Data Privacy for DJI Drones: Expanded Protections for Government and Commercial Drone Operators
DJI continues to beef up their platform security, announcing new changes to increase data privacy for DJI government and commercial users.
dronelife.com
Data Privacy for DJI Drones: Expanded Protections for Government and Commercial Drone Operators
Posted By: Miriam McNabbon: September 09, 2020
Amid ongoing trade tensions between China and the U.S. that has led to concerns about data privacy for DJI drones, DJI continues to enhance the security of their platform. Today, DJI announced that they would make Local Data Mode – a feature that eliminates entirely the need for internet connectivity, completely preventing the transmission of data over the internet – available in the DJI GO4 and DJI Fly flight control apps within a few months.
Users of the DJI Pilot app have been able to use Local Mode for data privacy in DJI drones since 2017: “Today’s commitment to expanding availability of this feature follows an independent review and validation of Local Data Mode and DJI’s drone products by FTI Consulting (FTI), a global leader in cybersecurity,” says a company press release.
A “Kill Switch” Feature
While some consulting firms have independently reviewed data privacy for DJI drones, the findings of firms without a background in drone technology can be misleading. Government concerns over Chinese government involvement in technology companies have become confused with fears over actual vulnerabilities in the platform. With the Local Mode feature, DJI is providing a “kill switch” – with no connection to the internet, the data never leaves the physical storage device, which is in control of the user at all time.
“All DJI drones provide data security protections for their users by empowering them to decide whether and when their drone data is shared externally. Local Data Mode provides government and commercial customers with additional assurance that data generated during drone operations is effectively protected. It is an internet connection “kill switch” feature within DJI’s command and control mobile applications that, when enabled, prevents the app from sending or receiving any data over the internet,” says the press release. “With this feature enabled, drone operators can easily and effectively cut off all network connections from DJI’s mobile applications and prevent any data from being transferred to DJI or other parties.”
The FTI audit confirms the efficacy of the “kill switch” approach. “The FTI audit found that when Local Data Mode was enabled, no data generated by the drone or application was sent externally to infrastructure operated by any third party, including DJI, validating DJI’s assertions about the utility and function of the feature,” says the press release. “FTI also found that using Local Data Mode with the “Allow Map Services” featured enabled, which gives operators additional situational awareness during flight, resulted in data sent and received only to a trusted third-party American mapping provider, Mapbox. FTI’s assessment also confirmed that DJI employs various security best practices.”
“For commercial and government customers who generate highly sensitive data and operate with rigorous data security protocols, Local Data Mode provides simple and effective operator-controlled assurance that no data from their flights will be transmitted over the internet,” said Brendan Schulman, Vice President of Policy and Legal Affairs at DJI. “This expanded capability for DJI customers builds on the results of FTI’s independent analysis and demonstrates yet again that DJIempowers its customers to protect their data.”
How Local Data Mode Works
