Drone Technology and Regulation: What the US Rules Actually Allow

Small drones are now ordinary industrial equipment in the United States. Utilities inspect power lines with them, construction firms survey sites, police departments respond to 911 calls with them, and delivery companies run limited package routes. Yet the legal framework governing most of this activity, the Federal Aviation Administration's Part 107 rule, dates from 2016 and was written around one central assumption: the pilot keeps the aircraft within visual line of sight at all times.

That assumption shapes everything. It limits how far a drone can fly, how many drones one operator can manage, and which business models are viable. The most valuable commercial uses, long-distance infrastructure inspection, wide-area delivery, persistent security patrol, all require flying beyond visual line of sight, which today requires a waiver the FAA grants case by case. In August 2025 the FAA proposed a new rule, Part 108, that would make such operations routine rather than exceptional. It has not been finalised. This report explains what the current rules allow, what the proposed rule would change, and the policy fights that remain unresolved.

What Part 107 allows today

Part 107 governs commercial operation of drones under 55 pounds. Its core requirements are straightforward. The remote pilot must hold a Part 107 certificate, obtained by passing a knowledge test. The aircraft must weigh less than 55 pounds at takeoff, fly below 400 feet, stay within visual line of sight, and not fly over people who are not part of the operation unless specific conditions are met. Night operations are permitted with anti-collision lighting and updated training.

Operations that fall outside these limits require a waiver. The FAA grants waivers for specific provisions, including flight over people, flight at night under older rules, and beyond visual line of sight operations. The waiver process is the industry's main complaint: applicants describe the operation, propose mitigations, and wait, sometimes for months. According to the FAA's own Part 107 waiver statistics, the most requested waiver by far is for operations at night under legacy rules, followed by beyond visual line of sight.

Remote ID: the licence plate requirement

Since March 2024, nearly all drones operating in US airspace must broadcast identification and location information, a requirement known as Remote ID. The rule, finalised in 2021, requires the drone to transmit its serial number, position, altitude, velocity and the control station's location, receivable by anyone nearby with a compatible device. The FAA describes it as a digital licence plate that lets law enforcement and security agencies identify drones in flight.

Compliance has been uneven. The FAA granted an enforcement discretion period after manufacturers struggled to supply compliant modules, and the drone industry has reported persistent supply and firmware problems. Security agencies, meanwhile, argue Remote ID alone is insufficient: it identifies cooperative drones but does nothing about an operator who simply disables the broadcast. That gap drives much of the counter-drone policy debate discussed below.

The Part 108 proposal: routine flight beyond visual line of sight

In August 2025, the FAA published its notice of proposed rulemaking for Part 108, Normalizing Unmanned Aircraft Systems Beyond Visual Line of Sight Operations. The proposal would replace the case-by-case waiver system with a standing framework. Operators would hold permits or certificates depending on the risk level of the operation, drones would need to meet airworthiness and detect-and-avoid requirements, and operations would be categorised by the population density overflown.

The proposal matters because the waiver system does not scale. A delivery company operating in dozens of cities cannot run each route as a bespoke regulatory project. Part 108 would let qualifying operators fly routine routes without individual approval, shifting the FAA's role from granting permission to overseeing compliance. Industry groups including the Association for Uncrewed Vehicle Systems International have supported the framework while disputing details, particularly the proposed restrictions on operations over densely populated areas, which they argue would exclude the urban delivery and inspection work that generates the most revenue.

As of this writing, the final rule has not been published. The FAA received thousands of public comments, and the timeline for finalisation has slipped past the administration's initial targets. Companies building businesses around beyond-visual-line-of-sight operations are planning against a rule whose final text they have not seen.

Airspace: where drones can and cannot fly

Altitude is only part of the constraint. Controlled airspace around airports requires authorisation, which the FAA issues through the Low Altitude Authorization and Notification Capability, known as LAANC. The system gives near-real-time approval for flights up to approved altitudes near hundreds of airports, and it works well for its designed purpose. The FAA publishes UAS facility maps showing the approved altitudes in each grid around participating airports.

Other restrictions are less automated. Temporary flight restrictions cover stadium events, wildfires, presidential movements and security incidents, and they change daily. Flying near critical infrastructure, military installations or federal facilities can trigger separate legal regimes administered by agencies other than the FAA. Operators who treat airspace authorisation as a one-time check rather than a per-flight obligation are the ones who generate enforcement actions.

The counter-drone gap

US law draws a sharp line between detecting drones and stopping them. Detecting is broadly permissible; interfering with a drone in flight, jamming its signal, spoofing its controls, or forcing it down, generally violates federal law on aircraft sabotage, wiretapping and communications interference. Only a small set of federal agencies, including the Departments of Defense, Homeland Security, Justice and Energy, hold statutory authority to disable drones, and only for defined missions.

This creates an acknowledged asymmetry. A stadium, prison or power plant that detects a hostile drone usually cannot legally act against it; it must call federal authorities, who may not arrive in time. Congress has repeatedly considered expanding counter-drone authority to state and local law enforcement and to critical infrastructure operators, and has repeatedly not passed it, caught between security arguments and civil liberties concerns about who decides which drones are threats. The Congressional Research Service has summarised the legal landscape and the stalled legislative proposals.

The DJI question: security policy meets market reality

The most commercially significant regulatory fight concerns DJI, the Chinese manufacturer that dominates the US drone market across consumer, enterprise and public safety segments. The fiscal 2025 National Defense Authorization Act, Section 1709, required a national security agency to determine within one year whether DJI equipment poses an unacceptable risk; if no agency completed the review, DJI would be added to the FCC's Covered List, blocking authorisation of new DJI equipment in the United States.

No agency completed the review within the deadline, and in December 2025 the FCC added foreign-produced drones and components to the Covered List, effectively barring new DJI models from US authorisation while leaving existing equipment legal to fly. DJI has challenged the decision in court. The practical effect is a slow squeeze: public safety agencies and commercial operators can keep flying current fleets but face uncertainty about replacements, and domestic manufacturers are racing to fill a gap their prices and capabilities do not yet match. The FCC's Covered List is the authoritative reference for what is restricted.

What businesses should take from this

For a US business evaluating drones, the regulatory picture reduces to a few practical points. Routine commercial work within line of sight is legal, well understood and cheap to enter: a certificated pilot, a registered drone, LAANC authorisation where needed. Anything beyond visual line of sight remains a waiver project until Part 108 is final, and planning a business on the proposed rule's text is planning against a moving target. Fleet procurement decisions now carry a geopolitical dimension that did not exist three years ago; an operator standardising on DJI hardware is betting on the outcome of litigation and future legislation.

The direction of policy is clear even where the details are not. The FAA is moving from permission-based to standards-based oversight, Remote ID compliance will be enforced more strictly as the counter-drone debate matures, and supply chain restrictions will keep tightening around Chinese-manufactured systems. Businesses that treat compliance as an operating capability rather than a launch obstacle will absorb these shifts. Those that treat it as paperwork will keep generating the enforcement cases that shape the next round of rules.

Limitations

This report describes the federal framework as of late October 2026. The Part 108 rulemaking is active and its final text may differ substantially from the proposal described here. State and local drone laws, which cover privacy, law enforcement use and flight over property, vary widely and are not covered. The DJI litigation and any congressional action on counter-drone authority could change the picture quickly. Readers making procurement or operational decisions should verify the current state of the rules with the FAA's published guidance and, where the stakes justify it, aviation counsel.