1. Home
  2. |Insights
  3. |Off to the Races: The FAA Initiates Informal Drone Rulemaking

Off to the Races: The FAA Initiates Informal Drone Rulemaking

Client Alert | 1 min read | 02.14.19

Yesterday, the Federal Aviation Administration (FAA) posted in the Federal Register the Notice of Proposed Rulemaking for Operations of Small Unmanned Aircraft Systems over People and the Advanced Notice of Proposed Rulemaking for Safe and Secure Operations of Small Unmanned Aircraft Systems. The substance and implications of the draft rules were explored in previous client alerts and can be accessed here and here. Comments to both notices are due April 15, 2019.

The FAA also issued an interim final rule requiring small drone owners to display their FAA-issued registration number on the exterior of the aircraft. This is a change from the current rule, which only requires that the number be readily accessible and readable at a close distance. Under the new rule, owners will no longer have the flexibility to place the number in an enclosed compartment on the device, a practice which “presents an imminent risk of harm to first responders,” according to the rule. The rule is effective February 25, 2019, without the usual notice and comment period. This immediate implementation further underscores the Government’s concern over the unique security risks posed by small drones. Interested parties should submit comments by March 15, 2019, as the rule may be amended based on comments received.

Insights

Client Alert | 13 min read | 06.12.26

EU Cyber Resilience Act Countdown: 11 September 2026 Incident/Vulnerability Reporting Deadline Less Than 100 Days Away

The EU Cyber Resilience Act (CRA) is an EU product cybersecurity law for connected products (formally, “products with digital elements” under the CRA) commercialized in the EU; it entered into force on 10 December 2024, with direct application across the EU. Full application begins 11 December 2027, but one of its most operationally demanding provisions takes effect in just under 100 days, on 11 September 2026: the mandatory vulnerability and incident reporting under Article 14 CRA....