Chemical Facility Anti-Terrorism Standards (CFATS) Laws and Regulations
As of July 28, 2023, Congress has allowed the statutory authority for the Chemical Facility Anti-Terrorism Standards (CFATS) program (6 CFR Part 27) to expire.
Therefore, CISA cannot enforce compliance with the CFATS regulations at this time. This means that CISA will not require facilities to report their chemicals of interest or submit any information in CSAT, perform inspections, or provide CFATS compliance assistance, amongst other activities. CISA can no longer require facilities to implement their CFATS Site Security Plan or CFATS Alternative Security Program.
CISA encourages facilities to maintain security measures. CISA’s voluntary ChemLock resources are available on the ChemLock webpages.
If CFATS is reauthorized, CISA will follow up with facilities in the future. To reach us, please contact CFATS@hq.dhs.gov.
These are the statutes, regulations, and notices regarding the Chemical Facility Anti-Terrorism Standards (CFATS) regulatory program.
Authorized by Congress through the DHS Appropriations Act of 2007, CFATS uses a dynamic multi-tiered risk assessment process to identify chemical facilities that are high risk. Facilities determined to be high-risk are assigned a tier and are required to meet and maintain certain performance-based security standards appropriate to the chemicals of interest these facilities possess and the risks they pose.