Drone Law | UK SORA | CAA Regulation | AI Governance

Summary: CAA Decision No. 60 marks a significant development in the regulation of Specific category drone operations in the UK. Coming into force on 1 October 2026, it updates the UK SORA framework and introduces clearer expectations around compliance evidence, ground-risk mitigation, containment, kinetic energy analysis and evidence retention. For operators, the message is clear: compliance is no longer just a narrative safety case. It must be evidenced, retained and auditable.

1. Why Decision No. 60 Matters

The UK’s lower airspace is becoming increasingly complex. Beyond Visual Line of Sight operations, drone delivery, infrastructure inspection, emergency services use, autonomous routing and higher-risk commercial UAS activity all require a more mature regulatory framework.

CAA Decision No. 60 updates the Acceptable Means of Compliance and Guidance Material for UK Regulation (EU) 2019/947. In practical terms, it strengthens the UK Specific Operation Risk Assessment, or UK SORA, for operators seeking authorisation in the Specific category.

The legal significance is that UK SORA is becoming a structured assurance methodology. Operators must not merely state that an operation is safe. They must demonstrate that the aircraft, procedures, people, operational volume, ground environment, airspace risks, mitigations and emergency arrangements meet the required level of safety.

2. UK SORA Is Not a Box-Ticking Exercise

UK SORA exists to support the operational risk assessment required for Specific category operations. It considers both ground risk and air risk, then applies mitigations and operational safety objectives according to the Specific Assurance and Integrity Level, or SAIL.

The updated framework is particularly important because it clarifies how operators must gather, present and retain compliance evidence. This is a move away from generalised operational assertions and towards aviation-grade documentation.

3. The Three Compliance Pathways

Decision No. 60 identifies three broad routes for demonstrating compliance.

Operators must also retain compliance evidence for the duration of the operational authorisation and for three years after operations under that authorisation cease. That evidence may become critical in a CAA audit, incident investigation, insurance dispute or civil claim.

4. Ground Risk: What Happens If the Drone Falls?

Ground risk is central to UK SORA. The law is concerned not only with whether the drone can fly, but with what happens if it fails. Decision No. 60 provides more detailed guidance on how operators may reduce ground risk.

5. Kinetic Energy and Penetration Risk

Decision No. 60 gives particular importance to kinetic energy. This matters because it converts safety claims into measurable injury-risk analysis.

Operators should not rely on generic manufacturer statements. They need platform-specific evidence: mass, velocity, terminal impact behaviour, parachute performance, battery fire risk and representative structural analysis.

6. Containment and Fly-Away Risk

Containment is a central pillar of the updated UK SORA framework. It asks whether the unmanned aircraft can be kept within its operational volume and ground risk buffer, even after failure or loss of control.

For lower-risk operations, containment may be assessed qualitatively through design appraisal and procedural evidence. For higher-risk operations, the CAA may expect quantitative probability targets, such as demonstrating that the probability of exiting the relevant volume or buffer is below specified thresholds per flight hour.

Containment evidence may include geo-caging, tethering, independent flight termination systems, lost-link logic, command-and-control resilience, navigation integrity, power-system independence and emergency procedures.

7. EU AI Act and UK AI Standards

Decision No. 60 is not an AI regulation. However, many modern drone operations increasingly rely on AI-enabled functions, including detect-and-avoid, automated route planning, computer vision, landing assistance, ground-person detection, predictive maintenance and autonomous contingency management.

The EU AI Act is relevant as a benchmark for risk management, technical documentation, record-keeping, transparency, human oversight, robustness and cybersecurity. The UK does not currently have a single equivalent UK AI Act. Instead, it follows a sector-led, principles-based model based on safety, security and robustness; transparency and explainability; fairness; accountability and governance; and contestability and redress.

8. Data Protection and Surveillance Risk

Many Specific category operations involve cameras, thermal imaging, mapping payloads or AI-enabled object recognition. UK SORA primarily addresses safety, but operators must also consider privacy, data protection and surveillance risk.

If cameras or AI systems detect uninvolved persons, personal data may be captured, stored or analysed. Operators may need a data protection impact assessment, retention limits, access controls, privacy notices and clear rules on secondary use.

9. What Operators Should Do Before 1 October 2026

Operators should review their safety cases and evidence packs now. In particular, they should check:

• Aircraft mass, speed, kinetic energy and terminal velocity;
• Ground-risk assumptions and population-density evidence;
• Sheltering, operational restriction and observation claims;
• Parachute, flight termination and impact mitigation evidence;
• Containment evidence, including geo-caging and lost-link logic;
• AI-enabled functions, including detect-and-avoid and automated decision-support tools;
• Evidence retention systems;
• Supplier contracts for access to technical data.

