledge.

Center, facility, and consortium awards are the province of the cooperative agreement. A multi-university engineering research center in which the funding agency participates in strategic planning, a shared observatory operated under agency oversight of its scientific program, or a clinical trial network in which federal scientists sit on the steering committee and approve protocol changes, all fit the cooperative agreement because substantial federal involvement is expected from the outset. Contract research acquired for a program office is the province of the procurement contract. A defense agency that needs a prototype sensor built to its specification, with milestones the government will inspect and accept, awards a contract. The Department of Energy’s management and operating contracts for its national laboratories are contracts because the government owns the facilities and directs the mission, even though the work performed is research. In each case the government is the customer, the deliverable is defined, and the relationship is acquisition.

Common Mistakes Researchers and Administrators Make

The most common mistake is treating the words as interchangeable. Faculty say “I got a grant from DARPA” when they received a research contract, or “my NIH contract” when they hold a cooperative agreement, and the vocabulary error signals a compliance risk. A principal investigator who believes a contract is a grant may ignore delivery milestones, assuming the flexible reporting rhythm of assistance applies, and discover the error only when the contracting officer issues a cure notice. An administrator who treats a cooperative agreement like a grant may fail to route key decisions through the agency program officer whose approval the substantial-involvement terms require, creating performance disputes that the written terms would have prevented.

A second mistake is assuming the instrument from the funding announcement’s general subject matter rather than reading the award. Program officers sometimes use “grant” colloquially in conversation, solicitations sometimes describe the program in assistance language while the resulting instrument is a contract, and institutional habit sometimes leads a grants office to process a procurement contract through its assistance procedures. The award document itself states the instrument, the terms and conditions cite the governing regime, and the presence of FAR clauses or Uniform Guidance citations settles the question. Every award should be classified at setup by reading the award document, not by remembering how the program worked last year.

A third mistake is assuming that a mislabeled instrument can be administered according to its label. It cannot. The legal character of the relationship follows the substance of the statutory test, not the title on the award. A procurement labeled as a grant is still subject to acquisition rules when the government is buying for its own use. The remedy for misclassification is reclassification through the proper administrative process, which may require deobligating and re-awarding, not silent administration under the wrong rules.

A fourth mistake is failing to track the instrument across subawards and subcontracts. A university holding a grant issues subawards under the Uniform Guidance; a university holding a procurement contract issues subcontracts under the FAR flow-down clauses, a materially different undertaking with different competitive, cost, and audit requirements. Confusion at the prime level compounds at the subrecipient level, where a small organization’s entire compliance posture may be built on the wrong regime.

How the Instrument Choice Interacts With the Wider Compliance Regime

The instrument is the load-bearing decision on which the rest of the compliance structure rests. The sections of the article that address cost principles, audit requirements, research misconduct, human subjects protections, and export controls all operate within the frame the instrument establishes. Cost allowability is determined by the Uniform Guidance for assistance instruments and by the FAR for contracts, so the allowability analysis must begin by identifying the instrument. Audit exposure differs because the single audit framework under the Uniform Guidance applies to assistance, while contract audits follow the FAR and agency contract audit procedures. Intellectual property provisions allocate rights differently across the instruments, and data rights under contracts deserve separate attention because the government commonly receives broader rights in technical data first produced under a contract than it obtains under a grant.

The instrument also determines which remedies and forums are available when things go wrong. A grantee disputing an agency decision works through the agency’s grant appeals process and, ultimately, the federal courts under administrative law principles. A contractor disputing a contracting officer’s decision proceeds under the Contract Disputes Act to the boards of contract appeals or the Court of Federal Claims. A disappointed applicant for a grant has no bid protest remedy; a disappointed offeror for a contract has protest rights at the Government Accountability Office and the Court of Federal Claims. These are not procedural footnotes. They determine who can challenge what, before whom, and on what timeline, and they flow directly from the choice the 1977 act required the agency to make at the outset.

The obligation table

Requirement	Source	Entity responsible for compliance	Consequence of failure
Instrument selection	Federal Grant and Cooperative Agreement Act of 1977, 31 U.S.C. 6303 to 6305	Federal awarding agency	Award administered under the wrong regulatory regime, with audit findings and legal challenges to award validity
Uniform Guidance compliance	2 CFR Part 200	Recipient institution	Disallowed costs, repayment demands, suspension or termination of the award
Indirect cost negotiation	2 CFR Part 200, Appendix III	Institution and cognizant federal agency	Unrecovered infrastructure costs, disallowed charges, and audit findings
Merit review	42 U.S.C. 289a for NIH; 2 CFR 200.204 for other agencies	Federal awarding agency	Indefensible award decisions, legal challenge risk, and congressional scrutiny
IRB review	National Research Act of 1974; 45 CFR Part 46 Common Rule	Institution through its institutional review board	Suspension of research programs and loss of federal funding
Informed consent	45 CFR Part 46, Subpart A	Investigator and institutional review board	Protocol disapproval and data that cannot lawfully be used
Misconduct process	OSTP Federal Policy on Research Misconduct; 42 CFR Part 93	Institution, with federal oversight by ORI or the agency inspector general	Debarment from federal funding, employment termination, and retraction of publications
Public access deposit	NIH Public Access Policy under Public Law 110-161; agency public access plans	Investigator with institutional support	Delayed awards and withheld continuations
Data sharing plan	NIH Data Management and Sharing Policy; NSF Proposal and Award Policies and Procedures Guide	Investigator	Noncompliance findings affecting future funding decisions
Disclosure of other support	Agency disclosure policies; CHIPS and Science Act research security provisions	Covered individual and institution	Award termination, debarment, and loss of funding eligibility
Foreign talent program prohibition	CHIPS and Science Act of 2022, 42 U.S.C. 19237	Covered individual and institution	Loss of federal funding and certification violations
Single audit	2 CFR Part 200, Subpart F	Recipient institution	Repayment demands, questioned costs, and enforcement actions
Financial conflict of interest	HHS and NSF financial conflict of interest regulations	Institution through its designated conflict of interest office	Award suspension and required management plans

The Uniform Guidance: one rulebook for federal awards

Before 2013, the rules governing federal grants were scattered across separate Office of Management and Budget circulars, and each type of recipient learned a different one. Universities followed Circular A-21 for cost principles, Circular A-110 for administrative requirements, and Circular A-133 for audits. State and local governments followed Circulars A-87 and A-102. Nonprofit organizations followed Circular A-122. The circulars overlapped, their language drifted apart over the years, and a university running one project with state partners and nonprofit subrecipients could find itself answering to three versions of nominally the same rule.

On December 26, 2013, the Office of Management and Budget published the Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (78 Federal Register 78590), codified at 2 C.F.R. Part 200 and universally called the Uniform Guidance. The rule superseded all six circulars at once and replaced them with a single governmentwide framework. Federal agencies implemented it for awards issued on or after December 26, 2014, with the audit provisions taking effect for recipient fiscal years beginning after that date. The Department of Education’s published guidance summarizes the purpose in three parts: improve program performance, reduce administrative burden on recipients, and mitigate the risk of inappropriate use of federal funds.

The Guidance governs the full life cycle of a federal award to a non-federal entity: pre-award rules for how agencies announce, review, and document awards; post-award administrative requirements for financial management, property, procurement, and reporting; cost principles deciding which costs are allowable, allocable, and reasonable; and audit requirements that verify compliance. Its scope covers federal financial assistance, principally grants and cooperative agreements. Each federal agency adopts the Guidance through its own implementing regulations (for example, the Department of Health and Human Services at 45 C.F.R. Part 75, the Department of Agriculture at 2 C.F.R. Part 400, and the Department of Education at 2 C.F.R. Part 3474).

Applicability runs to states, local governments, institutions of higher education, and nonprofit organizations as a matter of course under 2 C.F.R. section 200.101, with application to for-profit organizations and foreign entities left to agency discretion. Agencies may not impose requirements that add to or conflict with the Guidance unless a federal statute, regulation, or executive order specifically demands it. The regulation is organized into subparts: A (definitions), B (general provisions), C (pre-award requirements), D (post-award administration), E (cost principles), and F (audit requirements, the home of the Single Audit). Specialized rules ride in the appendices, and for research institutions the most consequential is Appendix III, which prescribes how indirect costs are identified, assigned, and converted into a rate for institutions of higher education.

The Guidance is not frozen. The Office of Management and Budget published a substantial revision on April 22, 2024, with the changes generally effective for awards issued on or after October 1, 2024. Three changes touch the indirect cost system directly. The revision raised the de minimis indirect cost rate, the fallback rate for organizations without a negotiated rate, from 10 percent to 15 percent of modified total direct costs. It raised the Single Audit threshold from $750,000 to $1,000,000 in federal expenditures during a recipient’s fiscal year. And it clarified that federal agencies and pass-through entities may not require recipients or subrecipients to accept a rate lower than the de minimis rate unless a statute or regulation mandates it.

Direct costs, indirect costs, and the F&A vocabulary

Every research grant budget rests on a distinction the Uniform Guidance treats as foundational. Direct costs can be identified specifically with a particular project: the portion of the principal investigator’s salary devoted to the award, the postdoctoral researcher’s stipend, the reagents consumed in the experiments, travel to present the results. Indirect costs are incurred for common or joint objectives and cannot be readily assigned to one award: the building housing the laboratory, the electricity powering it, the sponsored programs office that negotiated the award terms, the library collections the researchers consult. In research policy these are called facilities and administrative costs, universally shortened to F&A or simply indirect costs.

Appendix III to Part 200 sorts indirect costs into two pools and names their contents. The facilities pool covers depreciation of buildings and equipment, interest costs, operation and maintenance expenses, and library expenses. The administrative pool covers general administration and general expenses, departmental administration, sponsored projects administration, and student administration and services. Those categories define what each dollar of the negotiated rate is supposed to represent, and an institution’s cost proposal must reconcile its indirect cost figures to audited financial statements pool by pool before a federal negotiator accepts them.

