Airffic Aircraft InstituteAircraft, evidence and the market
HomeProcurement & trustDoes secure transmission solve the drone data problem?

Procurement & trust / 04

Does secure transmission solve the drone data problem?

Preventing theft and deciding what should be collected, used and deleted are different responsibilities.

6 minResearch reviewed through 5 November 20264 sources
On this pageSecurity and privacy ask different questionsThe information continues beyond the aircraftBystanders cannot easily see the purposeControl over information becomes part of the offerFollow the cause and effectSources for this lesson
Sir Airffic Go
Sir Airffic Go

A strong lock does not decide what belongs inside the box. Follow the information from collection to deletion.

From the evidence

Security and privacy ask different questions

Information security concerns protection against unauthorized access, alteration and related harms. Privacy also asks whose information should be collected, for what purpose and with what limits. A properly secured recording can still contain unnecessary personal information. Permission to access a file does not explain why that file should exist.

Comparative research on safety and privacy regulation shows why aviation rules alone do not explain information handling. A lack of drone-specific privacy provisions does not mean general information-protection arrangements disappear. An aircraft approval and the basis for collecting or sharing personal information answer different questions and need separate explanations.

[procurement-p02]
From the evidence

The information continues beyond the aircraft

A recording may pass from a camera to a control device, then to a cloud service or customer system. Mapping storage, viewers, sharing and deletion reveals responsibilities that a flight checklist can miss. Landing ends the flight; it does not necessarily end the lifetime of the information collected during it.

A security review organizes issues across sensors, hardware, software and communications. That explains why encrypted transmission is only part of protection: software updates and user permissions remain separate concerns. The review surveys heterogeneous research, so it is a framework for asking questions, not a security verdict on a current commercial product.

[procurement-p03]
How conditions change the market
Define the collection purpose
Map storage and sharing
Set access and deletion
Explain accountability

Secure communication supports this process; appropriate collection and use require additional decisions.

From the evidence

Bystanders cannot easily see the purpose

A study involving 20 participants found concerns about uncertainty over what a drone could see, whether it was recording and who controlled the information. Its small indoor sample cannot represent public opinion worldwide. It nevertheless helps identify a design problem: people outside the system often receive little understandable information.

Explaining purpose, contact routes and information practices can support accountability. US voluntary stakeholder best practices agreed in 2016 also discuss transparency, limits on use, retention and protection. These practices are voluntary guidance, not legislation. Their useful contribution here is a vocabulary for discussing responsibilities with customers and affected people.

[procurement-p04][procurement-n20]
Four information questions
QuestionEvidence to examine
What is collected?Purpose and necessary imagery
Where does it go?Device, server and sharing paths
Who controls it?Viewing, administration and update permissions
When does it disappear?Retention period and deletion responsibility
Our interpretation

Control over information becomes part of the offer

Here, data sovereignty means asking who can decide how information is handled and under which legal authority. Domestic storage alone does not answer every question, and foreign ownership alone does not establish a technical flaw. Contracts, administrator powers and actual data destinations must be examined together to understand control.

The strategic inference is that understandable information governance can strengthen an offer. For a hypothetical bridge inspection, a buyer could compare how products retain necessary images, identify viewers and specify deletion. These are practical comparison questions, not a declaration that a particular design complies with every jurisdiction’s legal requirements.

[procurement-p02][procurement-p03][procurement-n20]
The idea to keep

Inspect the data flow and responsible parties, not only the aircraft’s nationality or encryption claim.

Try the idea yourself

Even if a product sends nothing to the cloud, what information-management questions remain?

Sources for this lesson