The global economy stands on the cusp of a transformative era powered by the development of low-altitude airspace. Recognized as a pivotal emerging growth engine, the low-altitude economy’s deep integration with geospatial information, particularly through the application of UAV drone surveying and mapping technology, has demonstrated immense potential and a profound enabling effect. This technology represents a sophisticated convergence of remote sensing, Geographic Information Systems (GIS), Global Navigation Satellite Systems (GNSS), and advanced sensor payloads, facilitating a comprehensive digital and intelligent upgrade across the entire geospatial data lifecycle—from acquisition and processing to analysis and application. In critical domains such as next-generation foundational surveying, territorial spatial planning, 3D real-scene city modeling, natural resource monitoring, and emergency response, UAV drone technology now plays an indispensable and core role, effectively bridging the gaps in efficiency, accuracy, and cost associated with traditional surveying methodologies.
From an industrial development perspective, UAV drone surveying has entered a phase of rapid expansion. According to data from the China Association for Geospatial Information and industry reports, the domestic market size for UAV drone operations within the geomatics sector sustained an average annual growth rate (AAGR) of 35% between 2022 and 2024. By 2024, the overall market value surpassed 8 billion RMB, accounting for approximately 30% of the industrial-grade UAV drone application market. More strikingly, the volume of work performed by UAV drones has comprehensively surpassed traditional methods, constituting over 60% of the total surveying workload.
However, beneath this prosperity lie significant and often overlooked safety and security hazards. The widespread, large-scale adoption of UAV drones has transformed potential, localized technical issues into systemic, overarching governance challenges. In February 2025, the national security authority publicly issued a warning, explicitly identifying illegal aerial surveying and mapping activities conducted by UAV drones as an emerging threat to national security. This elevation of the issue underscores that the security of UAV drone geomatics has transcended mere industry management, ascending to a matter of strategic national importance. Therefore, systematically identifying, scientifically assessing, and effectively preventing and controlling the safety risks associated with UAV drones in geomatics is not only crucial for the sector’s healthy and sustainable development but also an urgent requirement for fortifying national security barriers and ensuring the stable, long-term growth of the low-altitude economy.
Deconstructing Safety and Security Risks in UAV Drone Geomatics
The risks associated with UAV drone operations in geomatics are multifaceted, permeating every stage of the workflow and extending into the realm of data governance and regulatory compliance.
1. Geospatial Data Security Risks
Data security vulnerabilities exist throughout the entire data lifecycle: acquisition, transmission, storage, usage, and sharing.
- Acquisition & Transmission: A segment of commercially available UAV drones lacks mandatory encryption capabilities. To prioritize transmission efficiency, some devices default to plaintext transmission protocols, making raw geospatial data highly susceptible to interception and theft by third-party equipment. This can lead to the exfiltration of large volumes of high-precision geographical information.
- Storage: Some organizations store sensitive or classified data on unencrypted servers, removable hard drives, or even public cloud storage platforms. This practice carries significant risks of data leakage due to device loss or cyber-attacks targeting the storage platform.
- Usage & Sharing: The absence of robust data access approval systems allows personnel to copy data arbitrarily. Furthermore, data is sometimes improperly shared with unqualified third parties for the sake of collaborative convenience, exponentially amplifying the risk of exposure.
The risk of data tampering is equally severe and can be quantified in terms of potential loss. Consider a scenario where manipulated data leads to project deviations. The financial impact can be modeled as:
$$ L_{tamper} = C_{rework} + C_{delay} + C_{reputation} $$
Where \( L_{tamper} \) is the total loss, \( C_{rework} \) is the cost of corrective work, \( C_{delay} \) is the cost associated with project delays, and \( C_{reputation} \) is the intangible cost of damaged credibility. Instances have occurred, such as in an urban planning project, where hackers altered road coordinate data obtained via UAV drone survey, causing a 1.5-meter deviation between construction and design plans and resulting in direct economic losses exceeding 2 million RMB. More egregiously, some surveying entities have deliberately modified non-compliant data to pass project acceptance or gain economic benefit. Such acts not only cause financial harm but can also misguide government decision-making and impact public welfare.
