6.1 Best Practices

• Do not use a drone to monitor or record activities where there is a reasonable expectation of privacy.

• Do not use a drone for unapproved recordings of any campus events or performances, or for any unlawful purposes.

• Do not use a drone to harass people or intentionally disrupt events.

• Do not fly a drone over private property without prior approval.

• Do not use a drone for the specific purpose of persistent and continuous collection of identifiable data about individuals without the consent of the data subjects.

• Do not retain identifiable data longer than reasonably necessary to fulfill a purpose.

• Do not knowingly publicly disclose data collected with a drone without undertaking a reasonable effort to obfuscate or de-identify identifiable data unless the data subjects provide specific consent to the disclosure.

• Do make a reasonable effort to remain conspicuous and visible during flight operations.

• Do make a reasonable effort to provide prior notice to individuals of the general timeframe and area that they may anticipate a drone intentionally collecting data.

• Do establish and make available a Privacy Statement for drone data if the drone may intentionally or unintentionally collected identifiable data. The policy should be appropriate to the size and complexity of the data collected.

• Do be considerate of other people’s concerns over privacy, security and safety.

• Do contact the Office of Research Compliance and Integrity if identifiable data is to be used for human-subject research.

• Do take steps to ensure the security of any identifiable data.