EU study proposes 12 security requirements for a European Trusted Drone Label

A study for the European Commission, presented at the EU Drone Summit in Brussels, proposes twelve security requirements for a voluntary European Trusted Drone Label, meant to help buyers judge the cybersecurity of drones used in sensitive settings.

Ten of the requirements are technical, covering software integrity, Remote ID, resilience to navigation jamming and spoofing, secure command links and data protection, including no transfer of operational data without explicit permission. Two cover supply-chain transparency through software and hardware bills of materials. The label would not exclude makers because of their country of origin.

The consortium behind the study proposes running the label under the EU's cybersecurity certification framework, with ENISA administering it and independent bodies assessing each drone model in four to eight weeks. Its final recommendations are due in January 2027.