I suspect it's the law directly referred to in the article: https://www.law.cornell.edu/cfr/text/31/560.204