10 U.S.C. § 436 — Regulations

The Secretary of Defense must write regulations that put into action the authority given in this subchapter (the rules about commercial activities discussed in the sections around this one). These regulations must match, not conflict with, the rest of the subchapter. At a minimum, the regulations must do six things: (1) Name every part of the Department of Defense that is allowed to engage in commercial activities under this subchapter. (2) Require that the Secretary of Defense or the Deputy Secretary of Defense personally approve any "sensitive activities" allowed under this subchapter — lower officials cannot approve these themselves. (3) Name the officials who are allowed to waive other laws or regulations under section 433(b), or to approve setting up or running a commercial activity under this subchapter. (4) Pick one single office inside the Department of Defense to oversee all activities allowed under this subchapter. (5) Require that every proposed commercial activity go through proper legal review before it is allowed to start. (6) Set up appropriate internal audit controls and oversight for these activities.