SUBPART A –

ML.UAS.101

SUBPART B –

ML.UAS.201

SUBPART C –

ML.UAS.301

ML.UAS.302

ML.UAS.303

ML.UAS.304

ML.UAS.305

ML.UAS.307

SUBPART D –

ML.UAS.401

ML.UAS.403

SUBPART E –

ML.UAS.501

ML.UAS.502

ML.UAS.504

ML.UAS.520

SUBPART H –

ML.UAS.801

ML.UAS.802

ML.UAS.803

ML.UAS.804

ML.UAS.805

SUBPART I –

ML.UAS.901

ML.UAS.902

ML.UAS.903

ML.UAS.905

ML.UAS.906A

ML.UAS.906B

ML.UAS.907

Appendix 1 –

Appendix 2 –

Appendix 3 –

(a)

For the purposes of this Annex, ‘competent authority’ shall mean the authority specified in point AR.UAS.GEN.010(a) of Annex I (Part-AR.UAS) to Implementing Regulation (EU) 2024/1109.

(b)

For the purposes of this Annex, ‘owner of the UA’ shall mean one of the following:

(a)

The owner of the UA shall be accountable for the continuing airworthiness of the UAS and shall ensure that no flight takes place unless all the following requirements are met:

(b)

By way of derogation from point (a), when the UA is leased, the accountability set out in point (a) shall apply to the lessee, provided that the lessee is identified in the registration document of the UA or such transfer of accountability is detailed in the leasing contract.

(c)

Any person or organisation that performs maintenance on the UAS and its components shall be responsible for the maintenance tasks performed.

(d)

The UAS operator shall be responsible for the satisfactory accomplishment of the pre-flight inspection. The person carrying out that inspection on behalf of the UAS operator shall be qualified for that purpose. The pre-flight inspection need not be carried out by an approved maintenance organisation or by certifying staff.

(e)

In addition to the requirements laid down in point (a), the owner of the UA shall ensure that:

(f)

To determine whether the UAS complies with the requirements of this Annex, the owner of the UA shall ensure that access to the UAS and UAS records is granted to any person authorised by the competent authority.

(a)

the accomplishment of pre-flight inspections of the UA;

(b)

the performance of unscheduled maintenance and the rectification of defects (including damages) in accordance with the data specified in points ML.UAS.401 and ML.UAS.304, as applicable, while taking into account the minimum equipment list (‘MEL’) and the configuration deviation list (‘CDL’), when they exist;

(c)

the accomplishment of all scheduled maintenance in accordance with the UAS maintenance programme referred to in point ML.UAS.302;

(d)

compliance with any applicable:

(e)

the accomplishment of modifications and repairs in accordance with point ML.UAS.304;

(f)

maintenance check flights (‘MCFs’), when necessary;

(g)

the availability of the mass and balance statement reflecting the current configuration of the UA, when such information is produced by the UA manufacturer.

(a)

The scheduled maintenance of the UAS shall be organised in accordance with an UAS maintenance programme.

(b)

The UAS maintenance programme, and any subsequent amendments to it, shall be approved by the Part-CAO.UAS organisation that is responsible for managing the continuing airworthiness of the UAS.

(c)

The UAS maintenance programme shall comply with:

(d)

Notwithstanding point (c)(1), by way of derogation from point (c)(2), the UAS maintenance programme may deviate from the ICAs, based on data obtained from reviews performed in accordance with point (f).

(e)

The UAS maintenance programme shall take into account the UAS configuration, and the type and specificities of operations.

(f)

The UAS maintenance programme shall be reviewed at least annually in order to assess its effectiveness while considering new or modified ICAs.

(a)

Any damage to an UAS or to a component for installation thereto shall be assessed before being repaired.

(b)

Carrying out modifications and repairs on the UAS or its components shall require such modifications and repairs to be either:

(a)

For each UAS, as identified by the UA registration and control and monitoring unit (‘CMU’) type and serial number, a system shall be established to record continuing airworthiness information of the UAS. That system shall be used by the remote pilot and the person(s) involved in the continuing airworthiness of the UAS.