The rate is not applied to the whole award. It is applied to modified total direct costs, abbreviated MTDC. Under 2 C.F.R. section 200.1, MTDC includes salaries, wages, and fringe benefits of project personnel, materials and supplies, services, travel, and the first $50,000 of each subaward. It excludes equipment, capital expenditures, charges for patient care, rental costs, tuition remission, scholarships and fellowships, participant support costs, and the portion of each subaward above $50,000. The exclusions keep the rate from being charged against spending that does not consume the shared infrastructure the rate pays for; a grant that buys a $300,000 instrument generates no indirect recovery on that instrument.

The arithmetic is simple and widely misunderstood. The Congressional Research Service’s explainer on university indirect costs (R48540) walks through a hypothetical: for an institution with a 50 percent indirect cost rate, every federal dollar awarded for modified total direct costs draws an additional 50 cents for indirect costs. A 50 percent rate does not mean half the award supports indirect costs. Because the rate applies to the MTDC base, which excludes the categories above, the indirect share of the total award is smaller than the rate number suggests. CRS emphasizes the point because public debate routinely reads a 50 or 60 percent rate as a 50 or 60 percent markup on the whole grant, and the mechanics say otherwise.

How the rate gets negotiated

The rate is not set by the university alone, and it is not set by the funding agency issuing any particular grant. It is negotiated between the institution and a cognizant federal agency for indirect costs, a designation assigning one agency to act as the government’s negotiator for that institution across all federal awards. The institution submits an indirect cost proposal documenting its F&A costs by pool, allocating them across its functions (organized research, instruction, other sponsored activities), and reconciling the figures to its financial statements. The cognizant agency reviews the proposal, audits the underlying costs, and negotiates the rates that appear in a formal rate agreement, which other federal agencies then use for their own grants, contracts, and cooperative agreements to that institution rather than negotiating separately.

Rates come in several types, and the agreement names which type applies. Predetermined rates are fixed for a defined period for forward pricing and billing; fixed rates carry a carryforward adjustment reconciling estimated and actual costs later; provisional and final rates cover periods where actual costs are not yet known.

Rates differ across institutions because costs differ. A research-intensive university with specialized laboratories, clean rooms, animal care facilities, and regulated hazardous-waste systems carries heavier facilities costs than one whose research happens mostly in offices and computer labs. Construction and utility prices vary by region, older buildings drive depreciation and maintenance spending, and compliance portfolios differ by research type. Because the rate reimburses documented costs, institutions with genuinely more expensive infrastructure negotiate higher rates.

For a named anchor on the scale, consider a public negotiation agreement. The June 28, 2023 rate agreement between the Department of the Navy’s Office of Naval Research and George Mason University set predetermined rates of 59.1 percent for on-campus organized research for fiscal years 2024 through 2026, with lower rates for off-campus activity. The agreement states that the rates were negotiated under the authority of 2 C.F.R. Part 200 and apply to grants, contracts, and other agreements issued to the university by all federal agencies. It is one institution’s agreement, not a national figure, and that is the point: each rate is institution-specific, period-specific, and activity-specific.

Institutions without a negotiated rate are not shut out. They may elect the de minimis rate, which the 2024 revision of the Uniform Guidance raised from 10 percent to 15 percent of modified total direct costs. The option matters most for smaller nonprofits and institutions new to federal funding that lack the accounting infrastructure for a full cost proposal, and agencies and pass-through entities cannot compel them to accept less unless a statute requires it.

The 26 percent administrative cap

The facilities half of the rate has no regulatory ceiling. The administrative half does, and the ceiling is old. Appendix III, section C.8 provides that administrative costs charged to federal awards must be limited to 26 percent of modified total direct costs. The cap applies to awards and amendments, including continuation and renewal awards, with effective dates beginning on or after the start of the institution’s first fiscal year beginning on or after October 1, 1991. The Office of Management and Budget imposed it in 1991, and it has not moved since.

The cap covers the four administrative pools (general administration and general expenses, departmental administration, sponsored projects administration, and student administration and services) plus their allocable shares of depreciation, interest, operation and maintenance, and fringe benefit costs. The administrative component of a negotiated rate cannot exceed 26 percent of MTDC no matter what the institution actually spends; the difference is absorbed by the institution. The Congressional Research Service notes the 1991 origin and the mechanics together, and the University of Utah’s Office of Sponsored Projects FAQ adds a fact the debate often omits: universities are the only sector of research performers subject to such a cap.

Appendix III provides that institutions should not change accounting or cost allocation methods to reclassify costs from the administrative pools into the facilities pools or fringe benefits, or to shift costs from indirect to direct charging. Cognizant agencies may allow such changes only where an institution’s charging practices diverge from the accepted practices of a substantial majority of other institutions. The rule exists because the cap would be meaningless if an institution could relabel administrative spending as facilities spending and recover it without limit.

Under Defense Federal Acquisition Regulation Supplement 231.303, no limitation may be placed on reimbursement of otherwise allowable indirect costs incurred by an institution of higher education under a Defense contract awarded on or after November 30, 1993, unless the same limitation is applied uniformly to all other organizations performing similar work. Defense determined the limitation was not being applied uniformly, so Defense contract rates are negotiated without the 26 percent cap while grant rates reflect it, and a single university can hold two different rates for what looks like the same research.

The taxpayer case against high rates

A university with a negotiated rate near 60 percent appears to collect 60 cents of overhead for every dollar of research spending, which frames the rate as a surcharge on science itself and raises the natural question of how much of the federal research budget pays for research and how much pays for the apparatus around it. Critics argue that every point of the rate is a dollar not spent on investigators, experiments, and equipment, and that high rates inflate award sizes without producing additional discovery.

Few people outside sponsored-programs offices can explain modified total direct costs, the difference between predetermined and fixed-with-carryforward rates, or why off-campus research carries a lower rate. Complexity is not evidence of wrongdoing, but it creates conditions in which suspicion thrives. When a rate is difficult to explain, it is easy to caricature.

Because the rate reimburses documented costs, critics contend that institutions face muted pressure to economize on administration: new compliance offices and buildings raise the documented cost base, and a higher documented cost base supports a higher rate in the next negotiation. The 1991 cap was itself a response to this worry, and critics argue that a cap frozen for more than three decades, while compliance obligations multiplied, no longer disciplines the behavior it was meant to discipline. Some go further and argue the cap’s rigidity pushed institutions to grow the uncapped facilities side instead.

Research-intensive universities with the highest rates capture more federal support per grant dollar than smaller institutions with lower rates or with only the 15 percent de minimis rate. Critics frame this as a structural advantage for wealthy institutions: the universities that already command the most research infrastructure receive the most generous reimbursement for it, while institutions with scarcer resources recover less of their real costs and subsidize federal research from thinner budgets. On this view, the rate system does not merely reimburse costs; it concentrates federal investment.

The institutional case for the rate

Now look at the same numbers from inside the institution, where the costs are not abstractions. A laboratory is a building with specialized ventilation, uninterrupted power, hazardous-waste handling, and security systems, and that building depreciates every year whether or not any particular grant is active. The library subscribes to the journals the researchers must read. The sponsored programs office negotiates award terms, monitors compliance, and files the reports the Uniform Guidance demands. The institutional review board reviews human-subjects protocols, the animal care committee oversees laboratory animals, the biosafety committee reviews recombinant DNA work, and export-control officers screen international collaborations. Each function exists because federal law or federal award terms require it.

No direct grant line pays for any of this. A grant budget pays the investigator’s effort, the postdoc, the supplies, the travel, the equipment. The building, the utilities, the grants administrator, and the compliance officer are shared across hundreds of awards, and there is no line on a single grant budget where a fraction of the electric bill could honestly be charged. The negotiated rate is the mechanism that allocates those shared costs across the awards that consume them. Without it, each grant would have to carry an arbitrary slice of the institution’s infrastructure, or the infrastructure would have to be funded from somewhere else entirely.

The costs are audited, which the caricature of the rate as an institutional markup tends to skip. The indirect cost proposal is reviewed and negotiated by the cognizant federal agency, the figures reconcile to audited financial statements, and the Single Audit regime under Subpart F tests compliance with the cost principles. The rate reflects documented, allowable, allocable costs as defined by Subpart E, not whatever number the institution would prefer, and institutions routinely absorb costs the rules disallow or cap, including all administrative spending above the 26 percent ceiling.

The University of Utah’s Office of Sponsored Projects FAQ, citing National Science Foundation data, reports that universities fund nearly 20 percent of university research expenditures from their own resources, a share that has grown faster than any other sector’s and significantly exceeds the combined contributions of state government, industry, foundations, and other non-federal sources. Institutions are not passive conduits for federal dollars; they are the second-largest funder of the research on their own campuses, and the portion of costs the rate does not recover comes out of tuition, state appropriations, endowment income, and philanthropy.

If reimbursement fell below documented cost, the missing money would not vanish; it would move. Institutions would shift infrastructure costs onto tuition and student fees, draw down state support meant for instruction, spend down endowments, or decline federal awards whose infrastructure demands exceed the reimbursement. The institutions with the thinnest margins, the ones the equity argument worries about, would face the hardest versions of those choices. On this view, the rate does not inflate the cost of research; it reveals the cost of research, and cutting the rate without cutting the costs would simply change who pays.

Where the genuine dispute sits

Both framings agree on more than their rhetoric suggests. Indirect costs are real: they pay for buildings, utilities, compliance staff, and libraries that no direct grant line covers, and they are documented in cost proposals, negotiated with a cognizant federal agency, and tested by audits. Neither side seriously disputes that a laboratory needs electricity or that a university administering hundreds of federal awards needs a sponsored programs office. The genuine dispute is about the rate and the accounting, not about whether the costs exist.

The pressure points are specific. The first is the cap itself, frozen since 1991 while compliance obligations grew: institutions argue it forces them to subsidize federally mandated compliance from their own funds, while skeptics answer that the cap is one of the few hard constraints in the system and that moving it would ratify administrative growth. Both claims can be true at once, which is why the cap endures as the most contested number in the rate machinery.

The second pressure point is the MTDC base. The exclusions for equipment, tuition, and large subaward amounts are meant to keep the rate aligned with infrastructure consumption, but every exclusion is a judgment call that shifts recovery among institutions with different spending patterns. An institution whose research is equipment-heavy recovers less overhead per award dollar than one whose research is labor-heavy, even if both occupy similar buildings. Whether the base definition still matches how research is conducted is a technical question with distributional consequences.

