CCTV and access control in Dubai: SIRA's rules, explained

Updated 17 October 2026. Every rule in this guide links to its official source at the end of the page.

Key facts

• Regulator: SIRA, under Law No. (12) of 2016 and the Preventive Systems Manual approved by Administrative Resolution No. (13) of 2025.
• Cameras: colour, at least 1080p Full HD, visible not hidden, IP66 outdoors, WDR of at least 110 dB facing light sources.
• Recording: 1080p, live view at least 25 fps, motion settings no less than 70% of the day, 10 fps and 31 days, with 20% extra capacity.
• Maintenance: annual contract with a SIRA-registered company, at least four preventive visits a year, SIRA-licensed crew.
• Access control: fire-alarm compatible, emergency release, 4-hour battery backup, login and logout records kept at least one year.
• Fines: AED 10,000 to 500,000 per violation of the law, doubled on repeat within a year, up to AED 1,000,000.

Who regulates CCTV and access control in Dubai

Law No. (12) of 2016 established the Security Industry Regulatory Agency (SIRA) as the government entity responsible for regulating the security industry in the Emirate of Dubai. The Dubai Building Code's security part says buildings must meet SIRA's security requirements to keep Dubai one of the safest and most secure cities, and describes SIRA's Preventive Systems Manual, together with the law and its implementing bylaw (Board of Directors Resolution No. 1 of 2018), as the legal framework for security systems in Dubai. The code also notes that "CCTV" is an outdated term for what it calls video surveillance systems (VSS).

For owners, this means that cameras, access control, alarms and related systems in covered buildings are not just a purchase decision: they must meet minimum specifications, be installed and maintained by SIRA-registered people, and be operated in a documented way.

The law and the 2025 manual

SIRA's chief executive approved the current Preventive Systems Manual through Administrative Resolution No. (13) of 2025, issued on 14 April 2025. The resolution approves the manual and its requirements and technical standards, requires SIRA to publish it and any amendments on its website, applies it to all establishments specified in Board of Directors Resolution No. (1) of 2018, and repeals any conflicting provisions in other resolutions or manuals. The manual is organised into technical specifications (IP video systems, access control, alarm and intruder detection, locks, penetration-resistant glass and hostile vehicle barriers), operational controls (image requirements, remote monitoring, management, lighting, image acceptance, sustainability, maintenance, prohibitions, exceptions and installation quality) and security requirements by type of establishment.

The manual states that its contents are the minimum specifications and requirements, that nothing may be installed below them without SIRA's official approval, and that SIRA may impose additional measures as the security situation requires. Where a facility has shared spaces serving more than one activity, the maximum requirements apply.

Who may design, install and maintain systems

Law No. 12 of 2016 states that no person may provide security services in Dubai without first obtaining a licence, and that licences may not be assigned without SIRA's written approval. The Dubai Building Code adds that it is mandatory under the Preventive Systems Manual for security consultants, installers and maintenance staff on Dubai projects to be SIRA-registered security engineers, and that anyone appointing one must verify that their accreditation is valid at the time of design, installation and maintenance, and not suspended or withdrawn. The 2025 manual requires the entire technical maintenance crew to be licensed by SIRA, with service providers keeping their crew information updated with SIRA.

As guidance, the first step with any security contractor in Dubai is to ask for their SIRA licence and the registration of the engineers who will work on your site, and to check them before signing.

Camera specifications

As guidance, the WDR requirement matters at many Dubai entrances, where bright daylight behind people turns faces into silhouettes on ordinary cameras.

Recording specifications: the 31-day rule

As guidance, the 31-day minimum is a planning number for storage: the number of cameras, their resolution and frame rate, and how much of the day they record determine the disk space needed, and the manual's 20% extra capacity is on top of that. Some sectors in the manual set their own retention periods, so the requirement for a specific establishment should be confirmed against its sector section.

Fields of view: what each camera must see

The manual defines a "standard target" as a person or test target 1.6 metres tall and sets image requirements by purpose:

As guidance, this is why a security design starts with a drawing of what each camera must achieve, not a count of cameras: an entrance camera that only "detects" people cannot identify them, however many cameras the building has.

