TL;DR: ORI’s final rule revising the Public Health Service (PHS) research misconduct regulations at 42 CFR Part 93 was published in the Federal Register on September 17, 2024 (Vol. 89, No. 180) and took effect January 1, 2025 — the first substantive update since 2005. It became applicable to new allegations on January 1, 2026, and institutions were required to have revised, compliant policies on file with ORI as part of their annual report covering 2025, due April 30, 2026. Both dates have now passed. This guide walks through exactly what changed, section by section, and what it means for institutions still working from 2005-era policy language.
Why this update happened
The regulations governing how institutions handle allegations of research misconduct involving Public Health Service (PHS) funding — fabrication, falsification, and plagiarism (FFP) in proposing, performing, reviewing, or reporting research — had not been substantively revised since 2005. In that time, the research environment ORI regulates changed considerably: the shift to cloud-based data storage and electronic lab notebooks, the rise of image-forensics and AI-assisted tools for detecting manipulated figures, and nearly two decades of case experience surfacing gaps in the 2005 text around evidentiary standards, timelines, and multi-institutional cases. ORI’s 2024 final rule (docket 2024-20814) is the result of that overdue update, following a notice of proposed rulemaking and a public comment period.
What actually changed in 42 CFR Part 93
The final rule touches definitions, evidentiary standards, case timelines, and institutional reporting obligations. The most consequential changes:
Definitions (Subpart B)
- “Plagiarism” is now explicitly defined in regulatory text, codifying ORI’s longstanding case-handling guidance and clarifying that it does not include self-plagiarism or ordinary authorship disputes.
- “Recklessly” is newly defined — acting with indifference to a known risk that conduct constitutes fabrication, falsification, or plagiarism — giving institutions and ORI a clearer standard for the intent element of a misconduct finding, alongside the existing “knowingly” and “intentionally” standards.
- “Accepted practices of the relevant research community” is retained as a defined term, anchoring what counts as a significant departure from disciplinary norms.
- ORI declined to finalize several terms it had proposed defining — “Appeal,” “Difference of Opinion,” “Honest Error,” and “Research Integrity” — concluding they weren’t necessary for regulatory clarity and could invite unintended interpretive disputes.
Evidentiary standards (§ 93.105)
The final rule restores and clarifies adverse-inference provisions: an institution may treat a respondent’s intentional or knowing destruction of relevant records, or refusal to produce records they are able to provide, as evidence supporting a misconduct finding. Critically, the rule also clarifies the flip side — ordinary failure to retain records over time, absent intent to obstruct, is not automatically treated as misconduct.
Case timelines get longer (§§ 93.307, 93.311)
Two of the most operationally significant changes are timeline extensions, reflecting how much more document-intensive investigations have become since 2005:
- Inquiry phase: extended from 60 days to 90 days.
- Investigation phase: extended from 120 days to 180 days.
Institutions can still request extensions beyond these periods with justification, as under the prior rule — but the new baseline gives research integrity officers (RIOs) and inquiry/investigation committees meaningfully more runway before an extension request is even needed.
Institutional documentation and reporting (Subpart C)
The final rule adds and expands several institutional obligations:
- A formal assessment phase is now documented before an inquiry opens (§ 93.306), where the RIO evaluates whether an allegation meets the threshold for research misconduct under the regulation.
- Expanded inquiry reports (§ 93.309) must include a sequestration inventory, the committee’s composition, a timeline, and the scientific/technical analysis behind the inquiry committee’s conclusion.
- Enhanced investigation reports (§ 93.313) must include interview transcripts and specifically identify which publications or other research records are implicated.
- A consolidated “institutional record” must be transmitted to ORI after a final institutional determination (§ 93.316), rather than records being assembled piecemeal on request.
Procedural flexibility for institutions
Several changes reduce administrative friction rather than adding it:
- Institutions may sequester copies of research records rather than originals in appropriate circumstances (§ 93.305).
- Institutions can add respondents to an ongoing case without opening a wholly separate inquiry.
- In cases spanning more than one institution, the regulation now allows designating a lead institution to coordinate the response.