The third is transparency. The negotiation process produces a rate agreement, but the path from audited financial statements to the final number runs through allocation methodologies few outside the profession can follow. Defenders say the complexity reflects genuine cost-accounting difficulty: allocating shared building costs across research, instruction, and other functions is inherently judgmental. Critics say a reimbursement system that cannot be explained to the people paying for it will eventually lose their consent. The 2024 revision’s clarification that agencies cannot force rates below the de minimis level without statutory authority gestures at the concern without resolving it.

The fourth is the distributional question: whether a cost-based system inevitably favors institutions that already have the most costly infrastructure, and whether the 15 percent de minimis rate gives smaller institutions a fair approximation of their real costs or a permanent discount on participation. There is no neutral answer, because any alternative, a flat national rate, a lower cap, a broader base, redistributes the same dollars rather than discovering new ones.

For a reader trying to use the system rather than debate it, the guidance is practical. Find the institution’s negotiated rate agreement and read which rate applies: on-campus or off-campus, organized research or instruction or other sponsored activities, predetermined or fixed. Apply the rate to modified total direct costs, not to the total award, and remember the exclusions that shrink the base. Recognize that the 26 percent administrative cap is already baked into the grant-side rate, so the administrative component cannot exceed it by definition. And interpret the rate number for what it is: a high rate signals high documented infrastructure costs negotiated with and accepted by a federal agency, while a low rate may signal absorbed costs and institutional subsidy rather than superior efficiency. The number is the end of an accounting process, not a grade.

Merit Review: The Machinery That Decides Which Proposals Win

Every federal research dollar that reaches a university or laboratory travels through a selection process that the agency designs, staffs, and defends. The statute that created the agency usually says little about how those decisions should be made. The law says the agency may support research; the agency’s regulations, manuals, and long-standing practice say how proposals will be judged, who will judge them, and what records will justify the choice. Understanding federal research funding law therefore means understanding two parallel systems: the grant-making authority that Congress wrote into statute, and the merit-review machinery that agencies built on top of it through regulation and custom.

The largest civilian funders, the National Science Foundation and the National Institutes of Health, run review systems that look similar from the outside but differ in legally significant ways. A researcher submitting a proposal to the Foundation sends it through Research.gov or Grants.gov to a program officer, who performs a first screen for completeness and fit with the program solicitation. The program officer then selects reviewers: some are ad hoc mail reviewers with specialized expertise, and many proposals go before a panel of experts convened for the purpose. Reviewers evaluate the proposal against the Foundation’s two merit-review criteria, intellectual merit and broader impacts, and the panel produces written assessments that the program officer weighs in making a funding recommendation. The program officer’s recommendation goes to a division director or higher authority for the final award decision. Nothing in this pipeline appears in the Foundation’s organic statute. It lives in the Foundation’s Proposal and Award Policies and Procedures Manual, in the solicitations, and in decades of institutional habit.

At the Institutes of Health the process is more formalized and carries a statutory anchor. Applications are assigned by the Center for Scientific Review to a study section, a standing group of fifteen to twenty scientists with expertise in the relevant field. Each application is read in depth by three assigned reviewers, who write critiques and record preliminary scores on a one-to-nine scale, with one marking exceptional and nine marking poor. The full study section then discusses the applications, each discussed application receives final scores from the members present, and the scores are averaged into a priority score. A written summary statement captures the reviewers’ reasoning and becomes part of the official record. That first-level review judges scientific and technical merit only. The second level belongs to the national advisory council of the funding institute, which reviews the scored applications for program relevance, portfolio balance, and alignment with the institute’s mission. The council votes to recommend applications for funding, and funding then follows the institute’s payline, the score threshold set by available budget. This is the dual review system: study section first, advisory council second, each performing a distinct legal and scientific function. The written record the process generates has legal consequences beyond the funding decision. The summary statement, with its priority score and written critiques, is the application’s official evaluation, and applicants who are not funded may revise and resubmit, responding point by point to the reviewers’ criticisms. That resubmission cycle disciplines both sides: reviewers know their written critiques will be answered, and applicants receive a concrete account of why the proposal fell short. The record also anchors any later challenge. Because agencies must be able to show that they followed their own published criteria and procedures, the summary statement, the council minutes, and the program officer’s recommendation together form the administrative record that a court would examine if a disappointed applicant alleged that the decision was arbitrary. The system is therefore not only a method of choosing winners but a method of producing defensible documentation, which is precisely why agencies invest so much staff time in maintaining its forms and rituals.

The 1950 Settlement and What the Statute Does Not Say

Peer review at the Foundation rests on a governance settlement reached in the National Science Foundation Act of 1950, Public Law 81-507, signed May 10, 1950. The fight that preceded it was about who would control the new agency. Vannevar Bush, whose wartime leadership of scientific research made him the dominant voice in the postwar debate, wanted authority lodged in a part-time independent board of scientists that would appoint a director answerable to the board. Bush feared that any other arrangement would invite political control of scientific judgment. Congress passed a bill along those lines in 1947, Senate bill 526, but President Harry Truman vetoed it. In his veto message Truman raised two objections: the bill let the board rather than the President appoint the director, which he said violated his appointment powers and raised questions of accountability, and it let a board of twenty-four eminent scientists decide who would receive grants, which he said would inevitably give rise to suspicions of favoritism.

The 1950 compromise split the difference. The Act created an independent agency administered by a presidentially appointed board, the National Science Board, and a presidentially appointed director. Neither side won outright: scientists gained a governing board with real policy authority, and the executive branch gained presidential appointment of the director. The Act authorized the Foundation to support basic research across the mathematical, physical, medical, biological, engineering, and other sciences, and to develop national policy for the promotion of research and science education. It said nothing about peer review. The Foundation could have chosen any defensible selection method consistent with its broad grant-making authority. It chose peer review, and it embedded the choice in agency policy rather than in statute.

Why “Is Peer Review Required by Law” Gets a Split Answer

The most-searched question about this machinery, whether peer review is required by law, has a genuinely split answer, and the split runs along agency lines. At the Institutes of Health the answer is yes, by statute. Section 492 of the Public Health Service Act, codified at 42 U.S.C. 289a and added by Public Law 99-158 in 1985, directs the Secretary to require appropriate technical and scientific peer review of applications for biomedical and behavioral research grants, cooperative agreements, and contracts. A companion provision, 42 U.S.C. 289a-1, bars the Secretary from approving or funding any proposal subject to that review unless it has undergone the review and been recommended for approval by a majority of the reviewing entity and a majority of the voting members of the appropriate advisory council. That is the dual review system with a statutory pedigree: study-section review is commanded by section 492, and the advisory-council second review is commanded by section 289a-1.

At the Foundation and most other civilian agencies, the answer is that peer review is required by regulation and policy rather than by the research program’s authorizing statute. The most important blanket requirement comes not from any science agency’s organic act but from the Office of Management and Budget’s Uniform Guidance for federal grants, 2 C.F.R. Part 200, whose section 200.204 requires federal awarding agencies to design and execute a merit review process for discretionary federal awards. Agencies satisfy that requirement through their own regulations and guidance documents: the Foundation through its proposal policies manual, the Department of Energy through its review procedures, and so on. The result is a hierarchy of authority that practitioners should keep straight. Congress authorizes the research program and appropriates the money. OMB regulation requires the agency to run a merit review process for discretionary awards. The agency writes the details: who reviews, against what criteria, with what scoring. And at NIH, Congress added a specific statutory command on top, requiring technical and scientific peer review with a dual structure.

This hierarchy matters in disputes. A researcher who believes a funding decision was arbitrary cannot usually point to a statute that specifies how the panel should have voted, because for most agencies no such statute exists. The enforceable standards live in the agency’s published procedures and in the administrative record the agency kept: whether the agency followed its own stated criteria, whether it documented its reasons, and whether the decision fell within the discretion the statute and regulation confer. At NIH the statutory command is narrower than disappointed applicants sometimes assume: the statute requires that peer review happen and that the advisory council recommend approval, but it does not dictate the score, the payline, or the funding outcome.

Human Subjects: How a Scandal Built a Regulatory System

The second great implementation system in federal research funding law, the protection of human research subjects, did come from a statute, and it came in direct response to one of the most notorious episodes in American medical history. In 1932 the United States Public Health Service began a study in Macon County, Alabama, of the effects of untreated syphilis in Black men. Six hundred men were enrolled, 399 with syphilis and 201 without, serving as controls. The men were told they were being treated for bad blood, a local term covering several ailments. They were not told the study’s true purpose, and they were not given effective treatment even after penicillin became the standard therapy for syphilis in the mid-1940s. The study continued for four decades, following the men until death to observe the disease’s full progression.

The study might have continued longer if a Public Health Service epidemiologist, Peter Buxtun, had not raised objections. Buxtun wrote a series of letters to supervisors between 1966 and 1969 questioning the ethics of the research, and when those letters produced no action he provided documents to the Associated Press. On July 25, 1972, reporter Jean Heller broke the story nationally. Public outcry followed, the Department of Health, Education, and Welfare appointed an ad hoc panel to investigate, and the panel recommended that the study stop; it was terminated that fall. The panel’s final report concluded that the research had been ethically unjustified. The surviving men later won a ten million dollar settlement in a class action lawsuit, and in 1997 President Clinton issued a formal apology for the study.

Congress answered in 1974 with the National Research Act, Public Law 93-348, signed July 12, 1974. The Act did two things that shaped everything that followed. First, it created the National Commission for the Protection of Human Subjects of Biomedical and Behavioral Research, an eleven-member body charged with identifying the basic ethical principles that should underlie federally connected research with human subjects and developing guidelines to implement them. Second, it required the Department of Health, Education, and Welfare to issue regulations requiring institutions that received department funds to establish institutional review boards and to obtain informed consent from research participants. The statute thus converted an ethical catastrophe into an institutional mandate: no more reliance on the conscience of individual investigators, but a system of local review boards, federal regulations, and enforceable consent requirements.

