The FAA Part 5 SMS final rule,
requirements and deadlines.

See the highlighted block above the contents list. The rest of this article covers what the 2024 final rule actually changed, exactly who is now covered, the full deadline timeline in one place, the four components read alongside the two new obligations, and the handful of actions that matter most in the next ninety days.

A codified safety management system under 14 CFR Part 5 was already mandatory for Part 121 air carriers. What changed in 2024 is the reach of the rule. The FAA published the SMS final rule on 2024-04-26, effective 2024-05-28, and used it to revise Part 5 and pull whole categories of operator that had never carried a mandatory SMS into scope for the first time.

For those operators, this is a shift from voluntary to binding. The FAA had run an earlier voluntary track, the Safety Management System Voluntary Program (SMSVP), and some Part 135 operators built real programs under it. The 2024 rule closes the optional era: safety management becomes an enforceable regulatory obligation with dated milestones, not a program you opt into when there is spare capacity. Charter, commercial air tour, and certain Part 21 certificate holders now sit inside the same codified regime the airlines have worked under for years.

Two things about the rule are worth setting straight early. First, an SMS is a system, not a document. The rule is satisfied by hazards flowing into a risk process, controls that are monitored, and evidence that the loop actually runs, not by a manual on a shelf. Second, the rule is deliberately scalable: it applies regardless of size, and the expectation is that a small operator runs a proportionate version of the same four components rather than a shorter list of them.

The revised Part 5 draws the coverage line across four groups.

• All Part 135 certificate holders. Every on-demand and commuter operator, regardless of fleet size, including single-aircraft and single-pilot certificate holders. This is the largest newly covered population.
• 91.147 commercial air tour operators. Operators conducting commercial air tours under a letter of authorization are covered on the same timeline as Part 135. See SMS for air tour operators under 91.147 for the specifics.
• Certain Part 21 certificate holders. Holders that held their certificate on the effective date are brought in, with the design and manufacturing angle covered in Part 21 SMS for design and manufacturing.
• Part 121 air carriers. Already required to hold an accepted SMS. The 2024 rule requires carriers that held an FAA-accepted SMS on the effective date to conform to the revised Part 5 by 2025-05-28.

The one nuance that catches people is the SMSVP transition. A Part 135 operator that already ran a voluntary program does not get a pass; it transitions to the new Part 5 requirements, and Part 135 SMSVP letter holders have until 2027-05-28 to be fully implemented under the rule. In other words, prior voluntary work is a head start on evidence, not a substitute for the codified obligations.

Here is every dated milestone in the rule in one place.

• 2024-04-26. The SMS final rule is published.
• 2024-05-28. The rule takes effect. This is the effective date that fixes which Part 21 and Part 121 holders are captured.
• 2024-11-28. Implementation plans are due for the newly covered operators: Part 135 certificate holders, 91.147 air tour operators, and the covered Part 21 certificate holders.
• 2025-05-28. Part 121 carriers that held an FAA-accepted SMS on the effective date must conform to the revised Part 5.
• 2027-05-28. Part 135 and 91.147 operators must have the SMS fully implemented and the declaration of compliance submitted. The covered Part 21 certificate holders must have their SMS implemented, and Part 135 SMSVP letter holders complete their transition by the same date.

Read that bottom line carefully, because it is the one most operators plan against. The 2027-05-28 date is not a documentation deadline, it is a fully implemented deadline. An SMS that exists only as an approved manual on that morning is not what the rule asks for. If you have not yet measured where you stand against the four components, a structured Part 5 gap analysis is the fastest way to turn a vague deadline into a concrete work list.

The substance of a Part 5 SMS is the four components, the same spine used across the ICAO Annex 19 framework.

• Safety Policy. Management commitment, accountability, and the documented rules of the system, with a named accountable executive who owns it.
• Safety Risk Management. Hazard identification, risk assessment, and control of risk before the event.
• Safety Assurance. Monitoring whether the controls actually work, through performance monitoring, audits, and continuous improvement.
• Safety Promotion. Training and communication that keep the system alive in the workforce.

On top of that structure, the 2024 revisions add two deliverables an operator should track as distinct line items. The first is a confidential employee reporting system: a channel that lets employees raise hazards while protecting the reporter, wired into the risk process rather than parked in an inbox. The second is a declaration of compliance, a formal submission to the FAA stating that the SMS meets the rule, due for Part 135 and 91.147 operators alongside full implementation by 2027-05-28.

Treat the declaration as the easy part and the confidential reporting system as the load-bearing one. A reporting channel that employees do not trust produces no hazards, which starves Safety Risk Management of its main input and quietly hollows out the whole system. Confidentiality is not a nicety here; it is what makes the reporting component work at all.

If 2027-05-28 still feels distant, the useful move is to convert it into work you can start now. A practical first quarter looks like this.

• Pin your own deadline. Confirm which group you fall in and which dates bind you. For most readers of this page that is 2027-05-28 for full implementation and the declaration. Operators running a heavier Part 135 program can go deeper in the Part 135 2027 requirements guide.
• Run a gap analysis against the four components. Score what already exists (policy, hazard process, assurance cycle, training) and what does not. The output is your implementation backlog.
• Stand up the confidential reporting channel early. It needs time to earn trust and start producing reports before it can evidence anything.
• Make the risk loop real, not paper. Ensure hazards flow into risk assessment, into controls, into assurance, with the links intact. That closed loop is what an inspector is looking for.
• Assemble declaration evidence as you go. Do not leave the declaration of compliance to the final month; it is a summary of a system that already runs.

This is also where tooling stops being cosmetic. When occurrences, hazards, investigations, corrective actions, audits, findings, documents, and safety performance indicators live in one operational graph, as they do in the eAviora SMS module, the four components stop being four binders and become one linked record set. eAviora ships with a pre-built aviation risk model (101 bow-tie models, 804 named barriers, 210 scenarios, and a 610-indicator safety performance indicator library), so a new operator starts from a working risk picture instead of a blank page, and the confidential reporting channel runs a closed just-culture loop by default.