SIRA and CCTV in Dubai: What the Rules Mean for Homes and Businesses

SIRA (opens in a new tab) is the Security Industry Regulatory Agency, the Dubai government body responsible for the security industry in the emirate. The framework includes Dubai Law No. 12 of 2016 (opens in a new tab), its implementing bylaw issued in 2026 (opens in a new tab), and current SIRA resolutions and manuals. Read the primary sources and confirm the current position with SIRA or a properly licensed provider before making compliance decisions.

The regulation works in two directions, and keeping them apart clears up most of the misunderstanding around this subject.

The detail of what a system must do, where cameras must be placed and how long recordings must be kept lives in SIRA's current published requirements. It doesn't live in general guidance like this page, and it doesn't live in the blog posts that copy each other around this topic.

Those requirements are updated. A great deal of what circulates online quotes older legislation or an installer's summary written years ago, presented as though it were still current. Some of it may be. Checking the date on anything you read about this, including this page, is the single most useful habit here.

So the position taken below is deliberate. Where a requirement exists, it is described as a requirement. Where a specific figure applies, you are pointed at the regulator for the current number instead of being given one we can't stand behind. A retention period or a camera specification quoted from memory is exactly the kind of detail that gets a business a remedial visit.

If your premises fall within scope, the obligations are real and they are checked. The bylaw identifies categories treated as vital or higher risk: banks and money exchange establishments, gold and jewellery shops, hotels, shopping malls and hospitals appear among them, alongside a longer list of other categories. If you operate something in one of those categories, work on the assumption that you are in scope until the regulator tells you otherwise.

In practice, being in scope means the system is designed to defined technical requirements instead of to taste, the design commonly goes through an approval step before installation, the work is carried out by a company licensed for it, and recordings are retained for a defined minimum period. That last one reaches the budget as well as the paperwork, because storage has to be sized to the retention. Our guide to what drives CCTV cost covers how retention translates into disk, and why it is cheaper to buy the capacity once.

Two mistakes recur. The first is treating compliance as a badge bought from a supplier. The obligation attaches to the premises, and it is the design and the installed system that have to satisfy it, so the paperwork and the drawings matter more than the logo on the quotation. The second is discovering the requirement at the end of a fit-out, when the ceiling is closed and the containment is full, which turns a routine specification into remedial work at the worst possible moment.

If you occupy a unit inside a mall or a managed building, expect a second layer above the regulator. Landlords and mall managements maintain their own technical and access rules, and those have to be reconciled with the regulatory design before anything is fixed to a wall.

The regulation is aimed at the security industry itself and at defined categories of premises. A private home is not one of those categories, which is why a villa owner is not usually applying for approval to put a camera over their own front door.

That is a very different statement from no rules apply to homes. Three things shape a residential installation, and all three are worth settling before equipment is ordered.

One case deserves flagging because it catches people out. If your villa also functions as business premises, a home office that receives clients, a short-term holiday rental, a tuition or childcare arrangement, a small clinic, then the residential assumption may not carry over.

Use of the property decides which rules apply, not its shape or its title deed. The honest answer in these cases is to ask the regulator directly about your specific situation before designing anything, because the cost of assuming wrongly falls on the business rather than on the installer.

The same applies to labour accommodation, staff quarters used by more than one household, and any part of a residential plot that the public can enter. If in doubt, ask. It's a short call and it settles the design.

One principle survives every version of the guidance: cover your property, not other people's.

In practice that means a gate camera angled down and inward across your own driveway, not along the street. It means boundary cameras framed to see your side of the wall. It means nothing pointed at a neighbour's windows, garden, entrance or parking. In an apartment building it means keeping cameras inside your own demise, because corridors, lobbies and lift areas belong to the building and are covered by the building's own system.

Two things do most of the work here, and neither is a setting switched on at the end. Mounting position and lens choice determine what is in frame at all, which makes this a survey decision taken with a ladder in hand. Where a view unavoidably clips a neighbouring property or a public path, privacy masking blanks that area, and it should be applied so the region is absent from recordings and from live view alike, not merely hidden on one screen.

Audio deserves its own thought. Many cameras record sound by default, and recording conversations is a more sensitive act than recording images. Unless there is a clear reason to capture audio, switching it off is the safer default and costs you nothing.

UAE law takes privacy seriously, and a camera capturing other people's private space can create exposure entirely separate from anything the security regulations require. If your layout makes an overlooking view genuinely hard to avoid, take proper advice on it before installing, not after a complaint arrives.

This is the most common reason a residential installation stops halfway. Communities and building managements usually want to see the plan before work starts, and what they typically ask for is straightforward to prepare.

In villa communities, work inside your own plot boundary usually attracts little attention, while anything mounted on a boundary wall or facing shared space attracts a lot. Community offices are mainly protecting two things: the look of the street, and other residents' privacy. A drawing that shows your cameras looking inward answers both concerns before they are raised.

In towers the position is stricter, because the facade and the common areas are not yours. A camera at an apartment door, or a video intercom station beside it, is usually fixed to something the building owns, so it belongs in the same written request. Building managements also tend to have views on cable routes through common corridors, which is worth establishing before a route is designed around an assumption.

Neither approval is difficult to obtain. Both are expensive to obtain retrospectively, once equipment is mounted and a neighbour has objected. Ask before anything is ordered.

There's a reliable tell for whether a company has done this before: they ask what the property is used for before they ask how many cameras you want.

On a commercial site the questions are what the business does and which category the premises falls into, whether an existing system was ever approved, who the landlord or mall management is and what their rules add, where a recorder can live securely, and what retention the premises has to meet. Those answers determine the design. The camera schedule comes afterwards, not first.

On a villa the questions are different: which community the property sits in and whether it publishes rules, which boundaries face shared roads or neighbouring plots, how the gate is arranged and whether a cable route exists back to the house, whether the property is used for anything beyond family occupation, and where a recorder can sit out of sight. Settling those early is what keeps a villa system from being redesigned after the first conversation with the community office.

None of these require technical knowledge to ask, and the quality of the answers separates companies quickly.

Regulation isn't a box ticked at the end of a project. It shapes coverage, storage and sometimes camera positions, so it belongs in the first conversation and on the first drawing.

The practical sequence is to establish which route your property falls under before anything is specified, design the coverage to sit comfortably inside both the applicable requirements and the privacy constraints, size storage to the retention the property actually needs, and prepare the drawings a community or a building management will ask to see. Done in that order, the approvals become paperwork. Done in the other order, they become rework.

That is how CCTV and security design should be approached in Dubai whether the property is a jewellery shop or a family villa. What differs between them is the requirements that apply, not the care taken over the design.