The Belmont Report’s Three Principles

The National Commission deliberated for nearly four years. The centerpiece of its work was an intensive four-day session held in February 1976 at the Smithsonian Institution’s Belmont Conference Center, followed by monthly deliberations. The resulting report, Ethical Principles and Guidelines for the Protection of Human Subjects of Research, was released on September 30, 1978 and published in the Federal Register on April 18, 1979. It became known simply as the Belmont Report.

The Report organized the ethics of human subjects research around three principles. Respect for persons holds that individuals should be treated as autonomous agents entitled to make their own decisions, and that persons with diminished autonomy, such as children, prisoners, and the cognitively impaired, are entitled to protection. Its practical application is informed consent: researchers must give prospective subjects the information a reasonable person would need to decide, must ensure comprehension, and must obtain voluntary agreement without coercion. Beneficence extends the medical maxim of doing no harm into an obligation to maximize possible benefits and minimize possible harms, applied through systematic assessment of risks and benefits before research begins. Justice requires fairness in the distribution of research’s burdens and benefits, so that no group is systematically selected to bear the risks while others reap the gains, and no group is systematically excluded from potential benefits. Its application is the fair selection of subjects.

The three principles are not decorative. They supply the logic of every regulation that followed. Informed consent rules operationalize respect for persons. Risk-benefit review by institutional review boards operationalizes beneficence. Requirements for equitable subject selection operationalize justice. When an investigator or board member asks why a particular protection exists, the answer almost always traces back to one of these three.

The Common Rule and Its 2017 Rewrite

The Department of Health, Education, and Welfare revised and expanded its human subjects regulations in the late 1970s and early 1980s, and in 1991 those regulations became the Federal Policy for the Protection of Human Subjects, codified at 45 C.F.R. Part 46, Subpart A, and adopted by fifteen federal departments and agencies as the Common Rule. The Common Rule created a single baseline: research conducted or supported by any signatory agency had to satisfy the same requirements for institutional review board review, informed consent, and institutional assurances. The Food and Drug Administration did not join the Common Rule as a signatory; it maintains its own parallel regulations for clinical investigations at 21 C.F.R. Part 50 for informed consent and 21 C.F.R. Part 56 for institutional review boards, which generally conform to the Common Rule but are enforced separately.

By the early 2010s the 1991 framework was straining. Large databases, biospecimen repositories, electronic health records, and multi-site research networks had created research models the original drafters had not anticipated, and the review system was widely seen as imposing paperwork burdens on minimal-risk research while adding little protection. The government sought public input through an advance notice of proposed rulemaking on July 26, 2011, followed by a notice of proposed rulemaking in 2015 that drew more than two thousand comments. A final rule was published on January 19, 2017 by the Department of Health and Human Services together with fifteen other federal departments and agencies. The effective and compliance dates were delayed twice, and the revised Common Rule reached general compliance on January 21, 2019, with the cooperative research provision requiring a single institutional review board for United States multi-site studies taking effect January 20, 2020.

The revision changed the daily practice of human subjects protection in several concrete ways. It expanded the exempt categories, now eight listed categories covering research that presents no more than minimal risk and needs no continuing board oversight, including benign behavioral interventions and certain secondary research uses of identifiable data. It eliminated the requirement for continuing review of research approved under expedited procedures and of research that has completed its interventions, on the theory that annual re-review of minimal-risk studies consumed board time without improving protection. It required consent forms to begin with a concise and focused presentation of the key information a reasonable person would want, replacing the long front-loaded documents that subjects rarely read. It created a broad consent option for the storage, maintenance, and secondary research use of identifiable private information and biospecimens, though few institutions adopted the option pending further guidance. It required a single institutional review board for cooperative research conducted at multiple United States sites, ending the practice of each site’s board conducting its own full review. And for clinical trials it required posting one version of the consent form on a public federal website after recruitment closed and no later than sixty days after the last study visit. The FDA did not revise its own regulations to match, so FDA-regulated clinical investigations continue to operate under a dual regime, a gap the FDA has addressed through guidance while pursuing harmonizing rulemaking.

Institutional Review Boards in Practitioner Terms

For an investigator, the system is experienced through the institutional review board, and the practical rules of board review reward advance planning. Every institution that receives federal support for human subjects research must hold a Federalwide Assurance with the Office for Human Research Protections, the HHS office that enforces the Common Rule, and must register its boards with that office. A board must have at least five members with varying backgrounds, must include at least one member whose primary concerns are in nonscientific areas, and must include at least one member unaffiliated with the institution. Conflicts of interest are managed by recusal, and the board acts through a convened meeting with a quorum.

Applications fall into one of three review tracks. Exempt research fits one of the eight listed exemption categories, presents no more than minimal risk, and requires only an administrative determination, though most institutions still require the investigator to submit the protocol for that determination. Expedited review covers research presenting no more than minimal risk that fits one of the listed expedited categories, such as collection of blood samples within defined limits, noninvasive specimen collection, or research on existing data; it is conducted by the board chair or a designated experienced member rather than the full board, and under the revised rule it carries no continuing review requirement. Full board review applies to everything else, meaning greater-than-minimal-risk research, and requires discussion and a vote at a convened meeting with a majority of members present. Continuing review, where still required, occurs at intervals appropriate to the risk but no less than once per year.

The board applies approval criteria drawn directly from the regulation: risks to subjects must be minimized through sound design, risks must be reasonable in relation to anticipated benefits, selection of subjects must be equitable, informed consent must be sought and documented in the prescribed form, data must be monitored where appropriate to ensure subject safety, and provisions must protect privacy and confidentiality. Additional safeguards apply to vulnerable populations. Children, prisoners, pregnant women, fetuses, neonates, and cognitively impaired individuals each receive protections under the regulation’s subparts, and boards routinely impose conditions such as parental permission, legally authorized representative consent, or exclusion of decisionally impaired subjects depending on the study. An investigator who designs the protocol around these criteria, writes a consent form that begins with the key information a reasonable person would need, and submits early enough to survive a round of board questions will move through the system far faster than one who treats the board as an afterthought. The board is not an advisory body whose suggestions can be declined; it has the authority to approve, require modifications, or disapprove the research, and the institution may not override a disapproval.

Research Misconduct: A Governmentwide Definition

On December 6, 2000, the White House Office of Science and Technology Policy published the Federal Policy on Research Misconduct at 65 Federal Register 76260, creating a single governmentwide definition where agencies had previously used divergent ones. The policy defines research misconduct as fabrication, falsification, or plagiarism in proposing, performing, or reviewing research, or in reporting research results. The definition reaches misconduct in grant applications and peer review, not only in published papers, and it expressly excludes honest error and differences of opinion. A failed replication, a contested interpretation of data, or an analytical mistake that a careful researcher could have made does not qualify, because the policy reserves the misconduct label for deliberate or reckless corruption of the research record. Each of the three terms carries its own statutory-style definition. Fabrication means making up data or results and recording or reporting them. Falsification means manipulating research materials, equipment, or processes, or changing or omitting data or results so that the research is not accurately represented in the research record. Plagiarism means appropriating another person’s ideas, processes, results, or words without giving proper credit.

Agencies that adopted the OSTP policy apply a three-part test before finding that misconduct occurred. First, there must be a significant departure from accepted practices of the relevant research community, judged against the norms of the discipline in which the work was done rather than a universal standard. Second, the misconduct must have been committed intentionally, knowingly, or recklessly, which is the element that keeps honest error outside the definition. Third, the allegation must be proven by a preponderance of the evidence, an administrative standard rather than the criminal standard of beyond a reasonable doubt. For a researcher facing an allegation, the inquiry turns on documentary evidence, laboratory records, drafts, correspondence, and testimony from the relevant research community, and the institution must show what happened, what the community expects, and what state of mind accompanied the act.

Who Investigates: The Institution Acts First, the Agency Oversees

Primary responsibility for investigating allegations rests with the research institution, not with the funding agency. The Public Health Service regulation implementing the OSTP policy, 42 CFR Part 93, states the division of labor in its general policy section: HHS has ultimate oversight authority for PHS-supported research, including the right to assess allegations and perform inquiries or investigations at any time, while institutions and institutional members have an affirmative duty to protect PHS funds from misuse and primary responsibility for responding to and reporting allegations of research misconduct. In practice this means the university, medical center, or laboratory that employs the researcher runs the proceeding, and the agency reviews whether the proceeding was fair, thorough, and consistent with the regulation. Every institution receiving PHS support must maintain written policies and procedures for handling allegations, designate officials to receive them, and protect both the complainant and the respondent from retaliation and from premature disclosure of their identities.

A misconduct proceeding moves through distinct phases that a researcher should understand as a sequence rather than a single event. The institution first assesses whether an allegation falls within the definition of research misconduct and is sufficiently credible and specific to warrant an inquiry. The inquiry is a preliminary fact-gathering stage, usually conducted by a small committee, to determine whether the allegation has enough substance to justify a full investigation. If it does, the institution convenes an investigation committee that examines the evidence in detail, interviews the respondent, the complainant, and witnesses, and reaches findings of fact under the preponderance standard. The institution’s deciding official then determines whether misconduct occurred and what institutional actions to take, and in PHS cases the institution reports its findings and the record to the Office of Research Integrity at HHS. ORI reviews the report, may seek additional information or conduct its own analysis, and recommends administrative actions to HHS. Other agencies run parallel oversight through their own offices: the National Science Foundation investigates misconduct in NSF-funded work through its Office of Inspector General, which handles allegations involving NSF proposals, awards, and the peer review process.

Career Consequences in Practitioner Terms

A finding of research misconduct follows a researcher through every subsequent interaction with the federal funding system. HHS administrative actions under Part 93 can include debarment or suspension from federal funding programs, which bars the individual from receiving grants or contracts across the government for a defined period, along with prohibition from service on PHS advisory committees, boards, and peer review panels. These actions are published, and because funding agencies share debarment information, an HHS debarment effectively closes off NSF, Department of Energy, and other federal research funding for its duration. Even short of debarment, ORI may impose certification requirements under which the researcher’s institution must certify the accuracy of data in future applications, or supervision requirements that place the researcher’s work under a monitor’s review. At the institutional level, consequences commonly include termination of employment, revocation of tenure where the institution’s rules permit it, removal from teaching and mentoring roles, and mandatory retraction or correction of affected publications, with the institution notifying journals, coauthors, and collaborators.