10. Bottom Line

CAA Decision No. 60 marks a shift from descriptive drone safety cases to structured assurance. Operators must now be able to prove their safety claims through coherent, retained and auditable evidence.

The most important development is the convergence between aviation safety and AI governance. UK SORA asks whether the drone operation is safe. The EU AI Act and UK AI principles ask whether automated systems are risk-managed, documented, robust, explainable, secure and subject to human oversight. For modern drone operations, those are increasingly the same question.

Compliance is not what the operator says it does. Compliance is what the operator can prove.

About the Author

Richard Ryan is a barrister, Chartered Arbitrator and specialist in drone law, aviation regulation and artificial intelligence. He advises operators, manufacturers and public bodies on UK CAA regulation, UK SORA, BVLOS operations, AI governance and commercial drone operations. He is currently undertaking a PhD at Cranfield University researching the legal framework for autonomous aviation and future airspace integration.

This article is general legal commentary and does not constitute legal advice.

The post Navigating UK SORA: A Drone Lawyer’s Guide to CAA Decision No. 60 appeared first on Blakistons.

Drone Law | Counter-UAS | Defence AI | One-Way Effectors

Summary: The Royal Navy’s launch of the British-built Nyan One-Way Effector from XV Patrick Blackett is more than a drone trial. It is a legal and operational marker in the UK’s transition towards a Hybrid Navy, raising issues of targeting law, weapons review, military airworthiness, counter-UAS defence, export controls and AI governance.

1. Why the Nyan Trial Matters

The Royal Navy and British Army have tested the Nyan One-Way Effector, designed and built by BAE Systems’ Callen-Lenz, for both maritime and land operations. The system has a 2.9-metre wingspan and is designed to provide a precision strike capability. It has now been launched from the Royal Navy’s experimentation ship XV Patrick Blackett as part of Project Vantage, the programme focused on accelerating maritime one-way effector capability.

Legally, the phrase “one-way effector” should not distract from the underlying classification problem. Nyan may simultaneously be an aircraft, a military UAS, a weapon system, a munition, a software-enabled targeting platform and an export-controlled defence article. Each classification carries its own compliance burden.

2. From Drone Novelty to Combat Mass

The trial reflects the UK’s move towards crewed-uncrewed teaming and the Royal Navy’s Hybrid Navy concept. One-way effectors are intended to provide affordable combat mass, allowing crewed platforms to extend reach, increase tempo and complicate an adversary’s defensive picture.

However, affordability does not dilute legal responsibility. The cheaper and more numerous the weapon, the more frequently it may be used. The more frequently it is used, the more important lawful targeting architecture becomes.

3. Autonomy: The Legal Question Is What the Machine Decides

The key legal question is not whether Nyan is a drone, but what functions are automated or autonomous. Autonomy in navigation is not the same as autonomy in target selection. A system may fly itself to a pre-programmed target without being authorised to decide who or what is attacked.

Commanders and lawyers should ask:

• Does the system merely navigate to a human-selected target?
• Does it detect, classify, prioritise or select targets?
• Can it be retasked, recalled, aborted or terminated after launch?
• What happens if GPS is jammed, spoofed or degraded?
• What mission data and operator decisions are recorded?

Those questions determine whether the system can be used consistently with distinction, proportionality, precautions in attack and applicable rules of engagement.

4. Article 36 Weapons Review

A one-way effector requires a disciplined weapons review. That review should not be limited to the airframe or warhead. It should include the launcher, mission-planning software, navigation system, datalinks, communications architecture, abort logic, cyber resilience, payload effects and integration with intelligence or targeting systems.

The review must also examine foreseeable use cases. Launching from land against a fixed target is materially different from launching from a moving naval platform against a maritime or coastal target. The latter introduces neutral shipping, civilian infrastructure, allied aircraft, electromagnetic interference, airspace deconfliction and more complex proportionality assessments.

5. EU AI Act and UK AI Standards

The EU AI Act generally excludes AI systems used exclusively for military, defence or national-security purposes. However, its high-risk AI standards remain useful benchmarks for dual-use suppliers, defence contractors, procurement assurance and civilian spin-outs.

The UK does not currently have a single equivalent “UK AI Act”. Instead, the UK uses a sector-led, principles-based model. In defence, this is supplemented by Ministry of Defence AI principles, including human-centricity, responsibility, understanding, bias and harm mitigation, and reliability.

6. Maritime Launch Changes the Legal Burden

Launching from a ship is materially different from launching from a land range. The platform is moving. Weather and sea state affect launch reliability. The electromagnetic environment may be contested. The operating area may include neutral vessels, civil aircraft, allied aircraft, helicopters, missiles and other uncrewed systems.

The legal architecture must therefore include target validation, positive identification, proportionality analysis, precautions in attack, air and maritime deconfliction, and auditability. The question is not simply whether Nyan can be launched from a ship. The question is whether the Navy can generate a repeatable, auditable and legally defensible kill chain from a ship.

