Imagine a power plant operator watching an unidentified drone hover near their facility's perimeter. For years, their options were limited—call local authorities and hope for a quick response. That scenario may soon change.
On May 6, 2026, the Federal Aviation Administration (FAA) published a Notice of Proposed Rulemaking (NPRM) that would finally give critical infrastructure operators a direct path to protect their airspace. The proposal implements Section 2209 of the FAA Reauthorization Act, a provision that industry stakeholders have been waiting on for years.
What the Rule Actually Does
The NPRM establishes a formal process for fixed-site facility operators to apply for drone flight restrictions over their properties. This isn't about blanket bans across entire cities—it's targeted protection for specific sensitive locations.
The types of facilities that could qualify include:
- Power generation and distribution facilities
- Chemical plants and refineries
- Water treatment facilities
- Telecommunications infrastructure
- Other security-sensitive fixed installations
The key distinction here is "fixed facilities." This rule targets permanent infrastructure rather than mobile or temporary sites, creating a clear framework for where restrictions apply.
Why This Matters Now
The timing isn't coincidental. As drone adoption accelerates across commercial and consumer markets, the risk profile for critical infrastructure has evolved dramatically. A recreational drone flown near a chemical facility isn't just a nuisance—it's a potential security vulnerability.
The FAA's approach attempts to balance two competing priorities: enabling the growing drone economy while protecting national security and public safety. It's a tightrope walk that regulators worldwide are attempting.
The Application Process
Under the proposed rule, operators would submit formal requests to the FAA, which would evaluate each application based on security risk and operational impact. The process includes:
- Documentation of the facility's critical infrastructure status
- Justification for the requested restriction area
- Coordination with local airspace users
This isn't an automatic approval system. The FAA retains authority to deny requests that would create unreasonable impacts on legitimate drone operations or create gaps in airspace coverage.
Industry Reaction and Implications
For infrastructure operators, this represents a significant shift from reactive to proactive security posture. Rather than relying solely on detection and response, they could prevent unauthorized flights before they occur.
For the drone industry, the rule creates both clarity and constraints. Commercial operators will need to check for new restriction zones in their flight planning, adding another layer to pre-flight procedures. However, the formalized process also provides predictability—operators will know exactly where they cannot fly rather than facing ambiguous "sensitive area" designations.
Looking Ahead
The NPRM enters a public comment period, after which the FAA will finalize the rule. Implementation will likely take months, but the direction is clear: critical infrastructure airspace protection is moving from aspiration to operational reality.
For drone operators, the message is straightforward—check your flight planning resources regularly. The map of restricted airspace is about to expand in meaningful ways.



