Part J — Community & Security
Drones and unauthorized photography
Workbook section 113
Owner
HSE Manager / Document Controller
Review / trigger
Annual review; update immediately if legal, authority, project, client, or scope requirements change.
Primary references
Plans TOC - Part J; Plan J113 Drones Unauthorized P
Checkpoints
88
| # | Area | Checkpoint / Requirement | Evidence / Acceptance Criteria | Responsible | Frequency |
|---|---|---|---|---|---|
| 1 | Pre-Deployment Risk Assessment | Site-specific UAV operation risk assessment completed covering airspace, terrain and third-party proximity hazards | Signed risk assessment document filed prior to first flight of each campaign | HSE Manager | Prior to each flight campaign |
| 2 | Pre-Deployment Risk Assessment | Method statement for drone operations reviewed and approved covering launch/recovery zones and contingency actions | Approved method statement referenced in permit-to-fly | Site Engineer | Prior to each flight campaign |
| 3 | Pre-Deployment Risk Assessment | Drone operator medical fitness and fatigue status confirmed prior to flight duty | Self-declaration/fitness confirmation form signed by pilot | HSE Officer | Each shift |
| 4 | Equipment Certification & Airworthiness | Each UAV airframe carries a valid manufacturer conformity/airworthiness declaration matching its GCAA category | Airworthiness declaration copy cross-referenced to UAV serial number | Equipment Custodian | Prior to first use and annually |
| 5 | Equipment Certification & Airworthiness | Spare parts and repairs to UAVs performed only by manufacturer-approved technicians | Repair/service record referencing approved technician certification | Equipment Custodian | As required |
| 6 | Equipment Certification & Airworthiness | Firmware and software updates for UAV and controller applied only after validation to avoid geofence or safety feature loss | Update validation checklist signed by drone operator | Drone Operator | Upon each update |
| 7 | Airspace Coordination with Aviation Authorities | Live NOTAM (Notice to Airmen) check performed before flight to confirm no conflicting temporary restrictions | NOTAM check printout/screenshot dated same day as flight | Drone Operator | Each flight day |
| 8 | Airspace Coordination with Aviation Authorities | Direct radio or phone contact established with nearest ATC/aerodrome operations when flying within coordination distance | Communication log recording contact time and clearance received | Drone Operator | Each flight within coordination distance |
| 9 | Airspace Coordination with Aviation Authorities | Beyond visual line of sight (BVLOS) operations, if any, supported by dedicated GCAA BVLOS approval separate from standard permit | Copy of BVLOS-specific approval on file | HSE Manager | Prior to any BVLOS operation |
| 10 | Personal Device & Camera Registration | Personal mobile phones and cameras of site employees registered with make/model/IMEI at HR onboarding | Device registration form retained in employee HR file | HR Officer | At onboarding |
| 11 | Personal Device & Camera Registration | Camera lens covers/security seals applied to personal devices at high-security zones where photography is fully prohibited | Seal application/removal log maintained by security | Security Officer | Each entry to restricted zone |
| 12 | Personal Device & Camera Registration | Random spot checks conducted on personal devices at exit points in designated sensitive project areas | Spot-check log with findings and personnel names | Security Officer | Weekly |
| 13 | Client & Stakeholder Notification | Client formally notified in writing of planned drone survey/inspection schedule and coverage area | Client notification email/letter with scope and dates acknowledged | Project Manager | Prior to each campaign |
| 14 | Client & Stakeholder Notification | Adjacent facility owners/operators informed where drone flight path may cross shared boundary lines | Notification acknowledgement from adjacent facility representative | Project Manager | Prior to flight near shared boundary |
| 15 | Counter-Drone Detection Measures | Site evaluates need for counter-UAS detection system (RF/radar) based on project sensitivity and threat profile | Documented evaluation outcome with justification for adoption/non-adoption | Security Manager | Prior to mobilization; reviewed annually |
| 16 | Counter-Drone Detection Measures | Where installed, counter-UAS detection system tested and calibrated to confirm functional detection range | Calibration/test certificate with detection range results | Security Manager | Quarterly |
| 17 | Counter-Drone Detection Measures | Alerts generated by counter-UAS system routed to security control room with defined response escalation | Alert response log showing time from detection to action taken | Security Officer | Each alert event |
