Data Protection and Cybersecurity Governance for eVTOL Systems in the UAE: Comparative Lessons from the EU and US.

Vol.20,No.2(2026)

Abstract

The article investigates the data governance challenges arising from the integration of electric vertical take-off and landing (eVTOL) systems into the United Arab Emirates’ emerging urban air mobility ecosystem. As eVTOL operations rely on continuous streams of biometric, geolocation and operational telemetry data, existing legal instruments, particularly the UAE Personal Data Protection Law (Federal Decree by Law No. (45) of 2021), national cybersecurity strategies and General Civil Aviation Authority (GCAA) advisories, remain underprepared to regulate these high-risk data flows. The article examines the extent to which UAE frameworks can accommodate the unique risks posed by autonomous, data-driven aviation, including the processing of sensitive passenger data, real-time cross-border transfers, AI-based navigation decisions and the vulnerability of interconnected systems to cyberattacks. Through a doctrinal analysis, it draws comparative insights from the European Union’s integrated data protection and aviation cybersecurity model and the United States’ decentralised, innovation-led approach. The article argues that aviation-specific data governance standards, enhancing algorithmic accountability and strengthening cybersecurity obligations are essential steps for aligning technological ambition with public safety. It concludes that a coherent, forward-looking regulatory model will be critical for ensuring trust, accountability and operational resilience as the UAE advances its eVTOL deployment plans.


Keywords:
data protection; flying taxis; eVTOL; cybersecurity; aviation law; urban air mobility; algorithmic accountability

Pages:
185 – 220
Author biographies

Sumaiya Firoz Nomani

a:1:{s:5:"en_US";s:19:"University of Dubai";}

Research Assistant and Teaching Faculty, College of Law, University of Dubai

Dr Mohammad Rababa

University of Dubai

Assistant Professor, College of Law, University of Dubai

Dr Hussain Al-Ahmad

University of Dubai

Vice President of Academic Affairs, University of Dubai

Dr Husameldin Mukhtar

University of Dubai

Associate Professor, College of Engineering & IT, University of Dubai

Burkhard Schafer

University of Edinburgh

Professor, School of Law, University of Edinburgh

References

[1] Abeyratne, R. (2024) Advanced Air Mobility: Transcending the Frontiers of Aviation Law. Frontiers in Law, 90, 91.

[2] Abouahmed, A., Kandeel, M. and Zakaria, A. (2024) Personal Data Protection In The United Arab Emirates and the European Union Regulations. Journal of Governance & Regulation, 195, 196.

[3] Abu-Matar, M. and Davies, J. Data Driven Reference Architecture for Smart City Ecosystems (17 IEEE Smart World, Ubiquitous Intelligence & Computing, Advanced & Trusted Computed, Scalable Computing & Communications, Cloud & Big Data Computing, Internet of People and Smart City Innovation, San Francisco, USA) Available from: https://ieeexplore.ieee.org/abstract/document/8397556 [Accessed 3 November 2025.]

[4] Ahern, D. (2025) The New Anticipatory Governance Culture for Innovation: Regulatory Foresight, Regulatory Experimentation and Regulatory Learning. European Business Organisation Law Review.

[5] Al Khateri, M. and Al Zitawi, D. (2025) Cybersecurity and Protection of Digital Data Privacy in the UAE in the Age of Digital Transformation and Artificial Intelligence. International Journal of Academic Research in Business & Social Sciences, 491, 498.

[6] Al-Fahim, A. and Al-Zaabi, F. (2024) Artificial Intelligence in Law and Ethics in the United Arab Emirates: Balancing Innovation, Regulation, and Cultural Values. Future Publishing House.

[7] Al-Rubaye, S. et al. (2023) Advanced Air Mobility Operation and Infrastructure for Sustainable Connected eVTOL Vehicle. 7 Drones 1, 2.

