Drone Law | UK SORA | CAA Regulation | AI Governance

Summary: CAA Decision No. 60 marks a significant development in the regulation of Specific category drone operations in the UK. Coming into force on 1 October 2026, it updates the UK SORA framework and introduces clearer expectations around compliance evidence, ground-risk mitigation, containment, kinetic energy analysis and evidence retention. For operators, the message is clear: compliance is no longer just a narrative safety case. It must be evidenced, retained and auditable.

1. Why Decision No. 60 Matters

The UK’s lower airspace is becoming increasingly complex. Beyond Visual Line of Sight operations, drone delivery, infrastructure inspection, emergency services use, autonomous routing and higher-risk commercial UAS activity all require a more mature regulatory framework.

CAA Decision No. 60 updates the Acceptable Means of Compliance and Guidance Material for UK Regulation (EU) 2019/947. In practical terms, it strengthens the UK Specific Operation Risk Assessment, or UK SORA, for operators seeking authorisation in the Specific category.

The legal significance is that UK SORA is becoming a structured assurance methodology. Operators must not merely state that an operation is safe. They must demonstrate that the aircraft, procedures, people, operational volume, ground environment, airspace risks, mitigations and emergency arrangements meet the required level of safety.

2. UK SORA Is Not a Box-Ticking Exercise

UK SORA exists to support the operational risk assessment required for Specific category operations. It considers both ground risk and air risk, then applies mitigations and operational safety objectives according to the Specific Assurance and Integrity Level, or SAIL.

The updated framework is particularly important because it clarifies how operators must gather, present and retain compliance evidence. This is a move away from generalised operational assertions and towards aviation-grade documentation.

3. The Three Compliance Pathways

Decision No. 60 identifies three broad routes for demonstrating compliance.

Operators must also retain compliance evidence for the duration of the operational authorisation and for three years after operations under that authorisation cease. That evidence may become critical in a CAA audit, incident investigation, insurance dispute or civil claim.

4. Ground Risk: What Happens If the Drone Falls?

Ground risk is central to UK SORA. The law is concerned not only with whether the drone can fly, but with what happens if it fails. Decision No. 60 provides more detailed guidance on how operators may reduce ground risk.

5. Kinetic Energy and Penetration Risk

Decision No. 60 gives particular importance to kinetic energy. This matters because it converts safety claims into measurable injury-risk analysis.

Operators should not rely on generic manufacturer statements. They need platform-specific evidence: mass, velocity, terminal impact behaviour, parachute performance, battery fire risk and representative structural analysis.

6. Containment and Fly-Away Risk

Containment is a central pillar of the updated UK SORA framework. It asks whether the unmanned aircraft can be kept within its operational volume and ground risk buffer, even after failure or loss of control.

For lower-risk operations, containment may be assessed qualitatively through design appraisal and procedural evidence. For higher-risk operations, the CAA may expect quantitative probability targets, such as demonstrating that the probability of exiting the relevant volume or buffer is below specified thresholds per flight hour.

Containment evidence may include geo-caging, tethering, independent flight termination systems, lost-link logic, command-and-control resilience, navigation integrity, power-system independence and emergency procedures.

7. EU AI Act and UK AI Standards

Decision No. 60 is not an AI regulation. However, many modern drone operations increasingly rely on AI-enabled functions, including detect-and-avoid, automated route planning, computer vision, landing assistance, ground-person detection, predictive maintenance and autonomous contingency management.

The EU AI Act is relevant as a benchmark for risk management, technical documentation, record-keeping, transparency, human oversight, robustness and cybersecurity. The UK does not currently have a single equivalent UK AI Act. Instead, it follows a sector-led, principles-based model based on safety, security and robustness; transparency and explainability; fairness; accountability and governance; and contestability and redress.

8. Data Protection and Surveillance Risk

Many Specific category operations involve cameras, thermal imaging, mapping payloads or AI-enabled object recognition. UK SORA primarily addresses safety, but operators must also consider privacy, data protection and surveillance risk.

If cameras or AI systems detect uninvolved persons, personal data may be captured, stored or analysed. Operators may need a data protection impact assessment, retention limits, access controls, privacy notices and clear rules on secondary use.