The collateral consequences extend beyond formal sanctions. Federal grant applications ask about findings of research misconduct, and an affirmative answer triggers heightened scrutiny of every subsequent proposal. Institutions conducting hiring and tenure reviews routinely ask about misconduct proceedings, and the published record of a federal finding is discoverable by any search committee. Because the research community is small within a specialty, reputation damage operates independently of formal punishment: coauthors distance themselves, journals scrutinize submissions more closely, and invited talks and collaborations dry up. The practitioner’s defense against all of this is procedural rather than rhetorical. Contemporaneous, complete laboratory records are the primary evidence that distinguishes honest error from falsification, so the habit of dating notebooks, preserving raw data files, and documenting departures from planned methods is the cheapest insurance a researcher can carry. When an allegation lands, the respondent’s rights include notice of the allegations, access to the evidence, and an opportunity to respond at each phase, and engaging institutional counsel early is standard practice.

Public Access: Publications and Data

Congress converted public access from an agency aspiration into a funding condition in the Consolidated Appropriations Act, 2008. Section 218 of Division G, Title II of Public Law 110-161 directs the Director of the National Institutes of Health to require every NIH-funded investigator to submit an electronic version of the final peer-reviewed manuscript to the National Library of Medicine’s PubMed Central upon acceptance for publication, to be made publicly available no later than twelve months after the official date of publication, with implementation consistent with copyright law. NIH issued the implementing policy on January 11, 2008, and made deposit mandatory effective April 7, 2008, replacing the voluntary policy it had operated since 2004. The mandate covers peer-reviewed articles arising from direct NIH funding, including grants, cooperative agreements, contracts, and the NIH Intramural Program. As of May 25, 2008, NIH applications, proposals, and progress reports must include the PubMed Central reference number for every publication falling under the policy, which turned compliance into a mechanical gate: a missing reference number can hold up an award.

For the working researcher, compliance has three moving parts. First, deposit the final manuscript, meaning the version accepted by the journal after peer review but before publisher typesetting, in PubMed Central, either through the NIH Manuscript Submission system or through a publisher that deposits on the author’s behalf. Second, manage copyright deliberately, because the publisher’s standard transfer agreement may conflict with the deposit obligation; many institutions supply an author addendum that reserves the right to deposit in PubMed Central. Third, track the reference numbers and cite them in every progress report and competing application, since program officers check. Noncompliance does not produce a fine; it produces delayed awards and withheld continuations.

The 2013 OSTP Memorandum and Agency Plans

On February 22, 2013, OSTP Director John Holdren issued a memorandum titled Increasing Access to the Results of Federally Funded Scientific Research, extending the public access principle beyond NIH to the rest of the federal research enterprise. The memorandum directed every federal agency with more than one hundred million dollars in annual research and development expenditures to develop a plan for increasing public access to the results of unclassified federally funded research, and to submit that plan to OSTP within six months. Each plan had to ensure that the public could read, download, and analyze an electronic version of peer-reviewed articles, either as the final peer-reviewed manuscript or as the published document, within a timeframe appropriate to the agency’s field and mission, generally within one year of publication. The memorandum also required agencies to improve how researchers account for and manage the digital data resulting from federally funded research, making data management a parallel obligation rather than an afterthought.

Agency public access plans translated the memorandum into agency-specific machinery. Each covered agency designated a repository or deposit system, set its own embargo period within the one-year ceiling, and wrote compliance into its award terms so that deposit became a condition of the grant or contract. Plans differed in their details because research cultures differ: agencies funding clinical trials, field ecology, or high-energy physics handle data, embargoes, and repository infrastructure differently, and the memorandum deliberately left room for that variation. The practical consequence for investigators is that the funding agency’s plan governs what must be deposited, where, and by when. A researcher holding awards from two agencies may face two deposit systems and two timelines, and the safe practice is to read the public access terms in each notice of award before the manuscript leaves the lab.

Data Management and Sharing Requirements

The NIH Data Management and Sharing Policy, effective January 25, 2023, made data sharing a condition of NIH funding in its own right. The policy applies to all research funded or conducted in whole or in part by NIH that results in the generation of scientific data, regardless of the size of the award. Scientific data means recorded factual material commonly accepted in the scientific community as of sufficient quality to validate and replicate research findings, whether or not the data support a publication. Every application for covered research must include a Data Management and Sharing Plan describing the types of data to be produced, the standards and metadata to be used, plans for preservation and access, and the timeline for sharing. Investigators must plan and budget for data management and sharing costs in the application itself, because the policy treats curation, repository fees, and de-identification as legitimate direct costs of the research.

The plan, once approved, becomes part of the terms and conditions of the award. Data must be shared no later than the time of an associated publication or the end of the award period, whichever comes first, and compliance is monitored through regular progress reporting, with lapses capable of affecting future funding decisions. Sensitive data, including human subjects data subject to consent limitations and privacy protections, must still be addressed in the plan: the researcher documents the restrictions, the de-identification or controlled-access procedures, and the repository or access mechanism that satisfies both the sharing obligation and the privacy constraint. The policy does not require sharing everything; laboratory notebooks, preliminary analyses, drafts, and physical specimens fall outside the definition of scientific data.

The National Science Foundation imposes its own data requirement through the Proposal and Award Policies and Procedures Guide. Every NSF proposal must include a supplementary document of no more than two pages, labeled Data Management Plan, describing how the proposed work will conform to NSF policy on the dissemination and sharing of research results. The plan is reviewed as an integral part of the proposal under the Intellectual Merit or Broader Impacts criteria, so a boilerplate plan is a genuine review risk. NSF’s underlying policy expects investigators to share primary data, samples, physical collections, and other supporting materials with other researchers at no more than incremental cost and within a reasonable time, with allowances for privileged or proprietary information and for intellectual property rights. A credible plan names the repositories where data will be deposited, the metadata standards to be used, the timeline for release, and the provisions for archiving and preservation, and it reflects the budget line that pays for the work.

What a researcher must actually do, distilled across these policies, is a sequence that begins before the award. At the proposal stage, write the data plan for the specific project, name real repositories, and budget the curation costs. During the award, manage data to the plan’s standards and track publications for deposit obligations. At publication, deposit the accepted manuscript in the agency-designated system within the stated window and confirm the reference number. At reporting, cite the reference numbers and describe progress on the data plan. Public access compliance is administrative work that funding agencies can verify mechanically, and the researchers who treat it as part of the research workflow are the ones who never have an award held up over a missing deposit.

Disclosure and Research Security

Division B of the CHIPS and Science Act of 2022, Public Law 117-167, wrote research security obligations directly into statute. The division’s research security provisions treat disclosure as the primary mechanism: the government cannot protect federally funded research from undisclosed entanglements unless it knows what those entanglements are. The disclosure duties fall on covered individuals, a statutory term that encompasses principal investigators and other senior or key personnel seeking or receiving federal research and development funding, as well as researchers at federal laboratories and facilities. Institutions share the duty, because they must certify that their covered individuals understand the requirements and must maintain the policies that make compliance possible.

What Must Be Disclosed

Federal research agencies require covered individuals to disclose other support, appointments, and affiliations as a condition of funding. Other support means all resources made available to the researcher in support of their research, whether through the awarding agency or another source, including active and pending grants, contracts, cooperative agreements, and in-kind contributions such as donated equipment, reagents, or effort. Appointments and affiliations include every academic, professional, and institutional position the researcher holds, including unpaid and honorary appointments and affiliations with foreign institutions. The disclosure is not a one-time event at proposal submission; agencies require updates during the award when new support, appointments, or affiliations arise, and the researcher certifies the completeness and accuracy of the disclosure each time. Material omissions carry the same consequences as affirmative misstatements, because the agency’s funding decision rests on a complete picture of the researcher’s commitments and potential conflicts.

The practitioner standard is disclosure of everything that a reasonable program officer would want to know before making an award. That includes startup packages and internal awards that fund the same line of work, consulting arrangements related to the research, appointments that carry lab space or research resources, and any agreement, paid or unpaid, that gives another organization rights in the researcher’s time, data, or intellectual property. Institutional offices of sponsored programs maintain the disclosure forms and review them before submission, and the researcher who routes disclosures through that office, keeps copies of every submission, and updates promptly when circumstances change builds the documentary record that protects against later allegations of concealment. The underlying principle is simple: the government funds the researcher it evaluated, and undisclosed support or appointments mean it evaluated someone else.

Malign Foreign Talent Recruitment Programs

Section 10631 of the CHIPS and Science Act requires the Office of Science and Technology Policy, in coordination with the interagency working group established for research security, to distribute a uniform set of guidelines for federal research agencies on foreign talent recruitment programs. The guidelines must prohibit all personnel of each federal research agency from participating in any foreign talent recruitment program, and they must require covered individuals to disclose whether they are a party to a foreign talent recruitment program contract, agreement, or other arrangement. The disclosure duty is categorical: it reaches any contract, agreement, or arrangement, not only those involving compensation, so an unpaid advisory title under a talent program’s umbrella is disclosable. Section 10632 carries the parallel requirement that covered individuals certify, at the proposal stage and annually for the duration of the award, that they are not a party to a malign foreign talent recruitment program, and that institutions certify that their covered individuals have been made aware of the requirement and have complied.

The Act separately prohibits covered individuals from participating in a malign foreign talent recruitment program while working on projects supported by federal research and development awards, and it directs federal funding recipients to prohibit such participation to the extent practicable. The statutory definition of malign foreign talent recruitment program is codified at 42 U.S.C. section 19237, which sets out the characteristics agencies use to identify covered programs, including the involvement of problematic foreign institutions and talent programs identified under the lists maintained pursuant to section 1286 of Public Law 115-232. For the researcher, the compliance posture is binary: participation in a malign foreign talent recruitment program and federal research funding cannot coexist, and the certification at proposal and each year of the award makes that choice explicit and documented.

