Commercial drone operations in the United States are governed primarily by the Federal Aviation Administration under 14 CFR Part 107, the Small UAS Rule that established the foundational regulatory framework for commercial sUAS operations when it came into effect in August 2016. The years since Part 107's introduction have seen significant regulatory evolution: Remote ID requirements have been phased in, the Beyond Visual Line of Sight (BVLOS) authorization pathway has been clarified and tested through a series of pilot programs, and the FAA's UAS Traffic Management (UTM) framework has moved from concept to operational reality in low-altitude airspace. Keeping current with this evolving regulatory landscape is not optional for commercial operators — it is a fundamental operational requirement.
Understanding the regulatory environment does not mean simply memorizing the current rules. The commercial drone regulatory landscape is actively evolving toward greater operational freedom — particularly for BVLOS operations and operations over people and moving vehicles — and organizations that invest in understanding the structure and direction of regulatory development are better positioned to time their program expansions to align with authorizations as they become available. This guide provides a comprehensive overview of the current framework and the direction it is heading.
Part 107 Foundations
Part 107 establishes the standard operating rules for commercial small UAS operations in the United States. The key provisions define the operational envelope within which commercial drone flights may be conducted without specific FAA authorization: visual line of sight (VLOS) operations only, daylight or civil twilight with appropriate anti-collision lighting, maximum altitude of 400 feet AGL (or higher in controlled airspace with authorization), maximum airspeed of 100 mph, and operations over people only when the people are participants in the drone operation or within a controlled or restricted area.
Remote Pilot Certification — the Part 107 knowledge test administered at FAA-approved testing centers — is the primary qualification requirement for commercial operation. The test covers aeronautical knowledge topics including airspace classification, weather interpretation, emergency procedures, and human factors relevant to drone operations. Certification renewal requires either passing the knowledge test again every 24 months or completing an FAA-approved online recurrent training course.
Aircraft registration is required for all UAS weighing more than 0.55 pounds (250 grams) used for commercial purposes. The FAA UAS registry assigns a registration number that must be displayed on the exterior of the aircraft in a location visible during pre-flight inspection. Commercial operators should note that the registration requirement applies to the operator, not the individual aircraft — a single registration covers all aircraft operated by the registered entity, though each aircraft must display the registration number.
Part 107 Key Limits: VLOS only · Max 400 ft AGL · Max 100 mph · Daylight/civil twilight · No operations over non-participating people without waiver · Operator certification required.
Airspace Authorization
The US national airspace is classified into categories — A, B, C, D, E, and G — each with different access requirements for both manned and unmanned aircraft. Part 107 operators may fly in Class G airspace (uncontrolled airspace) without prior authorization. Flight in Class B, C, D, and E airspace requires authorization from the FAA, obtained through one of several mechanisms depending on airspace class and specific location.
The Low Altitude Authorization and Notification Capability (LAANC) system is the primary mechanism for obtaining controlled airspace authorization for routine commercial operations. LAANC provides near-real-time automatic authorization for drone flights at or below pre-approved altitude limits in designated airspace grids adjacent to airports. Operators request authorization through FAA-approved LAANC providers — several flight planning apps integrate LAANC directly — and receive near-instant approval or denial based on current airspace conditions. LAANC authorizations are typically valid for a defined time window and specific geographic area.
Operations that exceed LAANC altitude limits, or in airspace not covered by LAANC grids, require a manual Part 107 Airspace Authorization submitted through the FAA DroneZone portal. Manual authorizations typically require 90 days of lead time for routine requests, though emergency operational needs can be accommodated through expedited processes. Operators with recurring needs in specific controlled airspace locations can request blanket authorizations that cover a defined operational area for up to one year, significantly reducing the administrative burden of repeated one-time authorizations.
BVLOS Operations and Waivers
Beyond Visual Line of Sight operations — where the remote pilot cannot directly observe the drone with unaided vision throughout the flight — are among the highest-value commercial use cases and among the most heavily regulated. The default Part 107 requirement for VLOS significantly constrains corridor inspection, precision agriculture surveys of large fields, and delivery operations across meaningful distances. BVLOS authorization is available through two pathways: individual operational waivers and type-certificated system approvals.
BVLOS waivers under Part 107.200 authorize specific operators to conduct specific operations beyond visual line of sight at defined locations. The FAA's safety analysis for BVLOS waiver applications focuses on the means by which the applicant will maintain equivalent level of safety to VLOS operations — specifically, how the operator will detect and avoid other aircraft and obstacles in the absence of direct visual observation. Accepted mitigation strategies include ground-based detect-and-avoid radar networks, cooperative ADS-B awareness systems, restricted operating areas with manned air traffic exclusions, and operations in low-traffic environments with formal coordination with ATC.
The BVLOS waiver application process is resource-intensive. A well-prepared application requires a detailed safety case, operational procedures documentation, aircraft and system specifications, and a demonstration of the mitigation measures proposed. Review times have historically ranged from six months to over two years. The FAA's BEYOND program (2021-2023) and ongoing BVLOS Aviation Rulemaking Committee work have accelerated the agency's development of standardized performance requirements that will ultimately support a more streamlined regulatory pathway for BVLOS operations meeting defined safety standards.
