Federal Communications Commission Washington, DC 20554 June 8, 2026 DA 26-563 SMALL ENTITY COMPLIANCE GUIDE Protecting Our Communications Networks by Promoting Transparency Regarding Foreign Adversary Control FCC 26-2 GN Docket No. 25-166 Released January 30, 2026 In accordance with Section 212 of the Small Business Regulatory Enforcement Fairness Act of 1996, this Small Entity Compliance Guide (Guide) is intended to help small entities—small businesses, small organizations (non-profits), and small governmental jurisdictions—comply with the rules adopted in the above-referenced Federal Communications Commission (FCC or Commission) rulemaking dockets. This Guide is not intended to replace or supersede these rules, but to facilitate compliance with the rules. Although we have attempted to cover all parts of the rules that might be especially important to small entities, the coverage may not be exhaustive. This Guide cannot anticipate all situations in which the rules apply. Furthermore, the Commission retains the discretion to adopt case-by-case approaches, where appropriate, that may differ from this Guide. Any decision regarding a particular small entity will be based on the statute and any relevant rules. In any civil or administrative action against a small entity for a violation of rules, the content of the Guide may be considered as evidence of the reasonableness or appropriateness of proposed fines, penalties or damages. Interested parties are free to file comments regarding this Guide in the above referenced docket and the appropriateness of its application to a particular situation. The Commission will then consider whether the recommendations or interpretations in the Guide are appropriate in that situation. The Commission may decide to revise this Guide without public notice to reflect changes in its approach to implementing a rule, or it may clarify or update the text of the Guide. Please direct comments and recommendations, or requests for further assistance, to the FCC’s Consumer Center: 1-888-CALL-FCC (1-888-225-5322) Videophone: 1-844-4-FCC-ASL (1-844-432-2275) Fax: 1-866-418-0232 TABLE OF CONTENTS I. OBJECTIVES OF THE PROCEEDING 1 II. COMPLIANCE REQUIREMENTS 1 A. Definitions 2 B. Schedules of Covered Authorizations that are Subject to Foreign Adversary Control Rules 3 C. Foreign Adversary Control Attestation and Disclosure Rules 3 D. Enforcement and Streamlined Revocation Process for Non-Compliance 6 III. RECORDKEEPING AND REPORTING REQUIREMENTS 6 IV. IMPLEMENTATION DATE 8 V. INTERNET LINKS 8 I. OBJECTIVES OF THE PROCEEDING This Small Entity Compliance Guide (Guide) is designed to help individuals and small businesses understand the new Foreign Adversary Control attestation and disclosure requirements. This Guide is not a substitute for reading and reviewing the relevant orders, rules, and public notices, nor is it a substitute for legal advice on how the attestation and disclosure requirements apply to your circumstances. In the Foreign Adversary Control Report and Order, Protecting Our Communications Networks by Promoting Transparency Regarding Foreign Adversary Control, GN Docket No. 25-166, Report and Order, FCC 26-2, at 2, paras. 1-2, 2026 WL 297882, at *2 (Jan. 30, 2026) (Foreign Adversary Control Report and Order). the Commission strengthened the security of U.S. telecommunications networks by establishing new Foreign Adversary Control attestation and disclosure requirements. To implement these requirements, the Commission created a reporting framework by categorizing licenses, leases, authorizations, permits, grants, and other approvals (Covered Authorizations) into one of three groups, each subject to different attestation and disclosure requirements based on risk to national security of Foreign Adversary Control. In this Small Entity Compliance Guide, as referred to in the Foreign Adversary Control Report and Order, we use the term “Foreign Adversary Control” to refer to the term “owned by, controlled by, or subject to the jurisdiction or direction of a foreign adversary” as defined by the Commission. See Foreign Adversary Control Report and Order at 9, para. 14, n.50, 2026 WL 297882, at *5, n.50; see also 47 CFR § 1.70001(f). The Commission then set forth the information to be collected for each group, how the information will be collected, and a process for revoking a Covered Authorization in the event of noncompliance, subject to certain exceptions. Foreign Adversary Control Report and Order at 48-56, paras. 