Geopoliticsnorth

The question a duty officer actually faces

An unidentified small aircraft is reported circling near a gas facility in Finnmark at dusk. The caller is an infrastructure operator, not a police officer. The first question is not whether Norway has a rule against this. It does, in several places. The question is which instrument applies, who owns the response, and what happens if the handoff between institutions stalls.

The documented Norwegian record is thinner than the headlines suggest, and more instructive. The clearest case is not a drone circling Hammerfest infrastructure. It is an arrest in Hammerfest on 17 October 2022 of a Russian/British citizen accused of flying a drone on Svalbard. Police seized drones and electronic devices for technical review, and the man was charged with breaching sanctions against Russian citizens using drones in Norway introduced earlier that year (The Local). Separately, in the same period, drone sightings were reported near energy facilities and airports elsewhere in Norway.

Read alongside the Police Security Service’s 2025 findings, the 2022 episode shows that Norway’s toolbox is layered, not singular: sanctions law, aviation and airspace rules, police investigative authority, and civil-military coordination. The binding constraint is operator identification and institutional routing, not the absence of a prohibition.

Two legal tracks that get conflated

The 2022 reporting bundles two different legal problems under one word, “drone.” They are not the same instrument and they do not generalize the same way.

Track one: nationality-based sanctions. Following the invasion of Ukraine, Norway forbade Russians and Russian entities from flying drones or other aircraft over its territory. Breaking the ban is punishable by a three-year prison term, while unauthorized photography can merit a one-year sentence (RFE/RL). This is an operator-identity rule. It is enforced through the criminal process, and it only bites once you know who is flying. Against an unidentified aircraft of unknown nationality, it is inert until attribution occurs.

Track two: conduct and airspace rules. General aviation regulation and restricted-airspace rules apply to anyone, regardless of passport. Enforcement here runs through police follow-up and fines. PST’s 2025 account makes the distinction explicit: some investigated cases resulted in police follow-up and fines, for example when individuals flew drones in restricted airspace, and PST treats this as a separate issue from foreign states attempting to threaten Norway (Dronewatch).

The practical consequence: a sighting near critical infrastructure does not tell you which track you are on. Only identification does. That is why the response cannot be organized around a single “counter-drone” statute.

The 2022 coordination decision that mattered most

The most consequential instrument in the 2022 episode was procedural. Norway’s Attorney General decided that PST would have centralized investigative responsibility for illegal drone activity on a national basis, in order to ensure a comprehensive investigation of the various incidents (The Local).

That is a routing rule, not a new prohibition. It can be rehearsed, replicated and audited in a way that a nationality-specific sanctions rule cannot. It also reflects an honest admission: the problem was fragmentation across police districts and agencies, not a missing offence.

PST was candid about the limits of what coordination could deliver. Its deputy director said the agency could not conclude who was behind the 2022 drone activity or what they wanted to achieve (NewsinEnglish). Centralized responsibility improves the investigation. It does not manufacture attribution.

What the 2025 findings change

PST investigated reported drone sightings across Norway in 2025, including near airports, military facilities and other critical infrastructure. According to the agency, none of the cases could be linked to foreign states or intelligence services, and PST did not uncover a single case involving a drone operated by a foreign power. In many instances, the reported “drones” turned out not to be drones at all, but stars, aircraft or other aerial phenomena (Dronewatch).

This is not an argument for passivity. PST itself stresses continued public reporting for situational awareness. But it reframes what the toolbox is for. If most reports are misidentifications and the enforcement cases are rule violations rather than espionage, then the scarce resource is triage and identification capacity, not the number of prohibitions on the books.

The identification gap is measurable. In Norway in 2025, out of 490 drone sighting reports, police could not identify the operator in the majority of cases (Policy Review). A prohibition you cannot attach to a person is a prohibition that does not operate.

The seam where response fails

The policy literature describes the structural failure mode precisely. Aviation safety rules aim to deter unintentional harm and sit with civil aviation authorities. Security deals with intentional harm and sits with police and security services. An unidentified aircraft sits on the seam between them, and intent is not readily obvious from a sighting.

