49 CFR § 15.7 - Covered persons.
Persons subject to the requirements of part 15 are:
(a) Each airport operator and aircraft operator subject to the requirements of Subchapter C of this title.
(b) Each indirect air carrier, as defined in 49 CFR 1540.5.
(c) Each owner, charterer, or operator of a vessel, including foreign vessel owners, charterers, and operators, required to have a security plan under Federal or International law.
(d) Each owner or operator of a maritime facility required to have a security plan under the Maritime Transportation Security Act, (Pub. L. 107–295), 46 U.S.C. 70101 et seq., 33 CFR part 6, or 33 U.S.C. 1221 et seq.
(e) Each person performing the function of a computer reservation system or global distribution system for airline passenger information.
(f) Each person participating in a national or area security committee established under 46 U.S.C. 70112, or a port security committee.
(l) Each person for which a vulnerability assessment has been directed, created, held, funded, or approved by the DOT, DHS, or that has prepared a vulnerability assessment that will be provided to DOT or DHS in support of a Federal security program.