Research Security Programs for Institutions

Section 10634 of the Act, codified at 42 U.S.C. section 19234, requires institutions receiving more than fifty million dollars per year in federal science and engineering support to establish and operate a research security program. The statute specifies four elements that every such program must include: cybersecurity, foreign travel security, research security training, and export control training, each as appropriate to the institution’s research portfolio. Cybersecurity covers the protection of research data and systems against unauthorized access. Foreign travel security includes training for covered individuals on the risks of international travel and reporting requirements for travel that implicates research security. Research security training addresses the disclosure obligations, the foreign talent recruitment program rules, and the proper use of federal funds. Export control training covers the regulations governing the transfer of controlled technologies, for covered individuals whose work involves them.

The certification mechanism makes the program an award condition rather than an advisory framework. The authorized organizational representative certifies, on the face page of the application, that every individual identified as senior or key personnel has completed the required research security training within the twelve months before submission. Institutions may use the federal government’s training modules, hosted through the National Science Foundation, or deploy their own modules that address the same subjects, including cybersecurity, international collaboration, foreign interference, and the rules for proper use of funds, disclosure, conflict of commitment, and conflict of interest. For the individual researcher, the practical steps are to complete the training before the proposal goes in, keep the completion record, and expect the certification question at every proposal and every annual update. For the institution, the obligation is structural: a designated research security function, written policies on foreign talent programs and disclosure, and a training program that reaches every covered individual, because the statute holds the institution accountable for operating the program, not merely for publishing it.

The Instrument Decides the Rules

A scientist who has carried federal research money for thirty years can sometimes be asked the simplest question about that money and fail it. Which instrument do you hold? The answer is rarely volunteered, often uncertain, and occasionally wrong, yet it controls nearly every obligation that follows. The Federal Grant and Cooperative Agreement Act of 1977 gives agencies three boxes and no permission to improvise: a grant when the principal purpose is transferring money or property to carry out a public purpose with no substantial federal involvement anticipated, a cooperative agreement when substantial involvement is expected, and a procurement contract when the government is acquiring property or services for its own direct benefit or use. The researcher sees one award; the law sees a choice among three regimes.

The choice matters first at the level of the rulebook. Grants and cooperative agreements live under the uniform administrative requirements at 2 C.F.R. Part 200, which govern how money is received, spent, reported, and audited. A procurement contract lives under a different regime entirely, the Federal Acquisition Regulation, with its own clauses on cost allowability, termination, and government property. The same labor performed in the same laboratory is accounted for, audited, and terminated under different rules depending on the box the agency checked. That is not bureaucratic trivia. It is the difference between which chapters of the Code of Federal Regulations answer your questions.

Intellectual property follows the same fork, though less visibly. The Bayh-Dole Act lets universities and small businesses elect title to inventions made with federal support, and its disclosure, election, and reporting duties attach across instruments, including to contract work. But the paperwork through which those duties run differs. A grantee reports its invention disclosures through its agency’s grant reporting system, with disclosure to the agency due within two months of the inventor’s report and election of title within two years. A contractor performs under a patent-rights clause written into the contract, negotiated against the acquisition regulation. The right to retain title is the same in principle, while the administrative machinery that preserves it is not, and the laboratory that treats all federal money as identical risks missing the instrument-specific steps that keep title intact.

Audit exposure splits along the same line. An institution spending above the statutory threshold on grants and cooperative agreements faces the single audit under 2 C.F.R. Part 200, Subpart F, a single government-wide examination of its compliance across programs. A contractor faces contract audit, with auditors testing allowability under the acquisition clauses written into the award. Both are audits; they answer different questions under different standards, and the compliance officer preparing for one is not automatically prepared for the other.

Human subjects protection shows the limit of the claim, which makes it worth stating. The Common Rule follows the funding, not the instrument. An institutional review board’s determination applies whether the support arrives as a grant, a cooperative agreement, or a contract, because the 1974 statute and its implementing regulation attach the requirement to federal support of human subjects research as such. The instrument does not decide everything, which is precisely why knowing which obligations the instrument controls and which follow the money regardless is a professional skill rather than a filing detail.

Research misconduct shows the pattern again. The government-wide definition, fabrication, falsification, and plagiarism, excluding honest error and differences of opinion, is one standard. But the institution that investigates and the federal office that oversees it depend on the agency and the instrument. Public Health Service misconduct runs through the Office of Research Integrity; other agencies run it through their own offices or their inspectors general. The rulebook is shared; the enforcement address changes.

So the claim stands in its strong form. A researcher who cannot identify which instrument they hold cannot answer which rulebook governs their spending, which paperwork preserves their inventions, which auditors will examine them, or which office oversees a misconduct allegation. Every question about obligations begins with the instrument, and the people who treat the three as synonyms have not yet started the analysis.

Consider how this plays out in a career that crosses the boundary. A postdoctoral researcher trained in an NIH-funded university laboratory, where grants arrive with minimal federal involvement and the institution administers everything under the Uniform Guidance, takes a position at a national laboratory and begins work under a Department of Energy contract. The science may be continuous; the legal world is not. Cost principles that were the institution’s interpretation problem are now contract clauses the contracting officer enforces. The invention disclosure still leads to contractor title in most cases, but it travels through the contract’s patent-rights clause and the laboratory’s own waiver history rather than through the grant reporting system the researcher knows. If the researcher treats the new award like the old one, the mistakes will not announce themselves. They will surface years later, in an audit finding, a disputed termination, or an invention whose title was never properly preserved.

The journalist’s version of the same error runs in the other direction. A story about waste in federal research grants will sometimes cite a contracting controversy, or a story about a contract dispute will invoke grant statistics, because the writer has not distinguished the instruments and has blended two different populations of awards into one narrative. The public reads the blended story and concludes that federal research money is governed by one set of rules that keeps failing, when in fact it is governed by several sets of rules that fail in different ways. Precision about the instrument is not pedantry. It is the difference between an accurate investigation and a confused one.

The compliance officer understands this instinctively, because the officer’s daily work is translation. The Uniform Guidance tells institutions what an adequate financial management system looks like; the compliance office builds it, writes the policies, and trains the researchers who will never read the regulation. The Common Rule tells institutions what an adequate human subjects protection program looks like; the compliance office staffs the board and reviews the protocols. The award document names the instrument; the compliance office tells the principal investigator what it means. When that translation fails, the failure is usually not malice. It is a researcher who signed an award without learning which box was checked.

The Same Framework, Three Different Agencies

The framework is government-wide, but no researcher experiences the framework. Researchers experience an agency, and the three great civilian science agencies administer the same statutes through very different habits. This is why agency-specific authorities belong in the picture, and why the companion guide to this article treats the agency-level application of the invention rules at length.

The National Institutes of Health is the grant agency. Its extramural program distributes thousands of grants whose terms are consolidated in the NIH Grants Policy Statement, which is where Bayh-Dole’s invention duties appear in practice for a university technology transfer office: the duty to disclose, the reporting clocks, the annual utilization reporting. NIH peer review is a custom embedded in regulation and practice rather than commanded by statute in most cases, and the agency’s machinery, review by study section and then by advisory council, is the most elaborate in government. An administrator who knows NIH grants knows the largest single administrative culture in federal research.

The National Science Foundation is also a grant agency, but a smaller one by budget and a different one by instrument mix. NSF’s terms and conditions carry the same government-wide requirements, yet NSF reaches for cooperative agreements where NIH would not: the large research facilities, telescopes and ocean vessels and polar logistics, involve the kind of substantial federal involvement that the 1977 statute says belongs in a cooperative agreement rather than a grant. The instrument follows the involvement, and the Foundation’s portfolio demonstrates the statutory test in practice. A researcher on a facility award lives inside a regime where the agency participates in management decisions, and the grant-trained colleague next door does not.

The Department of Energy is the contract agency. Its largest science footprint runs through management and operating contracts for the national laboratories, government-owned facilities run by contractors under procurement instruments. That makes the invention rules genuinely different in administration. Bayh-Dole’s original text covered small businesses, universities, and nonprofit organizations; large contractors obtained Bayh-Dole-like rights through executive action and the Energy Department’s waiver regulations rather than through the statute directly. A laboratory operated under a management and operating contract therefore lives inside a patent-rights history that a university grant laboratory never touches, even though both ultimately permit contractor title to federally funded inventions. The reporting system, the contract clause, and the waiver history are agency-specific, and the technology transfer office that understands one agency’s practice has not automatically understood another’s.

The Gap Between the Statute and the Laboratory

The series thesis has been circling this article all along, and the closing argument names it. A statute authorizes research; the laboratory is governed by something else. Congress writes that money may be spent on scientific inquiry. The laboratory is then governed by the instrument that carried the money, by the negotiated indirect cost rate agreement that prices the building, by the institutional review board’s determination letter, by the agency’s peer review system, and by the university compliance office that translates 2 C.F.R. Part 200 into the forms the researcher actually signs. None of those documents appears in the authorizing act, and all of them matter more to the working scientist than the act does.

This is the honest version of implementation. The statute creates the possibility; the machinery creates the conditions. A journalist who reads the authorizing statute understands the congressional intent. A journalist who wants to understand why a study was delayed, why a university returned money, why an award was suspended, must read the instrument, the negotiated rate agreement, and the determination letter. The gap between those two kinds of reading is the entire subject of this article, and it explains why debates conducted at the level of authorizing statutes so often miss the level at which research actually happens.

Notice how each element of the machinery was created to solve a real problem. The 1977 instrument act ended an era in which agencies chose instruments by habit, and researchers could not know which rules applied. The uniform guidance ended the era in which each agency wrote its own administrative requirements, forcing institutions to comply with several contradictory systems at once. The 1974 statute and the Common Rule ended an era in which human subjects protections depended on the conscience of the investigator. The misconduct policy ended the era in which fabrication was handled by rumor and reputation. The public access requirements answered the question of who owns the results of publicly funded work, and the disclosure requirements answered the question of what affiliations a researcher must reveal to receive public money. Every layer of the machinery answers a failure, and the layers accumulate because each failure was real.