7. The Counter-UAS Mirror

Every one-way effector creates a corresponding defence problem. If the UK can launch low-cost precision effectors from ships, adversaries and proxies can attempt similar effects. Counter-UAS law is therefore inseparable from OWE deployment.

Defending ships, ports, airbases and critical infrastructure requires layered capabilities: detection, identification, tracking, electronic warfare, cyber effects, kinetic interceptors, directed energy, decoys, hardening, dispersal and forensic recovery.

In armed conflict, commanders will operate under the law of armed conflict and rules of engagement. In peacetime or grey-zone conditions, counter-drone operations may engage aviation law, communications law, property rights, criminal law, public safety, port security and military aid to civil authorities.

8. Export Controls and Procurement Risk

Sovereign manufacture does not remove export-control obligations. Airframes, propulsion systems, launchers, datalinks, payloads, source code, mission-planning tools, technical assistance and software updates may all require careful classification and licensing analysis.

Rapid procurement also creates legal debt if safety cases, software changes, data rights, AI assurance, cyber resilience and operator training are not properly documented. The solution is not to slow innovation, but to embed lawyers, engineers, safety specialists, AI assurance teams and operators into the experimentation cycle from the start.

9. Bottom Line

The Nyan sea launch is a significant step towards a British Hybrid Navy. Its real importance lies in the legal system-of-systems problem it exposes. A one-way effector is not merely a drone with a warhead. It moves through air law, weapons law, targeting law, AI governance, export-control law, safety regulation, procurement governance and counter-UAS doctrine.

The future fleet will not be judged only by how many drones it can launch. It will be judged by whether it can launch them lawfully, safely, proportionately, responsibly and at scale.

About the Author

Richard Ryan is a barrister, Chartered Arbitrator and specialist in drone law, counter-UAS, defence procurement and AI governance. He advises government, defence and technology organisations on autonomous systems, military aviation, export controls, commercial contracts and regulatory compliance. Richard is also undertaking a PhD at Cranfield University researching the future legal framework for BVLOS operations, autonomous aviation and Unmanned Traffic Management.

This article is general legal commentary and does not constitute legal advice.

The post Nyan at Sea: One-Way Effectors, Counter-UAS Law and Defence AI Governance appeared first on Blakistons.

By Richard Ryan, Blakiston’s Chambers

The recent Air Accident Investigation Unit (AAIU) report on the GEN 3.8 drone accident in Ireland gives us a significant case study on drone operations in urban areas. The incident highlights important safety and legal concerns that apply to unmanned aircraft systems (UAS), which are highly relevant to both Irish and UK drone regulations. This blog explores these issues in the context of the UK’s Aviation Act 1982 and the Air Navigation Order 2016 (ANO) and contrasts them with the legal framework in Ireland.

Overview of the Incident

In July 2022, a GEN 3.8 drone, conducting an urban delivery in Balbriggan, Ireland, experienced a mechanical failure when one of its propeller blades detached. This failure triggered an emergency descent and parachute deployment, causing a minor injury to a bystander. While the consequences of the accident were relatively minor, it underlines the importance of strong legal frameworks for safe drone operations, especially in populated areas.

The UK Legal Framework for Drone Operations

In the UK, drone operations are governed by several key laws and regulations:

1. Aviation Act 1982

The Aviation Act provides the overall legal framework for civil aviation in the UK. It gives the Civil Aviation Authority (CAA) the power to regulate aviation safety and enforce compliance.

The CAA can also develop specific regulations for unmanned aircraft to address the risks and challenges that drone technology presents.

2. Air Navigation Order 2016 (ANO)

The ANO is the primary legislation for regulating UAS operations. It categorizes drones into Open, Specific, and Certified categories, depending on the risk involved in the operation.

Article 241 of the ANO prohibits endangering people or property with a drone, requiring drones to maintain safe distances from people, buildings, and crowded areas. This is especially relevant for urban delivery flights.

3. Requirement for Operational Authorisation

For commercial operations, like the GEN 3.8 urban deliveries, an operational authorisation under the Specific category is required. This involves conducting a risk assessment and putting safety measures in place, such as emergency systems and proper documentation.

UK operators must prove to the CAA that they have identified and mitigated risks, which includes being prepared for mechanical issues like those seen in the GEN 3.8 case.

Comparison with Ireland’s Legal Framework

Ireland’s drone regulations are similar to those of the UK but have some key differences:

1. Regulatory Basis

In Ireland, drone operations are regulated by the Irish Aviation Authority (IAA) under the EU’s Implementing Regulation (EU) 2019/947, which applies to all EU member states. Like the UK’s CAA, the IAA oversees aviation safety and authorises specific operations.

