Why it matters
UAE law protects people's privacy. The federal cybercrime law makes it an offence to capture or publish images of people in private settings without their consent, and the UAE's personal data protection law treats images of identifiable people as personal data. A camera in the wrong place can turn the owner from victim into defendant.
Where cameras should point
At your own property: gates, doors, driveways, gardens, entrances, cash points, stockrooms and car parks. Aim each camera at what it's there to protect, and adjust or mask the view where it takes in a neighbour's windows, garden or door.
Where they shouldn't
Never in bathrooms, toilets or changing rooms. Not in bedrooms — including rooms used by household staff — or in guest areas of a rental property. In businesses, keep cameras away from places where staff or customers reasonably expect privacy, such as prayer rooms, consultation rooms and changing areas.
Tell people
Signs at the entrances saying that CCTV is in operation are good practice at home and expected at a business. Staff should be told about workplace cameras and why they're there — your HR policy is the right place for it.
Who sees the footage, and for how long
Give access only to the people who need it, with their own logins so viewing can be traced. Keep recordings only as long as you need them — or as long as the rules for your premises require, which for SIRA-regulated establishments is at least 31 days.
What not to do with it
Don't post footage of identifiable people on social media, however tempting after an incident — publishing images of people without their consent can itself breach the law. Report incidents to the police and provide the footage to them.
Not legal advice
This guide is general information, not legal advice. If you're unsure whether a camera position is lawful, ask a qualified adviser — and we'll always tell you if we think a position is a problem.