73-97, 2026 WL 297882, at *33-40. These new reporting requirements allow the Commission to receive the information it needs to promote national security while minimizing the burden on entities that present minimal or no national security risk, and allow the Commission to develop approaches to eliminate or mitigate national security threats from foreign adversaries. II. COMPLIANCE REQUIREMENTS The Commission created new attestation and disclosure requirements for all Regulatees. The adopted rules categorize Covered Authorizations into distinct groups, each subject to different attestation and disclosure requirements. Specifically, the Commission established a reporting framework (i.e., Schedules) that distinguishes and categorizes each Covered Authorization based on whether the Regulatee is: (A) required to submit an attestation either affirming or denying Foreign Adversary Control; (B) solely required to submit an attestation affirming Foreign Adversary Control; or (C) is not required to file an attestation in either event. Specific instructions for Regulatees required to file initial attestation and disclosures will be announced by public notice. Small entities that are required to submit initial attestations must do so within 120 days of the public notice announcing launch of the Foreign Adversary Control System. Small entities should continue to check for any updates to the Schedules in 47 CFR § 1.80002. Small entities should note that the Commission exempted Covered Authorizations designated in Schedule C from the initial attestation requirements for a variety of reasons, including that they are typically held by individuals or small entities that may pose a lesser risk to national security should they be under Foreign Adversary Control. Entities in Schedule B, such as broadcasters with five or fewer employees, are only required to complete an attestation if they are subject to Foreign Adversary Control. A. Definitions (47 CFR § 1.80001) (a) Covered Authorization. The Commission’s foreign adversary rules apply to each Commission license, lease, authorization, permit, grant, and other approval, which appear on the Schedules listed in 47 CFR § 1.80002. Together, these are referenced in the rules as Covered Authorizations. (b) Foreign Adversary. The term Foreign Adversary means any foreign government or foreign non-government person determined by the Secretary of Commerce, pursuant to Executive Order 13873 of May 15, 2019, to have engaged in a long-term pattern or serious instances of conduct significantly adverse to the national security of the United States or security and safety of United States persons. The Secretary of Commerce has currently determined that the following foreign governments and non-government persons are Foreign Adversaries: 47 CFR § 1.70001(e); 15 CFR § 791.4. The term Foreign Adversary Country means any foreign government that the Secretary of Commerce identifies as a Foreign Adversary. 47 CFR § 1.70001(f); 15 CFR § 791.4. (1) The People’s Republic of China, including Hong Kong Special Administrative Region and the Macau Special Administrative Region (China); (2) Republic of Cuba (Cuba); (3) Islamic Republic of Iran (Iran); (4) Democratic People’s Republic of Korea (North Korea); (5) Russian Federation (Russia); (6) Venezuelan politician Nicolás Maduro (Maduro Regime). (c) Licensing Bureaus and Offices. The term Licensing Bureaus and Offices refer to a FCC Bureau or Office that grants a Covered Authorization. These include the Consumer and Governmental Affairs Bureau, Media Bureau, Public Safety and Homeland Security Bureau, Space Bureau, Wireless Telecommunications Bureau, Wireline Competition Bureau, Office of Economics and Analytics, Office of Engineering and Technology, and Office of International Affairs. (d) Owned by, controlled by, or subject to the jurisdiction or direction of a foreign adversary. This term describes the scenarios in which an individual or entity would be considered as being subject to Foreign Adversary Control: 47 CFR § 1.70001(g). (1) Any individual or entity, wherever located, who acts as an agent, representative, or employee, or any person who acts in any other capacity at the order, request, or under the direction or control, of a foreign adversary or of an individual or entity whose activities are directly or indirectly supervised, directed, controlled, financed, or subsidized in whole or in majority part by a foreign adversary; (2) Any individual, wherever located, who is a citizen of a foreign adversary or a country controlled by a foreign adversary, and is not a United States citizen or permanent resident of the United States; (3) Any entity, including a corporation, partnership, association, or other organization, that has a principal place of business in, or is headquartered in, incorporated in, or otherwise organized under the laws of a foreign adversary or a country controlled by a foreign adversary; or (4) Any entity, including a corporation, partnership, association, or other organization, wherever organized or doing business, that is owned or controlled by a foreign adversary, to include circumstances in which any person identified in paragraphs (1) through (3) of this section possesses the power, direct or indirect, whether or not exercised, through the ownership of a majority or a dominant minority (10% or greater) of the total outstanding voting interest and/or equity interest, or through a controlling interest, in an entity, board representation, proxy voting, a special share, contractual arrangements, formal or informal arrangements to act in concert, or other