Since the UK left the EU, it has adapted its own regulations to keep pace with the rapid evolution of drone technology.

2. LUC Certificates and Specific Category Requirements

Similar to the UK’s Specific category authorisation, Ireland issues Light UAS Operator Certificates (LUC) to operators meeting specific standards. This allows them to conduct higher-risk operations under IAA oversight.

The GEN 3.8 drone operated under Ireland’s Specific category. However, there were delays in reporting the incident, showing the need for better communication between the operator, IAA, and the AAIU.

3. Accident Reporting Requirements

In Ireland, regulations require that any drone accident resulting in injury or significant damage must be reported to the AAIU. The GEN 3.8 incident was only reported after it appeared on social media, suggesting delays in the reporting process.

In the UK, the ANO 2016 requires that accidents are reported to the CAA immediately, with strict penalties for non-compliance. This ensures a timely investigation and response, which is essential for public safety.

Key Takeaways for UK Drone Operators

The GEN 3.8 incident highlights several important lessons for drone operators in the UK:

1. Strict Compliance with Manufacturer Guidelines

The GEN 3.8 incident showed that its propellers were not designed for the way they were used, which led to the failure. UK law requires operators to maintain drones as per the manufacturer’s guidelines to avoid similar problems.

2. Robust Reporting Mechanisms

The delay in reporting the GEN 3.8 incident shows why prompt reporting is essential. In the UK, operators must report any accidents involving injuries or property damage to the CAA without delay. This helps ensure quick investigation and corrective action.

3. Operational Risk Assessment and Safety Measures

UK operators must conduct a risk assessment before undertaking operations. The GEN 3.8’s emergency parachute deployment is a good example of how an effective Flight Termination System (FTS) can help mitigate risks.

4. Public Liability and Insurance Requirements

UK law requires commercial operators to carry public liability insurance to cover injuries or property damage. The GEN 3.8 accident is a reminder of why adequate insurance is crucial for managing liability in unforeseen incidents.

Conclusion: Strengthening Drone Safety Regulations

The GEN 3.8 incident serves as a valuable lesson for drone operators and regulators in the UK and Ireland. It emphasises the importance of following safety standards, having efficient reporting systems, and conducting thorough risk assessments. In the UK, the Aviation Act 1982 and ANO 2016 provide a solid foundation for managing the risks of urban drone operations. As drone technology evolves and urban deliveries become more common, the UK must keep improving its regulations to ensure public safety.

For operators, compliance is only the beginning. By understanding drone regulations and putting the best safety practices in place, they can ensure their operations are both safe and legally sound.

Richard Ryan is an experienced drone lawyer specialising in unmanned aircraft systems (UAS) and aviation law. He provides expert legal guidance on regulatory compliance, licensing, and operational issues to clients navigating the complexities of drone technology.

Disclaimer: This blog is for informational purposes only and does not constitute legal advice. For legal counsel regarding specific situations, please consult a qualified drone lawyer.

The post Legal Issues in Drone Operations: A UK Perspective on Safety, Compliance, and Lessons from the GEN 3.8 Incident in Ireland appeared first on Blakistons.

Analysis and Recommendations on CAP 3040 | First Edition

1. Executive Summary

The CAA’s policy concept aims to enable Beyond Visual Line of Sight (BVLOS) operations for Unmanned Aircraft Systems (UAS) within an Atypical Air Environment (AAE). While the initiative is commendable for promoting innovation, the policy, as currently drafted, presents several challenges:
– Ambiguity in Definitions: The lack of precise definitions for key terms like AAE may lead to inconsistent application and legal uncertainty.
– Operational Burdens: Requirements such as pre-flight notifications, electronic conspicuity, and high-intensity lighting may impose significant burdens on operators, especially small and medium enterprises (SMEs).
– Potential Stifling of Innovation: The cumulative effect of stringent requirements may deter new entrants and hinder technological advancement.
– Legal Efficacy: For the policy to have legal effect, certain elements need to be codified into law or regulations.

2. Issues for Drone Operators

a. Ambiguity in Definition of Atypical Air Environment (AAE)
– Lack of Clarity: The document does not provide a clear, legal definition of an AAE, leading to potential inconsistencies in interpretation.
– Examples vs. Definitions: Providing examples (e.g., within 100ft of a building) without a firm definition creates uncertainty for operators attempting to comply.

b. Operational Requirements
– Pre-Tactical Flight Route Notification:
– Administrative Burden: Requiring Notices to Airmen (NOTAMs) for each operation may be impractical for frequent or short-duration flights.
– Coordination Complexity: Mandatory coordination with multiple stakeholders (e.g., military, emergency services) increases complexity.

