Spain's penalty scale is the highest of any major EU tourist destination. Combined with active enforcement through the Guardia Civil, local police, and AESA, the risk of flying without proper authorization is substantial.
Privacy rules
Spain enforces drone privacy through GDPR plus its national implementation, Organic Law 3/2018 (LOPDGDD). The country's data protection authority, AEPD (Agencia Espanola de Proteccion de Datos), has a reputation for aggressive enforcement and has issued some of the highest GDPR fines in Europe across all sectors.
For drone pilots, the key rules are:
- Filming identifiable individuals without consent can lead to prosecution under both GDPR and Organic Law 3/2018
- Commercial drone filming requires GDPR data processing compliance
- Data Protection Impact Assessments (DPIAs) are required for systematic monitoring or large-scale personal data processing
- Police (Guardia Urbana, Mossos d'Esquadra in Catalonia) can confiscate both the drone and footage if a privacy complaint is filed
Night flying rules
Spain has a more specific night flying framework than the general EU rule. Instead of simply requiring "appropriate lighting," Spain imposes a 50m altitude ceiling for night flights with drones under 2kg. This is unique to Spain.
| Drone Weight | Night Rules |
|---|
| Under 2kg | Allowed up to 50m altitude with flashing green light, VLOS, and Remote ID active |
| Over 2kg | More restricted in Open category. May require Specific category authorization. |
Note: Many guides either state night flying is banned in Spain (outdated) or say it's fully allowed with a green light (incomplete). The 50m ceiling for sub-2kg drones is Spain-specific and not found in the general EASA framework.
Penalty structure
Spain's Aviation Security Act (Ley 21/2003) defines three tiers of infractions with dramatically different fine ranges.
| Tier | Fine Range | Examples |
|---|
| Minor | EUR 60 to EUR 4,500 | Failing to update registry address, minor procedural violations |
| Serious | EUR 4,501 to EUR 90,000 | Flying without registration/insurance, unauthorized flights in restricted areas |
| Very Serious | EUR 90,001 to EUR 225,000 | Flying over crowds without authorization, repeated serious offenses. Commercial entities: up to EUR 4,500,000. |
Additional sanctions include drone confiscation, operator authorization suspension, and operating license revocation. Severity factors include whether the violation was intentional, whether it was for commercial purposes, and any prior offenses.
Warning: Unlike Italy, Spain's drone penalties are purely administrative (no criminal prosecution track). But the fine amounts more than compensate: EUR 225,000 is nearly four times Italy's EUR 64,000 maximum. The Tenerife tourist faced a EUR 200,000 fine, just EUR 25,000 short of the individual maximum.
The Tenerife case: EUR 200,000 fine
On July 15, 2025, a British tourist flew an unauthorized drone over the Virgen del Carmen maritime festival in Puerto de la Cruz, Tenerife. Thousands of attendees were present. The tourist launched from Hotel Las Aguilas, was spotted by police overseeing the event, and admitted to flying without a license, without insurance, and with zero knowledge of Spanish regulations.
Only three drones were authorized that day: two National Police surveillance drones and one official event coverage drone. The tourist's flight was classified as a "very serious" infraction (flying over a large crowd without authorization, no license, no insurance) under Ley 21/2003. The resulting fine: EUR 200,000, approximately USD 230,000.
This case was covered by PetaPixel, DroneDJ, DroneXL, and multiple Spanish outlets. It remains the highest-profile tourist drone enforcement case in Europe.
During the 2024 America's Cup in Barcelona, police confiscated multiple drones from spectators attempting aerial footage. The Guardia Civil regularly confiscates unauthorized drones from tourists in the Balearic and Canary Islands.
For more on drone privacy, see our drone spying laws guide and flying over private property guide.
