Earlier quoted context omitted.
Sure, that's what's important after-the-fact if someone's getting mad at you. But that's very murky territory—the kind individuals constantly wander into because of conflicting motivations, but which corporations tend to stay well clear of. Let's instead talk about legal liability , and how corporations seek to discharge it in their delivery of products/services. If I'm programming a political auto-dialer, there are…
Third parties do not typically have legal liability for how their customers use their products, but this a murky area that I am sure has tons of edge cases and exceptions depending on product, industry, and local regulations. To your example: You can buy drones today that will follow people around. The person who uses it is generally responsible for using it to film legally.
You know how a politician might hire a PR firm to produce a "day in the life of" documentary about them? Part of the PR firm's job would be to handle any negotiation of the local legal terrain required to get filming rights for locations, and likeness rights for other people appearing in the film. If they couldn't get such rights, it would also be part of their job to inform the customer of what things they now can't film, so that the customer could either make the choice to just leave some parts of their day un-filmed; or to re-arrange their schedule so that only legally-filmable events are on the roster for that day.
A hypothetical "camera drone as a service", in my mind, would be that, but handled mostly by an AI, maybe with OnStar-like interactive support if you get into an edge-case. (Again, it's a stupid idea! It's a thought-experiment, not a viable startup. :)
There are many services where part of the service you're paying for, is the service provider's expertise in navigating the local legal landscape in their own regulatory domain of expertise. In fact, that's entirely the point of some services: anyone can do their own accounting in a technical sense, but you pay an accountant because they know how to do your accounting in a way that complies with all your local regulations.
So, again: if one of the legal requirements of the CDaaS service is to automatically avoid (or at least not-surveil) any private property—then what would the rule for that look like?