Nuclear power plants
Nuclear is the one facility type with an explicit federal requirement to report drone sightings, and an equally explicit position that site security forces may not interdict them.
Key facts
- The NRC updated its regulations in 2024 to require nuclear power plant licensees to report drone sightings over their facilities.
- Those reports go to the NRC, the Federal Aviation Administration, the Federal Bureau of Investigation and local law enforcement.
- The NRC states that nuclear plant security forces do not have the authority to interdict or shoot down aircraft, including drones, flying over their facilities.
- The NRC also states that commercial nuclear power plants are inherently secure, robust and hardened structures, which frames the aircraft as a reconnaissance concern rather than a structural one.
- Detection at a nuclear site therefore serves a mandatory reporting obligation as well as internal awareness, which is a different requirement from awareness alone.
What makes this facility type different
The threat model
The realistic concern is reconnaissance and the probing of response, not damage by the aircraft. Commercial reactor structures are hardened against impacts far exceeding what a small unmanned aircraft represents, so the value of overflight to an adversary lies in mapping the site, observing security posture and testing how the facility reacts.
The regulatory position
The Nuclear Regulatory Commission updated its regulations in 2024 to require licensees to report sightings of unmanned aircraft over their facilities. Reports go to the NRC, the Federal Aviation Administration, the Federal Bureau of Investigation and local law enforcement. This is a mandatory reporting duty, which no other facility type on this site carries in the same form.
What constrains the response
The NRC position is explicit that nuclear power plant security forces do not have authority to interdict or shoot down aircraft, including unmanned aircraft, over their facilities. A site with one of the most capable armed security organisations in the private sector is therefore restricted to detection, identification and reporting, which makes the detection-mitigation boundary sharper here than anywhere else.
The one place the rule is written down
Most facility types in this field operate in an absence: no requirement to detect, no requirement to report, no clarity about what is permitted. Nuclear is the exception in both directions.
The Nuclear Regulatory Commission updated its regulations in 2024 to require licensees to report sightings of unmanned aircraft over their facilities, with reports going to the NRC, the FAA, the FBI and local law enforcement. And the NRC states equally plainly that plant security forces do not have authority to interdict or shoot down aircraft over their sites.
An obligation to notice, and a prohibition on acting. Few other operators have either stated so clearly.
Why the aircraft is not the threat
The NRC’s own characterisation is that commercial nuclear power plants are inherently secure, robust and hardened structures. Containment is engineered against impact energies vastly greater than a small unmanned aircraft carries.
The realistic concern is therefore information rather than structural damage. Overflight can reveal site layout, the position and orientation of cameras and barriers, patrol patterns, access routes, and above all how the facility responds when something appears overhead. Repeated overflights are a way of learning the response, and the response is the thing being probed.
Reporting changes what detection has to produce
This is the practical consequence most easily missed at procurement.
At a site with no reporting duty, detection needs to alert someone who can act. At a nuclear site, detection additionally has to produce a record that will be handed to four external bodies. Time, position, track, duration, direction of arrival and departure, and identification where it can be obtained, all need to be captured and retained in a form that is defensible outside the organisation.
A system that raises a good alert and keeps nothing is adequate for awareness and inadequate for the obligation. That requirement should be in the specification rather than discovered after the first sighting.
What is left in scope
Given that interdiction is not available, the work at a nuclear site concentrates on three things: detecting reliably enough that sightings are not missed, identifying and recording to a standard that supports mandatory reporting, and maintaining the relationship with the federal agencies that do hold authority so that a pattern of overflights reaches people able to act on it.
That is a narrower scope than a vendor proposal usually implies, and it is the scope the rules actually leave open.
Related work
- Site assessment & design Vulnerability assessment, RF survey, sensor siting and coverage modelling.
- Procurement advisory Specification and evaluation against the Authorized Systems List.
- Detection system integration Bringing sensors, command-and-control and existing security systems together.
FAQ
▸Can a nuclear plant shoot down a drone over the site?
No. The NRC is explicit that plant security forces do not hold authority to interdict or shoot down aircraft over their facilities, and an unmanned aircraft is an aircraft in United States law. This is the clearest illustration on this site of the detection and mitigation boundary: an organisation with substantial armed capability, and no authority to use it against an aircraft.
▸Is a drone actually a danger to a reactor?
The NRC's stated position is that commercial nuclear power plants are inherently secure and robust hardened structures. Containment is engineered against impact energies far greater than a small unmanned aircraft can deliver. The security concern is what an adversary learns from overflight, and how the site's response is observed, rather than the aircraft striking something.
▸What does the reporting requirement mean in practice?
That detection has an external audience. A sighting has to be reportable to the NRC, the FAA, the FBI and local law enforcement, which means time, location, track and, where possible, identification need to be recorded in a form that stands up outside the site. A system producing an internal pop-up and no retained record satisfies awareness but not the obligation.
▸Does detection equipment near a plant raise its own issues?
It can. Anything transmitting has to comply with the Communications Act and equipment authorisation rules, and a nuclear site sits within a regulatory environment where changes to security systems are not casual. The sequence is to establish what is permitted and what has to be notified before specifying hardware, not afterwards.