Signal Scanner · DEFENCE, SECURITY & RESILIENCE

The Authority Gap: Europe's Counter-Drone Defence Hinges on Who May Fire Over Domestic Airspace

Drone incursions have pushed Europe into a counter-drone spending race, but the binding 2026 constraint is legal: who may lawfully detect, track and destroy a drone over a city, airport or power station, and in the few minutes before it acts.

Europe reads its drone problem as a capability problem. Incursions closed airports and overflew bases through 2025; the answer has been money and kit: a drone wall, national procurement in the billions, a NATO push in July. Beneath it sits a more binding constraint. The scarce resource is not sensors or interceptors but legal authority: who may lawfully detect, track and destroy a drone over domestic and civilian airspace, and in what window, being rewritten faster than the hardware arrives. The question for boards: who carries the duty and the liability when a drone appears overhead.

Signal Identification

This is a regulatory pivot, not a technology story: engagement authority over peacetime domestic airspace is moving from a police-only default towards a shared civil-military model, while detection duties fall on operators who cannot lawfully respond. It is visible now in statute and EU documents.

Time horizon: 1–4 years (national engagement-authority laws live in 2026; EDDI initial capability end-2026, full 2027; an EU-level regime debated toward 2030) Plausibility band: High Geographic / Jurisdictional Scope: EU-27 and the UK, concentrated on frontline states (Germany, Poland, the Baltics, Belgium, the Netherlands); NATO framing via Eastern Sentry; spillover to operators continent-wide Sectors exposed: Airports and aviation; ports; energy and grid operators; data centres; counter-UAS industry; insurers; police and military

What's Changing

The incursions have hardened into a dataset. An IISS study logs coordinated UAV activity across Europe from August 2024 to February 2026: of 144 incidents across 13 states, roughly 48% fell over military facilities, 18% over civilian airports and 26% over critical infrastructure, with sightings jumping from four a month to 22.5 a month between September and December 2025 and Germany recording 58 (AeroTime, 02/07/2026). The IISS conclusion is blunt: the campaign exposed gaps in detection, decision-making and legal authority, and no hardware compensates for the absence of political authority to use it (IISS, 02/07/2026).

The visible response is capital. France announced an €8.5 billion investment to lift drone and missile stocks by 400 per cent before 2030, alongside Germany's drone budget and Poland's "drone revolution" (Euronews, 14/04/2026). The Commission's Action Plan on Drone and Counter-Drone Security coordinates member states rather than replacing them, and names National Drone Security Coordinators (European Commission, 11/02/2026); at its Ankara summit NATO unveiled a Drone Edge initiative lifting counter-drone investment and operator training (NATO, 07/07/2026).

Underneath, the law is moving. Germany's amended Luftsicherheitsgesetz, in force since early March, for the first time lets the armed forces use weapons against drones to prevent an especially serious incident, with the Laender police primary and the Bundeswehr handling large drones; a downing is allowed only where an immediate danger to life or critical infrastructure exists (beck-aktuell, 22/04/2026). The clock sets the stakes: airport disruptions more than tripled between January 2024 and November 2025, detection-to-disruption runs under five minutes, and operators can see a hostile drone yet stay barred from acting (ASPI, 25/05/2026).

Where the 144 recorded incursions clustered

0% 25% 50% Military facilities 48% Critical infrastructure 26% Civilian airports 18%

Source basis: IISS dataset of 144 incidents across 13 European states, reported by AeroTime, 02/07/2026. Shares do not sum to 100 as some sites fall outside the three categories.

Disruption Pathway

The pathway runs in three stages. The first is live: national laws granting explicit engagement authority, led by Germany's Luftsicherheitsgesetz and Poland's effects-based model empowering police, border guard and military together. The second, across 2026-2027, is EU coordination without command: coordinators, EDDI reaching initial capability at year-end, and the first detection-and-reporting duties settling onto operators. The third, toward 2030, is the contested prize: a harmonised regime fixing common rules of engagement and liability, or a durable patchwork in which the weakest member sets the bloc's exposure.

Stress concentrates at three joints: the civil-military boundary over populated areas, where downing a drone stays an ultima ratio even once lawful; the operator tier, now the primary sensor of the national air picture yet unable to defeat what it detects; and the sub-five-minute window, too short for peacetime interministerial choreography. Operationally, states are standing up joint coordination centres, such as Germany's drone-defence centre pooling federal and state police with the Bundeswehr (beck-aktuell, 22/04/2026). Legally, the open work is operator duties and liability, the layer the Action Plan leaves to member states (European Commission, 11/02/2026).

Why This Matters

For operators of airports, ports, energy networks and data centres, the drone question is migrating from a physical-security line item to a governance one, upending the assumption that airspace defence is the state's job alone. The operator now owns detection, reporting and resilience, while the authority to engage sits with police or, at the top, the military, on a clock measured in minutes. That split creates a compliance and a liability surface at once: a site that fails to detect, or cannot escalate, will be judged against a standard that did not exist two years ago.

Decision-action posture for this signal: Prepare — the authority regime is being written this cycle and is already live in Germany, but pan-European rules and operator duties are still forming, so build capability now and commit on named legislative triggers, not on the hardware timetable.

Counter-Argument

The strongest objection is that authority is the wrong target. On the IISS reading, the decisive failures are detection and maritime accountability: the drone wall only engages a UAV already inside European airspace, with no mandate over the shadow-fleet vessels that launch it, the report's hardest problem (IISS, 02/07/2026). Legislating military shootdown authority over dense cities risks a crisis-written overcorrection (ASPI, 25/05/2026).

The objection is real but does not dissolve the signal: detection and interdiction reduce how often the authority question is asked; they do not answer it. Once a drone is over a runway or substation inside the window, someone must be legally empowered to act, and fragmentation means the least-prepared jurisdiction sets the bloc's exposure. Authority is the precondition that makes hardware usable.

Implications

This is a durable reconfiguration, not a passing scare. The Action Plan frames counter-drone as a standing readiness task tied to the Defence Readiness Roadmap 2030, a multi-year build not a one-cycle fix (European Commission, 11/02/2026). The inflection window is 2026-2028, while national laws proliferate and the EU decides whether to harmonise or leave a patchwork. Those positioned early are operators, insurers and vendors building to a shared standard; those exposed are single-site operators treating drones as a guarding problem, and jurisdictions whose rules lag their neighbours.

Early Indicators to Monitor

Disconfirming Signals

Strategic Questions

Keywords

Counter-drone; C-UAS; drone wall; European Drone Defence Initiative; rules of engagement; airspace authority; critical infrastructure protection; Luftsicherheitsgesetz; NATO Drone Edge; shadow fleet; hybrid threats; grey zone

Bibliography

Source tiers: Tier 1, governments, regulators and intergovernmental bodies. Tier 2, think-tanks, academic institutes, major consultancies and quality data providers. Tier 3, quality journalism and specialist trade press. Tier 4, vendor, company and practitioner sources, used only as directional corroboration.

This Signal Scan is one component of a Shaping Tomorrow intelligence cycle on Defence, Security & Resilience. Every monitored topic also includes monthly Change Trackers that assess what is materially shifting in momentum, and a quarterly Decision Intelligence briefing that converts the cycle into board-level strategic implications. Cycles may also close with Action Triggers, an end-of-cycle synthesis that reads across the three formats and surfaces patterns no single deliverable carries on its own. Continuous intelligence on this topic is available as a Single-Topic or Multi-Topic programme.

Discuss a Tailored Programme

Prepared by Shaping Tomorrow: 15 July 2026