Then what will happen in the regulations, where you specify which level of regulation requirement is for which bugs, will require fairly extensive scientific input. For example, level 2 would not require security clearance. Not all level 3 would require a security clearance. Clearly, for people working with bioterrorist agents, they would likely end up requiring that. But clearly not all level 3 agents are a security concern in that same way. But we need to go through the consultations on the specifics.
The other thing is that times change. The reason for having the regulations as opposed to the act is that should new bioterrorist agents be developed, or other things, you need the ability to adapt the regulations accordingly.