Summary
On May 6, 2026, the faa published a notice of proposed rulemaking — “Restrict the Operation of Unmanned Aircraft in Close Proximity to a Fixed Site Facility” (docket FAA-2026-4558) — creating a new airspace designation called the Unmanned Aircraft Flight Restriction (UAFR). UAFRs let operators of critical-infrastructure facilities request a legal “virtual no-trespassing sign” over their sites, with horizontal limits at the property line and a 400 ft AGL ceiling. The rule defines two variants — Standard UAFRs for the 16 critical-infrastructure sectors under NSM-22, and Special UAFRs for federally sponsored sensitive sites under DHS/DOD/DOE/DOJ/FAA. Crucially, the rule codifies four prerequisite §74.56 “protective security measures,” including Remote ID receiving capability as a baseline federal expectation. Comment period closes July 6, 2026. This AirSight piece is industry-side analysis (AirSight is a vendor of Remote ID detection products — note disclosure of interest).
Key Claims
- The UAFR is a new FAA airspace designation prohibiting unauthorized drone operations within defined horizontal/vertical limits over a specific fixed-site facility.
- Two variants: Standard UAFR (critical infrastructure, transit by Parts 91/107/108/135/137 permitted with Remote ID) and Special UAFR (federal/sensitive sites, far stricter access).
- Horizontal boundary cannot exceed the applicant’s property line; vertical ceiling generally 400 ft AGL; 5-year term, renewable.
- Eligibility tied to the 16 sectors of NSM-22, with sector-specific quantitative thresholds (e.g., 500 MW power plants, 100,000 bpd refineries, 500-inmate prisons, 2.5M-attendance commercial venues, 1 Tbps data centers, Level I trauma centers with helipads).
- State prisons newly added as eligible emergency-services facilities under the FAA Reauthorization Act of 2024.
- Food/agriculture and water/wastewater sectors lack draft eligibility criteria; FAA is soliciting public comment.
- Proposed §74.56 mandates four protective security requirements: restricted access, designated security personnel, security monitoring, and Remote ID receiving capability (14 CFR part 89-compatible, either in-house or contracted).
- A UAFR is a legal designation only — it does NOT authorize detection or mitigation technology that would otherwise be prohibited under 6 U.S.C. 124n, 10 U.S.C. 130i, or other federal C-UAS authorities.
- Application process has four stages (eligibility, need, externalities, NEPA environmental review); FAA targets a 90-day final-determination clock after submission.
- FAA estimates 10,000 application cost per UAFR; ~1,000/year for an example Remote ID receiving system.
- AirSight frames the rule as “the clearest signal yet” that critical-infrastructure airspace protection is shifting from discretionary security investment to regulated capability.
Notable Quotes
“The proposed rule and established UAFR do not provide relief from federal criminal laws to authorize the facility operator or proprietor to use equipment or technology designed to detect, take control of, destroy, or otherwise interfere with an unmanned aircraft.” — FAA NPRM (quoted by AirSight)
“Remote ID receiving capability is not optional, and it is not aspirational. It is a baseline expectation — the FAA’s minimum standard for what a facility must already have in place before it asks for airspace protection.” — AirSight
“The FAA’s proposal is the clearest signal yet that airspace protection for critical infrastructure is moving from a discretionary security investment to a regulated capability.” — AirSight