🛡️ SIRA-Licensed Installer · UAE-wide

UAE CCTV Compliance, Emirate by Emirate

Who must install CCTV, how long footage must legally be kept, the exact camera specifications, and the penalties — for Dubai (SIRA), Abu Dhabi (ADMCC), Sharjah (Raqib), Ras Al Khaimah (Himaya), Fujairah (ZAM), Ajman and Umm Al Quwain. Written by a SIRA-licensed security-systems team and cross-checked against the official government standards.

💬 Free compliance survey View CCTV packages
On this page:
Who must install CCTV Legal retention periods (30/90/180 days) Camera specifications Rules by emirate Federal data law (PDPL) Penalties How Servia helps FAQ

Is CCTV mandatory for UAE businesses?

Yes — for a wide range of premises. Here it is in plain terms.

Across the UAE, video surveillance is not optional for defined categories of business and building. In Dubai and Abu Dhabi the governing technical rulebook is the same government document — the MCC Manual of Standards for Surveillance Devices, Version 2.0 (2023) — enforced by SIRA in Dubai and ADMCC in Abu Dhabi. The Northern Emirates each enforce their own police-run programme. The categories legally required to install approved CCTV include:

🏬 Commercial shops & retail outlets
🏦 Banks, money exchanges & financial institutions
💎 Gold & jewellery shops
🏭 Warehouses (incl. precious, hazardous & medical stores)
⛽ Fuel stations
🏨 Hotels & hotel apartments
🏢 Residential & commercial buildings / compounds
🏫 Schools, universities & nurseries
🏥 Hospitals, clinics & pharmacies
🛍️ Shopping malls & cinemas
👷 Labour accommodation / camps
🅿️ Parking buildings, event halls & places of worship

Source: MCC/SIRA Manual of Standards for Surveillance Devices v2.0 (2023), "Groupings and Video Storage Duration." Each emirate's authority may add further categories.

How long must you keep CCTV footage? (The number people get wrong)

Many websites say "31 days." The official standard is tiered — 30, 90 or 180 days depending on your business type.

Minimum retentionApplies to
30 daysGovernment authorities, financial institutions, commercial shops, event/wedding halls, cinemas, hospitals & clinics, parking buildings, places of worship, holiday homes, precious/hazardous/medical warehouses.
90 daysMoney exchanges, schools/universities/nurseries, gold & jewellery shops, residential & commercial buildings, fuel stations, museums, labour camps, public-transport places.
180 daysHotels & hotel apartments, shopping malls, banks, digital data-storage & video-recording centres.

Footage is overwritten on a first-in-first-out basis once the period is exceeded, and recorded video must not occupy more than 80% of total storage capacity — so storage has to be sized correctly, not just "a hard drive." In Ras Al Khaimah, RAK Police's Himaya regime (Law No. 3 of 2015) sets a flat minimum 90 days for all entities.

Source: MCC/SIRA Manual of Standards for Surveillance Devices v2.0 (2023), §5; RAK Law No. 3 of 2015 (RAK Police, "Himaya").

The camera & system specifications the law actually requires

Straight from the official Manual of Standards v2.0 (2023) — not blog guesswork.

RequirementOfficial standard
Minimum resolution1920 × 1080 (Full HD). Fixed-type IP cameras only; PTZ by prior approval; hidden cameras strictly prohibited.
Pixel density (detail)Entrances/exits 500 px/metre; cash & reception areas 125 px/metre; perimeter/parking 30 px/metre.
Frame rateIdentification & vehicle cameras 25 fps; recognition & detection 12 fps.
Camera standardsH.264+ compression, ONVIF Profile S, dual streams, WDR 110 dB, outdoor rating IP66, varifocal lens if mounted ≥ 4 m.
Recording / storageSIRA-approved recorder, continuous 24/7 for Group C, RAID 5 enterprise drives (≥7200 rpm), audit log kept for the full retention period.
Cyber-securityPasswords ≥ 11 chars changed every 3 months, lockout after 5 failed logins, no end-of-life OS, MAC filtering.
Control roomDoor access control, ≥ 21″ monitors, ≥ 30 min backup power, no camera-phones inside; footage export only via official authority letter.
SignageA visible surveillance notice in Arabic, English and Urdu is mandatory; privacy masking of neighbouring/private areas is required.
⚠️ Two myths to ignore: the standard's resolution floor is 1920×1080 (not "4K mandatory"), and the minimum retention is 30 days tiered up to 180 (not a flat "31 days"). We build to the actual published spec.

Source: MCC/SIRA Manual of Standards for Surveillance Devices v2.0 (2023), Technical & General Specifications.

CCTV rules by emirate — who regulates what

A common (and risky) mistake competitors make: applying "SIRA" everywhere. SIRA governs Dubai only. Here's the correct regulator for each emirate.