9. What Operators Should Do Before 1 October 2026

Operators should review their safety cases and evidence packs now. In particular, they should check:

• Aircraft mass, speed, kinetic energy and terminal velocity;
• Ground-risk assumptions and population-density evidence;
• Sheltering, operational restriction and observation claims;
• Parachute, flight termination and impact mitigation evidence;
• Containment evidence, including geo-caging and lost-link logic;
• AI-enabled functions, including detect-and-avoid and automated decision-support tools;
• Evidence retention systems;
• Supplier contracts for access to technical data.

10. Bottom Line

CAA Decision No. 60 marks a shift from descriptive drone safety cases to structured assurance. Operators must now be able to prove their safety claims through coherent, retained and auditable evidence.

The most important development is the convergence between aviation safety and AI governance. UK SORA asks whether the drone operation is safe. The EU AI Act and UK AI principles ask whether automated systems are risk-managed, documented, robust, explainable, secure and subject to human oversight. For modern drone operations, those are increasingly the same question.

Compliance is not what the operator says it does. Compliance is what the operator can prove.

About the Author

Richard Ryan is a barrister, Chartered Arbitrator and specialist in drone law, aviation regulation and artificial intelligence. He advises operators, manufacturers and public bodies on UK CAA regulation, UK SORA, BVLOS operations, AI governance and commercial drone operations. He is currently undertaking a PhD at Cranfield University researching the legal framework for autonomous aviation and future airspace integration.

This article is general legal commentary and does not constitute legal advice.

The post Navigating UK SORA: A Drone Lawyer’s Guide to CAA Decision No. 60 appeared first on Blakistons.

From 1 January 2026, the UK drone regulatory framework enters a new phase. While the underlying legal structure remains based on the Air Navigation Order 2016 and UK UAS Regulations, several operational changes are being introduced. Understanding the distinction between legislation, Civil Aviation Authority guidance, and industry practice is now essential.

This article provides a practical legal overview of the key changes affecting recreational and commercial drone operators flying within the Open Category in the United Kingdom.

Law and Guidance Are Not the Same Thing

One of the most common misunderstandings among drone operators is the assumption that everything in the Drone Code or CAA guidance is itself law.

The legal framework consists primarily of legislation, including the Air Navigation Order 2016 and UK UAS Regulations. These are the provisions under which enforcement action and prosecutions may occur.

The CAA also publishes guidance, including CAP 722, Acceptable Means of Compliance and the Drone Code. These materials are highly important, but they are generally guidance rather than legislation. Compliance with them will usually be persuasive evidence of safe and responsible operation.

A useful way to think about compliance is:

• Green: operating within CAA guidance and published best practice.
• Amber: operating within the law but outside guidance.
• Red: operating outside the legal framework.

Flying outside guidance may sometimes remain lawful, but operators must be ready to justify their decisions if challenged by the police, the CAA or a court.

Registration Requirements

Most drones with a camera and weighing more than 100 grams require registration under the Drone and Model Aircraft Registration and Education Scheme.

Operators will generally need both an Operator ID and a Flyer ID.

The Operator ID identifies the person responsible for the aircraft and must be displayed on the drone. The Flyer ID confirms that the pilot has passed the required competency test and remains valid for five years.

Importantly, it is the operator who is registered rather than the drone itself.

Universal Rules for All Drone Flights

Maximum Altitude

The maximum operating height remains 120 metres, or 400 feet, above the closest point of the earth’s surface. This matters particularly when flying near cliffs, hills, mountains or other changing terrain.

Visual Line of Sight

Visual Line of Sight remains a central requirement of UK drone regulation.

The pilot must be able to see the aircraft sufficiently to avoid collisions in the air and manage risks on the ground. Seeing only a small dot or relying solely on navigation lights is unlikely to be defensible if an incident occurs.

First Person View Flying

Where FPV goggles are used, a competent observer or spotter is generally required. The spotter should remain beside the pilot and maintain awareness of air and ground hazards while the pilot is focused on the video feed.

Airspace Restrictions

Many drone prosecutions arise from breaches of airspace restrictions rather than from technical flying errors.

Airspace should be checked before every flight using a reliable and current source of aeronautical information. The information should be refreshed immediately before launch.

Key restriction types include:

• Flight Restriction Zones: permanent restricted areas around airports, prisons and protected sites.
• Temporary Restrictions: restrictions created for events, security operations and public safety purposes.
• NOTAMs: aviation notices which may affect drone operations.

Operators should use modern airspace mapping tools and should not assume that yesterday’s airspace position remains correct today.