What residential buildings and villa communities need

The manual's section on important complexes covers groups of residential or office units, including buildings, towers and villa complexes. For multi-storey residential buildings it requires cameras with identification view at entrances, recognition view at reception desks, observation view at lift lobbies and stairs (showing the floor number) and inside lifts, detection view in corridors and parking pathways, recognition at health club entrances, monitoring at swimming pools and external cameras around the building's perimeter. Number-plate recognition cameras are required at parking entrances and exits used by residents only; if parking is used by visitors or units are used as holiday homes, a SIRA-approved automatic number-plate recognition (ANPR) system is required.

For villa complexes, the manual requires cameras at entrances, internal street intersections, lift lobbies and inside lifts in public areas, health club entrances, swimming pools, parking pathways, SIRA-approved ANPR at parking entrances and exits, cameras on the perimeter fence or internal streets, 24-hour security guards and a SIRA-approved system health monitoring service. The Dubai Building Code's villa part requires the common areas of villa or townhouse communities to meet SIRA's security requirements.

Hotels and other establishments

The manual sets detailed requirements by establishment type. For luxury hotels, for example, it requires identification view at entrances and at entrances to bars, nightclubs and ballrooms, recognition view at cash and reception desks, vehicle entrances and exits, bag deposit rooms, electrical room entrances, water tank room entrances and fresh air handling unit entrances, observation view in lift lobbies, stairs, inside lifts and at emergency exit doors, detection view in corridors, business centres, loading areas, parking pathways, the main lobby and backup generator fuel tanks, and monitoring of drop-off areas. The Dubai Building Code's summary adds that rooms in three-, four- and five-star hotels and luxury and tourist hotel apartments need access control with locks logging at least 3,000 actions, linked to a central system keeping records for at least six months. The code lists many other building types with their own requirements, from shopping centres and warehouses to staff accommodation and fuel stations.

Access control systems

As guidance, the most important design decision in access control is what happens when power or the network fails: escape doors must release so people can leave, while specific high-security rooms stay locked. That decision belongs in the design, agreed with the fire safety consultant, not left to whatever the lock does by default. Power Zone's fire safety maintenance guide covers the fire alarm side.

Gates, barriers and number-plate recognition

The manual requires vehicle entrances and exits to be covered with recognition view in many establishment types, number-plate cameras at residential parking entrances and exits, and SIRA-approved ANPR systems where parking is used by visitors, units are used as holiday homes, or in villa complexes. The Dubai Building Code explains that ANPR is monitored by SIRA's City Ring system, and that SIRA's VideoGuard system monitors video surveillance systems to verify they are configured and working correctly. The manual also requires connecting VSS to SIRA's approved system integrity monitoring service, alarm systems to SIRA-approved alarm monitoring, and electronic number-plate systems to SIRA's approved monitoring. As guidance, gate automation itself needs safety devices such as photocells and edges so gates and barriers cannot close on people or vehicles, and regular servicing of motors, sensors and backup power.

Alarm and intruder detection

Where alarm and intruder detection systems are required, the manual specifies at least third-generation components, sensor coverage leaving no area that could be breached to disable the system, dual-technology motion detectors, vibration, drilling and glass-break sensors, hidden panic buttons for staff, and door contacts. Sounders with flashing lights must ring for at least 5 minutes or until reset, reach at least 110 dBA at 1 metre, and have backup batteries for 8 continuous hours.

Operating the system: people, signs and records

• An employee must be responsible for the facility's security systems, trained to operate them, copy and search footage, and report faults immediately.
• SIRA-approved standard warning signs must be placed at all main entrances and inside lifts, alerting people to the surveillance systems.
• Every copy of footage must be recorded on the approved form: what was copied, by whom, where it was kept and who received it.
• All systems must run on the real, correct time and date, synchronised automatically and consistent with SIRA's systems.

Security lighting and image quality

The manual requires scenes within camera range to be fully lit with no dark areas; invisible infrared lighting may be used in secondary perimeter areas provided it covers the cameras' view and is not reflected into the camera, and security lighting must not affect others' safety, such as drivers' vision. For an image to be accepted, it must be clear and readable with straight lines undistorted, stable even in moderate wind, and unobstructed: an image is unacceptable if obstructions exceed 5% of its area, and the centre of the image must be free of obstructions. As guidance, trees and signs that grow or move into a camera's view, and lights that fail, are typical ways a system that passed on day one stops meeting these rules.