| 18 | Emergency & Contingency Procedures | Loss-of-link and fly-away contingency procedure documented, including automatic return-to-home configuration verified | Return-to-home function test log prior to flight | Drone Operator | Each flight |
| 19 | Emergency & Contingency Procedures | Emergency landing zones pre-identified and communicated to ground crew in case of mid-flight malfunction | Emergency landing zone map briefed to crew, signed record | Drone Operator | Each flight |
| 20 | Emergency & Contingency Procedures | Procedure for safe recovery of a crashed/downed UAV, including hazard isolation of battery and debris, documented and briefed | Crash recovery SOP acknowledgement by ground crew | HSE Officer | Induction and annually |
| 21 | Data Handling & Cybersecurity | Drone control application and telemetry link secured against unauthorized interception per IT security policy | IT security review record confirming encrypted link configuration | IT Manager | Prior to deployment and annually |
| 22 | Data Handling & Cybersecurity | Captured imagery geotagged and watermarked to preserve chain of custody and prevent unauthorized reuse | Sample output file demonstrating geotag/watermark applied | Drone Operator | Each flight campaign |
| 23 | Data Handling & Cybersecurity | Cloud storage or transfer of drone footage restricted to UAE-hosted or approved compliant servers per data residency requirements | Data hosting compliance confirmation from IT/legal | IT Manager | Reviewed annually |
| 24 | Workforce Awareness on Legal Consequences | Employees briefed on penalties under UAE Federal Decree-Law for unauthorized use of drones and photography of restricted subjects | Briefing record referencing specific legal penalty clauses | HSE Officer | Induction and annually |
| 25 | Workforce Awareness on Legal Consequences | Multilingual posters summarizing drone and photography restrictions displayed at labor accommodation and site office | Photograph of posted multilingual posters | HSE Officer | Monthly inspection |
| 26 | Management Review & Continuous Improvement | Annual management review of drone operations program covering incidents, near-misses and regulatory changes | Management review minutes with action items and next review date | Project Director | Annually |
| 27 | Regulatory Compliance & GCAA Registration | All UAV/drone operations require valid GCAA (General Civil Aviation Authority) operator permit prior to site mobilization | Copy of current GCAA UAS operator certificate on file with expiry tracked in HSE register | HSE Manager | Prior to mobilization |
| 28 | Regulatory Compliance & GCAA Registration | Drone pilot holds valid GCAA Remote Pilot License (RPL) matching UAV category flown | RPL certificate verified against UAV weight/category; copy retained in site file | HSE Manager | Prior to each deployment |
| 29 | Regulatory Compliance & GCAA Registration | Project-specific No Objection Certificate (NOC) obtained from local Police Aviation/Civil Defence for flights near site | Signed NOC letter referencing site coordinates and validity dates filed with project documents | Project Manager | Prior to each flight campaign |
| 30 | Regulatory Compliance & GCAA Registration | Site is checked against GCAA restricted/no-fly zone map before any flight is planned | Screenshot/printout of GCAA no-fly zone check dated and attached to flight plan | Drone Operator | Before every flight |
| 31 | Regulatory Compliance & GCAA Registration | Insurance certificate for UAV operations (third-party liability) is current and covers project location | Insurance policy document with coverage limits and expiry reviewed by HSE | HSE Manager | Quarterly |
| 32 | Regulatory Compliance & GCAA Registration | Any third-party drone contractor's GCAA license and insurance validated before contract award | Vendor prequalification file includes GCAA license copy and insurance certificate | Procurement/HSE | Prior to contract award |
| 33 | Regulatory Compliance & GCAA Registration | Register of all authorized UAVs (serial number, model, owner) maintained on site | Updated UAV asset register with serial numbers cross-checked monthly | Site Admin | Monthly |
| 34 | Regulatory Compliance & GCAA Registration | Flight logs retained for minimum regulatory period per GCAA CAR-Part IX record-keeping requirement | Digital/physical flight log archive accessible for audit for required retention period | Drone Operator | Ongoing |
| 35 | Flight Authorization & Permit-to-Fly | Permit-to-Work/Permit-to-Fly issued for each individual drone flight on site | Signed PTF form referencing date, purpose, area, pilot name retained in daily log | Site Engineer | Each flight |
