The new federal drone privacy law enacted as part of the FAA Reauthorization Act of 2018 imposes significant information privacy requirements on commercial drone operators in nearly all industries and sectors including requiring them to adopt and implement privacy policies governing all data collected by their drones and may effectively force commercial drone operators to comply with the emerging patchwork of state information privacy and security laws. This program will explain the new law's requirements, the relationship between the new law and the law governing the preemption of state information privacy laws as applied to aviation, and how to best assist commercial drone operators in developing and implementing compliant privacy policies and practices and ensure compliance with applicable state information privacy and security laws.