CAAM Drone Regulations Malaysia: What Commercial Operators Must Know in 2026

If you’ve been running commercial drone operations in Malaysia for a while, you already know the landscape is tightening up. The days of casual flights with zero paperwork are long gone. CAAM has spent the last year laying the groundwork for a massive regulatory overhaul, and the drone regulations Malaysia 2026 updates are finally coming into full effect.

This isn’t meant to scare you off. Honestly, clearer rules are a massive win for legitimate operators. It just means you need to know exactly where you stand before you spin up the props on your next job.

What’s Actually Changing: Retiring the 2016 Rules

For years, Malaysia’s drone rules were built on the Civil Aviation Regulations 2016 (Part XVI) and a dusty circular from 2008. It was a patched-together system that worked, but it wasn’t exactly built for modern commercial operations.

In March 2025, CAAM officially announced it is replacing that 2016 framework with a new regulation specifically designed for unmanned aircraft. They are aligning with international ICAO standards and moving to a “risk-based” approach—very similar to what you see in the EU and US.

What does that mean for you? Flights are now categorized by risk. Flying a small drone in an empty, open area will have lighter requirements. But higher-risk operations—like flying over a populated construction site in Selangor, doing beyond visual line of sight (BVLOS) work, or using heavy agriculture drones—will demand strict documentation, certifications, and oversight.

The UAS-TMS: Moving Permits Online

Alongside the new rules, CAAM is rolling out the UAS Traffic Management System (UAS-TMS). For day-to-day operators, this is the biggest shift.

Once fully live, the UAS-TMS will be the digital hub where every commercial drone must be registered before takeoff. You’ll apply for permits through this platform, and airspace will be monitored digitally. The goal is to process approvals much faster than the old manual 14-working-day ATF timeline.

Multiple agencies are plugged into this system, including MCMC, SIRIM, JUPEM, and the Police. It’s a huge coordination effort, but for operators doing complex jobs like site surveys or large-scale agri-spraying, moving away from manual paperwork should cut down a lot of project friction.

Licensing: What You Actually Need to Fly

RCoC-B (Remote Pilot Certificate of Competency – Basic)

If you fly commercially, you need the RCoC-B. Full stop. This isn’t just a piece of paper; it requires passing theory and practical modules covering safety, emergency protocols, and pre-flight checks. You must be at least 18 and pass a flight assessment.

Without it, you legally cannot apply for ATF permits for commercial flights. If your pilots don’t have this yet, make it your top priority.

Authorisation to Fly (ATF) Permits

Every commercial flight requires an ATF permit (Standard-ATF-Form-02-01), submitted to CAAM at least 14 working days before the job.

A few realities about ATF applications:

• Submit early: 14 working days is the bare minimum. Complex jobs near controlled airspace will take longer.
• Get it right the first time: Incomplete applications are rejected immediately.
• East Malaysia rules: Flying in Sarawak? You need extra authorization from the Office of the Premier.
• The 4.5km rule: You cannot fly within 4.5km of any airport or heliport without specific air traffic control clearance.

Agriculture Operators: Get Ready for RCoC-AL

If you do agricultural spraying, keep an eye out for the RCoC-AL (Remote Pilot Certificate of Competency — Agriculture Light). CAAM already outlined the framework for agri operators in CAD 6011 Part (II), and this dedicated pilot certification track is expected to follow soon. Because spraying has its own unique risk profile, expect this to become a hard requirement.

Equipment and Frequency Compliance

Before you even buy a commercial drone, it needs SIRIM approval to ensure it meets local safety standards.

On top of that, MCMC regulates the radio frequencies your drone uses to communicate. The legal bands in Malaysia are 433 MHz to 435 MHz, 2400 MHz to 2500 MHz, and 5725 MHz to 5875 MHz. If your setup operates outside these bands, you need an Apparatus Assignment before you can legally take off. Most standard DJI Enterprise gear is fine, but always double-check if you run custom payloads.

The Real Cost of Non-Compliance

CAAM is making enforcement a priority. Under the new rules, failing to register your drone with the UAS-TMS can result in a massive fine of up to RM50,000, up to three years in prison, or both. CAAM inspectors are actively coordinating with local police to act on violations.

Beyond the legal trouble, flying unregistered puts your clients at massive risk. If an incident happens on a client’s site and your flight wasn’t legally authorized, the liability nightmare will pull everyone down.

What This Means for Businesses Hiring Drone Services

If you’re a developer or plantation manager hiring drone services, these new rules actually make your due diligence easier.

Before signing a contract, ask the operator for their RCoC-B certifications, proof of ATF permits for your specific site, and SIRIM equipment documentation. Any reputable operator will hand these over without hesitation. The industry is maturing, and the companies operating legally inside CAAM’s framework are the only ones worth working with.

Quick Reference: 2026 Compliance Checklist

• RCoC-B certification for all commercial pilots
• ATF permit submitted minimum 14 working days before the flight
• Drone registered with CAAM (UAS-TMS)
• SIRIM equipment compliance for all hardware
• MCMC frequency clearance
• Additional permits secured for Sarawak operations (if applicable)
• Verified 4.5km clearance from airports/heliports (or ATC approval secured)
• General commercial insurance documentation ready

Not sure if your upcoming project meets the new CAAM requirements? Feel free to reach out to our team at LangiTech Aerial. We’re happy to walk through the compliance steps before your job starts so you can operate with total peace of mind.