If the Secretary has categorized the system as Tier 2 under §960.6, the license shall specify that the licensee shall comply with the conditions listed in §960.8 and further shall comply with the following conditions until the Secretary notifies the licensee that the system belongs in a lower-numbered tier:

(a) Comply with limited-operations directives issued by the Secretary, in accordance with a determination made by the Secretary of Defense or the Secretary of State pursuant to the procedures in Section IV(D) of the MOU, that require licensees to temporarily limit data collection and/or dissemination during periods of increased concerns for national security and where necessary to meet international obligation or foreign policy interests; and:

(1) Be able to comply with limited-operations directives at all times. This includes:

(i) The ability to implement National Institute of Standards and Technology-approved encryption, in accordance with the manufacturer's security policy, wherein the key length is at least 256 bits, for communications to and from the on-orbit components of the system related to tracking, telemetry, and control and for transmissions throughout the system of the data specified in the limited-operations directive; and

(ii) Implementing measures, consistent with industry best practice for entities of similar size and business operations, that prevent unauthorized access to the system and identify any unauthorized access in the event of a limited-operations directive;

(2) Provide and continually update the Secretary with a point of contact and an alternate point of contact for limited-operations directives; and

(3) During any such limited-operations directive, permit the Secretary to immediately access any component of the system for the purpose of ensuring compliance with the limited-operations directive, the Act, this part, and the license.

(b) Conduct resolved imaging of other artificial resident space objects (ARSO) orbiting the Earth only with the written consent of the registered owner of the ARSO to be imaged and with notification to the Secretary at least five days prior to imaging. For purposes of this paragraph (b), “resolved imaging” means the imaging of another ARSO that results in data depicting the ARSO with a resolution of 3 x 3 pixels or greater.