(b)

The UAS continuing airworthiness record system shall record the following:

(c)

With respect to components subject to airworthiness limitations, in addition to the authorised release document (EASA Form 1 or equivalent), the following information shall be entered in the record system:

(d)

Each entry shall be made as soon as possible following the completion of the task so that it provides an up-to-date status to the remote pilot.

(e)

All entries made in the UAS continuing airworthiness records shall be clear and accurate. When it is necessary to correct an entry, the correction shall be made in a manner that clearly shows the original entry.

(f)

The record system shall include logs for the UA, the CMU and, as appropriate, for the components that are subject to airworthiness limitations.

(g)

The UAS continuing airworthiness record system shall be able to provide:

(h)

The records shall be kept for the periods specified below:

(a)

When an UA is permanently transferred from one owner to another, the relevant continuing airworthiness records referred to in point ML.UAS.305 shall also be transferred.

(b)

When the owner of the UA contracts the continuing airworthiness management tasks to a Part-CAO.UAS organisation, the owner of the UA shall ensure that the continuing airworthiness records referred to in point ML.UAS.305 are transferred to the contracted organisation.

(c)

The periods for the retention of the records set out in point ML.UAS.305(h) shall continue to apply to the new owner or Part-CAO.UAS organisation.

(a)

Maintenance on the UAS shall require the use of and adherence to current applicable maintenance data.

(b)

For the purposes of this Annex, ‘applicable maintenance data’ means any of the following:

(a)

Any UAS defect that seriously endangers the flight safety shall be rectified before further flight.

(b)

The following persons may decide that a defect does not seriously endanger flight safety, and may defer its rectification accordingly:

(c)

Any UAS defect that does not seriously endanger flight safety shall be rectified as soon as practicable from the date on which the defect was first identified and within the time limits specified in the maintenance data or the MEL.

(d)

Any defect that is not rectified before flight shall be recorded in the UAS continuing airworthiness record system referred to in point ML.UAS.305, and a record shall be made available to the remote pilot.

(a)

Unless otherwise specified in Annex II (Part-CAO.UAS) or in point 21.A.307 of Annex I (Part 21) to Regulation (EU) No 748/2012, a component may be fitted to an UA only if all the following conditions are met:

(b)

Prior to the installation of a component on an UA, the maintenance organisation shall ensure that the particular component is eligible to be fitted taking into account the UA configuration and any applicable AD.

(c)

Standard parts shall be fitted to an UA or to a component only when the maintenance data specifies those particular standard parts, when accompanied by evidence of conformity to the applicable standard, and when they have appropriate traceability.

(d)

Raw or consumable materials shall only be used on an UA or a component provided that:

(a)

The maintenance of UA components shall be certified in accordance with the following table:

(b)

The components referred to in points (b)(3) to (b)(6) of point 21.A.307 of Annex I (Part 21) to Regulation (EU) No 748/2012 may be maintained by any person or organisation. In such case, by way of derogation from point (a), the maintenance of those components shall be released with a ‘declaration of maintenance accomplished’ issued by the person or organisation that has performed the maintenance. The ‘declaration of maintenance accomplished’ shall contain at least basic details of the maintenance performed, the date on which the maintenance was completed, and the identification of the organisation or the person that issues it. It shall be considered a maintenance record and equivalent to an EASA Form 1 in respect of the maintained component.

(a)

Unserviceable and unsalvageable components shall be segregated from serviceable components, standards parts, and materials.

(b)

A component shall be considered unserviceable in any of the following circumstances:

(c)

Components which have reached their certified life limits or contain a non-repairable defect or malfunction shall be classified as unsalvageable and shall not be permitted to re-enter the component supply system unless their certified life limits have been extended or a repair solution has been approved in accordance with point ML.UAS.304.

(a)

Components shall be installed on a CMU only when the maintenance data specifies those components and when they are in a satisfactory condition.