means, to determine, direct, or decide important matters affecting an entity. (e) Regulatee. The term Regulatee refers to the holder of, or applicant for, a Covered Authorization. (f) Schedule. The term Schedule refers to the groups of Covered Authorizations described in 47 CFR § 1.80002. (g) Small entity. The term Small Entity means a Regulatee that is within the small size business standards as described by the Small Business Administration in 13 CFR § 121.201. B. Schedules of Covered Authorizations that are Subject to Foreign Adversary Control Rules (47 CFR § 1.80002) Covered Authorizations are categorized into Schedule A, Schedule B, and Schedule C. The Schedules are published as tables in the Code of Federal Regulations (CFR). Please refer to 47 CFR § 1.80002 for the most up-to-date list of Schedules. 47 CFR § 1.80002. The Commission granted Licensing Bureaus and Offices authority to modify any of the Schedules if its determines that a revision is necessary based on an analysis of several criteria, including national risk, administrability, and burden on Regulatees. C. Foreign Adversary Control Attestation and Disclosure Rules (47 CFR § 1.80003) The rules in this section describe when Covered Authorizations are required to attest or disclose any Foreign Adversary Control. Refer to the definition of “owned by, controlled by, or subject to the jurisdiction of or direction of a foreign adversary” under 47 CFR § 1.80001(d) above. (a) Schedule A Attestations. Regulatees that hold Covered Authorizations listed in Schedule A are required to attest to whether or not they are subject to Foreign Adversary Control. Regulatees must submit a definitive “yes” or “no” attestation either affirming or denying Foreign Adversary Control. Attestations must be submitted by an officer or other authorized representative of the Regulatee. Regulatees attesting “yes” are required to provide additional information, described in paragraph (j) below. (b) Schedule B Attestations. Regulatees that hold Covered Authorizations listed in Schedule B are only required to submit an attestation if they are affirming that they are subject to Foreign Adversary Control. If a Regulatee holds a Schedule B Covered Authorization but is not subject to Foreign Adversary Control, there is no need to submit a “no” attestation. Attestations must be submitted by an officer or other authorized representative of the Regulatee. Regulatees attesting “yes” are required to provide additional information, described in paragraph (j) below. (c) Schedule C Attestations. Regulatees that hold Covered Authorizations listed in Schedule C are exempt from initially attesting to whether or not they are subject to Foreign Adversary Control. (d) Regulatees holding or applying for Covered Authorizations in different Schedules. If a Regulatee holds or is applying for Covered Authorizations listed in different Schedules, then the Regulatee’s officer or authorized representative must submit an attestation to the requirements of the Covered Authorization listed in a Schedule that applies more reporting requirements. For example, if a Regulatee holds or applies for a Covered Authorization from Schedule A and another from Schedule B, the Regulatee shall only file a single attestation, according to the rules for Schedule A attestations. (e) Provisional attestations. The Commission generally deems a holder of 10% or greater of the total outstanding voting and/or equity interest in a Regulatee as possessing the ability to determine, direct, or decide important matters affecting the Regulatee. To the extent an individual or entity identified in 47 CFR § 1.70001(g)(1)-(3) holds such an interest in a Schedule A or B Regulatee, the Regulatee must file a “yes” attestation even if it does not believe that the interest allows the interest holder(s) to “determine, direct, or decide important matters affecting an entity.” To the extent that the Regulatee denies that such an interest confers upon the interest holder(s) such ability, the Regulatee shall, in addition to filing an affirmative attestation, demonstrate by clear and convincing evidence why such interest does not meet 47 CFR § 1.70001(g)(4). (f) Exemptions. No state or local government agency, federally recognized Tribal Nation, or business controlled by a federally recognized Tribal Nation is subject to these requirements. (g) Foreign Adversary Sponsorship. An entity with a broadcast license (AM, FM, LPFM, FM translator, FM Booster, Full Power TV, Class A TV, LPTV, TV translator), a cable television relay service station (CARS) license, an international broadcast station license, or section 325(c) authorization listed in table 2 of 47 CFR § 1.80002(b) that receives an affirmative response under the Commission’s foreign sponsorship identification rules from a lessee that is a foreign adversary must file a copy of the lessee’s information with the Commission, as required by 47 CFR § 73.1212(j). (h) Deadline for initial attestations. Except as provided below in paragraph (i), Regulatees that must submit an