FAA Order 1200.22E

U.S. DEPARTMENT OF TRANSPORTATION
FEDERAL AVIATION ADMINISTRATION

ORDER

National Policy

1200.22E
Effective Date
01/20/12

SUBJ: External Requests for National Airspace System (NAS) Data
1. Purpose of This Order. This order explains how the Federal Aviation Administration
(FAA) handles external requests for access to National Airspace System (NAS) data. It also
describes how the FAA processes these external requests for access to NAS data.
2. Audience. This order applies to all applicable offices within the FAA.
3. Where Can I Find This Order? You can find this Order on the MyFAA Employee Web
site: https://employees.faa.gov/tools_resources/orders_notices/. This Order is available to the
public at http://www.faa.gov/regulations_policies/orders_notices/
4. Cancellation. This order replaces Order 1200.22D, External Requests for NAS Data, dated
February 26, 2008.
5. Scope.
a. This order applies to external requests for access to NAS data, which includes
connections to the NAS infrastructure, as well as recorded NAS data.
b. This order does not apply to:
(1) Requests from Federal agencies.
(2) Requests from State law enforcement agencies.
(3) Requests made under the Freedom of Information Act.
(4) Data provided under FAA contracts as Government Furnished Information.
6. Explanation of Changes. This order transfers management and responsibility for NAS data
release, including the NAS Data Release Board, to the Vice President, System Operations
Services (Air Traffic Organization (ATO)). It also clarifies the management of the NAS Data
Release Program and the responsibilities under this order.

Distribution: Electronic

Initiated By: AJR-4
NAS Data Release

01/20/12

1200.22E

7. Definitions. The following definitions apply to this order.
a. Delayed Data. NAS data whose release is delayed beyond minimum system processing

time.

b. Filtered Data. NAS data that is redacted or filtered to remove sensitive information.
c. NAS Data. Data from FAA systems used to manage or operate the NAS.
8. Background and Authority. The FAA routinely handles sensitive information. The safety
and security of aviation operations in the NAS could be compromised by unauthorized release of
NAS data. Consistent with applicable Federal laws and regulations, the FAA must release data
only as appropriate and lawful while simultaneously safeguarding the NAS. The FAA authority
to release data is pursuant to title 49, United States Code (49 U.S.C), section 106, subsections (1)
and (m) or other appropriate authority.
9. Policy.
a. The FAA may release filtered and delayed NAS data only as approved by the
Vice President, System Operations Services. The Vice President, System Operations Services
will establish the procedures for obtaining this approval, including prescribing the operation and
responsibilities of the NAS Data Release Board. The authority set out in this paragraph may not
be delegated.
b. All costs of data access and transmission are the responsibility of the data recipient. Data
should be accessed over approved, secure, and controlled connections (e.g., Internet Enterprise
(IE) gateways or similar) consistent with the latest National Institute of Standards and
Technology (NIST) standards. All current NAS data connections releasing data to non-FAA
entities should be transitioned as soon as possible to gateways. Requests for direct connections
for NAS data (outside IE gateways or similar) will not be authorized unless specifically approved
by the Vice President, System Operations Services. FAA Form 1200-5 will be used as
appropriate for such requests (Attachment A). The authority set out in this paragraph may not
be delegated.
c. The FAA may otherwise release NAS data as approved by the Vice President, System
Operations Services pursuant to 49 U.S.C, section 106, subsections (1) and (m) or other
appropriate authority. The approval authority set out in this paragraph may not be delegated.
10. Responsibilities.
a. The FAA must release NAS data consistent with Federal laws and regulations. Questions
concerning applicability of laws or regulations in carrying out of this order will be referred to the
Office of the Chief Counsel (AGC).
b. The Vice President, System Operations Services must:
(1) Manage the FAA national program for reviewing external requests for NAS data
release.

