Why it matters
UAE law protects people's privacy. Article 44 of the federal cybercrime law (Federal Decree-Law No. 34 of 2021) makes it an offence to use technology to invade someone's privacy without their consent — including photographing people in public or private places, or keeping or publishing their images — with at least six months' imprisonment and/or a fine of AED 150,000 to 500,000. The UAE's personal data protection law (Federal Decree-Law No. 45 of 2021) treats images of identifiable people as personal data. A camera in the wrong place can turn the owner from victim into defendant.
Where cameras should point
At your own property: gates, doors, driveways, gardens, entrances, cash points, stockrooms and car parks. Aim each camera at what it's there to protect, and adjust or mask the view where it takes in a neighbour's windows, garden or door.
Where they shouldn't
Never in bathrooms, toilets or changing rooms. Not in bedrooms — including rooms used by household staff — or in guest areas of a rental property. In businesses, keep cameras away from places where staff or customers reasonably expect privacy, such as prayer rooms, consultation rooms and changing areas.
Tell people
Signs at the entrances saying that CCTV is in operation are good practice at home and expected at a business. Staff should be told about workplace cameras and why they're there — your HR policy is the right place for it.
Who sees the footage, and for how long
Give access only to the people who need it, with their own logins so viewing can be traced. Keep recordings only as long as you need them — or as long as the rules for your premises require, which for SIRA-regulated establishments is at least 31 days.
What not to do with it
Don't post footage of identifiable people on social media, however tempting after an incident — publishing images of people without their consent can itself breach the law, and so can sharing images of people injured in an accident. Report incidents to the police and provide the footage to them.
Extra rules for regulated premises
If your premises is regulated by SIRA, its Preventive Systems Manual adds rules of its own. Cameras must be clearly visible; hidden cameras are not allowed, pan-and-zoom cameras may not be used in private areas, and rooftop cameras may not see beyond the property's boundary — in each case unless SIRA approves it.
Not legal advice
This guide is general information, not legal advice. If you're unsure whether a camera position is lawful, ask a qualified adviser — and we'll always tell you if we think a position is a problem.