attestation for a Covered Authorization under Schedule A or Schedule B must complete its attestation no longer than 60 days after the publication of a public notice announcing the launch of the Foreign Adversary Control System. The attestation shall be to its Foreign Adversary Control status as of the publication date of the same public notice. (i) Deadline for initial attestations made by small entities. Small Entity Regulatees that must submit an attestation for a Covered Authorization under Schedule A or Schedule B must complete its attestation no longer than 120 days after the publication of a public notice announcing the launch of the Foreign Adversary Control System. The attestation shall be to its Foreign Adversary Control status as of the publication date of the same public notice. (j) Additional disclosures for entities subject to Foreign Adversary Control. Regulatees with Covered Authorizations under Schedule A, Schedule B, or Schedule C that attest “yes” to Foreign Adversary Control shall disclose to the Commission the following information: (1) All 5% or greater direct or indirect equity and/or voting interest holders, and controlling interest holders, specifically: (i) For each reported natural person interest holder, his or her: (A) Name; (B) Address; (C) Country or countries of citizenship; (D) Percentage or equity and/or voting interest, and all controlling interests, held directly or indirectly in the Regulatee; and (ii) For each reported entity (including a government entity) interest holder, it: (A) Name; (B) Address; (C) Country under the laws of which the entity is organized; (D) Country of the principal place of business, headquarters, and place of incorporation or organization; (E) Type of entity and principal business(es); (F) Percentage of equity and/or voting interest, and all controlling interests, held directly or indirectly in the Regulatee; and (iii) An ownership diagram that illustrates the Regulatee’s vertical ownership structure, including the direct and indirect equity and/or voting interests, and/or controlling interests, as applicable, held by the individuals and entities named in response to this paragraph (j)(1). Every such individual or entity with equity and/or voting interests shall be depicted and all controlling interests must be identified. For disclosures provided pursuant to paragraphs (l)(3)(ii), (l)(4)(ii), and (l)(5)(ii) of this section, the ownership diagram shall include both the pre-transaction and post-transaction ownership of the Regulatee; (2) The identity of the foreign adversary or foreign adversary country the Regulatee is owned by, controlled by, or subject to the jurisdiction or direction of; and (3) The nature of the Foreign Adversary Control to which the Regulatee is subject. (4) A Regulatee filing a disclosure pursuant to this paragraph (j) shall include a statement certifying to the truth and accuracy of all information included in the disclosure. (k) Eligible U.S. public companies. A Regulatee that is an eligible U.S. public company, as that term is defined in 47 CFR § 1.5000(e), and that is subject to the reporting requirements set forth in paragraph (j) of this section, shall follow the same standards set forth in 47 CFR § 1.5000(e), to the extent applicable, in its reporting under paragraph (j) of this section. (l) Ongoing attestation and disclosure requirements. Regulatees shall file ongoing attestations in the scenarios listed below, and if the attestation is affirmative (i.e., “yes” to Foreign Adversary Control), Regulatees shall also file the additional disclosures required by paragraph (j) of this section: (1) Any Regulatee holding a Covered Authorization designated in Schedule A or B, regardless of whether it has already filed an attestation: (i) within 30 days of the Regulatee becoming subject to Foreign Adversary Control, to the extent such change does not require Commission approval; or (ii) within 60 days, or for small entities, 120 days, of the effective date of an addition to the Department of Commerce’s list of foreign adversaries in 15 CFR § 791.4 of a foreign government or foreign non-government person that has Foreign Adversary Control over the Regulatee; (2) Any Regulatee holding a Covered Authorization designated in Schedule A, regardless of whether it has already filed an attestation, within 30 days of the effective date of a public notice announcing the designation; (3) Any Regulatee holding a Covered Authorization designated in Schedule A or Schedule B that is subject to Foreign Adversary Control, or any Regulatee whose last attestation was affirmative: (i) Upon application for any new Covered Authorization; (ii) Upon application for an assignment, except a pro forma assignment as defined in 47 CFR § 63.24(d), of any Covered Authorization held by the Regulatee; (iii) Upon application for a renewal of any Covered Authorization; (iv) Upon application for a modification of any Covered Authorization; (v) Within 30 days of any changes to 5% or greater direct or indirect equity and/or voting interests, or