Drone & UAS Regulation — Federal Rules for Unmanned Aircraft

Unmanned Aircraft Systems (UAS) — commonly called drones — are regulated by the Federal Aviation Administration (FAA) under a rapidly evolving framework that balances the enormous commercial potential of drone technology with aviation safety, national security, and privacy concerns. The FAA's Part 107 rule (14 C.F.R. Part 107, effective 2016) established the foundational regulatory framework for small UAS (under 55 pounds): operators must obtain a Remote Pilot Certificate, fly at or below 400 feet above ground level, maintain visual line of sight (VLOS), fly only during daylight (or civil twilight with anti-collision lighting), and not fly over people or moving vehicles (with exceptions under updated rules). The FAA Extension, Safety, and Security Act of 2016 and the FAA Reauthorization Act of 2018 further developed the framework, including Remote ID requirements (all drones must broadcast identification and location data — the "license plate" for drones, effective 2024), recreational drone rules (49 U.S.C. § 44809), and counter-UAS authorities for federal agencies protecting sensitive facilities. The commercial drone market is projected to exceed $50 billion by 2030, with applications in agriculture, infrastructure inspection, delivery, emergency response, filmmaking, real estate, and surveying. The regulatory frontier is Beyond Visual Line of Sight (BVLOS) operations — flying drones beyond the pilot's direct view — which is essential for large-scale commercial applications like package delivery and long-range infrastructure inspection but raises significant safety challenges. The FAA released a proposed Part 108 BVLOS rule in August 2025, with a final rule expected in spring 2026.

Current Law (2026)

Legal Authority

• 49 U.S.C. § 44809 — Exception for limited recreational operations of unmanned aircraft
• 14 C.F.R. Part 107 — Small unmanned aircraft systems (commercial operations rule)
• 14 C.F.R. Part 89 — Remote identification of unmanned aircraft (Remote ID rule)
• 6 U.S.C. § 124n — Protection of certain facilities and assets from unmanned aircraft (DHS counter-UAS)
• 18 U.S.C. § 39B — Unsafe operation of unmanned aircraft (criminal penalties)
• FAA Reauthorization Act of 2018 — Comprehensive UAS provisions including Remote ID mandate, counter-UAS authorities

How It Works

Part 107 governs most commercial drone operations. To fly commercially, you must be at least 16, pass the Remote Pilot Certificate knowledge test (aeronautical knowledge, airspace rules, weather, regulations — approximately 60 questions at an FAA-approved testing center), register your drone with the FAA ($5), and follow standard operational rules: 400-foot altitude maximum, visual line of sight (VLOS), yielding to manned aircraft, and no flight over people without authorization. Part 107 waivers have progressively expanded what's permitted — nighttime flight, operations over moving vehicles, and reduced-visibility operations are now available under specific conditions without waivers. Effective March 2024, all drones operating in U.S. airspace must broadcast Remote ID — the drone's identity, location, altitude, velocity, and operator takeoff location — enabling law enforcement and other airspace users to identify drones in real time. Newer drones have Remote ID built in; older drones must attach a broadcast module or operate at FAA-Recognized Identification Areas (FRIAs).

The two most significant remaining regulatory frontiers are counter-UAS authority and BVLOS operations. Federal agencies — DHS (Secret Service, Coast Guard), DOJ (FBI, U.S. Marshals), and DoD — have statutory authority to detect, track, identify, and mitigate (intercept, disable, or destroy) threatening drones near airports, military installations, critical infrastructure, and large public events; state and local law enforcement generally lack this authority, a significant gap given the growing drone threat. BVLOS (beyond visual line of sight) is the key enabler for the highest-value drone applications — package delivery (Amazon, UPS, Wing), pipeline and power line inspection, precision agriculture, and emergency medical supply delivery — but currently requires individual FAA waivers or participation in the BEYOND program. The FAA is developing a comprehensive BVLOS rule expected to be finalized by 2026, establishing performance-based standards (detect-and-avoid technology, air-to-air communication, operational risk assessment) that would enable broader commercial deployment without case-by-case waivers.