[8] Alqahtani, H. and Kumar, G. (21024) Machine learning for enhancing transportation security: A comprehensive analysis of electric and flying vehicle systems. 29 Engineering Applications of Artificial Intelligence.

[9] Alshabibi, M. et al. (2024) Forensic Investigation, Challenges, and Issues of Cloud Data: A Systematic Literature Review. 13 Computers 1, 3.

[10] Andraško, J. et al. (2021) Sustainable Data Governance for Cooperative, Connected and Automated Mobility in the European Union. 13 Sustainability 1, 21.

[11] Andritsos, K. et al. (2022) What is in a Name: Defining Key Terms in Urban Air Mobility. Journal of Intelligent & Robotic Systems.

[12] Aposporis, P. (2024) A review of global and regional frameworks for the integration of an unmanned aircraft system in air traffic management. 24 Transportation Research Interdisciplinary Perspectives 1, 11.

[13] Arafat, M. and Pan, S. (2024) Urban Air Mobility Communications and Networking: Recent Advances, Techniques, and Challenges. 8 Drones 1, 12.

[14] Beduschi, A. (2024) Synthetic data protection: Towards a paradigm change in data regulation? 11 Big Data & Society.

[15] Biswas, K. et al. (2023). Urban Air Mobility: An IoT Perspective. IEEE Internet of Things Magazine, 122, 123.

[16] Brakye, K. and Adam, A. (2025) Cybersecurity Risk Disclosure and Regulatory Compliance: Evaluating Market Sensitivity and Disclosure Effectiveness in U.S. Public Companies EPRA International Journal of Economics, Business and Management Studies.

[17] Brown, N. et al. (2024) Visual and Inertial Datasets for an eVTOL Aircraft Approach and Landing Scenario. 20230016377.

[18] Castaldo, F. et al. (2024) Urban Air Mobility: Organisation and Governance of a Frontier Ecosystem [online] ResearchGate. Available from: https://www.researchgate.net/publication/382021028_Urban_Air_Mobility_Organisation_and_Governance_of_a_Frontier_Ecosystem [Accessed 28 October 2025.]

[19] Chebotareva, A. and others, (2023) Personal data protection in the civil aviation industry: Technological challenges and legal efforts. 2526 Modern Approaches in Engineering and Natural Sciences.

[20] Çınar, E. and Tuncal, A. (2023) The Future of UAVs in Urban Air Mobility: Public Perception and Concerns. Turkish Journal of Unmanned Aerial Vehicles. 50, 54.

[21] Coche, E. et al. (2024) Unravelling cross country regulatory intricacies of data governance: the relevance of legal insights for digitalization and international business. Journal of International Business Policy, 112, 115-117.

[22] Cohen, A., Shaheen, S. and Farrar, E. (2021) Urban Air Mobility: History, Ecosystem, Market Potential, and Challenges. 22 IEEE Transactions on Intelligent Transportation Systems 6074.

[23] Dhirani, L. et al. (2023) Ethical Dilemmas and Privacy Issues in Emerging Technologies: A Review. 23 Sensors 1, 3.

[24] Doo, J. et al. (2021) NASA Electric Vertical Takeoff and Landing (eVTOL) Aircraft Technology for Public Services. White Paper no. 20205000636.

[25] EASA. (2021) Means of Compliance with the Special Condition VTOL. [online] EASA. Available from: https://www.easa.europa.eu/sites/default/files/dfu/moc_sc_vtol_issue_2_12may2021_shaded_0.pdf [Accessed 6 November 2025.]

[26] EASA. (2024) EASA Concept Paper: guidance for Level 1 & 2 machine learning applications, 2nd ed. [online] EASA. Available from: https://horizoneuropencpportal.eu/sites/default/files/2024-06/easa-concept-paper-guidance-for-level-1-and-2-machinelearning-applications-2024.pdf [Accessed 29 October 2025]

[27] EASA. (2025) EASA steps up regulatory framework for Innovative Air Mobility. [press release] Available from: https://www.easa.europa.eu/en/newsroom-and-events/news/easa-steps-regulatory-framework-innovative-air-mobility [Accessed 6 November 2025].

