CCTV Retention · UAE Guide
A measured, technically precise guide to CCTV footage retention obligations in Abu Dhabi — covering ADMCC minimum periods, UAE PDPL proportionality constraints, and the real-world storage engineering required to satisfy both without compromise.
Get a free site survey Talk to a specialist
For commercial premises operating under ADMCC-approved CCTV installations in Abu Dhabi, the retention period is set by ADMCC according to the site category, with no single figure for every premises (ADEK, for example, requires nurseries to keep recordings for at least 180 days), and some higher-risk sites (critical infrastructure, government facilities, financial institutions) choose longer periods. Operators should always confirm the current requirement with ADMCC directly, as stipulations are periodically revised. The figure for your premises category, and what follows a shortfall, is for ADMCC to confirm, and we confirm it at survey before sizing storage for ADMCC-approved installations. The retention clock applies to every camera on the approved system — partial recording or gaps caused by storage shortfalls, HDD failures, or misconfigured overwrite policies can leave you short of it, regardless of intent. Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021 — PDPL), CCTV footage containing identifiable persons is classified as personal data, and retention must be proportionate to and limited by the stated purpose of collection. This creates a deliberate tension: ADMCC sets a minimum (confirm the current figure with ADMCC), while PDPL constrains the maximum. Retaining footage for 180 days when your declared purpose requires only 30 is not automatically cautious — it can be hard to justify under the PDPL. The practical resolution is to define a clear, documented retention policy that meets the ADMCC minimum for your site classification, justifies any extension beyond that minimum with a legitimate purpose, and enforces automatic overwrite at the declared boundary. From a storage engineering perspective, the numbers are exacting. A single 1080p camera recording continuously at H.265 Main Profile with a moderate-complexity scene generates approximately 0.65 to 0.97 TB over 30 days (calculated at 2–3 Mbps sustained bitrate, varying with scene motion and encoding quality). Extend that to 90 days and you require 1.9 to 2.9 TB per camera. A 16-camera commercial installation at 90-day retention demands roughly 31–47 TB of raw capacity — before accounting for RAID overhead, hot-spare allocation, or the reality that 4K cameras at H.265 generate 6–10 Mbps, tripling those figures. HDD failure is not a possibility but a certainty over multi-year deployments; RAID-5 or RAID-6 configurations with hot-spare disks are the minimum responsible architecture for any retention-critical system. We configure NVR and VMS retention schedules, storage arrays, RAID levels, and automatic overwrite policies to meet the ADMCC retention period you confirm for your site and PDPL proportionality constraints — a discipline we have practised from our base at M44, Mussafah Industrial Area, Abu Dhabi, since 2018 as an ADMCC-approved integrator. We do not interpret ADMCC regulations or provide PDPL legal counsel; those responsibilities belong to the regulator and qualified legal advisors respectively. For a meticulous retention and storage assessment tailored to your site classification, contact us at +971 55 651 7843 or request a quotation.
CCTV Retention
ADMCC sets the retention period by site category, so there is no single figure for every premises (ADEK requires nurseries to keep recordings for at least 180 days), and longer periods are possible for critical infrastructure, government, and financial premises. Confirm the current ADMCC requirement for your site directly with ADMCC.
Under Federal Decree-Law No. 45 of 2021, CCTV footage of identifiable persons is personal data. Retention beyond the declared, legitimate purpose constitutes excessive processing — creating legal exposure even when storage capacity permits indefinite archival.
Thirty days of 1080p H.265 recording demands 0.65–0.97 TB per camera. Ninety days at 4K requires 5.8–9.7 TB per camera. RAID-5 or RAID-6 with hot spares is the minimum architecture for retention-critical deployments where a single HDD failure must never cause data loss.
NVR and VMS overwrite schedules must be configured to enforce the declared retention boundary precisely — retaining footage for the ADMCC minimum, extending only where a documented purpose justifies it, and purging automatically to satisfy PDPL data minimisation.
A disciplined, item-by-item verification of your CCTV retention posture — from regulatory confirmation through storage health monitoring. If any item below is unresolved, your installation carries compliance risk. Contact us at +971 55 651 7843 or submit a request at emirtech.ae/request-quotation.html for a professional retention audit.
Storage Engineering
Precise storage calculation requires actual sustained bitrate, not manufacturer marketing figures. At H.265 Main Profile: 1080p typically sustains 2–3 Mbps, 4K sustains 6–10 Mbps. Multiply by 86,400 (seconds per day) and by your retention days, then divide by 8 to convert bits to bytes, for accurate capacity planning.
Surveillance HDDs operate at 100% write duty cycle. Surveillance-rated drives whose workload rating suits the camera count (for example WD Purple or Purple Pro, Seagate SkyHawk or SkyHawk AI — the Pro and AI models carry the higher workload ratings) in RAID-5 or RAID-6 with a dedicated hot spare ensure that a single drive failure never compromises your retention obligation.
