Drones in emergency response: what the law allows and what a team must set up

Drones sit at two points in the preparedness cycle. In KNOW, surveys build the maps your world model relies on. In EXECUTE, a live view tells a commander what is happening over the next hedge. The legal work has to be finished long before the second.

UK drone law rests on two retained EU regulations, 2018/1139 (the Basic Regulation) and 2019/947, plus the Air Navigation Order 2016. Article 2(3)(a) of the UK version of the Basic Regulation takes outside its scope aircraft, including equipment to control them remotely, while carrying out police, search and rescue, firefighting, coastguard or similar services under UK control and responsibility, in the public interest, by or on behalf of a body vested with public authority powers. The same article expects those activities to have due regard to safety objectives. CAP 722 adds that aircraft outside the Basic Regulation remain subject to national regulation in the Air Navigation Order. That exclusion is narrow and fact-specific, so confirm your own position with the CAA in writing.

Older guidance refers to a CAA general exemption for small unmanned aircraft in emergency services operations, ORS4 No.1233. The CAA now lists it as withdrawn, and we found no direct replacement. Treat any procedure that cites it as out of date.

Article 16 of Regulation 2019/947 has nothing to do with emergencies. As CAP 722 explains, it covers operations in the framework of model aircraft clubs and associations. A rescue team cannot rely on it.

The Open category covers lower-risk flying below 120 m, in three sub-categories that the CAA names by distance from people. A1 (Over People) is for aircraft under 250 g, plus C1 aircraft until 31 December 2027, and bans flying over crowds. A2 (Near People) needs an A2 Certificate of Competency and keeps 30 m from uninvolved people with a UK2 or C2 aircraft, or 5 m in low-speed mode. A3 (Far from People) keeps 50 m from uninvolved people and 150 m from residential, commercial, industrial or recreational areas.

Those limits rule out a lot of real emergency work: a fire in a town, or a search after dark along a road. Anything riskier needs the Specific category, which means an operational authorisation from the CAA. The CAA lists PDRA01 and UK SORA-based applications as routes, with CAP 722 and its annexes as guidance. Apply well before you need it.

The rules changed on 1 January 2026. A Flyer ID (a free online test, valid five years) is now required from 100 g, and an Operator ID (£12.34 a year) from 100 g if the aircraft has a camera, and in any case from 250 g. Class marks UK0 to UK6 now apply to new aircraft. UK1, UK2 and UK3 drones must broadcast Remote ID. The operator is normally the organisation, and its Operator ID goes on every aircraft.

Airports and spaceports have flight restriction zones, and NATS publishes a map of airspace restrictions. Restrictions made at short notice may not appear on it. Emergency restrictions on flying can be made under Article 239 of the Air Navigation Order, and each one has its own wording on who is exempt, so read it before you assume your flight is allowed.

The Drone Code tells everyone else what to do: at or near an emergency incident you must stop flying immediately unless the emergency services give permission, follow any temporary restrictions, avoid hindering aerial support, and respect the privacy of those involved. So your first step is the incident commander’s permission, recorded in the log. Air ambulances and police helicopters may arrive without warning, which makes a named airspace watcher part of the crew.

Footage of identifiable people is personal data. ICO guidance on drones asks whether a drone is genuinely needed, expects a data protection impact assessment that covers people caught by accident, and says recording should not run continuously without a strong justification. Being able to switch recording off matters. Police forces processing for law enforcement purposes work under separate rules; everyone else needs a lawful basis under UK GDPR, which you should settle before the incident. Our guide to GDPR and location tracking covers the same reasoning for people’s positions.

A shared feed is where most teams slip. Decide who may watch, encrypt the link, stop feeds going into public chat groups, and set how long recordings are kept. Log what the drone saw, and treat it as one source for the common operational picture.

Sinkaos places drone and other cameras on the map with position and field of view, and can open a live stream from the map. Roles control who sees what, qualifications carry expiry dates, and pilots can be rostered with a person approving the result. Sinkaos does not fly aircraft and does not hold permissions for you.