(b)

Notwithstanding point (a), critical CMU components referred to in point 21.A.308(a) of Annex I (Part 21) to Regulation (EU) No 748/2012 shall be installed on the CMU only if accompanied by an EASA Form 1 or equivalent, and marked in accordance with Subpart Q of Annex I (Part 21) to Regulation (EU) No 748/2012.

(c)

Notwithstanding point (a), CMU components that are not deemed critical shall be installed on the CMU only if accompanied by the declaration specified in point 21.A.308(b) of Annex I (Part 21) to Regulation (EU) No 748/2012, or equivalent.

(d)

The maintenance of critical CMU components shall be performed by a maintenance organisation approved in accordance with Annex II (Part-CAO.UAS) and shall be certified on an EASA Form 1 as set out in Appendix II to Annex I (Part-M) to Regulation (EU) No 1321/2014.

(e)

CMU components that are not deemed critical may be maintained by any person or organisation. The maintenance of those components shall be released with a ‘declaration of maintenance accomplished’ issued by the person or organisation that has performed the maintenance. That declaration shall contain at least basic details of the maintenance performed, the date on which the maintenance was completed, and the identification of the organisation or the person that issues it. It shall be considered a maintenance record and equivalent to the declaration referred to in point 21.A.308(b) of Annex I (Part 21) to Regulation (EU) No 748/2012 for the purpose of installation.

(f)

By way of derogation from points (d) and (e), where the CMU components are subject to maintenance while they are installed on, or temporarily removed from, the CMU, such maintenance may be certified together with the CMU maintenance in accordance with point ML.UAS.803.

(a)

When completed, the maintenance performed on an UA shall be certified on a ‘certificate of release to service’ (‘CRS’) by a certifying staff. The CRS shall be issued when that certifying staff has verified that all the maintenance that was ordered has been properly performed taking into account the availability and use of the maintenance data specified in point ML.UAS.401.

(b)

A CRS shall contain at least the following:

(c)

By way of derogation from point (a), when ordered maintenance cannot be completed, a CRS may be issued within the approved UA limitations. In that case, the CRS shall indicate that the maintenance could not be completed, and also indicate any applicable airworthiness or operations limitations as part of the information required in point (b)(4).

(d)

A CRS shall not be issued in the case of any known non-compliance with the requirements of this Annex which endangers flight safety.

(a)

When completed, the maintenance performed on an UA component shall be certified by a certifying staff except for the cases covered by point ML.UAS.502(b). The certification shall be issued when that certifying staff has verified that all the maintenance that was ordered has been properly performed taking into account the availability and use of the maintenance data specified in point ML.UAS.401 and that the component is in a satisfactory condition.

(b)

That certification shall be established on an EASA Form 1, except when such maintenance is certified together with UA maintenance, as indicated in point ML.UAS.502(a).

(c)

The EASA Form 1 referred to in point (b) shall be filled in accordance with the instructions provided in Appendix 3. It may be generated from a computer database.

(a)

When completed, the maintenance performed on the CMU that involves any component which is critical for the UAS operation as determined by the DAH, shall be certified on a CRS by a certifying staff. The CRS shall be issued when that certifying staff has verified that all the maintenance that was ordered has been properly performed taking into account the availability and use of the maintenance data specified in point ML.UAS.401.

(b)

A CRS shall contain at least the following:

(c)

A CRS shall not be issued in the case of any known non-compliance with the requirements of this Annex which endangers flight safety.

(a)

When completed, the maintenance performed on a CMU component in accordance with point ML.UAS.520(d) shall be certified by a certifying staff. The certification shall be issued when that certifying staff has verified that all the maintenance that was ordered has been properly performed taking into account the availability and use of the maintenance data specified in point ML.UAS.401 and that the component is in a satisfactory condition.

(b)

That certification shall be established on an EASA Form 1, except when such maintenance is certified together with CMU maintenance, as indicated in point ML.UAS.520(f).