| 36 | Flight Authorization & Permit-to-Fly | Flight plan submitted and approved 24 hours in advance for flights near sensitive/restricted infrastructure | Approved flight plan with sign-off from Project Manager and security lead | Project Manager | 24h prior to flight |
| 37 | Flight Authorization & Permit-to-Fly | Coordination confirmed with nearby airports/heliports per GCAA minimum distance requirements | Written confirmation or air traffic notification reference number on file | Drone Operator | Each flight near aviation facilities |
| 38 | Flight Authorization & Permit-to-Fly | Emergency contact numbers for GCAA, Police Aviation Unit and Civil Defence displayed at ground control station | Photo of posted emergency contact card at GCS location | HSE Officer | Weekly |
| 39 | Flight Authorization & Permit-to-Fly | Weather conditions (wind speed, visibility) verified against manufacturer limits before takeoff | Pre-flight weather log entry with recorded wind speed/visibility values | Drone Operator | Each flight |
| 40 | Flight Authorization & Permit-to-Fly | Flight area cordoned and ground personnel briefed prior to takeoff/landing | Toolbox talk attendance sheet and photo of cordon/barricades | Site Supervisor | Each flight |
| 41 | Flight Authorization & Permit-to-Fly | Maximum altitude limit (per GCAA/NOC conditions) programmed into flight controller geofence | Screenshot of geofence altitude setting prior to flight | Drone Operator | Each flight |
| 42 | Flight Authorization & Permit-to-Fly | Night flight operations (if any) have specific written approval referencing anti-collision lighting compliance | Night flight approval letter and lighting inspection checklist | HSE Manager | Each night flight |
| 43 | Restricted & Sensitive Area Awareness | Buffer distance maintained from military, government, and critical infrastructure sites per GCAA restricted zone list | Map overlay showing flight path outside buffer zones, verified by HSE | Drone Operator | Each flight |
| 44 | Restricted & Sensitive Area Awareness | No flights conducted over neighboring private properties without documented consent to prevent unauthorized photography claims | Signed neighbor consent form or confirmation flight path avoids third-party property | Project Manager | Prior to flight near boundary |
| 45 | Restricted & Sensitive Area Awareness | Camera/gimbal orientation restricted to project site boundary during flight to avoid capturing adjacent properties | Post-flight footage review log confirming no extraneous property captured | Drone Operator | Each flight |
| 46 | Restricted & Sensitive Area Awareness | Staff briefed that photographing government buildings, military installations, or airports is a criminal offence under UAE Federal Law | Signed acknowledgement/toolbox talk record on UAE photography law | HSE Officer | Induction and annually |
| 47 | Restricted & Sensitive Area Awareness | List of nearby sensitive locations (embassies, military bases, airports) mapped and communicated to all camera/drone users | Sensitive-location map distributed and acknowledged by site team | HSE Manager | Prior to mobilization |
| 48 | Unauthorized Photography & Personal Device Control | Policy prohibiting unauthorized photography/videography on site (personal phones, cameras) communicated at induction | Signed induction record referencing photography policy clause | HR/HSE | Induction |
| 49 | Unauthorized Photography & Personal Device Control | Visitors and subcontractors required to declare and register cameras/recording devices at gate | Visitor device declaration log at site entrance | Security Officer | Each visit |
| 50 | Unauthorized Photography & Personal Device Control | Signage posted at site entrances stating 'No Unauthorized Photography/Filming' in Arabic and English | Photograph of posted bilingual signage at all entry points | HSE Officer | Monthly inspection |
| 51 | Unauthorized Photography & Personal Device Control | Any authorized photography (marketing, progress documentation) requires written approval from Project Director | Approved photography request form with date/purpose/photographer name | Project Director | Each occurrence |
| 52 | Unauthorized Photography & Personal Device Control | Incidents of suspected unauthorized photography reported immediately to site security and Dubai/Abu Dhabi Police as applicable | Incident report with police reference/complaint number where filed | Security Officer | Immediate, upon occurrence |
| 53 | Unauthorized Photography & Personal Device Control | CCTV coverage of site perimeter reviewed periodically to detect unauthorized recording activity by outsiders | CCTV review log with findings and corrective actions recorded | Security Manager | Weekly |
| 54 | Unauthorized Photography & Personal Device Control | Data/footage captured by approved drones stored securely with access control to prevent leakage or misuse | Access-controlled storage system audit log showing restricted permissions | IT/HSE Manager | Monthly |