How It Affects You

If you fly drones recreationally: Register any drone weighing more than 0.55 pounds with the FAA at faadronezone.faa.gov ($5, valid 3 years — one registration covers all your drones). Under 49 U.S.C. § 44809, recreational pilots must fly at or below 400 feet, maintain visual line of sight, and stay out of controlled airspace without prior authorization. For airspace clearance near airports and controlled airspace, use the FAA DroneZone or the B4UFLY app (free) before every flight — LAANC (Low Altitude Authorization and Notification Capability) provides near-instant airspace authorization in many areas. Remote ID is now required for all drones: if your drone was manufactured after September 2023 it almost certainly has Remote ID built in; if it's older, you can attach a Remote ID broadcast module or fly at an FAA-Recognized Identification Area (FRIA) near you. You do not need a Remote Pilot Certificate for purely recreational flying — but you do need to pass the recreational knowledge and safety test (free, online, at the FAA's TRUST test providers).

If you operate drones commercially: You need a Remote Pilot Certificate — obtained by passing the FAA Aeronautical Knowledge Test at an FAA-approved testing center (roughly $175 fee). The test covers airspace classification, weather, regulations, and emergency procedures. Register each drone over 0.55 lbs ($5/aircraft). Commercial Part 107 operations are more flexible than recreational: you can fly in controlled airspace with LAANC authorization, and operations over people and at night are permitted under specific conditions (Category 1-4 based on drone weight and kinetic energy; anti-collision lighting for night operations). BVLOS (beyond visual line of sight) operations — the key to large-scale delivery and infrastructure inspection — currently require a Part 107 waiver or participation in the FAA's BEYOND pilot program, but a comprehensive BVLOS rule is expected by 2026-2027 that would enable broader operations under performance-based standards.

If you're a business considering drone deployment: Drones have crossed from novelty to operational tool in agriculture (crop health monitoring, precision spraying), construction (site surveys, progress documentation, safety inspections), insurance (rooftop assessments after storms — drones eliminate ladder falls), energy (transmission line and pipeline inspection without helicopter), and public safety (search and rescue, wildfire monitoring). Before deploying, verify your commercial liability insurance explicitly covers UAS operations — standard GL policies often exclude them. If you're operating drones for hire or transporting property for compensation, you may need to consider Part 135 air carrier certification beyond Part 107. For scaled enterprise operations, a COA (Certificate of Waiver or Authorization) or Part 135 certificate opens operations that Part 107 alone won't permit. Companies like Wing, Zipline, and Amazon Prime Air have obtained Part 135 certificates for drone delivery.

If you're a homeowner or privacy-concerned citizen: The FAA regulates drone safety and airspace — not surveillance, privacy, or harassment. If a drone is hovering over your property filming you, your remedies are primarily at the state level: approximately 35 states have enacted drone privacy laws prohibiting surveillance of individuals on private property without consent, voyeurism, or harassment by drone. Check your state's law for civil remedies and criminal penalties. At the federal level, 18 U.S.C. § 39B creates criminal liability for unsafe drone operations (up to 3 years for interference with manned aircraft; up to life imprisonment if the incident causes death). If you believe a drone poses a security threat to critical infrastructure or a federal facility, contact local law enforcement or the FBI. Note: shooting down a drone — even one invading your privacy — is a federal crime under aviation law, regardless of where it is flying.

