UAV Regulation: The Concepts Behind Every Rulebook

This article explains regulatory concepts, not the requirements of any particular country. Rules change frequently and differ by jurisdiction. Always work from the current publications of the civil aviation authority with jurisdiction over your operation, and confirm before you fly.

Why the concepts transfer

Most modern UAV frameworks descend from the same body of work — ICAO guidance and the JARUS recommendations — so although thresholds differ, the structure is remarkably consistent. Learn the structure once and a new rulebook becomes a matter of looking up numbers rather than learning a system.

Operational categories

Frameworks generally sort operations by risk rather than by aircraft type:

Open, or low risk. Low weight, within visual line of sight, below a set height, away from uninvolved people and controlled airspace. Minimal authorisation — often registration and a basic competency test.

Specific, or medium risk. Anything exceeding those limits: beyond visual line of sight, over people, at greater height, or with heavier aircraft. Requires an operational authorisation supported by a risk assessment.

Certified, or high risk. Operations comparable in risk to manned aviation — carriage of passengers, or large aircraft over dense population. Full aircraft certification and licensed crew.

Risk assessment

For the middle category, the dominant methodology is SORA — Specific Operations Risk Assessment. It reasons in two dimensions:

• Ground risk — who is underneath, and what happens if the aircraft arrives uncontrolled
• Air risk — what else is in that airspace and how likely an encounter is

Each is reduced by mitigations. Ground risk falls by operating over sparsely populated areas, restricting access below the flight path, or fitting a parachute. Air risk falls through airspace reservation, observers, or detect-and-avoid capability. The result is a robustness level the operator must demonstrate.

The valuable habit here is thinking in terms of what harm is possible and what reduces it, which is sound operational practice regardless of what the paperwork requires.

Airspace

Classification determines who controls the airspace and what is required to enter it. Near aerodromes, control zones extend from the surface upward and entry requires coordination with air traffic services.

Beyond registration and licensing, airspace is the constraint most likely to invalidate a plan, so check it before promising a client a date. Many countries publish UAV-specific airspace maps, and restrictions around infrastructure, borders and government facilities frequently do not appear on standard aeronautical charts.

Constants across jurisdictions

Whatever the rulebook, expect to encounter:

• Registration of the operator, the aircraft, or both, above a weight threshold
• Remote pilot competency, ranging from an online test to a formal licence
• Insurance, often mandatory for commercial operations
• Visual line of sight as the default, with BVLOS requiring specific approval
• Maximum height, commonly 120 m or 400 ft above ground level
• Separation from uninvolved people and from congested areas
• Privacy and data protection, usually governed by separate legislation from aviation law

That last point is regularly overlooked. Aviation authorisation to fly a camera is not permission to collect, store and process the imagery — those are different questions under different law.

Practical approach

Before quoting, confirm four things: the airspace over the site, whether the operation stays inside the low-risk category, what the aircraft's weight class requires, and whether the imagery raises data-protection duties.

Discovering an airspace restriction after committing to a delivery date is an avoidable and expensive mistake.