# Who is flying the plane: aviation's alphabet soup of regulators
A Boeing 787 sitting on the tarmac in Doha needs paperwork from at least five different regulatory bodies before it can legally carry a paying passenger to Chicago: an aircraft certification from one authority, an air operator's license from another, slot approval from a third, bilateral traffic rights negotiated between two governments, and safety oversight that never actually stops once the engines start. No single regulator "runs" aviation. It is a layered system, and every airline executive, hotel group with airline partnerships, or travel platform routing bookings through carriers needs to know who controls which layer.
Think of airline regulation as four stacked layers:
1. Global standard-setting: rules that every country agrees to follow in principle.
2. National safety and licensing: the actual legal authority to build, fly, and operate aircraft in a given country.
3. Market access: who gets to fly which route, how often, and under what commercial terms.
4. Industry coordination: private-sector bodies that make the system interoperable (tickets, baggage, codeshares).
Confusing these layers is the single most common mistake non-specialists make when discussing "aviation regulation." ICAO does not certify your plane. IATA does not enforce safety law. Knowing who does what avoids embarrassing mistakes in a boardroom.
ICAO sets Standards and Recommended Practices (SARPs): things like how runways should be marked, how pilot licenses should be structured, how accident investigations should be run. Member states are expected to adopt these into their own national law.
Critically, ICAO has no enforcement power. It cannot ground an airline or fine a country. It audits states' safety oversight systems (via its Universal Safety Oversight Audit Programme) and publishes results, and reputational pressure does the rest. When a country's civil aviation authority fails an ICAO audit badly enough, other countries' regulators (see FAA and EASA below) may restrict that country's airlines from their airspace entirely. That is the real teeth: peer regulators acting on ICAO's findings, not ICAO itself.
This is the layer that actually licenses aircraft, airlines, and crews.
Why this matters commercially: an aircraft manufacturer needs both FAA and EASA sign-off to sell globally, because most other countries' regulators accept certification from one of these two as a baseline (a practice called mutual recognition, formalized through bilateral safety agreements). This is why a groundings decision by one, like the FAA's 2019 grounding of the Boeing 737 MAX after two fatal crashes, ripples globally even though it was a US regulatory action.
Practical compliance point: if you work for a hotel group, tour operator, or OTA (online travel agency) building airline partnerships, you never negotiate safety compliance directly. You inherit it. Your legal exposure is about accurately representing which authority regulates a partner carrier, particularly for wet-lease arrangements (where one airline operates another's branded flights) that can create confusion about which country's safety rules actually apply.
Certification tells you a plane and airline are safe to operate. It says nothing about whether they are allowed to fly a specific route.
That is governed by bilateral air service agreements (ASAs), treaties between two countries specifying which airlines can fly between them, how many flights, and sometimes even pricing terms. The US-EU Open Skies Agreement (2007, expanded 2010) is the best-known example: it removed most restrictions on which airlines could fly transatlantic routes between the US and EU states, replacing a patchwork of country-by-country deals.
Within this layer sit two more practical constraints:
IATA (International Air Transport Association) is not a government regulator at all. It is a trade association of roughly 300+ airlines representing a large majority of global air traffic (figure varies year to year, IATA publishes current membership on iata.org).
IATA's real function is making the system interoperable:
IATA has no legal enforcement power over airlines. Its influence comes from the fact that failing to comply with its standards effectively locks an airline out of interline agreements and alliance membership, which matters enormously for revenue.
Knowledge check
1. A journalist writes that 'ICAO enforces global aviation safety law.' What is the most accurate correction based on how the regulatory layers actually work?
2. An airline executive says, 'Once we get our aircraft certified and our air operator's license, we're free to fly any route we want internationally.' Why is this reasoning flawed?
3. Why does the lesson describe confusing IATA's role with ICAO's role as 'the single most common mistake' non-specialists make?
4. Select ALL correct answers about the four-layer structure of airline regulation described in the lesson.
Select all the correct answers.
5. Select ALL correct answers about why a single Boeing 787 flight from Doha to Chicago requires paperwork from multiple, distinct regulatory bodies.
Select all the correct answers.
Picture a Gulf carrier launching a new nonstop from Doha to Chicago. Before the first ticket sells, this sequence has to close:
1. The aircraft type has FAA and/or EASA certification (inherited from the manufacturer, not negotiated by the airline).
2. The airline's home country civil aviation authority (Qatar Civil Aviation Authority) has issued it an air operator certificate, and that authority has passed ICAO safety audits credibly enough that the US will accept its oversight.
3. A bilateral ASA (or Open Skies-style agreement) between Qatar and the US permits the route and frequency.
4. Slots are secured at Chicago O'Hare, a coordinated (capacity-constrained) airport.
5. The airline holds IOSA certification if it wants the route to carry codeshare partners' flight numbers.
6. US Customs and Border Protection and TSA (Transportation Security Administration) frameworks are confirmed for preclearance or arrival processing.
Miss any one of these and the launch date slips, regardless of how ready the marketing campaign is. This is the operational reality behind seemingly simple airline news announcements.
🎬 [VIDEO: "How Aviation Regulations Work" - https://www.youtube.com/results?search_query=how+aviation+regulation+works+icao+faa+easa - search results for accessible explainer videos on the ICAO/FAA/EASA regulatory structure, useful for a visual walkthrough of the certification chain]