A summary of common data lifecycle vulnerabilities is presented below:
| Data Lifecycle Stage | Common Security Vulnerability | Potential Consequence |
|---|---|---|
| Acquisition & Transmission | Plaintext data transmission; Lack of link encryption | Real-time data interception and theft |
| Storage | Use of unencrypted media; Unsecured cloud storage | Bulk data leakage from theft or cyber-attack |
| Usage & Sharing | No access control/audit trails; Sharing with unauthorized parties | Unauthorized data duplication and dissemination |
| Integrity | Insufficient checksums; Malicious or negligent alteration | Flawed decision-making based on corrupted data |
2. Regulatory Non-Compliance and Operational Risks
Operations with UAV drones for surveying are governed by laws and regulations including the Surveying and Mapping Law, the Interim Regulations on Flight Management of Unmanned Aircraft, and the Surveying Qualifications Management Measures. These mandate that entities and individuals engaged in such activities must possess the relevant qualifications and obtain necessary flight permits and certificates.
Industry statistics reveal a massive scale of activity: by the end of 2024, there were over 2.17 million registered UAV drones in China, a year-on-year increase of 98.5%. Licensed UAV drone pilots numbered 247,300, while total annual flight hours reached 26.667 million. Within the geomatics sector, over 21,600 UAV drone surveying systems were in use.
Despite these regulations, the proliferation of commercial UAV drones and open-source geospatial software has significantly lowered the technical barrier to entry, attracting a flood of non-professional operators. Common violations include:
- Unqualified entities or individuals undertaking surveying projects through illicit subcontracting or “affiliation” schemes.
- A critical deficiency in the integrated competency of “flight operation + surveying expertise + security awareness” among operators, even within qualified companies.
- Willful violation of airspace regulations—flying without authorization, exceeding approved altitude or boundaries, or even using technical means to crack or disable the built-in Geofencing (“electronic fence”) systems. These actions pose direct threats to national air defense, aviation safety, and geospatial information security.
The compliance gap can be visualized through a simple model comparing the growth in hardware versus qualified human resources:
$$ \text{Compliance Gap Index (CGI)} = \frac{\text{Growth Rate of Registered UAV drones}}{\text{Growth Rate of Licensed Pilots}} $$
A CGI value significantly greater than 1 indicates a systemic trend where the proliferation of UAV drone hardware outpaces the development of a qualified, regulated operator base, inherently increasing non-compliance risk.
Root Causes Underlying the Security Risks
The aforementioned risks stem from systemic shortcomings in the legal, regulatory, and professional ecosystem surrounding UAV drone geomatics.
1. Immature Legal and Standardization Framework
While a series of laws and regulations have been enacted, the rapid pace of technological innovation in UAV drones, with ever-new models and complex application scenarios, means legal updates chronically lag behind. Key deficiencies include:
- Ambiguous Data Classification: Lack of concrete standards for defining sensitive surveying data (e.g., 3D data within 10km of military zones, coordinates of critical infrastructure) leads to confusion among surveying units about what constitutes classified information, creating risks of unintentional disclosure.
- Incomplete Technical Standards: Standards for secure data collection, processing, and sharing—such as encryption formats and secure transmission protocols—are not fully developed. Inconsistent data handling processes across different organizations create substantial security loopholes.
- Inadequate Deterrence: Penalties for illegal surveying activities predominantly involve fines (typically ranging from 10,000 to 100,000 RMB) and equipment confiscation. The severity of these penalties is disproportionately weak compared to the potential national security losses incurred, failing to create an effective deterrent.
The relationship between penalty severity \( P \), potential gain from violation \( G \), and probability of getting caught \( \rho \) determines the rational choice of a potential violator. A violation is more likely if the expected value of violating exceeds that of complying:
$$ \rho \times P < G $$
Current penalty levels \( P \) are often too low relative to commercial gains \( G \) from shortcuts or illegal activities, encouraging risk-taking behavior.
