Compliance Reference
Understanding UAS
Compliance Badges
A complete breakdown of NDAA, Blue UAS, Green UAS, ITAR, ASDA, and FCC compliance frameworks — what they mean, who enforces them, and which you need.
A complete breakdown of NDAA, Blue UAS, Green UAS, ITAR, ASDA, and FCC compliance frameworks — what they mean, who enforces them, and which you need.
The National Defense Authorization Act restricts federal agencies and contractors from procuring UAS or components manufactured in covered foreign countries — primarily China, Russia, Iran, and North Korea.
The Defense Innovation Unit (DIU) evaluates and approves specific drone systems and components for DOD use. Blue UAS goes beyond NDAA compliance — it includes rigorous cybersecurity assessment and supply chain review.
Green UAS certification provides a vetted, approved list for non-defense government agencies and commercial operators. Less stringent than Blue UAS but still requires NDAA compliance and security validation.
The FY2024 NDAA's American Security Drone Act extends procurement restrictions across all federal agencies — not just DOD. Bans acquisition, operation, and contracting of covered UAS from adversary nations.
International Traffic in Arms Regulations controls the export of defense articles and services. ITAR-controlled components require export licenses. Many UAS thermal cameras are now ITAR-free (ECCN classified instead).
Federal Communications Commission authorization is required for any device that transmits RF energy in the United States. Radios, video transmitters, Remote ID modules, and RC controllers all require FCC certification.
How each compliance framework differs across key dimensions.
| Dimension | NDAA | Blue UAS | Green UAS | ASDA | ITAR | FCC |
|---|---|---|---|---|---|---|
| Enforcing Body | Congress / FAR | DIU / DOD | AUVSI / DIU | Congress / OMB | State Dept / DDTC | FCC |
| Supply Chain Audit | ✓ | ✓ (rigorous) | ✓ | ✓ | Varies | — |
| Cybersecurity Testing | — | ✓ (required) | Limited | — | — | — |
| RF / EMC Testing | — | — | — | — | — | ✓ (required) |
| Self-Certifiable | Yes | No — DIU review | No — review | Yes | No — registration | No — lab testing |
| Covers Components | ✓ | ✓ (since 2024) | Systems only | ✓ | ✓ | ✓ (RF devices) |
| Covers Complete UAS | ✓ | ✓ | ✓ | ✓ | ✓ | RF subsystems |
| Required for DOD | ✓ | ✓ (approved list) | — | ✓ | If exporting | ✓ |
| Required for Civilian Govt | ✓ (expanding) | — | ✓ (recommended) | ✓ | If exporting | ✓ |
| Bans Chinese Components | ✓ (critical parts) | ✓ (all parts) | ✓ | ✓ | N/A | Pending action |
| Hobbyist Affected | No | No | No | No | If exporting | ✓ (all RF devices) |
Follow this decision tree to determine which frameworks apply to your procurement.
Yes → You need NDAA + ASDA compliance at minimum. Continue to step 2.
No → Skip to step 4 (state/local) or step 5 (commercial).
Yes → You need Blue UAS Framework listed systems/components. This is the DOD's approved procurement list. No additional waivers needed for Blue UAS items.
No → NDAA + ASDA compliance is sufficient for civilian federal agencies.
Yes → Check ITAR status. ITAR-controlled items require State Department export license. Look for "ITAR-free" or ECCN-classified components for easier international procurement.
No → ITAR is not a concern for domestic-only operations.
At least 6 states (AR, TX, IN, MS, CA, NV, FL) have enacted their own drone restrictions. Green UAS listed systems are increasingly the preferred standard. Check your state's specific requirements — many mirror federal NDAA provisions.
Since October 2024, private companies performing DOD contracts cannot use DJI or other banned UAS. If you pursue any government work, NDAA compliance is your baseline. Future-proof your fleet now — requirements are only expanding.
Always required: FCC authorization for any intentional RF transmitter. This applies to everyone — government, commercial, and hobbyist. Operating unlicensed RF equipment carries fines up to $100K+.
Official sources and references for compliance verification.