Remote ID Requirements
The FAA Remote ID rule, which became fully effective in September 2023, requires commercial drones to broadcast identification and location information during flight. The rule applies to all UAS subject to Part 107 registration requirements and establishes two compliance pathways: Standard Remote ID, where the drone's onboard remote ID broadcast module transmits identification and position data via radio frequency from the aircraft; and Remote ID Broadcast Module, which is a separate add-on module for older aircraft not designed with built-in Remote ID capability.
Standard Remote ID broadcasts the following information: a unique session ID or serial number identifying the specific aircraft, its latitude, longitude, altitude, and velocity, the take-off location (or take-off latitude and longitude), and a time mark. This information is broadcast continuously during flight and can be received by standard radio receivers in the vicinity — enabling law enforcement, airspace authorities, and other UAS operators to identify and locate drones in their area.
The operational significance of Remote ID extends beyond regulatory compliance. BVLOS operations and operations over people — the expanded capabilities that commercial operators most need — are expected to be conditional on Remote ID compliance under future regulatory frameworks, as Remote ID provides the situational awareness infrastructure that makes these higher-risk operations more manageable from an airspace safety perspective. Operators who have not yet updated their fleets for Remote ID compliance should prioritize this transition, both for current regulatory compliance and for future operational authorization eligibility.
Operations Over People and Moving Vehicles
Part 107.39 restricts drone flights over people not directly involved in the operation, a provision that significantly constrains urban operations, event coverage, and infrastructure inspection over occupied public spaces. The Operations Over People rule (OOP), effective April 2021, established four categories of drone that may operate over people under different conditions based on maximum impact kinetic energy and risk mitigation features.
Category 1 (under 0.55 lbs), Category 2 (up to 100 foot-pounds of kinetic energy on impact, with demonstrated injury risk mitigation), and Category 3 (up to 25 foot-pounds, with restricted area requirements) define a graduated risk-based framework for over-people operations. Category 4 introduces the Type Certificate requirement — aircraft must have an FAA Type Certificate and operations must comply with an approved Flight Manual. The OOP rule also established operations over moving vehicles under defined conditions for Category 1 through 3 aircraft, enabling a range of transportation corridor inspection and monitoring applications that were previously prohibited.
International Regulatory Landscape
Organizations conducting drone operations internationally must navigate a fragmented regulatory landscape in which each country maintains sovereign authority over its airspace and imposes its own requirements on commercial UAS operations. The EASA (European Union Aviation Safety Agency) framework — which applies to EU member states and several additional European countries — is the most mature international regulatory structure outside the US, providing harmonized requirements across its member states that parallel the Part 107 structure in many respects while introducing a risk-based category system (Open, Specific, and Certified) that differs in important ways from the US approach.
Most jurisdictions require foreign operators to obtain advance authorization before conducting commercial drone flights, and many require the drone to be registered under local regulations in addition to the operator's home-country registration. Lead times for international operating authorizations range from weeks to months depending on jurisdiction, and the documentation requirements — aircraft specifications, operator credentials, liability insurance, operational procedures — vary significantly. Organizations with recurring international operational needs benefit substantially from maintaining comprehensive regulatory documentation packages that can be adapted for specific jurisdiction requirements rather than assembling new applications from scratch for each deployment.
Key Takeaways
- Part 107 VLOS operations require Remote Pilot Certification, FAA registration, and airspace authorization in controlled airspace — LAANC provides near-instant authorization in most controlled airspace grids.
- Remote ID compliance (mandatory since September 2023) is a prerequisite for current regulatory compliance and will be required for future BVLOS and over-people authorizations.
- BVLOS waivers require detailed safety cases demonstrating equivalent level of safety; the FAA's evolving performance standards will streamline this process for qualifying systems.
- Operations over people are now permitted for Category 1–4 aircraft under defined conditions — enabling urban inspection and event coverage applications previously prohibited under Part 107.
- International operations require advance authorization in each jurisdiction; documentation lead times of weeks to months are typical for most countries.
- The regulatory trajectory is toward expanded operational permissions for BVLOS and urban operations as UTM infrastructure matures and Remote ID provides the situational awareness foundation regulators need.
Conclusion
The commercial drone regulatory environment in the United States and globally is meaningfully more permissive and better defined than it was five years ago, and the direction of regulatory development — toward BVLOS, urban operations, and reduced administrative burden for compliant operators — is clear. Organizations that have built their drone programs on a foundation of rigorous regulatory compliance are well-positioned to capture the operational expansion that regulatory evolution will enable.
Staying current with regulatory change requires active engagement: monitoring FAA rulemaking dockets, participating in industry association comment processes, and maintaining relationships with legal and regulatory advisors who specialize in aviation and UAS law. The operators who treat regulatory knowledge as a core operational competency, rather than a compliance checkbox, consistently demonstrate the ability to move into new operational categories more quickly and with fewer authorization delays than those who address regulatory requirements reactively.