State Variations

Federal law preempts state regulation of airspace and aircraft safety, but states regulate other drone aspects:

• Many states have enacted drone privacy laws (prohibiting surveillance, voyeurism, harassment by drone)
• Some states restrict drone use by law enforcement (requiring warrants for drone surveillance)
• State laws vary on hunting from drones, drone fishing, and drones near wildfires

• Local governments may impose time, place, and manner restrictions on drone takeoff and landing (not flight in navigable airspace, which is FAA-exclusive)

Implementing Regulations

• 14 CFR Part 107 — FAA Small Unmanned Aircraft Systems rule governing commercial drone operations, including Remote Pilot Certificate requirements, operating limitations (400-foot altitude ceiling, visual line of sight), and waiver procedures for beyond-standard operations

• 14 CFR Part 89 — Remote Identification of Unmanned Aircraft (35 sections — the FAA's Remote ID rule, finalized January 2021, full compliance required September 2023, establishing the national framework for drones to broadcast identifying information so law enforcement, other pilots, and the FAA can identify and locate UAS operators in real time):

  • § 89.105 — Remote ID requirement: except for operations at FAA-Recognized Identification Areas (FRIAs) and certain research exemptions, all unmanned aircraft operated in U.S. airspace must have Remote ID capability — either built into the aircraft or via an add-on broadcast module; Remote ID must broadcast continuously from takeoff through shutdown
  • § 89.110 — Standard Remote ID aircraft: a drone with Remote ID built in (compliant with ASTM F3586-22 or FAA-accepted means of compliance) must continuously broadcast: (1) the drone's unique session ID (analogous to a VIN number), (2) current location and altitude (latitude/longitude), (3) current velocity, (4) takeoff location (the GPS coordinates where the flight began), and (5) time mark; this information is broadcast on radio frequency (WiFi or Bluetooth broadcast, not streamed to a cloud database) so anyone with an appropriate receiver can read it; the FAA, law enforcement, and other airspace users can receive these broadcasts with standard mobile devices
  • § 89.115 — Alternative Remote ID (broadcast module): drones that do not have standard Remote ID built in may operate with an add-on broadcast module that transmits the required information; broadcast modules must be FAA-accepted and cannot be removed during flight; this path was created for older drone fleets that manufacturers did not update with built-in Remote ID; the add-on module market emerged after 2021 to serve this need
  • § 89.125 — ADS-B prohibition: drones may NOT use the ADS-B Out (Automatic Dependent Surveillance-Broadcast) system designed for manned aircraft; this prohibition prevents drone interference with the air traffic control system that relies on ADS-B data from manned aircraft; FAA deliberately created the separate Remote ID broadcast standard to avoid integrating drones into the manned aviation surveillance infrastructure
  • § 89.130 — Confirmation of identification (foreign drone registration): no person may operate a foreign-registered unmanned aircraft in U.S. airspace without confirmation from the foreign civil aviation authority and notification to the FAA; this provision addresses foreign-manufactured drones (the vast majority of commercially available drones are manufactured in China) operating in U.S. airspace under foreign registration
  • §§ 89.201–89.230 — FAA-Recognized Identification Areas (FRIAs): a limited exception to the Remote ID requirement — community-based organizations (model airplane clubs, AMA-affiliated groups) and educational institutions may apply to establish designated areas where drones without Remote ID capability may fly; applications must identify the geographic location, boundary dimensions, and operating rules of the area; FRIAs must be within existing model aircraft flying club sites; FRIAs allow the legacy model aviation community (which predates drones by decades) to continue operating older, non-Remote-ID aircraft in supervised environments; FAA-approved FRIAs are listed in the FAA's UAS Data Delivery Service

  Remote ID is sometimes called the "license plate for drones" — it gives law enforcement and FAA a way to identify drone operators in real time without having to physically chase or intercept the aircraft. Before Remote ID, law enforcement had no mechanism to quickly identify whether an unauthorized drone over a stadium, prison, or airport was a recreational hobbyist or a threat. Remote ID significantly changes the accountability landscape for commercial drone operators: every flight now leaves a detectable, attributable broadcast trail. Privacy advocates initially argued that Remote ID could enable tracking of legitimate operators; the FAA partially addressed this by using session IDs (rather than permanent registration numbers) in the broadcast and not requiring pilot identity in the broadcast itself. Recent rulemakings: 86 FR 4505 (January 2021) — final Remote ID rule; 86 FR 13630 (March 2021) — corrections and minor amendments.