[28] Ekström, E. (2025) Cybersecurity Challenges to Airlines: A Literature Review of Risk & Compliance. Bachelors thesis, Lund University.

[29] Engler, A. (2023) The EU and U.S. diverge on AI regulation: A transatlantic comparison and steps to alignment. [online] Brookings. Available from: https://www.brookings.edu/articles/the-eu-and-us-diverge-on-ai-regulation-a-transatlantic-comparisonand-steps-to-alignment/ [Accessed 6 November 2025]

[30] EU Artificial Intelligence Act 2024

[31] Commission Implementing Regulation (EU) 2023/203. SI. European Commission. In: EUR-Lex.

[32] European Commission. (2025) Data Act Explained. [online] Europa.eu. Available from: https://digital-strategy.ec.europa.eu/en/factpages/data-act-explained [Accessed 3 November 2025].

[33] Farooqui, M. (2025) Rooftop Runways: Evaluating the UAE’s Regulatory Framework for Vertiports in Urban Air Mobility. Via Inveniendi Et Iudicandi. 149, 153.

[34] Federal Aviation Administration. (2020) FAA Cybersecurity Strategy. [online] Available from: https://www.faa.gov/about/plansreports/faa-cybersecurity-strategy [Accessed 27 August 2025].

[35] Federal Decree by Law No. (45) of 2021 Concerning the Protection of Personal Data.

[36] Fleisher, W. et al. (2025) Responsibility and Accountability in an Algorithmic Society. Philosophy & Technology.

[37] Freeman, K. et al. (2021) Cyber Threats and Security Controls Analysis for Urban Air Mobility Environments. White paper no. 20205011059.

[38] General Civil Aviation Authority. (2025) GCAA National Aviation Cybersecurity. [online] Available from: https://www.gcaa.gov.ae/en/epublication/Pages/gcaacyber-security.aspx [Accessed 23 October 2025].

[39] General Data Protection Regulation 2018.

[40] Golson, J. (2015) Why We Don’t Need Real-Time Flight Tracking. Wired. Available from: https://www.wired.com/2015/01/why-we-dont-need-realtime-flight-tracking/ [Accessed 8 September 2025].

[41] Gritsenko, D. and Wood, M. (2020) Algorithmic governance: A modes of governance approach. Regulation and Governance.

[42] He, J. and Zhang, Z. (2025) Algorithm Power and Legal Boundaries: Rights Conflicts and Governance Responses in the Era of Artificial Intelligence. 14 Laws 1, 19.

[43] Hu, L. et al. (2025). Development and challenges of autonomous electric vertical take-off and landing aircraft. 11 Heliyon 1, 2.

[44] Human, S. (2022) Advanced Data Protection Control (ADPC): An Interdisciplinary Overview. [online] arXiv. Available from: https://arxiv.org/abs/2209.09724 [Accessed 30 October 2025]

[45] ISO. (2022) ISO/IEC 27001:2022. [online] ISO.org. Available from: https://www.iso.org/standard/27001 [Accessed 7 October 2025].

[46] Johnson, R. et al. (2022) Technology Adoption and Acceptance of Urban Air Mobility Systems: Identifying Public Perceptions and Integration Factors. The International Journal of Aerospace Psychology, 240.

[47] Kabashkin, I. and Susanin, V. (2024) Unified Ecosystem for Data Sharing and AI-Driven Predictive Maintenance in Aviation. 13 Computers.

[48] Kapil, G. (2025) Cybersecurity Challenges in Aviation. European Journal of Advances in Engineering and Technology.

[49] Karagiannis, C. and Vergidis, K. (2021) Digital Evidence and Cloud Forensics:Contemporary Legal Challenges and the Power of Disposal. 12 Information 1, 6.

[50] Khan, N. and Efthymiou, M. (2021) The use of biometric technology at airports: The case of customs and border protection (CBP). 1 International Journal of Information Management Data Insights.

