I don't see legislation working. Unlike aircraft, where you at least have a pilot to locate/prosecute, these things can be controlled from anywhere. Trying to find the controller would be needle-in-haystack stuff.
True.
But from the investigation side we're going to need something akin to traceable MAC addresses in the computer thinggie that's controlling it.