Protecting the system itself

Maintenance: the annual contract

The manual requires the facility to enter an annual maintenance contract with a company registered with SIRA. The contract must include a preventive maintenance programme of no less than four visits a year, with legal response times and penalties for non-compliance, and the facility must notify SIRA if the contract terms are not implemented. The whole technical maintenance crew must be licensed by SIRA. As guidance, a maintenance visit typically checks every camera's view, focus and night image against its required field of view, recording and storage health against the 31-day setting, time synchronisation, backup power, access control logs and door releases, alarm sensors and sounders, and the condition of cabling and enclosures, with a report for the facility's records.

Changes you must report to SIRA

The manual obliges the user, the facility and the maintenance and installation provider to keep a record and to notify SIRA of any work that changes the system, even slightly, including: the security system design; specifications or components; arrangement and programming of devices; maps of the monitored area; lighting levels affecting the systems; new obstructions; expansion or reduction of the facility, or adding or merging buildings or commercial licences; adding or removing entrances, exits, fences or open areas; changes in activities; adjacent projects affecting the systems; and anything else affecting the systems' efficiency. As guidance, fit-outs and renovations are where this is easily forgotten: moving a reception desk or adding a door changes what the cameras must cover.

What is prohibited

• Cameras with pan and zoom in private areas, without SIRA approval.
• Hidden cameras, without SIRA approval.
• External rooftop cameras whose range goes beyond the facility's boundaries, without SIRA approval.
• Installing security equipment in a way that compromises safety features such as fire-resistant doors or fire-stopping, or obstructs emergency equipment.

Fines and enforcement

Under Article 21 of Law No. (12) of 2016, a person who violates the law, its implementing bylaw or resolutions issued under it faces a fine of no less than AED 10,000 and no more than AED 500,000, doubled for a repeat violation within one year, up to AED 1,000,000. SIRA employees nominated by its board chairman have law enforcement capacity to record violations and may seek police assistance.

Commercial and office buildings

For multi-storey commercial buildings, the manual requires identification view at the building's entrances and at entrances from shops into the building, detection view in main lobbies, corridors and parking pathways, observation view in lift lobbies and stairs (showing the floor number), inside lifts and at emergency exit doors between floors, recognition view at reception desks and health club entrances, monitoring of swimming pools and external cameras around the perimeter. Complex gardens need identification at entrances, recognition at vehicle entrances and exits, detection in corridors and seating areas and monitoring of outdoor areas. A SIRA-approved ANPR system, a round-the-clock security guard or watchman with proper facilities, and a SIRA-approved system health monitoring service are also required. As guidance, mixed-use towers with shops, offices and apartments should check every section that applies, because the manual applies the maximum requirements to shared spaces.

Locks, glass and vehicle barriers

Where the manual's sector sections call for physical protection, its technical chapters set the standards:

Remote monitoring by SIRA

The manual requires connecting video surveillance systems to SIRA's approved system integrity monitoring service, the facility's alarm and intruder detection systems to SIRA-approved alarm monitoring, and electronic number-plate registration systems to SIRA's approved monitoring system. The Dubai Building Code names these services: VideoGuard, which lets SIRA verify that video surveillance systems are configured and working correctly, and City Ring, which monitors ANPR. As guidance, these connections mean failures are visible to the regulator as well as to the building, which is one more reason for prompt maintenance.

Designing a compliant system step by step

1. Identify the establishment type and every section of the manual that applies, including shared spaces.
2. List the required views for each area: identification at entrances, recognition at desks, observation in lifts, and so on.
3. Place cameras to achieve those views, checking angles, heights, lighting and obstructions against the manual's limits.
4. Size recording for at least 31 days at the required settings, plus 20% extra capacity.
5. Design access control and alarms with fire-safe release, backup power and logs.
6. Plan the infrastructure: dedicated network, secure recorder room, protected power, containment and labelling.
7. Arrange SIRA connections, warning signs, the responsible employee and the annual maintenance contract.

As guidance, a design that follows these steps is easier to approve, install and maintain than one built around a camera count.

Villas and private homes

As guidance, the manual's residential requirements are written for buildings and complexes, and the Dubai Building Code applies SIRA's requirements to the common areas of villa and townhouse communities. A private villa owner installing cameras for their own home should still follow the spirit of the rules: cameras visible rather than hidden, views kept within the property and not into neighbours' homes or public areas, recordings protected, and installers who know the regulations. Community rules may add requirements, and the community's own security system is a matter for the developer or owners association.