controlling interests, held in the Regulatee; or (vi) Within 30 days of the effective date of a public notice designating a Covered Authorization held by the Regulatee in Schedule B; (4) Any entity regardless of Foreign Adversary Control: (i) Upon application for the entity’s initial Covered Authorization designated in Schedule A; or (ii) Upon application for the entity to be the transferee or assignee of its initial Covered Authorization designated in Schedule A, except in the case of a pro forma transfer of control or assignment as defined in 47 CFR § 63.24(d); (5) Any entity that is subject to Foreign Adversary Control: (i) Upon application for the entity’s initial Covered Authorization designated in Schedule B; (ii) Upon application for the entity to be the transferee or assignee of its initial Covered Authorization designated in Schedule B, except in the case of a pro forma transfer of control or assignment as defined in 47 CFR § 63.24(d); or (iii) Upon application for modification of a Covered Authorization designated in Schedule A or B that would cause the entity to be a licensee or lessee of the Covered Authorizations; and (6) Any Regulatee whose last attestation was affirmative within 30 days of its determination that it is no longer subject to Foreign Adversary Control. D. Enforcement and Streamlined Revocation Process for Non-Compliance (47 CFR § 1.80004) The Commission may take enforcement action against a Regulatee for failure to comply with the deadlines, an incomplete or inaccurate filing, including a false statement or representation, or if the Commission assesses that Foreign Adversary Control of the Covered Authorization may pose an unacceptable risk to national security. Enforcement actions may include monetary forfeitures and the initiation of revocation proceedings. The Commission adopted a streamlined process that the Enforcement Bureau and/or Licensing Bureau or Office may use to revoke a Regulatee’s Covered Authorization. This streamlined revocation process includes the following steps: (1) Notice of Deficiency and Opportunity to Respond. Prior to a revocation, the Enforcement Bureau and/or Licensing Bureau or Office shall issue a Notice of Deficiency and Opportunity to Comply. If a Regulatee receives a Notice of Deficiency and Opportunity to Comply, the Regulatee has thirty (30) calendar days to respond, cure the deficiency, and demonstrate why a revocation proceeding should not be initiated; (2) Order to Show Cause. If the Regulatee fails to cure the filing defect or respond to the Notice of Deficiency and Opportunity to Comply, the Licensing Bureau or Office may issue an Order to Show Cause to commence a revocation proceeding. If a Regulatee’s noncompliance is due to willfulness or considerations of public health, interest, or safety, See 5 U.S.C. § 558(c). the Commission may proceed directly to issuing an Order to Show Cause, without a Notice of Deficiency and Opportunity to Comply. If a Regulatee receives an Order to Show Cause, the Regulatee has fifteen (15) calendar days to respond and explain why the Regulatee’s Covered Authorization should not be revoked, except where statutory revocation procedures (such as for broadcast and wireless licenses) apply instead; and (3) Order of Revocation. After the conclusion of the period for notice and opportunity to respond, the Licensing Bureau or Office may issue an Order of Revocation revoking the Regulatee’s Covered Authorization. III. RECORDKEEPING AND REPORTING REQUIREMENTS The Foreign Adversary Control Report and Order contains various new information collection requirements for Regulatees that hold Covered Authorizations. Regulatees that hold Covered Authorizations must comply with the following obligations: · Initial Foreign Adversary Control Attestations (47 CFR §§ 1.80003(a)-(c)): o Schedule A Covered Authorizations: Regulatees holding Covered Authorizations listed in Schedule A must submit a definitive “yes” or “no” attestation either affirming or denying Foreign Adversary Control. o Schedule B Covered Authorizations: Regulatees holding Covered Authorizations listed in Schedule B that are subject to Foreign Adversary Control must submit a definitive “yes” attestation affirming Foreign Adversary Control. If a Regulatee holds a Covered Authorization that is not subject to Foreign Adversary Control, there is no need to submit a “no” attestation. o Schedule C Covered Authorizations: Regulatees holding Covered Authorizations listed in Schedule C are exempt from filing initial attestations. · Ongoing Attestations (47 CFR § 1.80003(l)): o If a Regulatee holding a Covered Authorization in Schedule A or B becomes subject to Foreign Adversary Control, they must submit an attestation. o If a Regulatee holding a Covered Authorization that is newly designated in Schedule A, they must submit an attestation. o If a Regulatee holding a Covered Authorization in Schedule A or B is subject to Foreign Adversary Control, they must submit an attestation § Upon application for a new Covered Authorization; § Upon application