European aviation law is being tested by unauthorised drones, cyberattacks and increasingly autonomous aircraft, aeroTELEGRAPH reported in an interview with an aviation-law expert. The disruptions can close airports, strand passengers and unsettle airline networks, while future air taxis raise unresolved questions over responsibility when software or artificial intelligence replaces direct human control.
A drone incident may qualify as an extraordinary circumstance, potentially removing airlines’ liability for fixed passenger-compensation payments. Their obligations to provide care and, where necessary, alternative transport generally remain, however. The effects can extend across aircraft rotations, crew rosters and passenger handling even when the affected airline did not cause the closure.
Cyberattacks also need not target an aircraft directly. Failures affecting booking platforms, ground handling or other essential services can disrupt operations and raise questions over prevention, responsibility and compensation. European information-security requirements applying from February 2026 cover numerous airlines and other aviation organisations, requiring systematic risk assessment, incident detection and appropriate response.
Existing European rules already address drones, air taxis and other innovative aircraft, but the legal framework traditionally assumes a human directing or supervising the aircraft. In an autonomous-flight failure, responsibility could involve the operator, manufacturer or software developer. The interview presents this as an area where established liability and safety concepts may need to adapt, rather than as a response to a newly identified accident or specific cyberattack.