Ten years is a long time to wait for a rule. Congress first mandated that the FAA create a formal process for restricting drone flights near critical infrastructure back in 2016, tucked inside the FAA Extension, Safety, and Security Act. A decade — and two FAA Reauthorization Acts — later, the agency has finally published its Notice of Proposed Rulemaking. The drone industry now has 60 days to help shape what could become one of the most consequential pieces of airspace regulation in the sector’s commercial history.
What Section 2209 Actually Does
The proposed rule, filed under Docket No. FAA-2026-4558 and published in the Federal Register on May 6, 2026, would create a brand-new regulatory framework under 14 CFR Part 74. Its purpose is to give operators and proprietors of certain fixed site facilities a formal mechanism to request drone flight restrictions around their property — something that previously had no clear legal pathway.
The categories of eligible facilities are drawn directly from the original 2016 statute and include energy production, transmission, and distribution facilities; oil refineries; chemical plants; railroad infrastructure; amusement parks; and state prisons. The FAA estimates that more than 9,000 facilities across 16 critical infrastructure sectors could ultimately qualify to apply for a restriction.
Importantly, this is not a blanket no-fly zone system. Facilities must apply for a designation, meet eligibility criteria, and go through a review process. Drone operators flying near those facilities would then need to comply with the specific terms of any active restriction — which is where the two-tier structure becomes relevant.
Two Tiers of Restriction
The 181-page proposal lays out a graduated approach to airspace restriction. The first tier, called a Standard Unmanned Aircraft Flight Restriction (UAFR), would prohibit most drone operations within a defined boundary around a designated facility. However, operators who have previously met FAA safety and security requirements could still fly in those zones under pre-approved conditions — allowing legitimate commercial operations like inspections and surveys to continue where appropriate.
The second tier, a Special UAFR, applies stricter controls for higher-sensitivity facilities. Under a Special UAFR designation, drone operations within the restricted area would require advance approval from both the FAA and the relevant sponsoring federal agency. This dual-approval layer is designed for facilities where the potential consequences of a drone incursion — whether accidental or deliberate — are considered to be most severe.
The framework also requires facilities to maintain their designations over time, preventing inactive or outdated restrictions from cluttering the airspace. Designations must be renewed periodically and can be challenged or removed if circumstances change.
A Decade in the Making
The delay between Congress passing Section 2209 in 2016 and the FAA finally producing this NPRM is a striking reminder of how slowly the regulatory machinery can move relative to the pace of drone technology. When the original law was passed, commercial drone operations were in their infancy. Remote ID didn’t exist as a concept. BVLOS operations were largely theoretical. The industry has gone through multiple generational leaps in capability, scale, and commercial deployment in the time it took for this single proposed rule to materialise.
The catalyst for finally getting the rule out the door appears to have been Executive Order 14305, “Restoring American Airspace Sovereignty,” signed in June 2025, which directed the FAA to submit the NPRM promptly. Political pressure from the executive branch succeeded where a decade of Congressional mandate had not.
Industry Response
Reaction from industry stakeholders has been broadly cautious but constructive. The Commercial Drone Alliance issued a statement welcoming the proposal, emphasising the importance of ensuring that the final rule doesn’t inadvertently create a mechanism for facility operators to lock commercial drone operators out of legitimate airspace through overly broad restriction requests.
That concern is legitimate. A framework that allows 9,000-plus facilities to request no-fly zones — with varying degrees of scrutiny — could, if poorly administered, create a patchwork of airspace restrictions that significantly complicates BVLOS route planning, infrastructure inspection contracts, and urban delivery operations. The 60-day public comment window, which closes on July 6, 2026, is the industry’s primary opportunity to push back on any aspects of the framework that could be gamed or applied too broadly.
What It Means for the Drone Industry
For commercial operators, the most immediate practical question is how these restrictions will interact with existing FAA authorisation systems — particularly LAANC, the Low Altitude Authorisation and Notification Capability used by millions of Part 107 pilots to access controlled airspace. The rule is silent on this integration question, and the FAA will need to address it before any final regulation takes effect.
For the broader industry, the Section 2209 NPRM is a signal that the era of drones operating in a regulatory grey zone around sensitive facilities is coming to an end. That’s not necessarily a bad thing. A clear, well-structured restriction framework that operators can understand and work within is far preferable to ad-hoc enforcement, inconsistent local rules, or facilities taking unilateral action to interfere with aircraft. Certainty — even in the form of restrictions — is something commercial operators can plan around.
The 60-day comment window is an important one. The UAV industry has consistently demonstrated that engaged, technically grounded participation in rulemaking processes produces better outcomes for everyone. This is another such moment. Operators, associations, and technology companies have until July 6 to make their voices heard on a rule that will shape how drones access commercial airspace for years to come.