Guidelines for UAS Operations by Great Lakes Drone Company LLC

Introduction

The FAA encourages all private and commercial UAS operators to adhere to state and local privacy laws and to follow the National Telecommunications and Information Administration (NTIA) Voluntary Best Practices for UAS Privacy, Transparency, and Accountability. The guidelines laid out in this document are important for promoting responsible UAS operations.

Covered Data Definition

Covered data refers to information collected by a UAS that identifies a particular person. If data collected does not link to identifiable personal information, it is not covered data.

Adherence to NTIA Best Practices

Here’s how Great Lakes Drone Company LLC supports and adheres to these guidelines:

  • Inform Others: UAS operators should provide prior notice to individuals regarding potential UAS operations collecting covered data.
    Great Lakes Drone Company LLC has made efforts to contact neighbors in residential areas, offering to show the imagery collected and address concerns.

  • Privacy Policy: Operators should provide an appropriate privacy policy.
    We have a developed privacy policy available on our website and in printed form during missions. It includes:

    • Purposes for collecting covered data (e.g. real estate, industrial inspection)
    • Types of covered data collected (photography, video, audio)
    • Data retention and de-identification practices
    • Entities with whom data may be shared (e.g. real estate agents)
    • Procedures for submitting privacy complaints
    • Response practices for law enforcement requests

  • Care When Operating: Operators should avoid intentionally collecting covered data where individuals have a reasonable expectation of privacy.
    UAS operations focus on customer needs, with incidental collection managed through permissions or data alteration.

  • Minimizing Operations: UAS operations should minimize activities over private property without consent.
    We attempt to contact property owners when collecting images/videos during missions.

  • Data Retention: Operators should avoid retaining collected data longer than necessary.
    Our contracts include a data retention policy to remove unnecessary data from systems.

  • Process for Privacy Concerns: Establish a process for handling privacy concerns and data requests.
    We have a contact form on our website for privacy-related inquiries.

  • Limit Use and Sharing: Consider actions to secure covered data, including:

    • Written security policies about data collection and use.
      Great Lakes Drone Company LLC has established a security policy to ensure data is handled properly.
    • Regular system monitoring for security risks.
      Our systems have firewalls and two-factor authentication for online storage.
    • Employee security training.
      Regular security training is conducted annually for those accessing covered data.
    • Access Limitation.
      Access to covered data is restricted to authorized individuals only.

  • Compliance with Laws: Ensure compliance with UAS laws and regulations through proper processes.
    We strive to understand and adhere to applicable laws in the areas where we operate, despite the complexity of overlapping jurisdictions.