| 55 | Suspicious/Unidentified Drone Sighting Response | Procedure established for reporting sighting of unidentified/unauthorized drone over site to Police non-emergency and 999 emergency lines | Documented SOP with police contact numbers and escalation steps | HSE Manager | Reviewed annually |
| 56 | Suspicious/Unidentified Drone Sighting Response | Personnel trained to record time, direction, altitude and description of unidentified drone without attempting to disable it | Training attendance record and drone-sighting report template | HSE Officer | Induction and annually |
| 57 | Suspicious/Unidentified Drone Sighting Response | Unidentified drone sighting logged in incident register within one hour of occurrence | Incident register entry with timestamp and reporting officer name | Site Supervisor | Immediate/each occurrence |
| 58 | Suspicious/Unidentified Drone Sighting Response | Site management notified NCEMA-aligned emergency communication protocol activated for security-related drone incidents near critical works | Notification log showing chain of communication followed | Project Manager | Each occurrence |
| 59 | Suspicious/Unidentified Drone Sighting Response | Photographic/video evidence of unidentified drone captured where safely possible for police investigation | Evidence file (photo/video) with metadata timestamp submitted to authorities | Security Officer | Each occurrence |
| 60 | Suspicious/Unidentified Drone Sighting Response | Work suspended in affected area if unidentified drone poses credible safety threat, pending police clearance | Work suspension record with resumption authorization from Project Manager | Site Supervisor | Each occurrence |
| 61 | Ground Control Station & Operational Safety | Ground control station positioned in a safe, unobstructed area away from vehicular traffic and site hazards | GCS location assessment checklist completed pre-flight | Drone Operator | Each flight |
| 62 | Ground Control Station & Operational Safety | Visual observer assigned to maintain line-of-sight with UAV throughout flight where required by GCAA category | Visual observer assignment recorded in flight log | Drone Operator | Each flight |
| 63 | Ground Control Station & Operational Safety | Pre-flight equipment inspection (battery, propellers, GPS lock, firmware) completed and documented | Completed pre-flight checklist form signed by pilot | Drone Operator | Each flight |
| 64 | Ground Control Station & Operational Safety | Battery storage and charging conducted per manufacturer fire-safety guidance, away from flammable materials | Battery storage area inspection checklist | HSE Officer | Weekly |
| 65 | Ground Control Station & Operational Safety | Post-flight debrief conducted covering any anomalies, near-misses, or airspace incursions | Post-flight debrief form with anomalies logged and closed out | Drone Operator | Each flight |
| 66 | Ground Control Station & Operational Safety | Maintenance and calibration schedule for UAVs followed per manufacturer recommendations | Maintenance log with calibration dates and technician sign-off | Equipment Custodian | Per manufacturer schedule |
| 67 | Third-Party & Public Interface Management | Public/adjacent community notified in advance where drone flights may be visible from outside site boundary | Notification letter/community notice with distribution record | Community Liaison Officer | Prior to campaign |
| 68 | Third-Party & Public Interface Management | Complaints from public or neighboring facilities regarding drone activity logged and investigated within 24 hours | Complaint register with investigation outcome and closure date | HSE Manager | Within 24h of complaint |
| 69 | Third-Party & Public Interface Management | Coordination with Dubai Police Aviation Unit / Abu Dhabi Police Air Wing maintained for any special event or high-profile flights | Coordination email/letter reference number on file | Project Manager | Each special event |
| 70 | Third-Party & Public Interface Management | Subcontractors operating their own drones vetted for GCAA compliance before being permitted on site | Subcontractor drone compliance checklist completed prior to access | HSE Manager | Prior to subcontractor mobilization |
| 71 | Third-Party & Public Interface Management | Media or marketing drone footage reviewed and approved before external publication to avoid disclosing sensitive project/security details | Approval sign-off record from Project Director prior to publication | Project Director | Each publication |
| 72 | Training, Awareness & Records Management | Annual refresher training conducted for drone pilots covering GCAA regulation updates and UAE photography law | Training attendance sheet and certificate renewal record | HSE Manager | Annually |
