Reviewed by Takayuki Sawai, Certified Administrative Scrivener (Gyoseishoshi) — 20+ years in government licensing
Based on EASA official sources · Bible v2.1 verified 2026-04-18
Open Category (recreational and low-risk): Register with your national authority (one number valid in all 31 states) + Remote ID (mandatory since 1 Jan 2024 for C1+ drones) + Insurance (mandatory for ALL operators under EC 785/2004) + fly below 120m
Specific Category (commercial / higher risk): Registration + Insurance + STS-01 or STS-02 declaration (no authorisation needed) or PDRA or full SORA 2.5 operational authorisation (effective 31 March 2026)
Key 2026 changes: SORA 2.5 effective 31 March 2026 · France Open Category urban flight unlocked · France S-1/S-2/S-3 abolished · Netherlands 225 new no-fly zones · Germany LBA FastFlight process · NL SORA 2.5 mandatory for new OA applications from 1 April 2026
Cross-border advantage: One registration covers all 31 EASA member states — no re-registration when crossing borders
In this guide
EASA's drone regulatory framework is built on a risk-based approach. The higher the risk of your operation, the more requirements apply. This three-category structure is defined in EU Regulation 2019/947 and applies uniformly across all 31 EASA member states.
The Open Category is for low-risk operations that do not require prior authorisation from a national aviation authority. It is subdivided into three subcategories based on how close you may fly to uninvolved people:
| Subcategory | Drone Class | Max Weight | Where You Can Fly |
|---|---|---|---|
| A1 — Over people | C0 / C1 | C0: under 250g C1: under 900g | May fly over uninvolved people (C0). With C1, avoid flying over assemblies of people. |
| A2 — Close to people | C2 | Under 4kg | Must maintain at least 30m from uninvolved people (or 5m in low-speed mode). Requires A2 remote pilot certificate of competency. |
| A3 — Far from people | C3 / C4 | Under 25kg | Must fly in areas where no uninvolved persons are expected within the area of operation. At least 150m from residential, commercial, industrial, or recreational areas. |
All Open Category operations are limited to a maximum altitude of 120m above ground level and must be conducted within visual line of sight (VLOS).
The Specific Category covers medium-risk operations that exceed Open Category limits. There are four pathways to authorisation, listed from simplest to most complex:
| Pathway | Process | Typical Use Case |
|---|---|---|
| STS-01 | Declaration-based (no authorisation needed) | VLOS over controlled ground area in populated environment. C5 class drone, under 25kg, max 120m. |
| STS-02 | Declaration-based (no authorisation needed) | BVLOS with airspace observers. C6 class drone, under 25kg, max 120m, max 2km from pilot. |
| PDRA | Pre-Defined Risk Assessment | Standardised operations not covered by STS. Simplified authorisation through pre-assessed risk. |
| SORA 2.5 | Full risk assessment + operational authorisation | Non-standard operations requiring bespoke risk analysis. Effective 31 March 2026. |
STS-01 and STS-02 are declaration-based — operators declare their intent to operate under these scenarios without needing individual operational authorisation. This is a significant advantage over full SORA applications.
The Certified Category applies to the highest-risk operations: transporting people, carrying dangerous goods, or flying over assemblies of people in urban environments. Certified operations require type certification of the UAS, similar to manned aviation. This category is primarily relevant for future urban air mobility and large-scale commercial UAS operations.
Under EU Regulation 2019/947, all UAS operators must register with their national aviation authority if their drone weighs 250g or more, or weighs less than 250g but has a sensor capable of capturing personal data (camera, microphone), unless it qualifies as a toy under Directive 2009/48/EC.
One registration is valid across all 31 EASA member states — the 27 EU countries plus Norway, Switzerland, Iceland, and Liechtenstein. No other major drone regulatory system in the world offers this level of cross-border portability. A German-registered operator can fly in France, the Netherlands, Sweden, Italy, Spain, or any other EASA state without re-registering.