[51] Khan, S. et al. (2021) On GPS spoofing of aerial platforms: a review of threats, challenges, methodologies, and future research directions. Computer Science, 1, 11.

[52] Königs, P. (2022) Government Surveillance, Privacy, and Legitimacy. 35 Philosophy & Technology.

[53] Koumoutsidi, A., Pagoni, I. and Polydoropoulou, A. (2022) A New Mobility Era: Stakeholders’ Insights regarding Urban Air Mobility. 14 Sustainability 1, 3.

[54] Küçük, E. et al. (2025) Solidarity at the intersection of data sharing and data protection: A normative analysis. Maastricht Journal of European and Comparative Law.

[55] Kumar, G. and Altalbe, A. (2024) Artificial intelligence (AI) advancements for transportation security: in depth insights into electric and aerial vehicle systems. Environment, Development and Sustainability 1, 8.

[56] Li, T. et al. (2024) An Innovation Management Approach for Electric Vertical Take-Off and Landing. 16 Sustainability 1,3

[57] Lu, Y. et al. (2025) Urban Air Mobility Vertiports: A Bibliometric Analysis of Applications, Challenges, and Emerging Directions. Applied Sciences 1, 18.

[58] Mascio P, et al. (2025) Vertiports: The Infrastructure Backbone of Advanced Air Mobility — A Review. 6 Eng 1, 2

[59] Matheson, R. (2018) The privacy risks of compiling mobility data. [online] MIT News. Available from: https://news.mit.edu/2018/privacy-risks-mobility-data-1207 [Accessed 9 September 2025].

[60] Matthew, A. (2024) Cloud Data Sovereignty Governance and Risk Implications of Cross-Border Cloud Storage. [online] ISACA. Available from: https://www.isaca.org/resources/news-andtrends/industry-news/2024/cloud-data-sovereignty-governance-andrisk-implications-of-cross-border-cloud-storage [Accessed 26 August 2025].

[61] Mendes de Leon, P. and Scott, B. (2023) Scanning the Air Transport Market in Europe and Beyond: The Position of Airlines and the Evolution of Technical Innovations. In: Alan D. Meneghetti & Philip Perrotta (eds). International Comparative Legal Guides. 15, 17.

[62] Mishra, S. and Palanisamy, P. (2023) Autonomous Advanced Aerial Mobility—An End-to-End Autonomy Framework for UAVs and Beyond. 11 IEEE Access 318, 320.

[63] Mitchell, A. and Riedel, R. (2022) Building digital platforms to enable advanced air mobility. [online] McKinsey & Company. Available from: https://www.mckinsey.com/industries/aerospace-and-defense/our-insights/building-digital-platformsto-enable-advanced-air-mobility [Accessed 23 October 2025].

[64] Mitici, M. et al. (2024) Predictive Maintenance Planning for Batteries of Electric Take-Off and Landing (eVTOL) Aircraft Using State-of-Health Prognostics. European Safety and Reliability Conference.

[65] Mizrak, F. and Akkartal, G. (2024) Prioritizing cybersecurity initiatives in aviation: A dematel-QSFS methodology. 10 Heliyon 1, 5.

[66] Mokander, J. et al. (2021) Ethics-Based Auditing of Automated Decision-Making Systems: Nature, Scope, and Limitations. Science and Engineering Ethics 1, 16.

[67] Moraes, T. (2024) Ethical AI Regulatory Sandboxes: Insights from cyberspace regulation and Internet governance. TAS 24. Available from: https://dl.acm.org/doi/pdf/10.1145/3686038.3686049 [Accessed 5 November 2025.]

[68] Naeem, N. (2025) A collaborative system of systems simulation of urban air mobility. 16 CEAS Aeronautical Journal.

[69] National Institute of Standards and Technology (2024) The NIST Cybersecurity Framework. [online] nvlpubs.nist.gov. Available from: https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.29.pdf [Accessed 26 August 2025].