This accumulation is the reason the machinery feels overwhelming to the researcher who encounters it all at once, usually at the moment of the first award. The system was not designed; it accreted. Each reform left the previous layers in place, so the laboratory inherits the full stack, and the compliance office exists because no researcher could hold the entire stack in mind while doing science. That is not a defect of the system. It is the system, and understanding it as an accretion of solved problems rather than as a single designed architecture is the first step toward navigating it without resentment.

A companion survey traces the full statutory sequence of American science policy legislation, act by act, for readers who want the legislative timeline behind this machinery.

Waste or Infrastructure

The complication must be stated plainly, because the framing of indirect costs as waste is the most durable misunderstanding in research policy, and it survives because the accounting really is difficult. Indirect costs, called facilities and administrative costs in the negotiated rate agreements, pay for the parts of the laboratory that no direct cost line covers: the building and its utilities, the debt service on the building, the research compliance staff, the library, the hazardous waste program, the animal facility maintenance. No one writes a grant line for the electricity bill; the rate agreement is the electricity bill’s funding mechanism, and the cognizant agency, usually the Department of Health and Human Services or the Office of Naval Research for research-intensive institutions, negotiates the rate that prices those costs for every federal award the institution holds.

The dispute is real, and it sits where it belongs, at the rate and the accounting. The administrative component of the rate has been capped by regulation at twenty-six percent for decades, which puts a ceiling on the bureaucratic portion while leaving the facilities portion to negotiation and to audit. Institutions argue the rate under-prices the true cost of running a modern research enterprise; skeptics argue the rate rewards institutional bloat and that the accounting is too elastic to audit cleanly. Both positions have evidence; neither changes the fact that the costs exist and must be paid from somewhere.

The negotiation itself is the part outsiders rarely see. The institution pools its costs, separates the allowable from the unallowable under the cost principles, divides by the appropriate base, and defends the arithmetic to the cognizant agency’s negotiators, who bring their own auditors and their own skepticism. It is an adversarial process by design, and the rate that emerges is a settlement between two parties who disagree, not a number either side would have chosen alone. The rate then applies to every federal award the institution holds, which is why the negotiation matters beyond the institution: a single percentage point moves millions of dollars across the institution’s entire federal portfolio.

This is also why the rate is the wrong object of the waste argument and the right object of the accounting argument. The waste argument treats the payment as though it were a gratuity to the university, which it is not; it is reimbursement for costs the government’s own cost principles recognize as legitimate. The accounting argument treats the number as though it were a measurement, which it is; and measurements can be wrong, inflated, or gamed, which is why the negotiation and the audit exist. The taxpayer’s legitimate question is not whether the university should be reimbursed for the laboratory’s electricity, but whether the institution’s accounting of that electricity is honest and whether the rate is the best deal the government could negotiate. That question has no permanent answer. It has to be asked in every negotiation.

Treating the whole category as waste is the error. A university that loses its negotiated rate does not lose overhead; it loses the lights, the building, and the compliance office that keeps the research legal. The honest argument is about how much of that to reimburse and how to account for it, not about whether the category is legitimate. The researcher who repeats the waste framing without understanding the rate agreement is arguing about a number they have not read.

Five Questions to Keep for a Career

The article has been written for researchers, administrators, and journalists, and the useful close is the set of questions any of them should be able to answer about any award. These are not paperwork questions. They are the questions that decide which rules apply, and the inability to answer them is the single most common source of compliance failure in federally funded research.

Which instrument do I hold? Grant, cooperative agreement, or contract, named exactly, because it determines whether the Uniform Guidance or the acquisition regulation governs, how much involvement the government may have in the work, and how the award can be terminated. The answer should be on the first page of the award document, and every principal investigator should be able to state it without looking.

Which agency is cognizant? The negotiated rate agreement sits with a single federal agency, and that agreement prices the laboratory for every federal award the institution holds. The administrator who cannot name the cognizant agency cannot explain the institution’s indirect cost rate to anyone, including the legislators and journalists who ask about it.

Which review board made the determination? For any project touching human subjects, the name of the institutional review board and the substance of its determination, because the Common Rule’s protections are meaningless as abstractions and operate only through that board’s decision on that protocol. The 1974 statute created the system; the board’s letter is the system in action.

Which misconduct process governs? The institution’s process and the federal office that oversees it, because the definition of misconduct is shared but the investigative address changes with the agency and the instrument. Fabrication, falsification, and plagiarism mean the same everywhere; where the inquiry happens does not.

Which access obligations attach? Public access requirements for publications and data, disclosure requirements for affiliations and support, and any foreign talent program restrictions, because these are the obligations layered on later and understood least well, and they carry their own reporting clocks. A researcher who tracked every obligation above but missed these is still noncompliant.

None of this is news. It is professional equipment, and it does not expire. The statutes behind it, the 1977 instrument act, the uniform guidance, the 1974 human subjects statute and the Common Rule, the misconduct policy, the invention rules of 1980, the disclosure statutes of 2022, will still be the working law when several appropriations cycles have turned over. The researcher who can answer these five questions about every award they hold is not merely compliant. They are the person in the room who understands how the money works, and in a system where the instrument decides the rules, that person is the one everyone else needs.

Two companion study tools support readers working through this material. The legislation study notebook at VaultBook organizes the instruments, rates, and review tracks into a structured study plan, and the US government civics study guide at ReportMedic supplies the broader constitutional context in which these statutes operate.

Q:

How does federal research funding actually work?

Congress first authorizes research programs in statute and then supplies money through appropriations acts, but the daily rules of funded research live in the layers beneath. Federal agencies award money through one of three instruments under the Federal Grant and Cooperative Agreement Act of 1977: grants, cooperative agreements, and procurement contracts. Assistance instruments are administered under the Uniform Guidance at 2 CFR Part 200, while contracts follow the Federal Acquisition Regulation. Proposals are selected through merit review, which is required by statute at NIH and by regulation elsewhere. Budgets divide costs into direct and indirect, with indirect costs recovered through a negotiated rate. Human subjects research requires institutional review board review and informed consent under the Common Rule. Misconduct means fabrication, falsification, or plagiarism. Public access and data sharing are award conditions, and recipients above a spending threshold undergo single audits.

Q:

What is the difference between a grant and a contract in research funding?

A grant and a procurement contract are different legal instruments for different relationships. A grant transfers money to support research the recipient performs for a public purpose, with no substantial federal involvement during performance; the agency monitors through reports and enforces terms, but the investigator controls the science. A procurement contract is the government buying research for its own direct benefit or use, with defined deliverables, milestones, and acceptance criteria. Grants live under the Uniform Guidance at 2 CFR Part 200; contracts live under the Federal Acquisition Regulation, with cost accounting standards, a changes clause, termination for default or convenience, and disputes resolved under the Contract Disputes Act. Intellectual property also differs: Bayh-Dole election rights attach to assistance awards, while contracts allocate patent and data rights through FAR clauses that often give the government broader rights in technical data.

Q:

What are indirect costs in research funding?

Indirect costs, called facilities and administrative or F&A costs, are the shared costs of the research platform that cannot be assigned to any single award: buildings, utilities, libraries, sponsored programs offices, and compliance functions. The Uniform Guidance sorts them into a facilities pool and an administrative pool, and the resulting rate is applied not to the whole award but to modified total direct costs, which exclude equipment, tuition, patient care charges, and large subaward amounts. Each institution negotiates its rate with a cognizant federal agency in a formal rate agreement, so rates differ by institution, period, and activity. Institutions without a negotiated rate may use the 15 percent de minimis rate. The administrative component of the rate is capped at 26 percent of modified total direct costs, a ceiling in place since 1991.

Q:

Is peer review required by research funding law?

The answer depends on the agency. At the National Institutes of Health, peer review is required by statute: section 492 of the Public Health Service Act directs technical and scientific peer review of applications, and a companion provision requires advisory council recommendation before funding, which is why NIH uses its dual review system of study sections and advisory councils. At the National Science Foundation and most other civilian agencies, peer review is required by regulation and agency policy rather than by the program’s authorizing statute. The governmentwide requirement comes from the Uniform Guidance at 2 CFR 200.204, which directs agencies to run a merit review process for discretionary awards; agencies implement it through manuals like the NSF Proposal and Award Policies and Procedures Guide. Either way, the review record is the administrative record a court would examine if a decision were challenged.

Q:

What law requires institutional review boards in research funding?

The National Research Act of 1974, Public Law 93-348, is the statute that requires institutional review boards. Passed in response to the Tuskegee syphilis study revelations, it directed the Department of Health, Education, and Welfare to issue regulations requiring funded institutions to establish review boards and obtain informed consent. Those regulations became the Federal Policy for the Protection of Human Subjects, adopted in 1991 by fifteen federal departments and agencies as the Common Rule and codified at 45 CFR Part 46, Subpart A. The Common Rule sets the requirements for board composition, the three review tracks of exempt, expedited, and full board review, and the elements of informed consent. The Food and Drug Administration maintains parallel regulations at 21 CFR Parts 50 and 56 for clinical investigations rather than joining the Common Rule.

Q:

What counts as research misconduct in federal research funding?

Federal research misconduct is defined narrowly as fabrication, falsification, or plagiarism in proposing, performing, or reviewing research or in reporting research results. Fabrication means inventing data, falsification means manipulating materials or omitting data so the record misrepresents the work, and plagiarism means appropriating another’s ideas or words without credit. The governmentwide definition comes from the Office of Science and Technology Policy’s 2000 Federal Policy on Research Misconduct, and agencies apply a three-part test: a significant departure from accepted practices, intent or reckless disregard, and proof by a preponderance of the evidence. Honest error and differences of opinion are expressly excluded. The institution investigates first and reports to the federal oversight office; consequences range from retraction and supervision to debarment from federal funding.

Q:

Must research funding results be made public?

