Most clients have a vague idea that drone flying is "regulated." Fewer have a clear picture of by whom, under which laws, and where the lines are drawn. This briefing is a short, plain-English tour of the regulatory stack — useful both if you’re commissioning a drone survey and want to ask the right questions, and if you’re an operator who’d like to explain the system to clients without getting lost in acronyms.
The aviation hierarchy
Four layers sit on top of each other:
- ICAO — the International Civil Aviation Organisation. Sets global aviation standards and safety principles. UK regulation must, broadly, align with ICAO.
- UK Government — sets primary legislation. The headline document is the Air Navigation Order 2016 (ANO), the umbrella law that covers all UK flying, crewed and uncrewed.
- UK CAA — the national regulator. Publishes the CAP 722 series of guidance, issues Operational Authorisations to commercial drone operators, and runs the registration scheme. The CAA is the only body that can issue an Operational Authorisation in the UK.
- Remote pilot — the person actually flying. Must comply with the approved Operational Authorisation and the operator’s Operations Manual.
The headline regulation: UK Reg 2019/947
If there’s one regulation worth knowing the number of, it’s UK Regulation (EU) 2019/947. This is the legal framework for flying any Unmanned Aircraft System (UAS) in UK airspace. It sorts operations into three categories based on risk:
- Open Category — low risk. No CAA application required. Constrained sub-categories A1 (over people, with small drones), A2 (near people, with an A2 CofC) and A3 (far from people).
- Specific Category — medium risk. CAA application required. Pilot must hold a GVC (or RPC-L1/L2/L3). This is where almost all professional commercial drone work in UK towns sits.
- Certified Category — high risk. Aligned with crewed aviation requirements. For passenger transport, dangerous goods, and similar exotic cases.
Alongside the regulation sits the AMC (Acceptable Means of Compliance). Where the regulation says what must be achieved, the AMC describes how the CAA expects you to achieve it — the practical actions for training, record keeping, operating procedures and evidence.
UK class marking: the 2026 shift
From 1 January 2026 the UK CAA brought in a new class marking system for drones, replacing the European-style C-class markings (although you can continue to fly an EU C-class drone as if it were the corresponding UK class until 31 December 2027). The UK classes are:
| Class | Max weight | Operating category |
|---|---|---|
| UK0 | < 250 g | Open A1 (over uninvolved people) |
| UK1 | < 900 g | Open A1 (near uninvolved people) |
| UK2 | < 4 kg | Open A2 (with A2 CofC) or A3 |
| UK3 | < 25 kg | Open A3 only |
| UK4 | < 25 kg | Open A3 only (model-aircraft style) |
| UK5, UK6 | < 25 kg | Specific Category only |
Any drone bought before 1 January 2026 without a class marking is treated as a legacy aircraft. It can still be flown, but the rules apply based on weight rather than class.
Operational Authorisation and the Operations Manual
An Operational Authorisation (OA) is a formal CAA approval that sets out exactly what an operator may do in the Specific Category and under what conditions. It’s issued to the operator (an organisation), not to the pilot personally, and it’s mission-specific — an OA for "rural agricultural inspection" does not cover an urban roof.
Two paths to an OA:
- PDRA-01 (Pre-Defined Risk Assessment) — a CAA-published baseline risk assessment for routine VLOS operations. Most working commercial operators sit here.
- UK SORA (Specific Operations Risk Assessment) — required for higher-risk operations (BVLOS, flights over crowds, swarms, dropping items, flying above 400 ft AGL). The UK SORA framework formally replaced the older OSC methodology in March 2025.
Underneath the OA sits the Operations Manual: a formal, controlled document that explains exactly how the organisation will plan, conduct and manage its operations. The crew must follow it; if they don’t, the operator isn’t operating in accordance with the OA.
Registration: DMARES, Flyer ID, Operator ID
The Drone and Model Aircraft Registration and Education Scheme (DMARES) sets two registrations:
- Flyer ID — for anyone flying a drone or model aircraft over 100 g. Free, renewable every five years, requires passing the CAA Drone Code online test.
- Operator ID — for the person or organisation legally responsible for the drone. £11.79 annual fee, must be displayed on the airframe in clear capitals at least 3 mm tall.
Remote ID: the 2026 / 2028 transition
From 1 January 2026 the UK introduced Direct Remote ID — a short-range broadcast from the airframe that lets authorities check whether a flight is compliant. UK1, UK2, UK3, UK5 and UK6 class-marked drones must broadcast Remote ID from 1 January 2026; legacy and UK0/UK4 drones with cameras get a 1 January 2028 deadline.
The rules a pilot can’t opt out of
Two ANO articles apply to every drone flight regardless of category:
- Article 241 — "a person must not recklessly or negligently cause or permit an aircraft to endanger any person or property."
- Article 94A — the 400 ft height limit, plus the rules for flights near protected aerodromes (the Flight Restriction Zone).
Above 400 ft outside a Flight Restriction Zone needs CAA permission. Inside a Flight Restriction Zone, permission comes from the air traffic control unit at the protected aerodrome.
What clients should ask
If you’re hiring a drone operator for any commercial work, four questions cover most of the ground:
- What is your Operational Authorisation reference, and does it cover this job?
- What category are you operating in? (Open A2 with A2 CofC, or Specific Category with GVC + OA.)
- What public liability insurance do you carry? (£5 million is the working baseline.)
- What class marking is on your airframe, or is it legacy?
A working professional operator should be able to answer all four without hesitation. If they can’t, that’s the signal.