Camera drones from DJI comply with data protection standards, says TÜV SÜD

According to the German testing and certification authority TÜV SÜD, DJI's most popular camera drones, such as the DJI Mavic 3, the DJI Mini 2, and the DJI Air 2S, fulfill several critical American and European cybersecurity and data privacy regulations.

In independent research, the popular camera drones, the DJI Mavic 3, the DJI Mini 2, and the DJI Air 2S, as well as the DJI Fly App for iOS and Android, were all tested, says DJI in a press release.

It follows independent reviews by Booz Allen Hamilton, FTI Consulting, the United States National Oceanic and Atmospheric Administration, the United States Department of Interior, the United States Department of Homeland Security, U.S. cybersecurity firm Kivu Consulting, and others that examined cybersecurity protocols for DJI drones used in sensitive government and business operations.

“DJI builds strong data protections into all our products, and our Enterprise customers know their professional drones and apps are built from the ground up to protect their photos, videos, and flight logs,” said Christina Zhang, Senior Director of Corporate Strategy at DJI. “With this new TÜV SÜD audit, DJI can offer the same assurance to people around the world who use our consumer products as well. From a small drone in a backyard to a large drone in a life-or-death public safety operation, a broad array of independent experts have shown that DJI products give their users full control over their data.”

DJI camera drones and data security concerns

DJI has come under criticism several times in recent years for purported cybersecurity and data security concerns.

DJI drones that hold potentially sensitive user data, like flight records and video footage, may be accessible to the Chinese authorities.

As a result, the Pentagon wants American government groups to cease utilizing Chinese-made DJI drones. Even some European Countries have raised concerns about the use of DJI drones.

Meanwhile, DJI is doing all it can to earn back the confidence of its users. The Enterprise series drones, which include the DJI Mavic 3 Enterprise and Matrice series drones, are outfitted with the required cybersecurity capabilities, such as a local data mode, onboard Data Security, and encrypted data communication channels.

All of these safeguards must guarantee that potentially sensitive data does not leak and will not be shared with the Chinese government.

As it turns out, DJI's most popular camera drones have a high degree of data breach security. TÜV SÜD, a German inspection and certification authority, recently examined the DJI Mavic 3, the DJI Mini 2, and the DJI Air 2S. The DJI Fly app was also investigated.

As a result, the DJI drones and applications fulfill critical American and European cybersecurity and data privacy regulations.

“DJI Drones have comprehensive security features based on standards of practice, and the sensitive information in communication process of App DJI Fly v1.5.10 (iOS & Android), as well as cloud flight data synchronization process of DJI Drones, are both encrypted and transmitted through SSL, which can avoid most common security risks,” the report concludes. “The cybersecurity capabilities and privacy protection aspects of DJI Drone meet the requirements of NIST IR 8259 and ETSI EN 303645 standards covered by this test.”

TÜV SÜD also performed an independent examination of the DJI Matrice 300, DJI Pilot app, and DJI Assistant 2 computer software.

Consequently, these devices have significant security safeguards to safeguard sensitive data, and the system conforms with a variety of relevant NIST and ETSI cybersecurity requirements.