– Electronic Conspicuity (EC):
– Equipment Availability: ADS-B equipment operating on 978 MHz UAT is not widely used in the UK, making compliance challenging.
– Licensing Issues: Reliance on OFCOM’s Innovation and Trial licensing procedures adds uncertainty and administrative hurdles and no doubt costs.

– High-Intensity Anti-Collision Lighting:
– Technical Challenges: The requirement may not be feasible for small UAS due to weight and power constraints.
– Cost Implications: Additional equipment increases operational costs, affecting profitability and competitiveness.

– Containment Solutions:
– Technical Barriers: Implementing robust geo-caging or equivalent systems may be technologically and financially prohibitive for some operators.

c. Application Process Limitations
– Single Site Per Submission:
– Operational Inefficiency: Limiting applications to one site may slow down deployment and increase administrative overhead.

d. Evolving Policy and Regulatory Uncertainty
– Continuous Review:
– Investment Risk: Operators may be hesitant to invest in compliance if policies are subject to change.
– Lack of Legal Certainty:
– Enforceability Issues: As a policy concept rather than law, operators may face legal ambiguities in enforcement and compliance.

3. Potential Impacts on the Drone Industry

a. Stifling Innovation and Market Entry
– Barrier to Entry: Stringent requirements may discourage startups and SMEs from entering the market.
– Reduced Experimentation: High compliance costs limit the ability to test new technologies and operational models.

b. Competitive Disadvantages
– Favoring Large Operators: Well-resourced companies are better equipped to meet the requirements, potentially leading to market monopolisation.

c. International Disparities
– Inconsistency with Global Standards: Reliance on U.S. standards (e.g., RTCA DO-282C) may create conflicts with other international regulations, affecting operators engaged in cross-border activities.

4. Recommendations for Amendments

a. Clarify Definitions and Parameters
– Precise Definition of AAE:
– Legal Clarity: Provide a clear, legally binding definition of AAE to reduce ambiguity.
– Criteria Establishment: Set specific parameters (e.g., exact distances, types of infrastructure) to qualify as an AAE.

b. Proportionality in Operational Requirements
– Risk-Based Approach:
– Scaled Requirements: Tailor operational requirements based on the risk profile of the UAS operation (e.g., size, weight, location).
– Exemptions for Low-Risk Operations:
– Simplify Compliance: Allow for exemptions or reduced requirements for operations posing minimal risk.

c. Streamline Application Process
– Multiple Sites Per Application:
– Administrative Efficiency: Permit applications covering multiple sites where appropriate, reducing bureaucratic hurdles.
– Standardised Procedures:
– Transparency: Develop clear guidelines and timelines for application processing.

d. Address Electronic Conspicuity Challenges
– Equipment Standardisation:
– Market Availability: Collaborate with manufacturers to ensure ADS-B equipment is accessible and affordable.
– Licensing Simplification:
– Permanent Licensing Arrangements: Work with OFCOM to establish permanent, streamlined licensing procedures for 978 MHz UAT.

e. Provide Flexibility in Mitigation Measures
– Alternative Solutions:
– Innovation Encouragement: Allow operators to propose alternative methods to achieve safety outcomes.
– Technology Neutrality:
– Avoid Prescriptive Requirements: Focus on performance outcomes rather than prescribing specific technologies.

f. Enhance Stakeholder Engagement
– Consultation Processes:
– Inclusive Policy Development: Engage with a broad range of stakeholders, including SMEs and industry groups.
– Support and Guidance:
– Educational Resources: Provide operators with clear guidance and training materials to aid compliance.

g. Align with UK Standards
– Develop Domestic Standards:
– Consistency: Establish UK-specific standards for technical requirements like anti-collision lighting.
– International Harmonisation:
– Global Compatibility: Ensure new standards are compatible with international regulations to facilitate cross-border operations.

5. Legal Requirements for Effective Implementation

a. Codification into Law
– Regulatory Framework:
– Statutory Instruments: Incorporate key policy elements into UK aviation law to provide legal enforceability.
– Amendments to Existing Regulations:
– Regulation (EU) 2019/947 Adaptation: Modify existing regulations to accommodate AAE operations and associated requirements.

b. Legal Certainty and Enforcement
– Clear Obligations:
– Operator Compliance: Define legal obligations clearly to ensure operators understand requirements.
– Enforcement Mechanisms:
– Penalties and Sanctions: Establish clear enforcement protocols for non-compliance to uphold safety standards.

