Drone Rules in Italy: ENAC, D-Flight Registration and the Privacy Question

Flying a drone in Italy raises two separate legal questions, and they have different answers. The first is an aviation question: is this flight allowed, and does the operator meet ENAC's registration and licensing requirements? The second is a privacy question: is it lawful to record whatever the drone's camera actually captures? A flight can clear the first question and still fail the second.

This page covers private and recreational drone use in Italy. It does not cover commercial or professional UAS operations in detail, which carry additional operator-certification requirements beyond the scope here.

Information verified on 21 July 2026. This page provides general legal information and does not constitute legal advice for an individual situation.

ENAC and the EU rules that apply in Italy

ENAC, the Ente Nazionale per l'Aviazione Civile, is Italy's civil aviation authority for unmanned aircraft (APR, aeromobili a pilotaggio remoto, commonly called UAS or drones). ENAC does not write a separate Italian drone code; it applies the EU framework directly, principally Commission Implementing Regulation (EU) 2019/947 of 24 May 2019 on the rules and procedures for the operation of unmanned aircraft, together with the linked Delegated Regulation (EU) 2019/945 on drone product requirements. Because the underlying rule is an EU regulation, the substance is broadly the same across member states; ENAC's role is applying, supervising and enforcing it in Italy, including through the national D-Flight portal below.

The three categories: Open, Specific, Certified

Reg. (UE) 2019/947 sorts every drone operation into one of three categories, each with its own requirements.

Open covers low-risk flights that need no prior authorisation from ENAC. It splits into three subcategories, A1, A2 and A3, distinguished by the drone's weight class and how close the flight may come to uninvolved people; lighter drones and greater distance from people generally sit in the less restrictive subcategories.

Specific covers higher-risk operations that fall outside the Open category's limits. These need either an operational authorisation from ENAC or a declaration of compliance with one of the standard scenarios ENAC and EASA publish, submitted through the D-Flight portal.

Certified covers the highest-risk operations, such as flights involving assemblies of people, the carriage of dangerous goods, or the transport of people. These require certified equipment, a certified operator and a licensed remote pilot, closer in structure to conventional civil aviation than to a hobbyist flight.

D-Flight registration and the QR-code identification

Registration as a UAS operator on the D-Flight portal, and applying the resulting European operator identification code in QR-code form to the drone, is mandatory for essentially every operator flying in Italy. This is an aviation-safety and traceability requirement, separate from any data-protection question the flight might also raise.

The 250-gram and camera threshold

The main exemption from registration is narrow: a drone weighing under 250 grams that has no camera or other audio or video recording device on board. Below that weight and without a recording device, an operator can fly without D-Flight registration or the QR-code marking.

That exemption disappears as soon as a camera is on board, regardless of the drone's weight. A sub-250-gram drone equipped with a camera still needs D-Flight registration and the QR-code identifier; it is the recording capability, not the weight class alone, that ENAC treats as triggering the requirement. Most consumer drones sold with an integrated camera fall on this side of the line.

Two separate questions: flying legally and filming legally

Meeting every ENAC requirement above answers only whether the flight itself is authorised. It says nothing about whether recording, keeping or sharing what the camera captured is lawful, a separate question governed by ordinary Italian privacy law rather than aviation rules.

The Garante per la protezione dei dati personali maintains dedicated guidance on drones and privacy, including material aimed at recreational use, and applies the same logic it uses for a fixed home security camera: personal or household use of footage is not automatically exempt from data-protection duties, and that exemption depends on the footage staying within the operator's own personal or domestic sphere. A camera looking down from above a garden fence or a rooftop is, by its nature, far more likely to capture a neighbour's property or public space than a camera fixed to a doorway, which makes the household exemption harder to rely on for an aerial camera than for a comparable ground-based one.

Once footage extends beyond that personal sphere, either because it captures identifiable people who are not the operator's household, or because it is shared or published, ordinary GDPR and Codice Privacy duties apply: a lawful basis, proportionality, and, in many cases, an informativa. The same conduct can also raise the criminal exposure described for other cameras: art. 615-bis c.p. punishes improperly obtaining images or information about another person's private life in a protected space by means of a recording device, and art. 614 c.p. addresses violation of a private dwelling.

Scenario: a drone camera over the garden fence

An operator flies a camera-equipped drone under 250 grams over their own garden to photograph the property for a listing. Because the drone carries a camera, D-Flight registration and the QR-code identifier are required regardless of the drone's light weight.

If the same flight also captures, even incidentally, a neighbour's garden, windows, or the people in it, that portion of the footage sits outside the personal-use logic that applies to a fixed home camera aimed only at one's own property. The aviation side of the flight can be entirely compliant while the footage still raises the privacy and, potentially, art. 615-bis c.p. questions above; narrowing the flight path and framing to the operator's own property is the aerial equivalent of narrowing a ground camera's angle.

For the wider Italian privacy framework this fits inside, see home security cameras in Italy and the Garante per la protezione dei dati personali. For the site's fuller Italy coverage, see the Italy hub.

Frequently Asked Questions

Do I need a licence to fly a drone in Italy?

It depends on the category of flight. Most recreational flying sits in the Open category, which needs no prior ENAC authorisation but still requires operator registration on D-Flight, a QR-code identifier on the drone, and a pilot attestation for most drone classes. Specific and Certified category operations need an ENAC authorisation, a declaration of compliance, or certification, depending on the operation.

Do I need to register my drone if it weighs less than 250 grams?

Only if it has no camera or other recording device on board. A drone under 250 grams with a camera still needs D-Flight registration and the QR-code identifier; the recording capability, not the weight alone, triggers the requirement.

What is D-Flight?

D-Flight is the Italian portal where drone operators register, obtain their QR-code identification, check permitted and restricted flight zones, and submit declarations of compliance for Specific category operations.

Is it legal to fly a drone over my neighbour's garden?

The flight itself may be permitted under ENAC's aviation rules, but capturing images of a neighbour's property or identifiable people on it is a separate privacy question. Footage that extends beyond the operator's own personal or domestic use can require a lawful basis and can raise exposure under art. 615-bis c.p., the same rule that applies to a ground-based camera pointed at someone else's property.

Can I film people with my drone without their permission?

Filming strictly within your own personal or domestic use may fall inside the same household exemption that applies to a home security camera, but a drone's aerial view makes it more likely to capture identifiable people or property beyond that scope. Once it does, ordinary GDPR and Codice Privacy duties, and potentially art. 615-bis c.p., can apply.

What is the difference between the Open, Specific and Certified categories?

Open covers low-risk flights needing no prior ENAC authorisation, split into A1, A2 and A3 by weight and distance from people. Specific covers higher-risk flights needing an ENAC authorisation or a declaration of compliance with a standard scenario. Certified covers the highest-risk operations, such as carrying passengers or dangerous goods, requiring certified equipment, a certified operator and a licensed pilot.

Does flying legally under ENAC rules mean my footage is automatically GDPR compliant?

No. ENAC's rules govern whether the flight itself is authorised. Whether the footage captured during that flight is lawful to record, keep or share is judged separately under Italian data-protection and privacy law, and a fully compliant flight can still capture footage that is not compliant to keep or share.