2. Fragmented and Inefficient Regulatory Oversight
Oversight of UAV drone surveying involves multiple, often disjointed, authorities responsible for “airspace approval, surveying qualification review, and data security supervision.”
- Airspace Management Challenges: While many UAV drone surveys occur below the 120-meter ceiling to avoid controlled airspace, operations around or above tall structures require prior application to air traffic control (ATC). Lengthy approval processes sometimes drive surveying units to conduct unauthorized flights to meet project deadlines. Crucially, the geomatics authorities often lack access to ATC application/approval data, hindering their ability to verify the compliance of ongoing UAV drone survey activities, complicating grassroots enforcement.
- Departmental Silos and Coordination Gaps: Regulatory responsibilities are dispersed among Civil Aviation (flight safety/airspace), Natural Resources/Geomatics authorities (qualifications/data security), and Public Security (public safety violations). There is a notable lack of常态化 information sharing, joint law enforcement, and case transfer mechanisms. Blurred jurisdictional boundaries can lead to regulatory vacuums, where each department assumes another is responsible. For instance, the process for geomatics authorities to transfer suspected illegal surveying cases to public security is often protracted (averaging 15-30 workdays), allowing culprits time to destroy evidence and severely undermining enforcement efficacy.
- Inherent Enforcement Difficulties: The flexibility and low observability of UAV drone operations make it inherently challenging for regulators to monitor all activities comprehensively, allowing some violations to go undetected.
The following table clarifies the fragmented regulatory landscape:
| Regulatory Aspect | Primary Responsible Authority | Key Challenge |
|---|---|---|
| Flight Airspace & Safety Approval | Civil Aviation / Air Traffic Control | Approval delays; Lack of info-sharing with geomatics authorities |
| Surveying Qualifications & Project Oversight | Natural Resources / Geomatics Authorities | Cannot independently verify flight legality; Slow case transfer |
| Public Safety & Illegal Flight Interdiction | Public Security Departments | Relies on other departments for leads on non-public-safety violations (e.g., illegal mapping) |
| Data Security & Classification | Geomatics Authorities, State Secrecy Agencies | Ambiguous data classification standards hinder enforcement |
3. Absence of a Robust Industry Self-Regulation Ethos
The UAV drone surveying industry lacks mature self-discipline mechanisms. Driven by profit, some companies engage in practices like hiring unqualified personnel, using non-compliant equipment, operating in no-fly zones, or bypassing data security protocols. Industry associations have not yet fully realized their potential in fostering standards, providing comprehensive safety training, and enforcing ethical codes among members. The absence of a strong culture of compliance and security awareness remains a significant vulnerability.
Building a Systemic Risk Prevention and Control Framework
Addressing these interconnected challenges requires a holistic approach combining legal, technological, regulatory, and cultural measures.
1. Fortifying the Legal and Standardization Foundation
The legal framework must be refined to keep pace with technological evolution.
- Clarify and Specify: Laws should explicitly define the responsibilities of all parties in UAV drone surveying. Detailed regulations must mandate the use of encryption for data at rest and in transit, specify secure storage media requirements, and establish strict access control standards. The security requirement for data storage \( S_{storage} \) can be defined as a function of encryption strength \( E \), access control complexity \( A \), and audit trail completeness \( T \):
$$ S_{storage} = f(E, A, T) $$
Regulations should set minimum thresholds for each parameter. - Enhance Penalties and Deterrence: The penalty structure must be overhauled to significantly raise the cost of non-compliance. Beyond fines, penalties should include license revocation, industry entry bans for individuals and entities, and, for severe cases threatening national security, criminal prosecution. The expected cost of violation \( EC_{violation} \) must be increased:
$$ EC_{violation} = \rho \times (P_{monetary} + P_{license} + P_{criminal}) $$
where \( P_{license} \) represents the high cost of losing operational qualifications and \( P_{criminal} \) the threat of imprisonment, making \( EC_{violation} > G \) (the gain from violation) a more likely condition.