6. Additional Relevant Points for the CAA

a. Balancing Safety with Innovation
– Proportional Regulation:
– Innovation Friendly: Ensure that safety regulations do not unnecessarily hinder technological advancement.
– Risk Management:
– Data-Driven Policies: Use empirical data to inform policy adjustments, maintaining safety without over-regulation.

b. Data Privacy and Confidentiality
– Data Handling Policies:
– Privacy Protection: Develop clear guidelines on data usage, storage, and sharing to protect operators’ proprietary information.

c. Future-Proofing Regulations
– Adaptive Frameworks:
– Technological Evolution: Design policies flexible enough to accommodate future technological developments.
– Regular Reviews:
– Stakeholder Feedback: Implement mechanisms for ongoing consultation and policy refinement.

d. International Cooperation
– Global Best Practices:
– Information Sharing: Engage with international aviation authorities to align policies and share lessons learned.
– Cross-Border Operations:
– Harmonized Regulations: Facilitate international drone operations by harmonizing standards where possible.

7. Conclusion

The CAA’s initiative to introduce the concept of Atypical Air Environment for BVLOS operations is a progressive step towards integrating UAS into the national airspace. However, without careful consideration and amendments, the policy may inadvertently stifle innovation and impose undue burdens on operators.
By clarifying definitions, scaling operational requirements appropriately, streamlining processes, and codifying necessary elements into law, the CAA can foster a regulatory environment that promotes both safety and innovation. Collaboration with industry stakeholders, legal experts, and technology providers will be crucial in refining the policy to achieve its intended objectives.

Recommendations Summary:

1. Clarify Definitions: Provide precise legal definitions for AAE and other key terms.
2. Proportional Requirements: Scale operational requirements based on risk assessments.
3. Streamline Processes: Allow multiple sites per application and simplify procedures.
4. Address EC Challenges: Ensure equipment availability and simplify licensing.
5. Flexibility in Mitigations: Permit alternative safety solutions and avoid prescriptive technologies.
6. Stakeholder Engagement: Enhance consultation and provide guidance resources.
7. Align Standards: Develop UK-specific technical standards and harmonise internationally.
8. Legal Codification: Incorporate essential policy elements into law for enforceability.
9. Balance Safety and Innovation: Maintain safety without hindering technological progress.
10. Protect Data Privacy: Establish clear data handling and confidentiality policies.
By implementing these recommendations, the CAA can create a robust regulatory framework that ensures safety while encouraging the growth and innovation of the UK’s drone industry.

8. Comparison with EASA PDRA03 and Lessons for the UK
Comparing the CAA’s position with the European Union Aviation Safety Agency’s (EASA) Pre-Defined Risk Assessment number 03 (PDRA03) reveals both opportunities and challenges for UK drone regulation. EASA’s PDRA03 offers a structured, risk-based framework that allows operators to self-declare compliance with specific conditions, reducing administrative burdens and accelerating operational approvals. This approach supports drone operators by providing clear guidelines while fostering innovation through flexibility in operations such as autonomous flights, multi-UAV control, and operations beyond visual line of sight (BVLOS) under certain conditions. In contrast, the CAA’s policy concept imposes more prescriptive requirements, such as mandatory NOTAM submissions for each operation and specific technical equipment like ADS-B transceivers, which may be unnecessary and bureaucratic for certain low-risk operations. The UK drone industry could benefit from adopting elements of the EASA PDRA03 by implementing a more proportionate, risk-based regulatory framework that emphasises operator declarations and standardised procedures. This would streamline the approval process, reduce administrative overheads, and encourage innovation while maintaining safety. Learning from the EU’s experience, the CAA can enhance its policies to better support the growth of the UK drone industry by embracing flexibility, reducing unnecessary bureaucratic requirements, and aligning more closely with international best practices.

Richard Ryan is an experienced drone lawyer specialising in unmanned aircraft systems (UAS) and aviation law. He provides expert legal guidance on regulatory compliance, licensing, and operational issues to clients navigating the complexities of drone technology.
Disclaimer: This blog is for informational purposes only and does not constitute legal advice. For legal counsel regarding specific situations, please consult a qualified drone lawyer.

The post Analysis and Recommendations on CAP 3040 | First Edition appeared first on Blakistons.

Our recent research with over 350 local authorities confirmed that councils do not have appropriate policies in place for drones and where there is a policy in place, it is not consistent with CAA regulations. We did not find a single policy that was accurate, up to date or enforceable.

Drones are here to stay, and the number of drones and unmanned aircraft is forecast to grow rapidly for both recreational use and commercial operations. Local authorities have a significant role to play in promoting the safe use of drones and creating an environment that supports the economic growth of the sector. We also believe that local authorities could have a very interesting role managing the governance of lower level airspace.

Airspace

Airspace is a national asset that needs to be shared in the most effective and efficient way to meet the overall needs of the UK. The biggest challenge to the future of unmanned aviation is public perception. The battleground here will be about airspace governance – the policies and rules that need to be put in place such that the benefits of unmanned aviation are seen to outweigh the perceived risks and nuisance.

The CAA is the regulator for the UK airspace structure and is the only organisation that can authorise changes to the structure of airspace. This works well for traditional aviation and there is an airspace change process that enables airports and our national air traffic control provider to request changes to the airspace structure. This change process is well defined and involves public consultation with local communities. It works effectively for governing higher-level airspace and airspace around airports.