Common faults and what they mean

A maintenance visit checklist

Records to keep

• The current annual maintenance contract with the SIRA-registered company and the reports of each preventive visit.
• The SIRA licence of the provider and the registration of the engineers who designed, installed and maintain the system.
• As-built drawings, cable schedules and device lists matching the installation, as the manual requires.
• The footage copy log on the approved form.
• The access log for recorder and network rooms, and records of incidents that stopped the systems working and their notification.
• Records of notifications to SIRA for any changes.

Fit-outs, new tenants and change of use

As guidance, a fit-out is a moment when a compliant system can easily fall out of compliance: new partitions block cameras, reception desks move, doors are added, lighting changes and a different business activity can bring a different section of the manual into play. Because the manual requires the user, the facility and the providers to record and notify SIRA of such changes, security should be part of fit-out planning from the start, with the security provider reviewing drawings before work begins.

Holiday homes and visitor parking

The manual specifically addresses buildings where units are used as holiday homes or parking is used by visitors: in those cases, a SIRA-approved automatic number-plate recognition system is required at vehicle entrances and exits of residential buildings. As guidance, owners associations and building managers should take into account how units are actually used, not only how the building was originally designed, when checking which requirements apply.

Gate and barrier safety

As guidance, automatic gates and barriers move heavy parts near people and vehicles, so their safety devices matter as much as their security. Photocells and safety edges should stop and reverse movement on contact or obstruction, manual release should work during power failures, and backup power should be tested. Regular servicing of motors, hinges, tracks and sensors reduces the strain and stopping that can precede failures. Where gates are part of a SIRA-required system, changes to them also fall under the manual's notification rules.

Who is responsible

As guidance, when a building changes hands or management companies, the security file, maintenance contract and SIRA records should be handed over with it, so compliance does not lapse in the transition.

Privacy, footage and copying

The manual's prohibitions on hidden cameras, pan and zoom cameras in private areas and rooftop cameras looking beyond the facility, its requirement for visible cameras and warning signs, and its copy log for every export of footage all point the same way: surveillance in Dubai must be visible, purpose-bound and accountable. As guidance, owners and managers should limit who can view and export footage, keep the copy log the manual requires, and treat footage requests from residents or tenants through a clear procedure rather than ad hoc sharing.

Questions to ask a CCTV or access control company

1. Is your company licensed by SIRA, and are the engineers who will design, install and maintain our system SIRA-registered?
2. Which section of the 2025 Preventive Systems Manual applies to our establishment, and what does it require?
3. Will your design show the required field of view for each camera, not just camera positions?
4. How have you sized storage to meet the 31-day minimum plus 20% extra capacity?
5. How will access control release in a fire, and how is it linked to the fire alarm?
6. Will you provide the annual maintenance contract with at least four preventive visits, and the SIRA monitoring connections where required?

What affects the price

As guidance, the cost of a compliant security system depends on the establishment type and its section of the manual, the number of cameras and the field of view each must achieve, storage for the required retention, access control doors and users, gates and barriers, any ANPR or monitoring connections SIRA requires, cabling routes and containment, and the annual maintenance contract. Power Zone quotes security systems after a site survey with an itemised quotation.

CCTV and access control with Power Zone

Power Zone's CCTV installation service covers coverage design mapped to entrances, perimeters, cash points and blind spots, camera selection for resolution, low light and weather, cabling and recording sized to the retention requirement, remote viewing with user permissions, and handover documentation. Its access control and gate automation service covers gate motors and barriers with safety photocells and edges, card, keypad, biometric and mobile access, intercoms, door hardware, user management with audit trails, and admin training. In Dubai, the rules above require SIRA-licensed providers and SIRA-registered engineers for covered establishments, so owners should ask any provider, including us, to confirm SIRA licensing for the specific work. See also electrical maintenance and Power Zone Dubai, or request a site survey.

Frequently asked questions

Who regulates CCTV in Dubai?

The Security Industry Regulatory Agency (SIRA), under Law No. (12) of 2016 and its Preventive Systems Manual.

What is the latest SIRA Preventive Systems Manual?

The manual approved by SIRA Administrative Resolution No. (13) of 2025, issued on 14 April 2025.

How many days must CCTV footage be kept in Dubai?