(c)

The EASA Form 1 referred to in point (b) shall be filled in accordance with the instructions provided in Appendix 3. It may be generated from a computer database.

(a)

If prescribed by the DAH, the installation of the CMU, when completed, shall be certified on a ‘certificate of release to service’ (CRS) by a certifying staff. The CRS shall be issued when that certifying staff has verified that all the current applicable installation and testing instructions issued by the DAH have been properly complied with, taking into account the CMU component installation requirements laid down in point ML.UAS.520.

(b)

A CRS shall include all the following:

(c)

A CRS shall not be issued in the case of any known non-compliance with the requirements of this Annex which endangers flight safety.

(a)

An ARC is issued in accordance with Appendix 2 (EASA Form 15d) upon completion of a satisfactory airworthiness review. The ARC shall be valid for 1 year.

(b)

The airworthiness review shall be performed and the ARC issued in accordance with point ML.UAS.903 by:

(c)

The validity of an ARC may be extended two consecutive times maximum, for a period of 1 year each time, by the Part-CAO.UAS organisation that manages the continuing airworthiness of the UAS, subject to the following conditions:

The extension of the ARC by a Part-CAO.UAS organisation is possible regardless of which staff or organisation, as provided for in point (b), has initially issued the ARC.

(d)

By way of derogation from point (c), the extension of the ARC may be anticipated for a maximum period of 30 days, without losing the continuity of the airworthiness review pattern.

(e)

When the competent authority performs the airworthiness review and issues the ARC itself, the owner of the UA shall, upon request and as necessary, provide the competent authority with:

(a)

An ARC shall become invalid if any of the following circumstances occurs:

(b)

An UA shall not fly if the ARC is invalid, or if any of the following circumstances are present:

(a)

The airworthiness review of an UA shall include a documented review of the UA continuing airworthiness records and a physical survey of the UA.

(b)

The airworthiness review referred to in point (a) shall also include a documented review of the records and a physical survey of the CMU(s) used to operate the UA, unless such CMU has been included in the airworthiness review of an UA of the same type in the last 6 months.

(c)

Through the documented review of the UA and the CMU continuing airworthiness records, it shall be ensured that:

(d)

Through the physical survey of the UA and the CMU, it shall be ensured that:

(e)

As regards the physical survey referred to in point (d), airworthiness review staff not appropriately authorised as certifying staff shall be assisted by authorised certifying staff.

(f)

By way of derogation from point ML.UAS.901(a), the airworthiness review may be anticipated for a maximum period of 90 days, without losing the continuity of the airworthiness review pattern.

(g)

The ARC (EASA Form 15d) set out in Appendix 2 shall only be issued by appropriately authorised airworthiness review staff, when the airworthiness review has been completely performed and all actions to eliminate the detected non-compliance have been implemented.

(h)

Any ARC issued or extended for an UA shall also be sent to the Member State of registry of the particular UA within 10 days.

(i)

Airworthiness review tasks shall not be subcontracted.

(a)

When transferring an UA registration within the Union, the applicant shall:

(b)

Notwithstanding point (a)(3) of point ML.UAS.902, the former ARC shall remain valid until its expiry date.

(c)

Notwithstanding point (b), an airworthiness review shall be performed satisfactorily in accordance with point ML.UAS.903 if any of the following circumstances occurs:

(a)

When importing an UA into a Member State’s register from a third country or from a regulatory system where Regulation (EU) 2018/1139 does not apply, the applicant shall:

(b)

If the UA complies with the relevant requirements, the competent authority or the organisation performing the airworthiness review, as provided for in point ML.UAS.901(b), shall issue an ARC.

(c)

The owner of the UA shall ensure that access to the UAS is granted for inspection by the competent authority of the Member State of registry.

(a)

If changes in the UAS operations in the ‘specific’ category result in the need to issue an airworthiness certificate in accordance with Article 7(2) of Implementing Regulation (EU) 2019/947, the owner of the UA shall:

(b)

If the UA complies with the relevant requirements, the competent authority or the organisation performing the airworthiness review, as provided for in point ML.UAS.901(b), shall issue an ARC.