Yes, for publications arising from federally funded research, and increasingly for the underlying data. The NIH Public Access Policy, created by the Consolidated Appropriations Act of 2008, requires deposit of the final peer-reviewed manuscript in PubMed Central upon acceptance, publicly available within twelve months. A 2013 White House memorandum extended the principle to every agency spending more than one hundred million dollars annually on research, and each covered agency wrote deposit into its award terms. The NIH Data Management and Sharing Policy, effective in 2023, made data sharing a funding condition with a written plan in every application, and NSF requires a data management plan with every proposal. Noncompliance does not produce fines; it produces delayed awards, withheld continuations, and scrutiny of future applications.

Q:

What is the Uniform Guidance in research funding?

The Uniform Guidance is the federal government’s single rulebook for grants and cooperative agreements, codified at 2 CFR Part 200. Published by the Office of Management and Budget in December 2013, it replaced six overlapping OMB circulars that had imposed different versions of the same rules on universities, governments, and nonprofits. It covers the full award life cycle: pre-award requirements, post-award administration including financial management and procurement standards, cost principles deciding which costs are allowable, and audit requirements including the single audit in Subpart F. Appendix III prescribes how universities calculate indirect cost rates. A 2024 revision raised the de minimis indirect rate from 10 to 15 percent, raised the single audit threshold from $750,000 to $1,000,000, and clarified that agencies cannot force rates below the de minimis level without statutory authority.

Q:

What is a cooperative agreement in federal research funding?

A cooperative agreement is a financial assistance instrument used when the federal government transfers money for a public research purpose but anticipates substantial involvement in carrying out the work. The test comes from the Federal Grant and Cooperative Agreement Act of 1977: when the agency will participate beyond routine monitoring, such as approving protocols, sitting on steering committees, coordinating consortium members, or directing facility operations, the instrument must be a cooperative agreement rather than a grant. Examples include NSF’s large research facilities and science and technology centers, and NIH clinical trial networks in which federal scientists approve protocol amendments. The award terms spell out the agency’s involvement in detail so both sides know where government direction ends. Cost and audit rules follow the Uniform Guidance, as with grants, but the program officer is a participant in the science rather than an observer.

Q:

What is the name and number of the 1977 instrument statute?

The statute is the Federal Grant and Cooperative Agreement Act of 1977, Public Law 95-224, enacted February 3, 1978 and now codified at 31 U.S.C. 6303 to 6305. Before it, agencies used the words grant, contract, and cooperative agreement loosely, so the same relationship might be called a grant at one agency and a contract at another with different rules attaching by accident. The act imposed a mandatory, purpose-based taxonomy: a grant when the principal purpose is transferring value for a public purpose with no substantial federal involvement, a cooperative agreement when substantial involvement is anticipated, and a procurement contract when the government is acquiring property or services for its own direct benefit. Each executive agency must examine the principal purpose of each relationship and choose accordingly, and the Comptroller General has emphasized that very different requirements and consequences flow from the choice.

Q:

What is a single audit in research funding?

A single audit is the governmentwide examination required by Subpart F of the Uniform Guidance for non-federal entities that expend a threshold amount of federal funds in a fiscal year. The audit covers both the recipient’s financial statements and its compliance with federal requirements across its programs, and it is performed once to satisfy all federal agencies rather than once per agency. The 2024 revision of the Uniform Guidance raised the threshold from $750,000 to $1,000,000 in annual federal expenditures. Audit findings can produce questioned costs and repayment demands years after the research was completed, which is why institutions treat single audit preparation as a continuous discipline rather than an annual event. Procurement contracts are not covered by the single audit; contract audits follow the Federal Acquisition Regulation instead.

Q:

What is the 26 percent administrative cap on indirect costs?

The 26 percent administrative cap limits the administrative component of a university’s negotiated indirect cost rate to 26 percent of modified total direct costs. It comes from Appendix III to 2 CFR Part 200, applies to awards and amendments effective on or after the institution’s first fiscal year beginning on or after October 1, 1991, and has not moved since the Office of Management and Budget imposed it in 1991. The cap covers general administration, departmental administration, sponsored projects administration, and student administration, plus their allocable shares of facilities costs; any administrative spending above the cap is absorbed by the institution. Institutions may not defeat the cap by reclassifying administrative costs into the uncapped facilities pools. Under defense acquisition rules, Defense contracts are negotiated without the cap, so a single university can hold different rates for grant and contract work.

Q:

What is a negotiated indirect cost rate agreement?

The negotiated rate agreement is the formal document that sets an institution’s indirect cost rates. The institution submits a cost proposal documenting its facilities and administrative costs by pool, allocating them across functions such as organized research and instruction, and reconciling the figures to audited financial statements. A cognizant federal agency for indirect costs, designated to negotiate on behalf of the whole government, reviews and audits the proposal and negotiates the rates, which other agencies then apply to their own awards rather than negotiating separately. Rates are institution-specific, period-specific, and activity-specific, and come in types including predetermined, fixed with carryforward adjustment, and provisional or final. Each agreement names which rate applies to on-campus versus off-campus work and to organized research versus other activities, which is why the first step in reading any award budget is finding the institution’s current agreement.

Q:

What is the Belmont Report in research funding law?

The Belmont Report is the 1978 ethics framework that supplies the logic of American human subjects regulation. Congress created the National Commission for the Protection of Human Subjects of Biomedical and Behavioral Research in the National Research Act of 1974, and after nearly four years of deliberation, anchored by a four-day session at the Smithsonian’s Belmont Conference Center in February 1976, the Commission released Ethical Principles and Guidelines for the Protection of Human Subjects of Research, published in the Federal Register in April 1979. It organizes protection around three principles: respect for persons, realized through informed consent; beneficence, realized through systematic risk-benefit assessment; and justice, realized through fair selection of research subjects. Every Common Rule requirement traces to one of the three: consent rules operationalize respect for persons, board risk review operationalizes beneficence, and equitable selection rules operationalize justice.

Q:

What changed in the Common Rule revision?

The Common Rule is the Federal Policy for the Protection of Human Subjects, codified at 45 CFR Part 46, Subpart A and adopted by fifteen federal departments and agencies. The 1991 framework was revised through a rulemaking that began with an advance notice in 2011 and a proposed rule in 2015, producing a final rule published January 19, 2017 by HHS and fifteen other agencies, with general compliance required January 21, 2019. The revision expanded the exempt categories to eight, eliminated continuing review for expedited approvals, required consent forms to open with a concise presentation of key information, created a broad consent option for secondary use of biospecimens and identifiable data, and required a single institutional review board for cooperative research at multiple United States sites, effective January 20, 2020. Clinical trials must also post one consent form version on a public federal website after recruitment closes.

Q:

What is the difference between ORI and the NSF Office of Inspector General?

The Office of Research Integrity and the NSF Office of Inspector General are the two main federal misconduct overseers, and they work differently. For Public Health Service funded research, the institution investigates first under 42 CFR Part 93 and reports its findings to ORI, which reviews the record and recommends administrative actions to HHS, including debarment, certification requirements, or supervision. For NSF funded work, the NSF Office of Inspector General investigates allegations directly, covering proposals, awards, and the peer review process itself. Both apply the governmentwide definition of fabrication, falsification, and plagiarism with the same three-part test, but the institutional-first model and the inspector-general model place the investigation in different hands. Because agencies share debarment information, a debarment arising from either path effectively closes off federal research funding across agencies for its duration.

Q:

What is the NIH public access deposit requirement?

The NIH public access deposit requires every NIH-funded investigator to submit the final peer-reviewed manuscript to PubMed Central upon acceptance for publication, to be made publicly available no later than twelve months after publication. The mandate comes from section 218 of the Consolidated Appropriations Act, 2008, with NIH implementing policy issued in January 2008 and deposit mandatory from April 2008. It covers peer-reviewed articles arising from direct NIH funding, including grants, cooperative agreements, contracts, and the intramural program. Authors deposit through the NIH Manuscript Submission system or through publishers that deposit on their behalf, and institutions often supply an author addendum reserving deposit rights against publisher transfer agreements. Since May 2008, applications and progress reports must cite the PubMed Central reference number for each covered publication, which makes compliance a mechanical gate that can hold up an award.

Q:

What are data management and sharing requirements in research funding?

Data sharing is now a funding condition, not a courtesy. The NIH Data Management and Sharing Policy, effective January 25, 2023, applies to all NIH-funded research that generates scientific data, defined as recorded factual material of sufficient quality to validate and replicate findings. Every application must include a Data Management and Sharing Plan describing the data to be produced, standards and metadata, preservation and access plans, and the sharing timeline, with curation and repository costs budgeted as direct costs. The approved plan becomes an award term, data must be shared by publication or the end of the award, and compliance is monitored through progress reporting. NSF requires every proposal to include a two-page Data Management Plan reviewed under the merit criteria, and expects investigators to share primary data and supporting materials at no more than incremental cost within a reasonable time.

Q:

What is disclosure of other support in research funding?

Disclosure of other support means telling the funding agency about every resource available to the researcher in support of their work, whether from the awarding agency or another source. It covers active and pending grants, contracts, and cooperative agreements, in-kind contributions such as donated equipment or effort, and all appointments and affiliations including unpaid, honorary, and foreign positions. Disclosure is not a one-time event: agencies require updates when new support or appointments arise, and the researcher certifies completeness and accuracy each time, with material omissions carrying the same consequences as affirmative misstatements. The practitioner standard is everything a reasonable program officer would want to know before making an award. Under the CHIPS and Science Act, covered individuals certify these disclosures at proposal and annually, because the government funds the researcher it evaluated, and undisclosed entanglements mean it evaluated someone else.

Q:

What is the foreign talent program prohibition in research funding?

Covered individuals, meaning principal investigators and other senior or key personnel on federal research awards, may not participate in a malign foreign talent recruitment program while working on federally funded projects. The prohibition comes from the CHIPS and Science Act of 2022, which defines the programs at 42 U.S.C. 19237 and requires covered individuals to certify at the proposal stage and annually that they are not a party to one, with institutions certifying that their personnel understand and comply. The disclosure duty reaches any contract, agreement, or arrangement under such a program, including unpaid ones. Institutions receiving more than fifty million dollars per year in federal science and engineering support must operate a research security program covering cybersecurity, foreign travel security, research security training, and export control training. Participation and federal funding cannot coexist, and the certifications make that choice explicit and documented.