Standalone NVRs suit sites with 16 or fewer cameras and 30-day retention. Larger deployments or extended retention periods demand centralised storage — dedicated server with enterprise RAID controller, or a purpose-built SAN — to consolidate management and scale beyond single-chassis limits.
Hybrid architectures retain 30–90 days on-premise for rapid retrieval, with event-triggered clips archived to cloud storage for long-term evidential preservation. This approach balances ADMCC compliance with PDPL proportionality — full continuous streams remain local, only flagged incidents persist remotely.
Emirtech Technology operates with considered transparency regarding our retention configuration services. The following statements define the precise boundaries of our competence, our responsibilities, and the qualifications we do not hold.
This delineation is not defensive — it is the mark of a considered integrator that understands precisely where technical configuration ends and regulatory or legal authority begins. Our clients benefit from that clarity.
Common questions
ADMCC sets the retention period by site category, so there is no single figure for every premises; for example, ADEK requires nurseries to keep recordings for at least 180 days. Some higher-risk sites, such as critical infrastructure, government buildings and financial institutions, choose longer periods. Because ADMCC sets these figures and revises them periodically, operators should confirm the requirement for their specific premises category directly with the regulator. The retention figure applies per camera — partial coverage or recording gaps caused by storage failures can leave a system short of it regardless of the cause.
Federal Decree-Law No. 45 of 2021 (PDPL) classifies CCTV footage containing identifiable persons as personal data. Article 5 requires that personal data be retained only for the period necessary to fulfil the declared purpose of collection. This means retaining footage for 180 days when your stated security purpose requires only 30 days can amount to excessive processing under PDPL principles, even if you have ample storage. The practical solution is a documented retention policy that states the purpose, meets the ADMCC minimum, justifies any extension, and enforces automatic deletion at the declared boundary.
Storage requirements depend on resolution, codec, and scene complexity. At 1080p with H.265 Main Profile encoding and moderate scene motion (2–3 Mbps sustained bitrate), one camera generates approximately 22–32 GB per day, or 650–970 GB over 30 days — roughly 0.75–1.2 TB with overhead. At 4K resolution with H.265 (6–10 Mbps), the figure rises to 1.9–3.2 TB per camera for 30 days. These are calculated using the formula: bitrate (Mbps) x 86,400 (seconds/day) x retention days, divided by 8, then divided by 1,000,000 for TB. Always add 15–25% for RAID overhead and filesystem allocation.
If your NVR overwrites footage before your site's retention period expires, your installation may fall short of the retention period that applies to your premises — regardless of whether the shortfall was caused by undersized storage, additional cameras added without capacity planning, bitrate increases from firmware updates, or HDD failure without RAID redundancy. What follows a shortfall is for ADMCC to determine, so confirm the consequences with ADMCC. The solution is proactive: calculate required capacity using actual sustained bitrates (not manufacturer marketing figures), implement RAID-5 or RAID-6 with a hot spare, monitor HDD health via S.M.A.R.T., and set NVR overwrite to the exact retention boundary — never rely on overwrite-when-full without verifying the overwrite point exceeds the required period.
For arrays of four to seven surveillance-rated HDDs, RAID-5 (single-disk parity) with a dedicated hot spare provides adequate fault tolerance — one disk can fail and the array rebuilds automatically onto the spare without data loss or recording interruption. For larger arrays of eight or more disks, or where the rebuild time on high-capacity drives (16–20 TB) creates an extended vulnerability window, RAID-6 (dual-disk parity) is the more deliberate choice, tolerating two simultaneous failures. In retention-critical environments where ADMCC compliance depends on zero recording gaps, RAID-6 with a hot spare is the considered specification. Always use surveillance-rated drives (for example WD Purple or Purple Pro, Seagate SkyHawk or SkyHawk AI) with a workload rating that suits the camera count — desktop HDDs fail prematurely under continuous write loads.
Contact Emirtech Technology at +971 55 651 7843, email [email protected], or submit a detailed brief through our emirtech.ae/request-quotation.html page. Provide your camera count, current or planned resolution (1080p, 4MP, 4K), required retention period, and site classification. We will return a meticulous storage capacity calculation with RAID recommendations, NVR or server specification, and retention schedule configuration — all engineered to meet the retention period you confirm with ADMCC. As an ADMCC-approved integrator operating from M44, Mussafah Industrial Area, Abu Dhabi since 2018, we have the technical depth to configure retention correctly from the outset.
CCTV Retention · UAE Guide
Free site survey · transparent scope · honest costs · ADMCC-approved for security systems · Mussafah M44 home base since 2018.
Related guide: How Long Is CCTV Footage Stored? Retention Guide
Related guide: How Long Should CCTV Footage Be Stored in the UAE?
Need a free Abu Dhabi site visit? Call +971 55 651 7843 or email [email protected] — we reply the same working day across Abu Dhabi and Al Ain.