As of May 2025, over 2,000,000 operators are registered across EASA states.
| Operator Type | Registration Fee | Portal |
|---|---|---|
| Natural person | €20 | lba-openuav.de |
| Legal entity | €50 | lba-openuav.de |
| Country | Authority | Registration Portal |
|---|---|---|
| Germany | LBA (Luftfahrt-Bundesamt) | lba-openuav.de |
| France | DGAC (Direction Generale de l'Aviation Civile) | alphatango.aviation-civile.gouv.fr |
| Netherlands | ILT (Inspectie Leefomgeving en Transport) | ilent.nl/onderwerpen/drones |
| Sweden | Transportstyrelsen | transportstyrelsen.se |
EASA uses a class mark system defined in EU Regulation 2019/945 (Delegated Act) to classify drones by weight and capability. The class mark determines which subcategory of the Open Category or which standard scenario in the Specific Category your drone can operate under.
| Class | Max Weight | Category | Key Requirements |
|---|---|---|---|
| C0 | Under 250g | Open A1 | May fly over uninvolved people. No remote pilot competency required (online awareness course recommended). |
| C1 | Under 900g | Open A1 | Must not intentionally fly over assemblies of people. Online theory test required. Remote ID mandatory. |
| C2 | Under 4kg | Open A2 | 30m horizontal distance from uninvolved people (5m in low-speed mode). A2 certificate of competency required. Remote ID mandatory. |
| C3 | Under 25kg | Open A3 | Far from people (150m from residential/commercial/industrial areas). Remote ID mandatory. |
| C4 | Under 25kg | Open A3 | No automatic flight modes. Model aircraft category. No Remote ID requirement. |
| C5 | Under 25kg | Specific STS-01 | VLOS over controlled ground area. Remote ID mandatory. Geo-awareness required. |
| C6 | Under 25kg | Specific STS-02 | BVLOS with airspace observers. Remote ID mandatory. Max 2km from pilot. Detect-and-avoid capability. |
Drones without a class mark (so-called "legacy" or "privately built" drones) may still operate under Open Category transition rules with additional restrictions — they are generally treated as C4 equivalent in subcategory A3.
The Open Category operates in three distinct subcategories, each calibrated to the proximity of uninvolved persons:
Remote ID is the electronic identification system that broadcasts a drone's identification and position data in real time — the equivalent of a number plate for the airspace. In the EU, Remote ID has been mandatory since 1 January 2024 for drones with class marks C1, C2, C3, C5, and C6.
This puts the EU ahead of both the UK (Remote ID Phase 1 from 1 January 2026) and the US (implementation still ongoing as of July 2026).
C0 drones (under 250g) and C4 drones (model aircraft without automatic modes) are exempt from the Remote ID requirement. However, manufacturers of C0 drones may voluntarily include Remote ID functionality.
Under EC Regulation 785/2004, third-party liability insurance is mandatory for ALL drone operators in the EU — recreational and commercial alike. This is a critical distinction from the UK, where insurance is only required for commercial operations.
Every person who flies a drone in the EU must carry third-party liability insurance that specifically covers UAS operations. Standard household or personal liability insurance policies typically do not cover drone operations. In Germany, flying without insurance is a criminal offence under §315 StGB, carrying a minimum fine of €500.
| Country | Minimum Coverage | Basis | Notes |
|---|---|---|---|
| Germany | €900,000 | 750,000 SDR | Uninsured flight = criminal offence (§315 StGB, min €500 fine). Higher coverage recommended for commercial operations. |
| France | €900,000+ | EC 785/2004 minimum | French aviation code requires specific UAS endorsement on the policy. Most commercial operators carry €1.5M–€3M. |
| Netherlands | €900,000+ | EC 785/2004 minimum | ILT can request proof of insurance during field inspections. Digital proof accepted. |
| Sweden | €900,000+ | EC 785/2004 minimum | Transportstyrelsen publishes a list of accepted insurance providers for reference. |
The 750,000 SDR (Special Drawing Rights) minimum translates to approximately €900,000, though the exact conversion fluctuates. National authorities may set higher minimums. Always confirm the current requirement with your national authority.