However, lower level airspace that will be occupied by delivery drones and urban air mobility services is a bit like the Wild West. As long as the remote pilot complies with the CAA regulations, then unmanned aircraft can fly wherever they like. There are further restrictions that relate to Temporary Danger Areas (TDA’s) whereby drones can fly Beyond Visual Line of Sight (BVLOS), but this is not a viable option for scaling to meet the future volume of traffic.

There is a bigger picture that needs to be addressed around the governance of lower level airspace. Who decides that it is acceptable for unmanned aircraft to fly over the local parish graveyard? Who determines that 60 flights an hour at night over my house is acceptable when the flight could equally fly over a parallel route? PwC’s “Building Trust in Drones” research revealed that only 31% of the UK public feel positive towards drone technology. The biggest concern was the improper use of drones and 70% of respondents wanted routes to be registered with the CAA.

The CAA will not have the capacity nor the local knowledge to deal with this micro-managed governance of lower level airspace. We believe there will need to be a framework in place for the CAA to delegate governance of lower level airspace to a local body that can engage with the public and address their concerns, which may be varied and many; especially if we take the USA as an example. Local authorities would be well positioned to play that role.

Legislation

Drone legislation is complex with regular changes such as the mandatory drone registration scheme introduced at the end of 2019 (whereby only 60,000 registered users were recorded Dec 2019) and there will be widespread changes with the introduction of complex European Union Aviation Safety Agency (EASA) regulations in June 2020. A local authority may find it substantially more cost effective to subscribe to a policy service rather than develop and maintain one in-house. Local authorities have a significant role to play in promoting the safe use of drones, creating an environment that supports the economic growth of the sector and also facilitating the police in enforcement activities.

The safety regulations are mainly contained in Articles 94 and 95 of the Air Navigation Order (ANO) are fundamental and are referenced in CAP 393. These are safety regulations and do not encompass matters relating to privacy and security.  The ANO articles set limits on where unmanned aircraft may fly and whether they can be used for commercial purposes (commercial operations) and do not necessarily include hobbyists or model flying clubs. The key ANO articles of relevance are:

• Article 241 – endangering safety of any person or property
• Article 94 – small unmanned aircraft: requirements
• Article 94A – small unmanned aircraft; permissions for certain flights
• Article 94B – small unmanned aircraft: Interpretation of expressions used in the definition of “flight restriction zone”
• Article 95 – small unmanned surveillance aircraft

There is inherent confusion within the various regulations such as Schedule 2 of the ANO defines a Small Unmanned Aircraft as follows:

“any unmanned aircraft, other than a balloon or a kite, having a mass of not more than 20kg without its fuel but including any articles or equipment installed in or attached to the aircraft at the commencement of its flight;”

Although not specified in the ANO, the CAA adopts the following definitions:

‘unmanned aircraft’ means any aircraft operating or designed to operate autonomously or to be piloted remotely without a pilot on board;

‘aircraft’ means any machine that can derive support in the atmosphere from the reactions of the air other than reactions of the air against the earth’s surface;

Policy considerations

Whilst there are significant benefits from the use of drones, given the breadth of airspace, air traffic volume and lower flying altitudes across large geographies of a local authority, the potential risks need to be understood and mitigated.

The future of unmanned aviation is evolving rapidly and local authorities should ensure that they have a lead officer responsible for implementing and maintaining appropriate policy. The policy should initially be focused on drones and include:

• National context – up to date with the latest legislation and regulation as changes are announced;
• Local context – relevant local airspace restrictions and permissions required to fly in these areas;
• Council owned land – restrictions and opportunities for recreational flying from council owned property and land;
• Commercial use of drones – facilitating the growth and economic benefits of commercial drone operations;
• Exceptions – management of exceptions such as emergency services and flying clubs;
• Suspicious drone activity – Reporting suspicious activity or drone usage that presents a threat to the public;
• Council strategy – how the local authority intends to realise benefits from drone technology.

We advise a modern local policy that sets out a ?‘total airspace approach’ and includes proportionate local measures outside expanded flight restriction zones to ensure resident and wider public safety. A council must understand that there will be a need for special exemptions and/or permissions which, it may grant in exceptional circumstances. Where these will apply, they will primarily relate to public safety activities and accredited organisations.