EmirateRegulator & systemLegal basis / notes
DubaiSIRA (Security Industry Regulatory Agency)Law No. 12 of 2016. SIRA-approved installers, audit & NOC, VideoGuard telemetry. Servia is SIRA-licensed
Abu DhabiADMCC / Monitoring & Control Centre (MCC)Law No. 5 of 2011. ADMCC-accredited installer, system-design submission & final inspection via TAMM.
SharjahSharjah Police — "Raqib" (راقب)Site CCTV must connect to the Raqib monitoring platform; only Sharjah-Police-approved companies may install/maintain.
Ras Al KhaimahRAK Police — "Himaya" (حماية)Local Law No. 3 of 2015. Mandatory for all entities; min 90-day retention; approval via RAK Police + GRA spec.
FujairahFujairah Police GHQ — "ZAM" (زام)Police permission before installing; approved installers with certified-technician ID cards.
AjmanAjman Police (CID CCTV section)Camera-layout plan approved by Ajman Police; only police-certified installers.
Umm Al QuwainUAQ Police (+ Economic Dept.)Approved Video Management System (VMS) and police-certified installer required.

Sources: SIRA (sira.gov.ae); Abu Dhabi Media Office (ADMCC); Sharjah Police Raqib; RAK Police / Khaleej Times on Law 3/2015; Fujairah Police ZAM; Ajman & UAQ Police. Northern-Emirates technical specs should be confirmed with the relevant police authority at time of install.

Detailed guides by emirate

The federal law that applies in every emirate: PDPL

On top of each emirate's install rules, Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), in force since 2 January 2022, treats a person's image as personal data. That means CCTV footage must be captured on a lawful basis, kept secure, retained only as justified, and handled under the oversight of the UAE Data Office. Compliant signage, privacy masking and access control aren't just security best-practice — they're how you stay on the right side of the federal data law too.

Source: Federal Decree-Law No. 45 of 2021 (PDPL); UAE Data Office (u.ae). Free zones such as DIFC apply their own data law.

What non-compliance costs you

Beyond fines, the bigger risk is operational: authorities can withhold building-completion certificates, trade-licence renewals and operating permits until a compliant, authority-approved system is in place. In Abu Dhabi, operating a monitoring system without MCC/ADMCC approval is reported to carry up to two years' imprisonment and/or a fine of AED 50,000–200,000, plus seizure of equipment. Every emirate can fine non-compliant premises and force a re-install through an approved company — which usually costs more than doing it right the first time.

Penalty figures per Abu Dhabi Law No. 5 of 2011 (as widely reported); confirm current amounts with the relevant authority.

How Servia gets you compliant — and keeps you there

We're a SIRA-licensed CCTV and security-systems provider. We don't just sell cameras — we deliver systems that pass:

Get a free CCTV compliance survey

Tell us your premises type and emirate — we'll tell you exactly what the law requires and quote a fixed price.

💬 WhatsApp us now See packages & pricing

Frequently asked questions

Is CCTV mandatory for businesses in the UAE?

Yes — defined categories (shops, warehouses, jewellers, exchanges, schools, clinics, hotels, malls, banks, fuel stations, residential/commercial buildings, labour accommodation and more) must install approved CCTV. It's enforced by SIRA in Dubai, ADMCC in Abu Dhabi, and the police in Sharjah (Raqib), RAK (Himaya), Fujairah (ZAM), Ajman and UAQ.

How many days must I keep CCTV footage?

Minimum 30 days, rising to 90 days (schools, jewellers, exchanges, fuel stations, residential/commercial buildings, transport, labour camps) and 180 days (hotels, malls, banks, data centres) under the MCC/SIRA Manual of Standards v2.0. RAK requires a flat minimum of 90 days.

Does SIRA really require 4K cameras?

No. The official SIRA Manual of Standards sets a minimum of 1920×1080 (Full HD) with fixed IP cameras, enforcing detail through pixel-density-per-metre (500 px/m at entrances). "4K mandatory" is a common but inaccurate claim.

Is Servia SIRA-approved?

Yes, Servia is a SIRA-licensed CCTV and security-systems provider in Dubai, and we advise on the equivalent approvals across the other emirates. Message us on WhatsApp for a free compliance survey.

What happens if my CCTV isn't compliant?

You can face fines, equipment seizure, and — often more costly — withheld building-completion, trade-licence or operating approvals until a compliant, authority-approved system is installed by a licensed company.

This page is a plain-language summary for UAE business owners, prepared by a SIRA-licensed installer and cross-checked against official sources (SIRA/MCC Manual of Standards v2.0 2023, RAK Law 3/2015, Federal PDPL 45/2021). Regulations change — for the requirement that applies to your exact premises, book a free survey and we'll confirm it against the current authority standard.