The Specific Category is where the EASA framework demonstrates its full sophistication. Four pathways exist to authorise operations that exceed Open Category limits, ranging from simple declarations to comprehensive risk assessments.
STS-01 and STS-02 are the simplest pathways. They are declaration-based — operators declare their intent to operate under these scenarios to their national authority without needing individual operational authorisation. This dramatically reduces administrative burden compared to a full SORA application.
| Parameter | STS-01 | STS-02 |
|---|---|---|
| Operation type | VLOS over controlled ground area | BVLOS with airspace observers |
| Environment | Populated | Sparsely populated |
| Drone class | C5 (under 25kg) | C6 (under 25kg) |
| Max altitude | 120m AGL | 120m AGL |
| Max distance from pilot | Visual line of sight | 2km (with airspace observers) |
| Authorisation required | No (declaration only) | No (declaration only) |
| Remote pilot competency | STS-01 specific certificate | STS-02 specific certificate |
PDRAs are pre-assessed operational scenarios published by EASA. They offer a middle ground — more flexibility than STS but less administrative burden than a full SORA. National authorities may adopt EASA PDRAs or publish their own national PDRAs.
SORA 2.5 (Specific Operations Risk Assessment version 2.5) is the comprehensive methodology for assessing and mitigating risks of Specific Category operations. It became effective on 31 March 2026, replacing SORA 2.0.
Key improvements in SORA 2.5:
While EASA provides the common regulatory framework, each member state implements additional national rules covering geographical zones, no-fly areas, and local enforcement. Here are the most significant country-specific developments for 2026.
LBA FastFlight process (December 2025): The German Luftfahrt-Bundesamt introduced the FastFlight accelerated processing system for Specific Category operational authorisation applications. This streamlines documentation requirements and reduces processing times for standard applications. Available through lba-openuav.de.
Registration fees: €20 for natural persons, €50 for legal entities. A1/A3 online certificate (Kenntnisnachweis): €25 (LBA). A2 training through approved bodies costs €200–€890, plus an LBA examination fee of €30.
Insurance enforcement: Germany treats uninsured drone flight as a criminal offence under §315 StGB (endangering air traffic), not merely an administrative violation. Minimum fine: €500. Maximum administrative penalties reach €50,000.
Airspace: DFS (Deutsche Flugsicherung) AirMap integration provides real-time controlled airspace and temporary flight restriction data. All operators should check the DFS drone app before every flight.
Arrete Espace reform (1 January 2026): France unlocked Open Category urban flight for the first time. C1 and C2 class-marked drones may now operate in urban areas under Open Category rules — a significant expansion of permissible operations that was previously restricted under French national rules.
National scenarios abolished (1 January 2026): France completed its transition to full EASA alignment by abolishing its legacy national scenarios S-1, S-2, and S-3 on 1 January 2026. All Specific Category operations now follow EASA standard scenarios (STS-01, STS-02) or require a SORA-based operational authorisation from the DGAC.
Registration: Via AlphaTango portal. France also maintains a mandatory online training programme for Open Category pilots.
Penalties: Up to €75,000 in fines and 1 year of imprisonment under the Code des Transports. Operations near airports, nuclear facilities, and military installations face particularly severe enforcement.
225 new no-fly zones (2026): The Netherlands introduced 225 new no-fly zones in 2026, significantly expanding airspace restrictions around critical infrastructure, nature reserves, and residential areas. This makes pre-flight airspace checks essential — the operational environment has changed substantially from previous years.
CTR openings at 5 airports: In a welcome counterbalance, the outer rings of CTR (Control Zones) at 5 airports have been opened for Open Category drone operations, providing new legal flying areas near airports that were previously entirely restricted.
SORA 2.5 mandatory (1 April 2026): The Netherlands made SORA 2.5 mandatory for all new operational authorisation applications from 1 April 2026 — one of the earliest adoption dates among EASA states.
Penalties: Administrative fines up to €8,700. ILT conducts active field enforcement, including random checks at popular flying locations.
Registration: Through Transportstyrelsen's portal. Sweden follows the standard EASA framework with minimal additional national restrictions.