(c)

The owner of the UA shall ensure that access to the UAS is granted for inspection by the competent authority of the Member State of registry.

(a)

When an owner of an UA contracts in accordance with point ML.UAS.201 a Part-CAO.UAS organisation to perform continuing airworthiness management tasks, the contract signed by both parties shall be made available, upon request, to the competent authority of the Member State of registry.

(b)

The contract shall be developed taking into account the requirements of this Annex and shall define the obligations of the signatories in relation to the continuing airworthiness of the UAS.

(c)

It shall contain, as a minimum, the following information:

(d)

It shall state the following:

‘The owner of the UA entrusts the Part-CAO.UAS organisation with the management of the continuing airworthiness of the UAS, the development and approval of the UAS maintenance programme, and the organisation of the maintenance of the UAS in accordance with that UAS maintenance programme.

In accordance with the present contract, both signatories undertake to discharge the respective obligations laid down in this contract.

The owner of the UA declares, to the best of its knowledge, that all the information provided to the Part-CAO.UAS organisation concerning the continuing airworthiness of the UAS is and will be accurate, and that the UAS will not be repaired or modified without the prior agreement of the Part-CAO.UAS organisation.

In case of any non-conformity with this contract by either of the signatories, the contract will be cancelled. In such a case, the owner of the UA will retain full responsibility for every task linked to the continuing airworthiness of the UAS, and the owner of the UA will inform the competent authoritie(s) of the Member State of registry within 2 weeks about the cancellation of the contract.’

(e)

When an owner of an UA contracts a Part-CAO.UAS organisation in accordance with point ML.UAS.201, the obligations of each party shall be established as follows:

1.1.

1.2.

1.3.

1.4.

1.5.

1.6.

1.7.

2.1.

2.2.

2.3.

2.4.

2.5.

2.6.

2.7.

2.8.

2.9.

3.1.

3.2.

3.3.

Both certificates should be retained in accordance with the retention period associated to the first certificate.

(i)

maintenance data used, including revision status and reference;

(ii)

compliance with airworthiness directives (ADs) or service bulletins (SBs);

(iii)

repairs performed;

(iv)

modifications performed;

(v)

replacement parts installed;

(vi)

status of life-limited parts;

(vii)

deviations from the customer work order;

(viii)

certification statements other than those referred to in point 145.A.50 of Annex II (Part-145) to Regulation (EU) No 1321/2014;

(ix)

information needed to support shipment with shortages or reassembly after delivery.

□

‘Certifies that, unless otherwise specified in this block, the work identified in Block 11 and described in this block has been accomplished in accordance with the requirements of Annex II (Part-CAO.UAS) to Delegated Regulation (EU) 2024/1107, and in respect to that work the item is considered ready for release to service.’

(a)

where maintenance could not be completed;

(b)

where the accomplishment of the maintenance deviated from the relevant regulatory requirements;

(c)

where maintenance has been performed in accordance with a requirement other than those specified in Part-145 or in Part-CAO.UAS; in this case, Block 12 shall specify the particular regulation.

CAO.UAS.1

CAO.UAS.010

CAO.UAS.015

CAO.UAS.017

CAO.UAS.020

CAO.UAS.025

CAO.UAS.030

CAO.UAS.035

CAO.UAS.040

CAO.UAS.045

CAO.UAS.048

CAO.UAS.050

CAO.UAS.055

CAO.UAS.060

CAO.UAS.065

CAO.UAS.070

CAO.UAS.071

CAO.UAS.072

CAO.UAS.075

CAO.UAS.080

CAO.UAS.085

CAO.UAS.086

CAO.UAS.090

CAO.UAS.095

CAO.UAS.100

CAO.UAS.102

CAO.UAS.105

CAO.UAS.110

CAO.UAS.112

CAO.UAS.115

CAO.UAS.120

(a)

‘competent authority’ shall be the authority specified in point AR.UAS.GEN.010(b) of Annex I (Part-AR.UAS) to Implementing Regulation (EU) 2024/1109;

(b)

‘owner of the UA’ shall mean one of the following:

(a)

An organisation may use any alternative means of compliance to establish compliance with this Regulation.

