← Knowledge
Legal

Who can legally do what about drones

The detect-versus-mitigate line, and what changed in 2026.

If a drone shows up over a facility, the first question everyone asks is: "can we just take it down?" The answer is more nuanced than most people expect, and the law changed significantly in 2026. Understanding this line is the foundation of any airspace-security program — it defines what a facility can legally do itself, what it must leave to law enforcement, and where a security provider fits.

The core distinction: detection vs. mitigation

Every counter-drone capability falls into one of two buckets, and the law treats them completely differently.

Detection — broadly legal

Finding, tracking, and identifying a drone, and alerting the right people. This includes RF sensing, radar, cameras, and acoustic sensors used to build awareness. Detection is broadly permissible for private entities — with one caution: RF-based detection that intercepts a drone's communications can implicate federal wiretap and pen/trap statutes if not done properly, so it must be deployed carefully.

Mitigation — tightly restricted

Actively interfering with a drone — jamming or spoofing its signal, taking cyber control, or physically disabling or seizing it. Mitigation is heavily restricted. The FAA has stated it does not support the use of mitigation by private or local operators, leaving active countermeasures to authorized government entities.

Who can do what — the three tiers (2026)

Before December 2025, only federal agencies could mitigate. The SAFER SKIES Act changed that. Here is the current landscape:

WhoDetect / track / alert?Mitigate (jam / disable / seize)?
Private entities
(you + your commercial clients)
Yes — broadly permissible.No — cannot jam, disable, spoof, or seize. Your lawful lane is detect and alert only.
Certified SLTT law enforcement
(state / local / tribal / correctional)
Yes.Yes — but new and conditional. Under SAFER SKIES (effective July 1, 2026), certified agencies may mitigate a credible threat, with FCC authorization, FAA coordination, federal certification, and a signed operations plan.
Federal agencies
(DHS, DOJ, DOD, DOE)
Yes.Yes — broadest standing authority at national-security and critical-infrastructure sites.

What changed: the SAFER SKIES Act

Signed December 18, 2025, with implementing rules effective July 1, 2026, the SAFER SKIES Act is the most significant expansion of drone-mitigation authority since 2018. For the first time, it authorizes certified state, local, tribal, and territorial law enforcement and correctional agencies to mitigate a credible drone threat — not just federal agencies.

The authority is conditional: agencies must obtain FCC authorization for any RF-emitting system, coordinate with the FAA, notify air traffic control when activating a system, complete federal certification, and maintain a formal operations plan signed by legal counsel. The Act specifically names its protected categories — critical infrastructure, correctional facilities, and venues used for large public gatherings — the exact facilities most exposed to drone threats.

Why this matters for facilities

A facility's lawful posture is: detect, track, identify, alert, and coordinate the response — not interfere with the drone directly. A well-designed program builds detection and a clear response plan that hands off cleanly to those authorized to act.

This brief is a general overview for educational purposes and is not legal advice. Counter-drone law is evolving; specific deployments should be reviewed against current federal, state, and local requirements and, where appropriate, with legal counsel.

See your site the way a drone would.

An Aetheonlink assessment gives you a clear, expert read on your airspace exposure — no equipment, no commitment.

Request an assessment