A1, A2 and A3 Operational Categories

A1: Flying Over People

The A1 category provides the greatest flexibility. Certain drones under 250 grams may be flown over uninvolved persons, although flight over crowds remains prohibited.

This category generally includes legacy drones under 250g, UK0 and UK1 aircraft, C0 aircraft and C1 aircraft subject to transitional provisions.

A2: Flying Close to People

A2 operations allow flight near uninvolved persons but generally prohibit flight directly over them. Operators normally require an A2 Certificate of Competency.

Certain UK2 and C2 aircraft may operate with reduced separation distances where the applicable requirements are met.

A3: Flying Far from People

A3 operations are intended for open areas away from uninvolved persons and built-up environments.

Operators must generally maintain 50 metres from uninvolved persons and 150 metres from residential, commercial, industrial and recreational areas.

Article 16 Authorisations

Members of recognised model aircraft and drone associations may benefit from Article 16 Authorisations. These permissions can provide greater operational flexibility, including reduced separation distances and access to some locations that would otherwise be more restricted under the Open Category framework.

Ground Hazards and Article 241

Even where all technical drone requirements are satisfied, operators remain subject to wider safety duties.

Article 241 of the Air Navigation Order provides that a person must not recklessly or negligently cause or permit an aircraft to endanger any person or property.

Ground hazards may include members of the public, vehicles, buildings, infrastructure, wildlife and protected environmental sites.

Particular care should be taken when operating near Sites of Special Scientific Interest and other environmentally protected areas.

Remote ID Arrives in 2026

One of the most significant developments is the introduction of Remote ID.

Remote ID creates an electronic identification system allowing drone operations to be identified through information transmitted by the aircraft.

Implementation is being phased in. New UK1, UK2 and UK3 drones released from 2026 will require Remote ID functionality. Existing aircraft will transition over a longer implementation period extending towards 2028.

Operators should monitor CAA updates closely as implementation progresses.

Night Flying Requirements

Night flying remains permissible within the Open Category.

From 2026, operators will generally require a green flashing light attached to the aircraft.

The purpose of the light is to assist people on the ground in recognising the aircraft as a drone. It should not be treated as a substitute for maintaining Visual Line of Sight.

Insurance and Operational Responsibility

Recreational operators are generally not legally required to carry insurance, although doing so is strongly recommended.

Commercial operators typically require specialist aviation insurance compliant with applicable regulatory requirements.

Pilots should also ensure they are fit to fly, avoid operating under the influence of alcohol or drugs, and remain alert to low-flying manned aircraft at all times.

Conclusion

The 2026 changes represent an evolution rather than a revolution in UK drone regulation.

The key principles remain unchanged: understand the law, check airspace before every flight, maintain Visual Line of Sight, operate safely and proportionately, and keep abreast of developments concerning Remote ID and future airspace integration.

For most operators, compliance remains straightforward. Those who understand the distinction between legislation and guidance, conduct appropriate pre-flight planning and adopt a risk-based approach should continue to fly safely and lawfully throughout 2026 and beyond.

Disclaimer: This article is provided for general information only and does not constitute legal advice. Specific advice should be sought in relation to individual circumstances.

Richard Ryan is a practising barrister, Arbitrator , drone lawyer, and regulatory specialist with more than 20 years’ experience in litigation, arbitration, aviation, defence, technology, construction, and commercial law. He advises drone operators, aerospace companies, government bodies, and technology businesses on complex regulatory, operational, and compliance issues relating to unmanned aircraft systems (UAS), counter-UAS technologies, urban air mobility, and emerging aviation regulation.

Richard is currently undertaking PhD research at Cranfield University examining the future regulatory framework for Beyond Visual Line of Sight (BVLOS) operations, Unmanned Traffic Management (UTM), and the integration of drones into shared airspace. He regularly writes on developments in drone law, aviation regulation, privacy, safety, and the future of autonomous flight.

The views expressed in this article are for general information purposes only and do not constitute legal advice.

The post UK Drone Rules from 1 January 2026: A Lawyer’s Practical Guide for Pilots appeared first on Blakistons.

The post When “Just a Minute” Becomes BVLOS: Legal Lessons for Drone Operators from CHIRP’s September 2025 Reports appeared first on Blakistons.

The post What the UK Drone Industry Can Learn from EASA’s Adoption of SORA 2.5 appeared first on Blakistons.