Potential risks for local authorities

Our research highlights there is a general lack of understanding of the regulations and this is reflected in the lack of accurate and up to date policy across the local government sector. There are a number of very active social media groups within the drone community that share inconsistencies and misinformation provided by local authorities and organisations such as the National Trust and English Heritage. We believe it is only a matter of time before there is a test case challenging a local authority. Such a challenge would present the following risks to the local authority:

1. Significant legal costs in defending a challenge by judicial review. Legal consequences of a breach of the ultra vires rule are significant and there is much case law on this. A person who is aggrieved by a local authority’s decision may apply to the court for judicial review of the decision under Part 54 of the Civil Procedural Rules. The court may grant a successful applicant one of the following remedies against a local authority:

(a) An order quashing an ultra vires decision;

(b) An order (a prohibiting order, mandatory order or injunction) stopping an ultra vires action that is about to take place;

(c) An order compelling the local authority to perform a public duty (a mandatory order or injunction);

(d) An order making the legal position clear (a declaration).

2. Risk of other remedies available in ordinary private law High Court proceedings, namely injunctions, declarations and damages;

3. Significant and substantial negative PR.

Conclusion 

It is abundantly clear that local authorities have a great opportunity to take advantage of an evolving legal position and also be much better informed.  Councils can provide a much safer environment for people that enjoy open spaces and for people that enjoy flying drones.  The legislative burden is increasing at an alarming rate, which means that local authorities must be able to resource accordingly.  This can be expensive and time consuming.  By using a conjoined policy document that is up to date and consistent with changing regulations, local authorities will substantially mitigate the risks of legal challenge.

Richard Ryan is a barrister and Chris Gee is MD Agilio and Trustee for Safer Drones.

Richard and Chris are offering all local authorities a free review of their existing drone policy or an initial free consultation to answer questions relating to the development of a new policy. Please contact chris.gee@agilio.co.uk or richard.ryan@blakistons.co.uk.

Richard is a practicing barrister and also a commercial UAV pilot (PfCO). Richard worked for the CAA UAS Unit and was responsible for all complex drone permissions in the UK from land up to space and inspected and audited drone pilots and National Qualified Entities, the first person in the UK to do so. Richard provides cogent advice on drone law to many different stakeholders in the UK and abroad.

Chris is a commercial UAV pilot (PfCO), programme manager and management consultant with 25 years’ experience helping organisations innovate through new technology including drones. He has worked extensively in local government and also has manned aviation experience having previously held a pilot’s licence.

The post Will local authorities become airspace planners? appeared first on Blakistons.

Given that many people last year suffered a phishing attack from the CAA, you may have legitimate concerns as to the risk of your personal data. Not only will your concerns relate to your personal information, but also your operator ID and/or your flyer ID being compromised by a nefarious operator of drones. You may also have noticed that at the time, your data was not independently verified, but it would appear that Experian was in fact used.

Once you completed your registration, you would have been forced to accept the CAA terms and conditions that relate to your personal data. You would not have been able to amend these terms and conditions as this would have prevented you from flying because you would not have had the appropriate registration.

The CAA has a privacy policy and they are the data controller. You would have entered your full name, address, date of birth and an email address in order to register. The Government Digital Service or GDS as it is known promises not to transfer your data outside of the European Economic Area, sell or rent your data to 3^rd parties or share your data with third parties for marketing purposes. Your data is now also processed in accordance with GDS’s privacy notice, which means the GDS may collect more information:

• “questions, queries or feedback you leave, including your email address if you contact GOV.UK
• your email address and subscription preferences when you sign up to our email alerts
• how you use our emails – for example whether you open them and which links you click on
• your Internet Protocol (IP) address, and details of which version of web browser you used
• information on how you use the site, using cookies and page tagging techniques

We use Google Analytics software to collect information about how you use GOV.UK. This includes IP addresses.”

So not only is your data passed onto GDS and they seek to get more information, but did you know that your information is also passed onto a customer support provider which is a 3rd party is called “Teleperformance?” This company has offices all over the globe and works in many different sectors. How sure are you that this company will not share your data?

Did you also know that you agreed to limit the CAA’s liability in the event of a claim? If you run a drone business and your information has been compromised, for example, whereby all your drones have been seized because there has been some confusion over the operator ID, the CAA have excluded the following losses:

• “losses not foreseeable to you and us when these terms were formed
• losses not caused by any breach on our part
• business losses
• losses to non-consumers”

Additionally, the CAA terms also say that they will have no liability for any breach of the privacy terms as a consequence of a breakdown of systems or network access. Does that offer you a sufficient level of comfort after the phishing attack in 2019?

In summary, you have agreed to the privacy notice of the CAA, the privacy notice of the GDS, personal information being analysed by Google analytics, and personal information being utilised and stored by a global company called Teleperformance with limited ability to make a claim in the event you have suffered loss and damage.

If you’re not happy with this you are free to contact the government privacy team: gds-privacy-office@digital.cabinet-office.gov.uk or the Information Commissioner, who is an independent regulator: casework@ico.org.uk

If you would like to discuss this or any other drone law issues, please contact us.

The post Drone Registration – How safe is your personal registration data? appeared first on Blakistons.