The same analysis records that different actors, not a single body, holding varied authorities to tackle an unwanted drone emerged as a challenge for Norway in 2022 when drones were sighted around its critical infrastructure (Policy Review). That is the institutional gap in plain terms: not a missing rule, but a missing default routing decision for the ambiguous case.

The 2022 centralization of PST investigative responsibility is the closest thing to a fix on record. Whether it is exercised as a standing protocol or reconstructed case by case is the question a practitioner should ask. The public record does not establish a published routing protocol between local police districts and PST for drone reports, and that absence is itself worth noting.

A practitioner’s routing rule

The following is a recommendation, not a description of adopted procedure. It follows from the layered model above.

Step one: local police, for the conduct question. An infrastructure operator observing a small aircraft near a facility should route the report to local police, who own the airspace and conduct question and can act on restricted-airspace violations regardless of who is flying.

Step two: PST informed, for the attribution question. If the observation pattern suggests intentional collection — repeated passes, sensor-like hovering, timing correlated with operations — the report should reach PST, which holds the foreign-state threat mandate. The decision point is attribution, not the sighting itself.

Step three: preserve the evidence. The 2022 case turned on seized drones and devices undergoing technical review. Detection and forensic capacity, not new prohibitions, is where the marginal return sits.

Step four: record the misidentification rate. Night-time distance and speed judgments are hard. PST’s 2025 finding that many reports were stars, aircraft or other phenomena is a triage input, not a reason to discount the next report.

What fails if the institution stalls

Three failure modes follow from the record.

Attribution stall. The sanctions track cannot operate without identity. If identification capacity is thin, the strongest prohibition in the toolbox is unavailable in the case that matters most — an unknown operator over critical infrastructure.

Routing stall. If the police-PST handoff depends on individual judgment rather than a standing protocol, the ambiguous sighting — the one that is neither obviously a hobbyist nor obviously hostile — is the one most likely to fall between agencies.

Triage stall. If the high misidentification rate erodes reporting, situational awareness degrades. PST’s own position is that continued reporting matters even when most reports are harmless.

None of these failures requires a new law to fix. They require the coordination instrument that already exists to be exercised deliberately, and the identification capacity that the 490-report figure shows is the real constraint.

Frequently asked questions

Was there a confirmed foreign-state drone operation over Hammerfest? No. The documented Hammerfest case is an arrest on 17 October 2022 of a Russian/British citizen accused of flying a drone on Svalbard, charged under sanctions rules. PST stated it could not conclude who was behind the 2022 drone activity. Reporting describes arrest, charge and custody, with a defense appeal; it does not establish a conviction.

Which instrument applies to an unidentified aircraft near critical infrastructure? It depends on what you can establish. Conduct and airspace rules apply to any operator and are enforced by police. The sanctions prohibition applies to Russian operators and is enforced through criminal process. PST holds the foreign-state threat mandate. The instrument follows the attribution.

Who coordinates the investigation? Since 2022, PST has had centralized investigative responsibility for illegal drone activity on a national basis, per the Attorney General’s decision.

Does the 2025 finding mean sightings should be ignored? No. PST states that most 2025 reports were misidentifications and none were linked to foreign states, while stressing that continued reporting supports situational awareness.

Sources

• The Local, “Arrests and drone sightings: Why Norway is asking the public to be vigilant” (17 October 2022) — link
• RFE/RL, “Norway Points Finger At ‘Foreign Intelligence’ After Arrest Of Several Russians For Suspicious Drone Flights” (20 October 2022) — link
• NewsinEnglish, “Another Russian arrested, PST to coordinate probes” (19 October 2022) — link
• Dronewatch, “Norwegian security service: no evidence of foreign drone activity in 2025” (6 February 2026) — link
• Policy Review, “Europe wants the sky full of drones – just not like that” (9 December 2025) — link