Geographical zones: Sweden publishes restricted zones through the AIP (Aeronautical Information Publication). Key restrictions apply around military installations, nuclear facilities, and sensitive government areas. No significant new zone additions in 2026.
Enforcement: Transportstyrelsen takes a compliance-first approach, prioritising education and guidance over punitive enforcement for minor infractions. Serious violations (airspace incursions near airports, operations without insurance) are pursued vigorously.
While EASA sets the regulatory framework, enforcement and penalties are national matters. The severity of penalties varies significantly across member states.
| Violation Type | Germany (LBA) | France (DGAC) | Netherlands (ILT) |
|---|---|---|---|
| Maximum administrative fine | €50,000 | €75,000 + up to 1 year imprisonment | €8,700 |
| Flying without insurance | Criminal offence — §315 StGB, min €500 fine | Administrative + potential criminal prosecution | Administrative fine + grounding |
| Flying without registration | Fine up to €50,000 + drone seizure | Fine + drone confiscation | Fine up to €8,700 + drone seizure |
| Airspace violation (controlled zone) | Criminal prosecution possible (§315a StGB) | Up to €75,000 + 1 year imprisonment | Administrative fine + report to Public Prosecution |
| Flying near airports | Criminal prosecution (endangering air traffic) | Criminal offence — serious penalties near CDG/Orly | Criminal prosecution possible |
| No Remote ID (required drone) | Administrative fine | Administrative fine | Administrative fine + grounding |
| Enforcement approach | Strict; LBA + police joint operations | Strict; DGAC + Gendarmerie joint patrols | Active; ILT random field inspections |
Across all EASA states, the most severe penalties are reserved for operations that endanger manned aircraft. Airspace violations near airports, operations in flight restriction zones without authorisation, and incidents involving other aircraft or persons on the ground can trigger criminal prosecution in every jurisdiction.
Under UAS.SPEC.090, Specific Category operators must retain all operational records for a minimum of 3 years (36 months). This is notably longer than the UK requirement of 2 years and far stricter than the US, which has no federal flight logging mandate.
| Record Type | Contents | Retention Period |
|---|---|---|
| Flight logs | Date, time, location, duration, flight purpose, pilot identity, drone serial number | 3 years minimum |
| Maintenance logs | Pre-flight checks, maintenance actions, component replacements, firmware updates | 3 years minimum |
| Risk assessments | Site-specific risk assessments, SORA documentation, mitigation measures applied | 3 years minimum |
| Occurrence reports | Near-misses, incidents, accidents, equipment failures, airspace violations | 3 years minimum |
| Insurance records | Policy details, coverage amounts, validity periods, claims history | Duration of policy + 3 years |
| Pilot competency | Certificates, training records, currency logs, medical declarations (where required) | Duration of validity + 3 years |
While the 3-year retention requirement formally applies to Specific Category operators, Open Category operators are strongly advised to maintain comparable records. In the event of an incident or claim, well-maintained records provide essential evidence of compliance and due diligence.
EU (EASA): 3 years — the longest mandatory retention period of any major drone regulatory system
UK (CAA): 2 years — shorter but still mandatory for OA holders
US (FAA): No federal flight logging mandate — operators should maintain their own records as best practice
Australia (CASA): 12 months for Part 101 operators
This comparison table covers 10 regulatory aspects across four major jurisdictions. The EU column (highlighted) reflects the EASA framework applicable to all 31 member states. Country-specific variations within the EU are noted where significant.