[70] Nobles, C., Burrell, D. and Waller, T. (2022) The Need for A Global Aviation Cybersecurity Defense Policy. Land Forces Academy Review.

[71] Notari, R. (2025) Autonomy Now?: Is It Time To Start Integrating (Autonomous) Urban Air Mobility Vehicles Into The National Airspace System? Texas A&M Law Review, 52, 63

[72] Nugraha, R. and Scott, B. (2024) Flying taxis, air mobility and challenges for Indonesia. The Jakarta Post. [online] Available from: universiteit leiden.nl. Available from: https://scholarlypublications.universiteitleiden.nl/access/item%3A3728443/view [Accessed 17 November 2025.]

[73] Pagallo, U and Bassi, E. (2020) The Governance of Unmanned Aircraft Systems (UAS): Aviation Law, Human Rights, and the Free Movement of Data in the EU (2020) 30 Minds and Machines.

[74] Park, D. et al. (2021) Data ownership in cloud: legal issues. 1 International Journal of Forensic Engineering & Management. 1, 2.

[75] Pongsakornsathien, N. et al. (2025) Advances in low-altitude airspace management for uncrewed aircraft and advanced air mobility. 154 Progress in Aerospace Sciences 1, 20.

[76] Purtova, N. (2018) The law of everything. Broad concept of personal data and future of EU data protection law. 10 Law, Innovation & Technology.

[77] Ramahi, A., Alfiky A. and Tyson, L. (2025) Dubai aims to beat the traffic with 2026 Joby air taxi liftoff. [online] Reuters. Available from: https://www.reuters.com/world/middle-east/dubai-aims-beat-traffic-with-2026-joby-air-taxi-liftoff-2025-07-01/ [Accessed 26 August 2025].

[78] Ravich, T. (2020) On-Demand Aviation: Governance Challenges of Urban Air Mobility ("UAM"). 124 Penn State Law Review. 657, 666.

[79] Robb, L. et al. (2023) Regulatory overlap: A systematic quantitative literature review. Regulation and Governance.

[80] Salvini, P. et al. (2023) Human involvement in autonomous decision-making systems. Lessons learned from three case studies in aviation, social care and road vehicles. Frontiers in Political Science 1, 13.

[81] Sarkae, M. et al. (2025) A Data-Driven Approach for Performance Evaluation of Autonomous eVTOLs. 61 IEEE Transactions on Aerospace and Electronic Systems 3626, 3627.

[82] Scott, B. and Kurtpınar, O. (2025) Hoffnungen und Hürden: Regulatorische Herausforderungen für Advanced Air Mobility. Advanced Air Mobility, (5.1) and Advanced Air Mobility, (5.2).

[83] Srivastava, S. et al. (2024) Fingerprints, Iris Scans, and the Law: Regulating Biometric Human-Computer Interfaces. 9 Journal of Information Systems Engineering & Management. 342, 344

[84] The UAE Government. (2024) Cyber safety and digital security. [online] The UAE Government Portal. Available from: https://u.ae/en/information-and-services/justicesafety-and-the-law/cyber-safety-and-digital-security [Accessed 7 October].

[85] The UAE Government. (2024) Data protection laws. [online] The UAE Government Portal. Available from: https://u.ae/en/about-the-uae/digital-uae/data/dataprotection-laws [Accessed 7 October 2025].

[86] Tolba, K. (2024) UAE GCAA unveils National Civil Aviation Cybersecurity Guidelines. [online] Aviation Business ME. Available from: https://www.aviationbusinessme.com/news/gcaa-national-civil-aviation-cybersecurity-guidelines [Accessed 26 August 2025].

[87] Trimarchi, A. (2023) Technological Certainties and Regulatory Doubts: An Overlook at Unmanned Aviation and Urban Air Mobility in Europe. International Conference on Unmanned Aircraft Systems, Poland, June 2023.