The manual's minimum recorder setting is no less than 31 days, with motion recording for at least 70% of the day at 10 fps per camera; some sectors set their own periods.

What camera resolution does SIRA require?

Colour cameras of at least 1080p Full HD, with recording and single-camera live view also at least 1080p.

Are hidden cameras allowed in Dubai?

Not without SIRA approval. The manual requires cameras to be clearly visible and prohibits hidden cameras unless SIRA approves.

Do I need a CCTV maintenance contract in Dubai?

Covered facilities must have an annual contract with a SIRA-registered company, with at least four preventive visits a year.

Must CCTV installers be licensed in Dubai?

Yes. No one may provide security services without a licence under Law No. 12 of 2016, and the Dubai Building Code requires SIRA-registered security engineers.

Where must CCTV warning signs be placed?

SIRA-approved signs at all main entrances and inside lifts, under the manual's management and operation rules.

What does SIRA require for access control?

Compatibility with fire alarms, emergency release, 4-hour battery backup, offline storage, and login and logout records kept for at least one year.

Does a residential building need a guard or access control?

Buildings with 50 or more units need a 24-hour guard or watchman; buildings with fewer than 50 units need resident and visitor access control.

Is ANPR required for holiday home buildings?

Yes. If parking is used by visitors or units are used as holiday homes, a SIRA-approved ANPR system is required at vehicle entrances and exits.

What are the fines for breaking SIRA rules?

AED 10,000 to 500,000 under Article 21 of Law No. 12 of 2016, doubled for a repeat within a year, up to AED 1,000,000.

Do I need to tell SIRA about changes to my CCTV?

Yes. The manual requires notifying SIRA of any change to design, components, programming, coverage, lighting, entrances, activities and more.

Can my rooftop camera look beyond my property?

Not without SIRA approval; the manual prohibits external rooftop cameras whose range exceeds the facility's boundaries.

What camera rating is needed outdoors?

At least IP66 for outdoor cameras or housings, and devices within 2.5 m of reach must be vandal-proof with at least IK10 impact rating.

Must CCTV time and date be correct?

Yes. All systems must run on the real time and date, synchronised automatically, and recorders must support network time (NTP).

What is SIRA VideoGuard?

According to the Dubai Building Code, a system that lets SIRA monitor video surveillance systems in Dubai to verify they are configured and working correctly.

Do commercial buildings in Dubai need ANPR?

The manual requires a SIRA-approved ANPR system for multi-storey commercial buildings, along with a 24-hour guard or watchman.

How long must glass resist penetration under SIRA rules?

Where required, penetration-resistant glass or film must resist penetration for at least 90 seconds.

How long must access control logs be kept in Dubai?

At least one year for login and logout details of all linked devices, under the 2025 manual; hotel room lock systems keep records for at least six months under the Dubai Building Code summary.

Must recorder rooms be secured?

Yes. Recorders and network equipment must be in secure, monitored locations with restricted access and an auditable entry log.

Who is responsible for a building's SIRA compliance?

The facility meets the manual's requirements, maintenance and notification duties; providers need a SIRA licence; engineers must be SIRA-registered.

Can cameras in Dubai use wireless links?

Not for access control connections without SIRA approval, and security networks must be dedicated, with integration only through a firewall and SIRA's written approval.

How loud must a security alarm sounder be under SIRA rules?

At least 110 dBA at 1 metre, ringing for at least 5 minutes or until reset, with an 8-hour backup battery.

Must cameras at height have remote zoom?

Yes. Cameras installed at 4 metres and above must have remote zoom and focus under the 2025 manual.

What is the minimum live view frame rate?

At least 25 frames per second per camera.

What signal-to-noise ratio must cameras have?

At least 48 dB under the 2025 manual's camera specifications.

Does Power Zone install CCTV and access control in Dubai?

Power Zone offers CCTV, access control and gate automation; for covered Dubai establishments, ask any provider, including us, to confirm SIRA licensing for the work.

Sources

1. Dubai Legislation Portal, Administrative Resolution No. (13) of 2025 Approving the Preventive Systems Manual (Security Industry Regulatory Agency, 14 April 2025)
2. Dubai Legislation Portal, Law No. (12) of 2016 Regulating the Security Industry in the Emirate of Dubai
3. Dubai Building Code, 2021 Edition, Part J Security (J.2, J.4, J.5, J.7) and K.11