(b)

If an organisation wishes to use an alternative means of compliance, it shall, prior to using it, provide the competent authority with a full description. The description shall include any revisions to manuals or procedures that may be relevant, as well as an explanation indicating how compliance with this Regulation is achieved.

The organisation may use that alternative means of compliance subject to the prior approval by the competent authority.

(a)

For each of the privileges sought, the organisation shall specify the scope of work in its organisation manual, as provided for in point CAO.UAS.025. The scope of work shall be an accurate description of the work performed by the organisation.

(b)

For UA and CMU maintenance, the scope of work shall include:

(c)

For CMU installation, the scope of work shall include the type or manufacturer of the CMU.

(d)

For continuing airworthiness management, the scope of work shall include:

(e)

For airworthiness review and permit to fly, the scope of work shall include the type or manufacturer of the UA.

(f)

For the maintenance of components other than complete engines, the scope of work shall be established in accordance with the following classification:

(g)

For the maintenance of complete engines, the scope of work shall include the type or manufacturer of the engines.

(h)

For the non-destructive testing (‘NDT’) privilege, when it forms part of the class ‘specialised services’, the scope of work shall include the NDT methods.

(i)

The organisation shall comply with the terms of approval attached to the organisation certificate issued by the competent authority, and with the scope of work specified in the organisation manual.

(a)

The organisation shall establish and maintain a manual that specifies the necessary information and procedures for its personnel to perform their duties and for the organisation to show how it complies with this Regulation.

(b)

The manual shall include directly or by reference the following information:

(c)

The initial issue of the manual shall be approved by the competent authority.

(d)

Amendments to the manual shall be handled in accordance with point CAO.UAS.105.

(a)

The organisation shall ensure that the facilities to be used, including office accommodation, allow it to perform all planned work.

(b)

In addition, where the scope of approval of the organisation includes maintenance activities, the organisation shall ensure that:

(a)

The organisation shall appoint an accountable manager that has the authority to ensure that all activities of the organisation can be financed and performed in accordance with this Regulation.

(b)

The accountable manager shall nominate a person or group of persons with the responsibility to ensure that the continuing airworthiness activities are performed in accordance with the organisation manual.

(c)

The accountable manager shall nominate a compliance monitoring manager with the responsibility to manage the compliance monitoring function referred to in point CAO.UAS.100.

(d)

The persons nominated in accordance with points (b) and (c) shall have a responsibility to the accountable manager and direct access to him/her. They shall be able to demonstrate appropriate knowledge, background and experience to discharge their responsibilities.

(e)

The organisation shall ensure that all personnel involved in continuing airworthiness activities have the appropriate knowledge, background and experience, and remain competent for the work intended to be performed.

(f)

The organisation shall have sufficient and appropriately qualified staff to allow it to perform the planned work.

(g)

The organisation shall establish initial training for its maintenance staff to ensure they will perform the intended maintenance safely.

(h)

Personnel that perform specialised tasks, such as welding, or non-destructive testing (NDT) inspection other than colour-contrast inspections, shall be qualified in accordance with an officially recognised standard.

(a)

In order to certify the maintenance on UA, CMU and components, or to certify CMU installation, the organisation shall authorise relevant certifying staff for that purpose.

(b)

Certifying staff that are intended to certify the maintenance on UA and CMU, or to certify CMU installation, shall receive initial training relevant to the particular UA and CMU to be stated in the authorisation. The organisation shall ensure that they have acquired a minimum of 3 months of practical maintenance experience with similar aircraft or CMU, or 6 months of practical maintenance experience on aircraft or CMU being operated, before receiving their certification authorisation.

(c)

The organisation shall ensure that certifying staff periodically receive sufficient and adequate recurrent training to ensure that they have up-to-date knowledge of relevant technologies, organisation procedures, and human factors issues.