• 14 CFR Part 91 — General operating and flight rules applicable to UAS operating in national airspace, including right-of-way requirements, airspace classification rules, and requirements to yield to manned aircraft

• 47 CFR Part 87 — FCC aviation radio frequency regulations applicable to UAS communications systems and the radio spectrum used for drone command and control links

• 14 CFR Part 107 — Small Unmanned Aircraft Systems (sUAS — rules for commercial drone operations under 55 lbs: remote pilot certification, operating limitations, airspace restrictions, waivers; night operations and operations over people authorized under 2021 amendments; 60 sections)

Pending Legislation

Drone integration and airspace management bills have been introduced in the 119th Congress. See FAA Aviation Regulation for related legislative activity.

Recent Developments

Remote ID implementation (2024) was the most significant recent milestone — giving the FAA and security agencies the ability to identify drones in real time for the first time. The FAA's BVLOS rulemaking is in advanced stages — the final rule is expected to enable widespread commercial BVLOS operations under performance-based safety standards. Drone delivery services (Wing, Zipline, Amazon Prime Air) are operating limited commercial delivery programs in select markets. The growing threat of weaponized drones (demonstrated in the Ukraine conflict and incidents at critical infrastructure) has intensified calls for expanded counter-UAS authorities. Advanced Air Mobility (AAM) — including electric vertical takeoff and landing (eVTOL) air taxis — represents the next frontier, with certification and operational rules under development. The growing integration of autonomous vehicle and AI technologies into drone operations raises both safety and Fourth Amendment privacy questions. See also commercial space launch for the related regulatory framework governing vehicles operating above FAA-controlled airspace.

• FAA BVLOS proposed rule — Part 108 (August 2025): The FAA released its Notice of Proposed Rulemaking (NPRM) for Part 108 — Beyond Visual Line of Sight (BVLOS) drone operations — on August 7, 2025, with the 60-day comment period closing October 6, 2025. The 700+ page proposal would replace the current waiver-based system with performance-based regulations enabling routine BVLOS operations for package delivery, infrastructure inspection (power lines, pipelines), precision agriculture, and public safety. Final rule publication is expected by spring 2026, with implementation 6–12 months thereafter. Remote ID compliance is a prerequisite; operators would also need type certifications for their aircraft. The BVLOS rule is expected to unlock an estimated $10+ billion in commercial drone opportunities.
• Counter-drone authority expansion: The Secret Service, DHS, DOJ, and DOD have counter-UAS authorities to detect, track, and disable drones posing threats to protected facilities and events. The 2025 reauthorization of counter-drone authorities expanded the list of venues where federal agencies can interdict drones — including major sporting events and critical infrastructure. The Secret Service used counter-drone systems extensively around the 2025 presidential inauguration and Mar-a-Lago. The patchwork of federal counter-drone authorities (limited to specific agencies and locations) has prompted calls for a more unified framework.
• Chinese drone ban in federal use (2025): The American Security Drone Act (2023), prohibiting federal agencies from purchasing drones from companies with ties to China (primarily DJI), took full effect. DJI — which holds approximately 70% of the global consumer and commercial drone market — is prohibited from federal government procurement. The ban has affected law enforcement and public safety agencies that relied on DJI drones for emergency response and surveillance. American-made alternatives (Skydio, Joby, others) have benefited but face scale and cost challenges. Several state legislatures have also enacted DJI bans.
• eVTOL/air taxi certification (2025-2026): Joby Aviation, Archer Aviation, Lilium, and other electric vertical takeoff and landing aircraft companies are in various stages of FAA type certification for air taxi services. FAA issued its first special airworthiness certification standards for eVTOL in 2024. Commercial air taxi service — shuttling passengers between urban locations — is expected to begin in select markets in 2025-2026. The regulatory framework for eVTOL combines elements of aircraft certification, air carrier operations, and vertiport design standards, creating one of the FAA's most complex new regulatory frameworks.