US Code 28 CFR 600.1
Congress authorizes it.
CFR are regulations passed by the agencies, not laws passed by Congress