(a)

In order to perform airworthiness reviews, the organisation shall authorise relevant airworthiness review staff that shall comply with all the following requirements:

(b)

Before the organisation issues an airworthiness review staff authorisation to a person, that person shall perform an airworthiness review under the supervision of the competent authority or under the supervision of a person that is already authorised as airworthiness review staff by the organisation. If this airworthiness review performed under supervision is satisfactory, that person shall be authorised as airworthiness review staff by the compliance monitoring manager.

(a)

The organisation shall have, or shall have access to, equipment and tools that are adequate to discharge its responsibilities.

(b)

The organisation shall ensure that the equipment and tools it uses are controlled and calibrated to an officially recognised standard. It shall keep records of such calibrations and the standards used.

(c)

As regards maintenance, the organisation shall inspect, classify and appropriately segregate all incoming components received in accordance with points ML.UAS.501 and ML.UAS.504 of Annex I (Part-ML.UAS), as applicable.

(a)

The organisation shall have access to and use applicable current maintenance data specified in point ML.UAS.401(b) of Annex I (Part-ML.UAS) which is necessary for the performance of maintenance.

(b)

Before maintenance commences, a written work order shall be agreed between the organisation and the person or organisation requesting the maintenance, in a manner that establishes the maintenance to be performed.

(a)

All maintenance shall be performed in accordance with the requirements of Subparts D, E and H of Annex I (Part-ML.UAS).

(b)

When performing maintenance, the organisation shall comply with the following requirements:

(a)

Upon completion of the maintenance carried out on UA components in accordance with this Regulation, the organisation shall certify such maintenance in accordance with point ML.UAS.802 of Annex I (Part-ML.UAS).

(b)

Upon completion of the maintenance performed, in accordance with this Regulation, on CMU components referred to in point ML.UAS.520(d) of Annex I (Part-ML.UAS), the organisation shall certify such maintenance in accordance with point ML.UAS.804 of Annex I (Part-ML.UAS).

(c)

Points (a) and (b) do not apply to components fabricated in accordance with point CAO.UAS.095(a)(5).

(a)

All continuing airworthiness management tasks shall be performed in accordance with the requirements of Subpart C of Annex I (Part-ML.UAS).

(b)

For every UAS managed, the organisation shall:

(a)

The organisation shall have access to and use applicable current continuing airworthiness management data which is necessary for the performance of continuing airworthiness management tasks.

(b)

That data is specified in point ML.UAS.401(b) of Annex I (Part-ML.UAS).

(a)

The organisation shall retain the following records as applicable to the privileges it holds:

(b)

The organisation shall retain personnel records and authorisations that are necessary to demonstrate the qualification of its personnel. It shall retain the records that are relevant to certifying staff, airworthiness review staff and staff issuing permits to fly for a period of at least 2 years after that staff has left the organisation, or after the authorisation issued to that staff has been withdrawn.

(c)

The organisation shall, upon staff request, grant them access to their personnel records as specified in point (b), and duplicate and provide these records to them when they leave the organisation.

(d)

The organisation shall retain the records:

(e)

Compliance monitoring records shall be kept for a minimum period of 2 years.

(f)

All records shall be stored in a manner that ensures protection from damage, alteration, and theft.

(g)

Where the continuing airworthiness management of an UAS is transferred to another organisation or person, all the records retained under points (a)(2) to (a)(5) shall be transferred to that organisation or person. If the transfer is made to another Part-CAO.UAS organisation, point (d) shall apply to that organisation from the moment of the transfer.

(h)

When the organisation terminates its operations, all retained records shall be transferred as follows:

(a)

Maintenance

(b)

CMU installation

An organisation approved for CMU maintenance may perform the installation of a CMU and certify such installation in accordance with point CAO.UAS.072.

(c)

Continuing airworthiness management

(d)

Airworthiness review

An organisation whose approval includes the privileges referred to in point (a) or (c), may be approved to perform airworthiness reviews in accordance with point CAO.UAS.085 and issue the related ARC.