[88] Ukwandu, E. et al. (2022) Cyber-Security Challenges in Aviation Industry: A Review of Current and Future Trends. 13 Information 1, 2.

[89] UNECE. (2022) Agreement Concerning the Adoption of Harmonized Technical United Nations Regulations for Wheeled Vehicles, Equipment and Parts which can be Fitted and/or be Used on Wheeled Vehicles and the Conditions for Reciprocal Recognition of Approvals Granted on the Basis of these United Nations Regulations. [online] UNECE. Available from: https://unece.org/sites/default/files/2023-01/R155am1e.pdf [Accessed 26 August 2026].

[90] Van Dalsem, W. et al. (2021) A Data & Reasoning Fabric to Enable Advanced Air Mobility. White paper no. 20205011320.

[91] Veneruso, P. et al. (2022) Sensing Requirements and Vision-Aided Navigation Algorithms for Vertical Landing in Good and Low Visibility UAM Scenarios. 14 Remote Sensing.

[92] Veneruso, P. et al. (2025) FMCW Radar-Aided Navigation for Unmanned Aircraft Approach and Landing in AAM Scenarios: System Requirements and Processing Pipeline. 25 Sensors 1, 2.

[93] Vida, G. and Török, A. (2023) Expected effects of accident data recording technology evolution on the identification of accident causes and liability. 15 European Transport Research Review. 1, 12.

[94] Voss, W. (2020) Cross-Border Data Flows, the GDPR, and Data Governance. Washington International Law Journal, 485, 489

[95] Voss, W. (2021) Airline Commercial Use of EU Personal Data in the Context of the GDPR, British Airways and Schrems. Colorado Technology Law Journal, 377.

[96] Wachter, S. and Mittelstadt, B. (2019) A Right to Reasonable Inferences: Re-Thinking Data Protection Law in the Age of Big Data and AI. Columbia Business Law Review.

[97] Wang, X. et al. (2024) Beyond surveillance: privacy, ethics, and regulations in face recognition technology. 7 Front. Big Data 1, 2.

[98] Wolters, P. (2024) The Influence of the Data Act on the Shifting Balance between Data Protection and the Free Movement of Data. European Journal of Law & Technology.

[99] Xiang, S. et al. (2024) Autonomous eVTOL: A summary of researches and challenges. 3 Green Energy and Intelligent Transportation. 1, 13.

[100] Yashoda, G. et al. (2025) Predictive Maintenance of Aircraft Engine Failure. 5 International Journal of Advanced Multidisciplinary Research and Studies.

[101] Yip, L. (2024) Comprehensive Multi-Disciplinary Design of an Electric Vertical Take-off and Landing Aircraft. PhD Thesis, Nanyang Technical University, Singapore, 1, 23.

[102] Yousef, Z. (2024) How Can the Law Address the Effects of Algorithmic Bias in the Healthcare Context? LSE Law Review.

[103] Zahn, D. et al. (2023) NASA Advanced Air Mobility (AAM) Project National Campaign Development of Airspace Operations, Infrastructure and Data (20230011793). [online] NASA. Available from: https://ntrs.nasa.gov/api/citations/20230011793/downloads/NC-069-001%20v2_FINAL_DZ.pdf [Accessed 6 November 2025]; Federal Aviation Administration, Urban

[104] Zaidan, E. and Ibrahim, I. (2024) AI Governance in a Complex and Rapidly Changing Regulatory Landscape: A Global Perspective. Humanities and Social Sciences Communication.

[105] Ziakkas, D. et al. (2025) Designing human-centric intelligent systems in aviation: applications of artificial cognitive systems, AI-enhanced investigations, and immersive eVTOL simulation training. Human-Intelligent Systems Integration.

[106] Zuboff, S. (2019) The Ahe of Surveillace Capitalism: The Fight for a Human Future at the New Frontier of Power. 1st Ed. Public Affairs, p. 159.

Metrics

0

Crossref logo

0