| 73 | Training, Awareness & Records Management | Toolbox talk delivered to all site staff on identifying and reporting unauthorized drones or photography | Toolbox talk record with topic, date, and attendee signatures | Site Supervisor | Quarterly |
| 74 | Training, Awareness & Records Management | Emergency response drill conducted simulating unauthorized/hostile drone incursion including police notification | Drill report with timing, participants, and lessons-learned log | HSE Manager | Semi-annually |
| 75 | Training, Awareness & Records Management | Audit of drone operation records (permits, flight logs, incident reports) conducted to verify regulatory compliance | Internal audit report with findings and corrective action tracker | HSE Auditor | Quarterly |
| 76 | Training, Awareness & Records Management | All drone-related documentation (permits, NOCs, insurance, logs) retained in a centralized, controlled document register | Document control register with version history and retrieval access log | Document Controller | Ongoing |
| 77 | Training, Awareness & Records Management | Lessons learned from drone-related incidents shared across projects to update the checklist and SOP | Lessons-learned bulletin distributed and acknowledgement records collected | HSE Manager | After each incident/annually |
| 78 | Insurance, Liability & Legal Documentation | Third-party property damage liability clause reviewed by legal counsel for all drone contracts | Legal review memo confirming liability clause adequacy on file | Legal/Contracts Manager | Prior to contract execution |
| 79 | Insurance, Liability & Legal Documentation | Chain of custody for drone-captured data/images documented to support any legal or regulatory inquiry | Chain of custody log with handler names and timestamps | Document Controller | Each flight campaign |
| 80 | Insurance, Liability & Legal Documentation | Data protection compliance verified for any images containing identifiable individuals per UAE data protection law | Data protection compliance checklist completed and signed | Legal/Compliance Officer | Each flight campaign |
| 81 | Insurance, Liability & Legal Documentation | Written client authorization obtained confirming scope of aerial photography/videography permitted on project | Signed client authorization letter defining scope and boundaries | Project Manager | Prior to each campaign |
| 82 | Insurance, Liability & Legal Documentation | Non-disclosure agreement in place for external drone service providers handling sensitive site imagery | Signed NDA on file for each third-party provider | Procurement Manager | Prior to engagement |
| 83 | Insurance, Liability & Legal Documentation | Retention and disposal schedule defined for drone footage to prevent unauthorized long-term storage | Retention/disposal policy document with disposal log entries | IT/HSE Manager | Reviewed annually |
| 84 | Incident Reporting & Corrective Action | Any GCAA regulation breach or airspace incursion reported to GCAA within required notification timeframe | Incident report copy with GCAA acknowledgment reference number | HSE Manager | Within 24h of occurrence |
| 85 | Incident Reporting & Corrective Action | Root cause analysis conducted for any drone-related near-miss or unauthorized photography incident | RCA report with corrective and preventive actions assigned | HSE Manager | Within 5 working days of incident |
| 86 | Incident Reporting & Corrective Action | Corrective actions from drone incidents tracked to closure with verification of effectiveness | Corrective action tracker with closure verification sign-off | HSE Manager | Ongoing until closure |
| 87 | Incident Reporting & Corrective Action | Statistics on drone flights, incidents and unauthorized photography attempts compiled and reviewed in monthly HSE meeting | Monthly HSE report including drone/photography statistics section | HSE Manager | Monthly |
| 88 | Incident Reporting & Corrective Action | Disciplinary procedure applied consistently for personnel found conducting unauthorized photography or unapproved drone flights | Disciplinary action record referencing policy clause breached | HR Manager | As required, each occurrence |
Each checkpoint records Status (Yes / No / N/A), Comments, Corrective Action and Sign-off. Switch to Complete in-app to fill it here, or download the blank version to complete on site.
Next step
Turn this into evidence you can hand over
Replace scattered spreadsheets and WhatsApp threads with one HSE operations system built around UAE authority expectations.
- Built around UAE authoritiesADOSH-SF, Trakhees, DM, DCD, MOIAT and ISO 45001 structures.
- Usable the same dayTemplates and registers are pre-filled with your company details.
- Evidence, not just formsEvery record carries dates, signatures and an export you can hand over.