Another emerging technology is the use of Unmanned Aerial Systems (UAS) also known as RPAS and drones. A common feature of UAS is the ability to record video footage.

Where images or other personal data are transmitted from the vehicle back to the pilot (eg a live feed of video footage over Wi-Fi to a smartphone app) then the data should be appropriately protected against interception by using an encrypted wireless communication link. Using an encrypted wireless communication link may also give some protection against potential hijacking of the vehicle.

Where images or other personal data are stored on the vehicle (eg an on-board memory card) then the data should be appropriately protected in the event of loss or theft (eg following a crash). The data can be appropriately protected using encryption.

Additional legal requirements or best practice will include flying RPAS within line of sight, retaining a log of usage, copying data to a secure location and securely destroying data on the device as soon as practical.

The data controller must also consider the security of footage once transferred from the device for longer-term storage.