The Pentagon's October 2026 memo gave installation commanders standing authority to track, jam, and — in extremis — kinetically defeat drones over their own fence lines. Civil America has no equivalent. The federal statute that lets anyone lawfully touch a drone covers two departments, expires on appropriations schedules, and reaches a sliver of the country's 140,000-plus critical infrastructure sites; the airports that move a billion passengers a year sit almost entirely outside it. The country with the world's largest counter-drone budget cannot legally defend its own largest hub.
The Pentagon's October 2026 memo gave installation commanders standing authority to track, jam, and — in extremis — kinetically defeat drones over their own fence lines. Civil America has no equivalent. The federal statute that lets anyone lawfully touch a drone covers two departments, expires on appropriations schedules, and reaches a sliver of the country's 140,000-plus critical infrastructure sites; the airports that move a billion passengers a year sit almost entirely outside it. The country with the world's largest counter-drone budget cannot legally defend its own largest hub.
One Memo, One Fence Line
The Hegseth memo is real progress, and its limits are the story. Base commanders no longer route a drone incursion through Washington while the quad finishes its orbit; they have detection requirements, escalation ladders, and delegated defeat authority inside the installation boundary. Wright-Patterson closed its airspace for hours in December 2024 over unidentified drones. Picatinny Arsenal logged repeated incursions the same month. The memo answers that problem.
Everything outside the fence line remains governed by a legal regime designed for a sky full of airliners, not a sky where a $400 quadcopter is, in the eyes of the statute, an aircraft with the same protections as a Boeing.
The 2018 Statute and Its Expiration Dates
Exactly one law permits federal counter-drone action in the homeland: the Preventing Emerging Threats Act of 2018, codified at 6 U.S.C. § 124n. It grants the Departments of Justice and Homeland Security — and no one else — authority to detect, seize control of, disrupt, or destroy drones threatening a defined list of covered missions: presidential protection, certain DOJ facilities, border security, and a handful of enumerated events. Airports, power plants, refineries, and stadiums are not on the list unless a specific DHS designation says otherwise.
Worse, the authority is temporary by design. Congress has renewed it in short bursts, let it lapse at the end of fiscal 2025, and revived it on continuing-resolution schedules — a rhythm that makes multi-year procurement for the two agencies that hold the authority an exercise in appropriations roulette. State and local police hold no defeat authority at all. A patrol officer who jams a drone over a refinery commits federal crimes under statutes the refinery's own security cannot invoke.
New Jersey Was the Dress Rehearsal
The November–December 2024 sightings wave across New Jersey and the Northeast remains the cleanest case study of the gap. Hundreds of reports clustered around Picatinny, Bedminster, and the coastal corridor; the FBI, DHS, FAA, and state police ran parallel, uncoordinated investigations; and the eventual official assessment — most sightings were aircraft, stars, or lawful drones — arrived weeks late and convinced almost no one.
The flap's real lesson was structural. No agency present could compel a fused air picture. No agency present could lawfully engage even a confirmed threat over civilian ground. Two men were arrested near Logan Airport for flying drones in restricted airspace — the system's entire kinetic output was a pair of handcuffs. Had any of those tracks been hostile, the legal answer over civilian New Jersey was to watch.
The Legal Thicket, Statute by Statute
The thicket is not a drafting oversight; it is four regimes colliding. The FAA owns the national airspace under 49 U.S.C. § 40103, and drones are aircraft. Destroying one is aircraft sabotage under 18 U.S.C. § 32, a twenty-year felony written with hijackers in mind. Jamming its control link violates the Communications Act — 47 U.S.C. §§ 301 and 333 — and the FCC enforces those sections against everyone, including police. Spoofing its GPS runs into the same transmission prohibitions. Merely intercepting its radio or video downlink to identify the operator brushes the Wiretap Act, 18 U.S.C. § 2511, and hacking the drone itself invites the Computer Fraud and Abuse Act.
Section 124n exists precisely to carve DOJ and DHS out of this thicket. That is the tell: Congress understood that lawful counter-drone action requires statutory surgery, then granted the surgery to two departments and stopped.
The Forcing Events Already on the Calendar
Congress is not legislating in a vacuum. The 2025 reconciliation package steered roughly half a billion dollars toward state and local counter-drone capability for the 2026 FIFA World Cup and the 2028 Los Angeles Olympics — grant money that bought detection and limited mitigation for venues, under federal escort. The SAFER Skies Act and its Senate cousins would go further, extending detection and narrowly tailored defeat authority to trained state, local, tribal, and territorial officers at covered venues, with the FAA in the room. Airport detection mandates are moving through FAA rulemaking channels. Every one of these bills is written against the same nightmare: a drone incident at a major hub — an O'Hare, a Dallas-Fort Worth, a Newark — forcing in a weekend what Congress would not schedule in a decade.
Europe is already living the preview. In September and October 2025, drone sightings closed Copenhagen, Oslo, and Munich — Munich twice in twenty-four hours, stranding thousands. Germany's cabinet responded by authorizing police to shoot down threatening drones, with France and others moving on parallel tracks and EASA members converging on airport C-UAS mandates. The European answers are imperfect and legally contested. They are also answers.
Federal law gives a $400 quadcopter the protection of a Boeing — and gives the police less authority over it than over a parked car.
What to Watch
- DOJ/DHS authority renewals. Each § 124n expiration vote is the truest measure of congressional seriousness; a lapse during a major event cycle would be the system admitting failure in advance. - FAA airport detection rulemaking. Mandated detection at Part 139 airports creates the air picture that any future defeat authority depends on. - The first airport C-UAS procurement. Whichever hub signs the first detection-plus-mitigation contract writes the template the other five hundred will copy. - State preemption fights. States granting their own police drone authorities — and colliding with federal airspace and communications law — will force the constitutional question Congress keeps dodging. - World Cup and Olympic after-action reports. The first large-scale test of state and local counter-drone grants will define what "trained and certified" means in practice.
The Pentagon memo proved Washington can move in a paragraph when the asset is federal. Civil counter-drone law will be written either by Congress on a schedule or by an incident on a weekend — and every month of drift is a vote for the weekend.
The Pentagon's October 2026 memo gave installation commanders standing authority to track, jam, and — in extremis — kinetically defeat drones over their own fence lines. Civil America has no equiva…