(e)

Permit to fly

An organisation whose approval includes the privilege referred to in point (d), may be approved to issue a permit to fly in accordance with point CAO.UAS.086 for those UA for which it can issue the ARC.

(a)

To ensure that the organisation continuously meets the requirements of this Regulation, the organisation shall establish a compliance monitoring function.

(b)

That function shall independently monitor:

(c)

The function shall also monitor the compliance of contracted maintenance with the contract or work orders.

(d)

If the organisation holds one or more additional organisation certificates within the scope of Regulation (EU) 2018/1139, the compliance monitoring function may be integrated into that required under the additional certificate(s) held.

(e)

The organisation may replace the compliance monitoring function by regular organisational reviews not requiring independence, provided that all the following conditions are met and subject to the approval by the competent authority:

In that case, the organisation shall not subcontract continuing airworthiness management tasks to other parties.

(a)

The organisation shall protect information and communication technology systems and data used for continuing airworthiness activities, including relevant software and hardware, and network connections.

(b)

Without prejudice to point CAO.UAS.120, the organisation shall ensure that any information security incident or vulnerability, which may represent a significant risk to aviation safety, is reported to its competent authority.

In addition:

(c)

The reporting referred to in point (b) shall be made as soon as possible, but not exceeding 72 hours from the time the condition has been known to the organisation, unless exceptional circumstances prevent this.

(a)

The following changes to the organisation shall require prior approval by the competent authority:

(b)

Any other changes shall be managed by the organisation and notified to the competent authority in accordance with a procedure specified in the organisation manual. The organisation shall submit the description of the changes and the corresponding amendment of the organisation manual to the competent authority within 15 days from the day on which the changes took place.

(a)

the organisation remains in compliance with the requirements of this Annex, taking into account the requirements of point CAO.UAS.115 related to the handling of findings;

(b)

the organisation has ensured that access is granted to the competent authority as specified in point CAO.UAS.112;

(c)

the approval certificate has not been surrendered by the organisation, or suspended or revoked by the competent authority.

(a)

After receiving a notification of a finding from the competent authority in accordance with point AR.UAS.GEN.350 of Annex I (Part-AR.UAS) to Implementing Regulation (EU) 2024/1109, the organisation shall, within the period agreed with the competent authority, define a corrective action plan (to eliminate the finding(s) and prevent its (their) reoccurrence) and demonstrate the implementation of that plan to the competent authority.

(b)

The observations received in accordance with point AR.UAS.GEN.350(f) of Annex I (Part-AR.UAS) to Implementing Regulation (EU) 2024/1109 shall be given due consideration by the organisation. The organisation shall record the decisions it has taken in respect of those observations.

(a)

The organisation shall establish and maintain an occurrence-reporting system, including mandatory and voluntary reporting. Organisations that have their principal place of business in a Member State shall ensure that their occurrence-reporting system complies with the requirements of Regulation (EU) No 376/2014 of the European Parliament and of the Council (1) and Regulation (EU) 2018/1139, as well as with the delegated and implementing acts adopted on the basis of those Regulations.

(b)

Without prejudice to Article 19 of Implementing Regulation (EU) 2019/947, the organisation shall report to its competent authority and to the design approval holder of the UAS or component any safety-related event or condition of an UAS or component identified by the organisation which endangers or, if not corrected or addressed, could endanger an UAS or any other person, and in particular any accident or serious incident.

(c)

When the organisation is contracted for maintenance, the organisation shall also report any such event or condition that affects an UAS to the organisation responsible for the continuing airworthiness management of that UAS in accordance with point ML.UAS.201 of Annex I (Part-ML.UAS). For events or conditions that affect components, the organisation shall report to the person or organisation that requested the maintenance.

(d)

When the organisation is contracted to perform continuing airworthiness management tasks, it shall also report any such event or condition that affects an UAS to the owner that has contracted the Part-CAO.UAS organisation.