for an assignment, except pro forma; Pro forma transfers of control and assignments are transactions that “do not result in a change in the actual controlling party.” See 47 CFR § 63.24(d). § Upon application for a renewal of a Covered Authorization; § Upon application for a modification of any Covered Authorization; § Within 30 days of any changes to 5% or greater direct or indirect equity and/or voting interests, or controlling interests, held in the Regulatee; or § Within 30 days of the effective date of a public notice designating a Covered Authorization held by the Regulatee in Schedule B. o Any Regulatee, regardless of Foreign Adversary Control, must submit an attestation when § Applying for the entity’s initial Covered Authorization designated in Schedule A; or § Applying for the entity to be a transferee or assignee of its initial Covered Authorization designated in Schedule A, except in the case of a pro forma transfer of control or assignment. o Any entity that is subject to Foreign Adversary Control § Upon application for the entity’s initial Covered Authorization designated in Schedule B; § Upon application for the entity to be the transferee or assignee of its initial Covered Authorization designated in Schedule B, except in the case of a pro forma transfer of control or assignment; or § Upon application for modification of a Covered Authorization designated in Schedule A or B that would cause the entity to be a licensee or lessee of the Covered Authorization. o Any Regulatee whose last attestation was affirmative within 30 days of its determination that it is no longer subject to Foreign Adversary Control. · Additional Disclosures. If a Regulatee attests that it is subject to Foreign Adversary Control, it must submit the following additional disclosures (47 CFR § 1.80003(j)): o All 5% or greater direct or indirect equity and/or voting interest holders, and controlling interest holders, specifically: § For each reported natural person interest holder, his or her: (A) Name; (B) Address; (C) Country or countries of citizenship; (D) Percentage or equity and/or voting interest, and all controlling interests, held directly or indirectly in the Regulatee; and § For each reported entity (including a government entity) interest holder, it: (A) Name; (B) Address; (C) Country under the laws of which the entity is organized; (D) Country of the principal place of business, headquarters, and place of incorporation or organization; (E) Type of entity and principal business(es); (F) Percentage of equity and/or voting interest, and all controlling interests, held directly or indirectly in the Regulatee; and § An ownership diagram that illustrates the Regulatee’s vertical ownership structure, including the direct and indirect equity and/or voting interests, and/or controlling interests, as applicable, held by the individuals and entities named in response to this section. Every such individual or entity with equity and/or voting interests shall be depicted and all controlling interests must be identified. For disclosures provided pursuant to paragraphs that require ongoing attestations, the ownership diagram shall include both the pre-transaction and post-transaction ownership of the Regulatee; o The identity of the foreign adversary or foreign adversary country the Regulatee is owned by, controlled by, or subject to the jurisdiction or direction of; and o The nature of the Foreign Adversary Control to which the Regulatee is subject. o A Regulatee filing a disclosure pursuant to this section shall include a statement certifying to the truth and accuracy of all information included in the disclosure. IV. IMPLEMENTATION DATE The rules in the Foreign Adversary Control Report and Order are effective June 9, 2026. The new rules to be codified in 47 CFR § 1.80003 and the amendments to 47 CFR § 73.1212(j)(8) require approval by the Office of Management and Budget (OMB) under the Paperwork Reduction Act. These rules shall become effective after the Commission publishes a notice in the Federal Register announcing OMB approval and the relevant effective date. Specific instructions for Regulatees required to file initial attestation and disclosures will be announced by public notice. Small entities that are required to submit initial attestations must do so within 120 days of the public notice announcing launch of the Foreign Adversary Control System. V. INTERNET LINKS A copy of the Foreign Adversary Control Report and Order is available at: https://docs.fcc.gov/public/attachments/FCC-26-2A1.pdf. A copy of the Federal Register Summary of the Foreign Adversary Control Report and Order is available at: https://www.federalregister.gov/documents/2026/04/10/2026-06992/protecting-our-communications-networks-by-promoting-transparency-regarding-foreign-adversary-control. The rules adopted in the Foreign Adversary Control Report and Order will be codified in Part 1, Subpart GG of the Code of Federal Regulations. Part 1 is available at: https://www.ecfr.gov/current/title-47/chapter-I/subchapter-A/part-1. 2