Soaring Ahead or Stuck in the Past? What the CAP 3040 Second Edition Means for Your Drone Operations

By Richard Ryan, Drone Lawyer

As a UK drone lawyer, I’ve seen firsthand how tricky it can be to navigate the ever-changing skies of unmanned aviation regulation. The Civil Aviation Authority’s (CAA) “Unmanned Aircraft Operations in an Atypical Air Environment (AAE): Policy Concept” (CAP 3040) is no exception. After the initial excitement of the First Edition, many in the drone community were eagerly awaiting the Second Edition, hoping for clarifications, improvements, and a more future-focused framework.

What’s New?
At a glance, the changes between the First and Second Editions might seem minimal—just a tweak to the reference for ADS-B (Automatic Dependent Surveillance-Broadcast) equipment, rolling back from RTCA DO-282C to the older DO-282B standard. But that’s not a small footnote. If you’ve been prepping your drone gear to meet DO-282C standards, you may now be left wondering why the rug’s been pulled from under you.

The Tech Twist:
DO-282B is an earlier standard for ADS-B performance, while DO-282C was supposed to reflect newer technology and real-world lessons learned. Reverting to an older standard could mean extra work or unexpected costs if you’ve already made purchases or adapted your systems for DO-282C. It also raises questions about whether the policy is truly forward-looking, or inadvertently stifling progress at a critical time in UK drone innovation.

Still Flying Through Foggy Regulations:
The Second Edition still leaves operators wrestling with a few nagging uncertainties:
1. Defining ‘Atypical Air Environment’: The document still lacks a crystal-clear definition of AAE. Without a firm legal baseline, you might struggle to know if your flight qualifies—adding confusion to your operations and potentially slowing down approvals.
2. Single Site Limitations: The CAA’s recommended approach of applying for just one site per Operational Authorisation (OA) remains. This can create unnecessary hurdles for those looking to scale up and serve multiple clients or routes.
3. Extra Admin, Less Innovation: Requirements like routine NOTAM submissions or intricate Electronic Conspicuity (EC) licensing haven’t been simplified. For many operators, these processes feel more bureaucratic than beneficial, potentially discouraging new entrants and curbing the industry’s growth.

How to Navigate This Airspace Turbulence:
• Stay Agile: Keep tabs on CAA communications and industry forums. If the CAA shifts requirements again, you’ll want to pivot quickly.
• Ask for Clarity: Don’t hesitate to reach out to uavenquiries@caa.co.uk for guidance, especially if you’ve already invested in tech aligned with DO-282C.
• Industry Collaboration: Connect with fellow operators, manufacturers, and drone associations. Shared experiences help identify practical solutions and give your concerns more weight when approaching regulators.
• Professional Advice: A drone-focused legal expert can help you interpret the Second Edition’s nuances, reduce compliance guesswork, and ensure you’re not sinking costs into the wrong standards.

Charting a Better Flight Path: While the Second Edition’s updates may feel like a step back, there’s still hope. The CAA emphasizes that CAP 3040 is an evolving concept. By voicing concerns, sharing data, and staying engaged, the drone community can help steer policy revisions that balance safety, innovation, and economic growth.

The Bottom Line:
The CAP 3040 Second Edition is a reminder that regulatory frameworks are works in progress. This can be frustrating, yes—but it’s also an opportunity. Operators willing to adapt, learn, and advocate for sensible changes can help shape the UK’s drone landscape into one that truly welcomes innovation. Keep your engines running, your channels of communication open, and your ambitions high. Together, we can ensure that tomorrow’s regulations are as cutting-edge and future friendly as the drone technology they’re meant to guide.

About the Author
Richard Ryan is a direct access barrister at Blakiston’s Chambers, specialising in drone law and unmanned aircraft regulation. Leveraging extensive knowledge of emerging aviation technologies and the UK’s complex regulatory landscape, Richard Ryan provides pragmatic guidance that empowers clients to navigate compliance challenges, secure operational approvals, and seize opportunities in the rapidly evolving drone sector. Known for translating intricate legal frameworks into actionable strategies, Richard Ryan is dedicated to shaping the policies that will define the future of unmanned aviation in the UK.

The post Soaring Ahead or Stuck in the Past? What the CAP 3040 Second Edition Means for Your Drone Operations appeared first on Blakistons.