New reporting obligations for drones and U-Space in aviation: what changes in 2026

Key data

If your company operates drones professionally, manages an airport, provides services in U-Space airspace or is an airline, you have new incident reporting obligations from 2026 onwards. The Implementing Regulation (EU) 2026/1821, published on 28 July 2026, amends Regulation 2015/1018 — the regulation that for a decade has defined which events in civil aviation must be reported mandatorily — to incorporate the reality of drones and U-Space airspace.

This is not a minor reform: completely new event categories are added and, in parallel, certain physical security events are removed from the mandatory reporting regime. The result is a renewed classification list that any organization in the sector must know to avoid non-compliance.

What does this regulation establish?

Regulation 2015/1018 established the classification of mandatory reporting events in civil aviation for all EU Member States. The new Regulation 2026/1821 modifies it on four specific axes:

The central axis of the reform is the regulatory integration of drones: until now, UAS systems did not have their own incident reporting regime within the general civil aviation classification. With this modification, professional drone operators are subject to the same structured reporting obligations as the rest of the sector.

Economic and operational impact

The impact is not of a direct economic type (the regulation does not establish quantified fees or sanctions in the published text), but rather operational and compliance-related. The practical consequences for affected organizations are:

• Review of internal procedures: safety management systems (SMS) and operations manuals must be updated to include the new reportable event categories.
• Staff training: those who manage incident reporting — drone pilots, safety managers, U-Space operations managers — must be familiar with the new categories.
• Adaptation of reporting tools: incident notification forms and digital systems must incorporate the new UAS, U-Space and IS fields and categories.
• Reduction of physical security burden: the removal of certain physical security events from the mandatory regime represents concrete administrative relief for airlines and airports, although the exact number of eliminated events is not specified.

For professional drone operators, this is the most significant change: for the first time they are integrated into the general mandatory reporting regime for civil aviation, which means building or adapting their incident reporting processes from scratch to the European standard.

Who does it affect?

• Professional drone operators (UAS): any company or organization that operates drones within the framework of regulated civil aviation in the EU.
• U-Space service providers: entities that manage U-Space airspace and services associated with the integration of drones in air traffic.
• Airlines: affected by changes in IS categories and by the removal of physical security events.
• Airports: must update their reporting systems for the new IS categories and changes in physical security.
• Civil aviation authorities of Member States: responsible for implementing and supervising compliance with the new classification in their jurisdictions.
• Aeronautical maintenance and design organizations: to the extent that their activities generate events in the new categories.

Practical example

A Spanish infrastructure inspection company that operates professional drones ("specific" category under EU Regulation 2019/947) until now did not have its own category within the civil aviation mandatory reporting event classification of Regulation 2015/1018.

With the entry into force of Regulation 2026/1821, if during a flight operation an event occurs that fits within the new incorporated UAS categories — for example, loss of control of the unmanned aircraft in controlled airspace or an incident in U-Space zone — the company will be obliged to report it through the official civil aviation incident reporting system, just as an airline would do with an incident in manned flight.

This means the company must: review whether its internal procedures contemplate this type of notification, designate a reporting manager, and ensure it knows the official notification channels of the Spanish civil aviation authority (AESA).

What should companies do now?

1. Identify if your organization falls within the scope: check if you operate professional drones, provide U-Space services, manage airport infrastructure or are an airline. If so, this regulation directly affects you.
2. Review the new event classification: access the full text of Regulation 2026/1821 on EUR-Lex and identify which new categories apply to your activity (UAS, U-Space, part IS).
3. Update your Safety Management System (SMS): incorporate the new reportable event categories in your internal procedures and operations manuals.
4. Adapt reporting forms and tools: ensure that your incident notification systems capture the new required fields and categories.
5. Train relevant personnel: drone pilots, safety managers and operations managers must know which events are now mandatory to report and how to report them.
6. Verify which physical security events are excluded: if you are an airline or airport, review which physical security events have been removed from the mandatory regime to adjust your administrative burden.
7. Contact the competent national authority: in Spain, the State Civil Aviation Safety Agency (AESA) is the reference body for resolving questions about the implementation of the new classification.

Official source

Consult full regulation in official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202601821