The Supplementary Information accompanying the final rule discusses at length its legal basis.
The additional information that goes with the last rule discusses legalities.