01/20/12

1200.22E

(2) Provide executive-level oversight for the NAS Data Release Program including FAA
policy coordination.
(3) Establish a NAS Data Release Board with a streamlined process to coordinate advice
from interested FAA stakeholders and function as a single point of contact for NAS data release
policy implementation, administration, board membership, board standard operating procedures,
and metrics.
c. Each ATO service center must designate an FAA representative that must:
(1) Assist requestors throughout the NAS data release process.
d. The FAA Data Release Board must:
(1) Establish and maintain an information repository for external requests of NAS data
and associated documentation as directed by the Vice President, System Operations Services.
(2) Function as a single point of contact for NAS data release policy implementation,
administration, metrics, and processing as directed by the Vice President, System Operations
Services.
11. Distribution. This order is distributed to all FAA lines of business executive offices; within
the ATO to group level in Technical Operations, En Route and Oceanic, Terminal,
Mission Support, and System Operations Services (including headquarters, service centers, and
field offices, as applicable); to the office of the Deputy Assistant Administrator for Information
Services and the Office of the Chief Counsel; and to division level in the FAA Academy and the
FAA Logistics Center at the Mike Monroney Aeronautical Center.

MiWiael P. Huer
Acting Administrator

01/20/12

1200.22E
Appendix A
Appendix A. FAA Form 1200-5, NAS Data Release Request
INAJS D a t a Release Request

'.

OMB Approved 2120-0668

01/31/2008
Paperwork Reduction Act Statement: This data is collected to assess the validity of your request for approval/disapproval. It will take
approximately 27 hours or less to complete this form. The collection is mandatory, and all information collected shall be kept confidential. An
agency may not collect, and a person is not required to respond to an information collection, unless it displays a currently valid OMB Control
Number. Comments concerning the accuracy of this burden and suggestions for reducing the burden should be directed to the FAA at: 800
Independence Ave SW. Washington. DC 20591. Attn: Information Collection Clearance Officer. ABA-20
1. Business/Organization Name

3. Address

2. Business Phone Number

(Street, City, State, ZIP Code)

4. Point of Contact (POC) Name
7. Are you currently receiving NAS data? •
8. Indicate your authority to access NAS data:
(Attach documentation)

5. Phone Number
Yes

6. Full E-mail address

Q No (If no, skip to #10)
D Memorandum of Agreement
• Other (Explain)

9. Indicate if you have an approved NCP(s) on file: •

•

Government contract

Yes D No If yes, list the case file number(s):

10a. Type of data you are requesting: • Delayed • Recorded 10b. Describe the data requested: (Attach additional sheets)

11. Describe your proposed method for acquiring data: (Attach additional sheets)

12. Describe the nature of your organization/business and the purpose for this request. (Attach additional sheets)

13. Describe your sensitive data filtering process. (Attach additional sheets)

14. List any non- U.S citizen personnel you will employ for this data request. Explain his/her duties in relation to this data request. (Attach
additional sheets)

FOR OFFICE USE ONLY: Request Date:
Issue Date:
(FAA FORM 1200-5) (2-02)

/

/
/

Package Date: _ _ _ / _ _ _ / _
/

Local Reproduction Authorized

Review Date:

/

/

NShJ: (3652-00-523-3030

01/20/12

1200.22E
Appendix A

If you require additional space to provide your answers, write them on a separate sheet
preceded by the item number and attach them to this request
1. Enter the complete registered name of the business or organization that has authority for all operations.
2. Enter the phone number of the business or organization.
3. Enter the complete address of the business or organization.
4. Enter the Point of Contact (POC) who will have the delegated authority. If this person is the same as the
one stated in 3, indicate by entering "same as above."
5. Enter the phone number of the POC. If this person is the same as the one stated in item 4, indicate by
entering "same as above."
6. Enter the business or organization's e-mail address.
7. Check the appropriate box. If the answer is "Yes," attach a copy of the appropriate documentation.
8. Check the appropriate box.
9. indicate whether or not you have an approved NAS Change Proposal (NCP) with the FAA and include
that number. If you have more than one NCP, list all NCP numbers.
10. Describe the type of data you are requesting - location, facility, exact data sought Be as specific as
possible.
11. Describe your method for accessing NAS data. Tell what your equipment will do, how it will operate, the
method of filtering, and any other capabilities as required.
12. State the type of business you operate and the specific purpose for using the NAS data.
13. List, in specific detail, your filtering process and data safeguard procedures.
14. Provide the names of any non-U.S. citizen personnel you plan to employ for this data request, along with
the scope and nature of work the individual will perform.
NOTE: This form may also down loaded from the AOP-300 website at:
http://www.faa.gov/aWaaf/aop/300/12Q0.22/