| Aspect | EU (EASA — 31 States) | US (FAA) | UK (CAA) | Australia (CASA) |
|---|---|---|---|---|
| Regulatory body | EASA + 31 national authorities (LBA, DGAC, ILT, Transportstyrelsen, etc.) | FAA (Federal Aviation Administration) | CAA (Civil Aviation Authority) | CASA (Civil Aviation Safety Authority) |
| Registration scope | One registration = 31 states. Register once in your home state, fly across all EASA members. 2,000,000+ operators registered (May 2025). | One registration = US only. $5 per drone (3-year validity). 726,000+ registered drones. | One registration = UK only. Operator ID £10.33/year + Flyer ID free. | One registration = Australia only. $175 for ReOC (2-year validity). |
| Max altitude (open/general) | 120m AGL (Open Category). Country-specific geographic zones may further restrict. | 400ft (122m) AGL. May exceed with waiver near structures. | 120m AGL (Open Category). | 120m AGL (excluded category). 400ft AGL for Part 101. |
| Insurance requirement | Mandatory for ALL operators (EC 785/2004) — recreational and commercial. Min ~€900,000 (DE). Uninsured flight in DE = criminal offence (§315 StGB, min €500 fine). | Not legally required (no federal insurance mandate). Contractually required by most commercial clients ($1M–$5M typical). | Mandatory for commercial only. Min ~£750,000. Not required for recreational. | Not legally required for excluded category. Required for Part 101 ReOC holders. |
| Remote ID | Mandatory since 1 Jan 2024 (C1, C2, C3, C5, C6). Ahead of UK and US. Broadcast includes operator ID, position, altitude, speed, take-off point. | Rule published 2021, phased implementation ongoing. Standard Remote ID or broadcast module required for most drones. | Phase 1 from 1 Jan 2026 (UK1, UK2, UK3, UK5, UK6). Phase 2 from 1 Jan 2028 (legacy drones 100g+ with camera). | Not yet mandatory. CASA consulting on implementation timeline. |
| Record retention | 3 years (36 months) — UAS.SPEC.090. Longest of any major jurisdiction. | No federal flight logging mandate. Best practice only. | 2 years for OA holders. | 12 months for Part 101. |
| Penalties (maximum) | DE: €50,000 / FR: €75,000 + 1yr / NL: €8,700. Varies by state. DE uninsured = criminal (§315 StGB). | Civil: up to $27,500/violation. Criminal: up to $250,000 + 3 years imprisonment. | Unlimited fine + up to 5 years imprisonment for serious airspace offences. | Civil up to AUD $15,750/violation. Criminal penalties for serious offences. |
| BVLOS pathway | STS-02 (declaration) + PDRA + SORA 2.5 (effective 31 March 2026). STS-02 = C6 drone, max 2km, airspace observers. | Part 107.31 waiver required. UAFR NPRM proposed expanded BVLOS framework. | PDRA01 OA + UK-specific SORA. OSC replaced UK SORA in April 2025. | Part 101.245 approval required. Relatively flexible for rural/remote operations. |
| Night flying | Permitted under Open Category if drone has appropriate lighting visible at distance. No separate authorisation needed in most states. Country-specific rules apply. | Permitted under Part 107 with anti-collision lighting visible for 3 statute miles. No waiver required since 2021. | Permitted. Green flashing light mandatory from 1 Jan 2026. | Permitted under excluded category at reduced height (120m). Anti-collision lighting required. |
| Cross-border operations | Seamless. One registration = 31 states. Must comply with local geographical zones. Unique advantage — no other system offers this. | US registration only. No cross-border validity. | UK registration only. Post-Brexit, separate from EASA. | Australian registration only. No cross-border validity. |
The EU regulatory framework offers the strongest cross-border advantage of any major drone jurisdiction — one registration covering 31 states is unmatched. It also imposes the broadest insurance mandate (ALL operators, not just commercial) and the longest record retention (3 years vs UK 2 years vs US none). The EU was first to mandate Remote ID (January 2024), ahead of the UK (January 2026) and the US (ongoing). Penalties vary significantly by member state, with France imposing the highest maximum fines (€75,000 + imprisonment) and Germany uniquely treating uninsured flight as a criminal offence.
Complete these checks before every flight in any EASA member state. This checklist covers the regulatory essentials for Open and Specific Category operations.
MmowW automates flight logging, insurance tracking, and audit-ready record-keeping for drone operators across all 31 EASA member states. One platform, one record, full cross-border compliance.
Try MmowW FreeFree Trust Profile — no credit card required. Verified membership $19/month.
Check your compliance status, find regulations for any country, and calculate the ROI of automating your compliance workflow.
Making the right choice matters. Read our independent analysis before you decide.