- Full interview transcription is required only at the investigation stage, not the earlier inquiry stage — reducing cost and delay for allegations that are resolved or closed at inquiry.
Confidentiality clarification (§ 93.106)
The final rule clarifies that institutions may disclose the identity of a respondent or complainant to third parties with a legitimate need to know — for example, IRBs, journals and publishers, or research collaborators — and may take steps to manage or correct the published research record once a determination has been made, without that disclosure itself violating confidentiality requirements.
Effective dates: what applies when
The dates matter as much as the substance, because they determine which version of the rule governs a given case:
- January 1, 2025 — the final rule’s general effective date.
- January 1, 2026 — the applicability date for allegations. Institutions must apply the new final rule to allegations they receive on or after this date.
- Allegations received before January 1, 2026 are handled under 42 CFR Part 93 as it stood in the 2005 edition of the Code of Federal Regulations — unless both the institution and the respondent agree in writing to proceed under the new rule instead.
- April 30, 2026 — the deadline for institutions to submit revised, compliant policies and procedures to ORI, as part of the annual report covering calendar year 2025. This deadline has now passed; an institution that has not yet updated and filed its policy is out of step with a compliance obligation that is already due.
In practice, this means any institution actively handling a misconduct matter today needs to check the allegation’s receipt date before assuming which procedural rulebook — 2005 or 2024 — governs deadlines, evidentiary standards, and reporting obligations for that specific case.
What institutions should check now
Given both applicability dates have passed, the practical task for a research integrity office is less “prepare for” and more “confirm compliance with”:
- Institutional research misconduct policy language reflects the current inquiry (90-day) and investigation (180-day) timelines, not the 2005 60/120-day figures.
- Assessment-phase documentation (§ 93.306) is actually being generated and retained before a formal inquiry opens, not just at the inquiry stage.
- Inquiry and investigation report templates capture the newly required elements — sequestration inventory, committee composition, and (for investigations) interview transcripts and specific implicated-publication identification.
- The revised policy was in fact submitted to ORI with the annual report covering 2025.
- Staff handling active cases know which allegations (pre- vs. post-January 1, 2026) fall under which version of the rule.
For the underlying concepts — what fabrication, falsification, and plagiarism mean, and how an inquiry differs from a full investigation — see CASRAI’s Research Integrity Fundamentals guide and the companion walkthrough of how a research misconduct investigation actually works, both of which reflect the 2005-era process structure that the final rule modifies rather than replaces.
Frequently asked questions
When did ORI’s final rule on research misconduct take effect?
The final rule was published in the Federal Register on September 17, 2024, and took general effect January 1, 2025. It became applicable to new misconduct allegations on January 1, 2026.
Does the new rule apply to misconduct cases that were already open before 2026?
No, not automatically. Allegations received by an institution before January 1, 2026 continue to be handled under the 2005 edition of 42 CFR Part 93, unless the institution and the respondent both agree in writing to proceed under the new final rule instead.
Did the timelines for inquiries and investigations change?
Yes. The inquiry phase deadline was extended from 60 to 90 days, and the investigation phase deadline was extended from 120 to 180 days, under §§ 93.307 and 93.311 respectively.
What was the deadline for institutions to update their policies?
Institutions were required to submit revised, compliant misconduct policies and procedures to ORI as part of their annual report covering calendar year 2025, due on or before April 30, 2026.
Where can I read the actual regulatory text?
The current, consolidated text of 42 CFR Part 93 is maintained at the Electronic Code of Federal Regulations (eCFR), and the original final rule notice is docket 2024-20814 in the Federal Register (published September 17, 2024).
Related CASRAI resources
- Research Integrity Fundamentals: FFP, RCR, and the Misconduct Process
- How a Research Misconduct Investigation Actually Works
- Research Misconduct Case Studies: What Real Investigations Reveal
- ORI’s 2026 Case Summaries: A 15-Year Debarment and the Fernandez Case
- NIH’s May 2026 Notice: When AI Use Becomes Research Misconduct
- The Seven Elements of an Effective Compliance Program, Applied to Research Compliance
- Dictionary: ORI (US Office of Research Integrity)
- Dictionary: Research misconduct