2. Building Integrated, Technology-Empowered Oversight Capabilities
A “multi-departmental coordination + full-process coverage” supervisory mechanism is essential.
- Establish Coordinated Governance: Create a permanent cross-departmental coordination body for UAV drone oversight. This body would delineate clear responsibilities and seamless hand-off procedures for the “pre-approval, in-process monitoring, post-event investigation” lifecycle, eliminating blind spots and duplication in enforcement.
- Leverage Technological Solutions for Monitoring: Invest in a multi-layered “space-air-ground” integrated low-altitude monitoring network utilizing radar, RF detection, electro-optical systems, and acoustic sensors.
- Implement Intelligent Platform Governance: Deploy Big Data, AI, and Blockchain in regulatory platforms. AI algorithms can analyze massive flight track data to autonomously flag anomalous patterns (e.g., loitering over sensitive sites, nocturnal ultra-low-altitude flights). Blockchain can provide immutable, traceable records of flight plans, approvals, and enforcement actions.
- Mandate and Harden Geofencing Technology: Regulations should require all UAV drones to be preloaded with the latest, non-removable geofencing data for no-fly and restricted zones. Any attempt to tamper with or disable the geofencing system must trigger an immediate alert to the regulatory platform, providing a technical barrier against incursions into sensitive airspace. The effectiveness \( Eff_{GF} \) of an ideal geofence can be modeled as:
$$ Eff_{GF} = 1 – \frac{N_{breached}}{N_{attempted}} $$
where the goal of regulatory and technical measures is to drive \( N_{breached} \) to zero.
3. Cultivating a Culture of Professionalism and Self-Regulation
The industry must actively build its own integrity mechanisms.
- Develop a Comprehensive Credit Evaluation System: Establish a universal credit rating model for UAV drone surveying enterprises, assessing factors like regulatory compliance, safety investment, operational protocols, data management, incident history, and complaint records. Publicize ratings and link them to incentives (e.g., fast-track approvals for high-rated firms) and sanctions (e.g., industry warnings, intensified scrutiny, recommended license suspension for low-rated ones).
- Prioritize Sustained Education and Training: Industry associations and regulators must leverage key dates (like National Surveying and Mapping Law Publicity Day) for widespread legal education. Associations should organize regular, mandatory training and certification programs for executives, managers, and operators, focusing on airspace law, data confidentiality, safety protocols, and emergency response. Safety certification should be a prerequisite for employment, systematically raising the sector’s overall security competency and consciousness.
The proposed multi-layered risk mitigation framework can be summarized as follows:
| Risk Category | Root Cause | Proposed Mitigation Measure | Expected Outcome |
|---|---|---|---|
| Data Security | Ambiguous standards; Weak technical mandates | Legally mandated encryption & access controls; Clear data classification | Secure data lifecycle; Reduced leakage/tampering |
| Operational Non-compliance | Fragmented regulation; Low penalty deterrence | Cross-departmental coordination body; Harsher, multi-faceted penalties | Cohesive enforcement; Higher expected cost of violation |
| Systemic Governance Gap | Technological monitoring deficit; Lack of industry self-discipline | “Space-Air-Ground” monitoring net; AI/Blockchain platforms; Industry credit system | Proactive, intelligent oversight; Market-driven compliance incentives |
The vigorous development of UAV drone surveying technology is an inevitable trend of technological progress. However, its concomitant safety and security risks are formidable and cannot be underestimated. The governance of UAV drone surveying must abandon fragmented, reactive approaches and embrace a new paradigm of “systemic, comprehensive, and source-focused” governance. Through continuous innovation in institutions, management, and technology, we can fully unleash the immense potential of UAV drone technology to propel the low-altitude economy while effectively preventing and mitigating associated risks. This dual focus is fundamental to safeguarding national geospatial information security and public safety, thereby laying a solid foundation for the positive interplay between high-quality development and a high level of security.