Short answer
In Dubai, CCTV and other security systems fall under the Security Industry Regulatory Agency (SIRA). Many premises — including malls, hotels, banks, schools, hospitals, warehouses and data centres — must have SIRA-compliant systems, installed by a SIRA-licensed company using approved equipment. Abu Dhabi has its own police-run monitoring requirements, and the other emirates apply police approvals of their own.
What the rules usually cover
- Camera coverage of entrances, exits, cash points, car parks and perimeters.
- Image quality — resolution and frame rates good enough to identify people and number plates.
- Recording retention — commonly 31 days for standard commercial premises and longer (often 90 days) for higher-security sites.
- Approved equipment and licensed installers, plus inspection before the system is accepted.
- Privacy — cameras must not look into private spaces, and footage is personal data under the UAE PDPL.
How to plan it properly
- Confirm your premises category and the authority that applies in your emirate.
- Design camera positions, storage and network capacity to that category's requirements.
- Choose approved cameras, recorders and video-management software.
- Allow time for inspection — approval steps can take several weeks, so schedule them before handover.
- Keep records: drawings, test reports and maintenance logs are checked at renewal.
How NICE Venture helps
We design CCTV, access control and network infrastructure with the authority requirements built in from day one, coordinate the approval steps with the relevant licensed parties, and maintain systems afterwards. See our CCTV & video analytics service.
A typical project path
- Classify the premises: confirm which category and requirements apply to your site and activity.
- Design: camera positions, fields of view, resolution and recording capacity, plus control-room layout where needed.
- Approval of design and equipment: submit drawings and specifications through the licensed contractor as required.
- Installation: by a licensed company using approved equipment, with proper cabling, power and network design.
- Testing and inspection: verify image quality, recording and retention before the authority's inspection.
- Handover and maintenance: documentation, training and an annual maintenance contract so the system stays compliant.
Design details that often cause rejections
- Cameras that cannot identify faces at entrances because of backlighting or wrong lens choice
- Insufficient storage for the required retention at the required resolution and frame rate
- No UPS or poor power backup for recorders and switches
- Blind spots at emergency exits, car-park ramps or cash areas
- Unapproved or mismatched equipment models
Infrastructure behind a compliant system
Reliable CCTV depends on structured cabling, PoE switches with enough power budget, a segmented camera network, secure remote viewing and enough storage with redundancy. Plan these with the ELV design, not as an afterthought.
Privacy and access
Limit who can view and export footage, keep an access log, sign-post monitored areas and never point cameras into private spaces. Footage is personal data under the UAE PDPL as well as security evidence.
Keeping compliant after handover
Requirements can change and equipment ages. Schedule periodic checks of camera views, recording health and retention, keep firmware updated and renew maintenance contracts on time. Always confirm current requirements with SIRA in Dubai or the relevant police authority in other emirates before you design or modify a system.
Frequently asked questions
Does every shop in Dubai need SIRA-approved CCTV?
Requirements depend on the premises category. Malls, banks, jewellery shops, hotels, schools, hospitals and warehouses are typically covered; check your category with SIRA or an approved provider.
How long must CCTV footage be kept?
Commonly 31 days for standard commercial premises and around 90 days for higher-security sites, but the requirement for your category is what counts.
Is CCTV footage personal data?
Yes. Footage that identifies people is personal data, so access, retention and sharing should follow the UAE PDPL as well as security rules.
Sources: Creative Zone — SIRA approval in Dubai