Home › Resources › Body Camera Laws
Yes. What the law regulates is the recording, not the camera. This guide sets out the federal instruments that apply, the Dubai and Abu Dhabi rules for enforcement officers, what SIRA actually reaches in private security, and what a lawful deployment has to look like on the ground.
BodyCamera.ae Compliance Team
The short answer
Body-worn cameras are lawful to buy, own and operate in the UAE. No licence attaches to the device itself. What the law reaches is the act of recording a person, and what happens to the file afterwards.
Written for security managers, fleet and facilities teams, and procurement staff drafting a specification. It is general information about UAE law and not legal advice.
No UAE authority licenses a body-worn camera, and no federal or emirate rule prohibits one. The device sits in the same position as any other recording equipment. Everything that follows is about the circumstances in which it is switched on and what happens to the footage once it exists.
Dubai Police ran the first published trial in 2015: eighty devices on public-facing officers over six months, recording windows capped at eight hours, and storage the officer could not reach.4 The design decisions in that trial, particularly putting the file beyond the operator's reach, are the ones the current rules now require in writing.
The questions that decide legality are who is wearing the camera, where they are standing, and who can reach the footage afterwards. An enforcement officer documenting a violation and a guard on a mall concourse are doing the same thing with the same hardware from two different legal positions. Almost every practical question on this page resolves back to that difference.
Article 31 of the 1971 Constitution guarantees the confidentiality of communication.7 The five instruments below are how that guarantee is enforced against anyone holding a camera.
The Crimes and Penalties Law
Combatting Rumours and Cybercrimes
On intent: commentary describes the provision as reaching the act itself and warns that a good motive is not a reliable defence. A UAE court has also held that the offence requires criminal intent alongside the act, and accepted the documentation of suspected unlawful conduct as a purpose that negated it. Both readings are live. Write the policy so the point never has to be argued.
The Personal Data Protection Law
Regulation of Labour Relations
Evidence in Civil and Commercial Transactions
Copyright and publications law adds a separate restriction: exhibiting or distributing a recording of an identifiable person needs that person's permission, which is a different question from whether the recording was lawful to make.6
The table below is the practical form of the statutes above. Treat it as a planning aid, not a legal opinion. The row that surprises people most often is the last one.
| Public space | Client premises | Home, worship, changing room | Sharing the footage | |
|---|---|---|---|---|
| Police and enforcement officers | Yes, under statutory powers | Yes, where the function reaches | Abu Dhabi: yes during an authorised search or arrest. Dubai: prohibited | Official purposes only, on prior written approval |
| Private companies on government enforcement work | Yes, within the assigned function | Yes, within the assigned function | Prohibited under Resolution 13 | No independent copy. The entity stores it |
| Private security guards | No statutory power. Basis built from purpose and notice | Yes, where contract and site notice support it | No | Named users only. No personal devices |
| Members of the public | An offence without consent, wherever you stand | No | No | Publishing it makes the position worse |
Scroll the table sideways on a narrow screen.
The gap between the first row and the third is the whole of private security compliance. An enforcement officer records because a statute says they may. A guard records because a client asked, a policy says when, and a sign at the entrance tells people it is happening. The second arrangement takes more paperwork than the first, not less.
Sheikh Hamdan bin Mohammed bin Rashid Al Maktoum issued Executive Council Resolution No. 13 of 2026 on 2 June 2026.12 It governs cameras used to document violations and to execute judicial judgments, and it is the most detailed published treatment of body-worn camera operation in the country.
Its reach is the part worth reading twice. It applies to government employees, and it applies to private companies contracted by a government entity or assigned an enforcement function.1 A guarding company holding a municipal inspection contract is inside it. The same company guarding a private mall is not.
For a contractor bidding on enforcement work in Dubai, the first four duties are procurement questions before they are legal ones: they decide which hardware and which storage architecture can be offered at all. The fifth is a programme question, and it has a lead time.
Abu Dhabi Police General Headquarters set out camera rules for police personnel in January 2025, ahead of Dubai's resolution.5 The objectives match: transparency, accountability and the protection of civil rights. The structure is narrower, because it addresses police operations and not enforcement work in general.
Officers may operate cameras in public spaces and, notably, in private places during legally authorised search and arrest missions. The camera has to be in clear sight on either military uniform or civil attire, and detainees have to be told when it is switched on. Recordings are held in storage that prevents alteration, deletion or addition by the officer in the field, and nothing is shared or published outside official work purposes without prior written approval from the competent authority.
| Dubai, Resolution No. 13 of 2026 | Abu Dhabi Police GHQ, January 2025 | |
|---|---|---|
| Who it applies to | Government officers, and private companies contracted or assigned an enforcement function | Abu Dhabi Police personnel |
| Where recording is allowed | Prohibited in homes, places of worship and changing rooms | Public spaces, and private spaces during an authorised search or arrest |
| Telling people | Individuals must be informed that recording is taking place | Camera worn in clear sight. Detainees told when it is switched on |
| Storage | Encrypted at rest and in transit, under DESC retention policy, held by the government entity | Storage that prevents alteration, deletion or addition by the officer |
| Personal devices | Copying to personal devices or unauthorised systems is prohibited outright | Sharing or publishing without competent authority approval is prohibited |
| Training | Structured training required before judicial enforcement powers are granted | Addressed through police operational procedure |
Scroll the table sideways on a narrow screen.
The divergence on private premises is not a contradiction. Recording inside a home is an offence under the Penal Code. A judicial warrant or an authorised arrest removes the privacy expectation that the offence protects, and the same recording becomes evidence. Dubai's resolution covers enforcement officers documenting violations rather than officers executing search warrants, which is why its prohibition reads as absolute.
The Security Industry Regulatory Agency was established in 2016 and regulates private security in Dubai: guarding companies, individual officers, and the security systems installed at malls, hospitals, compounds and commercial premises.2 Its two published technical documents, the Preventive Systems Manual and the Standard and Technical Specifications of Security Systems, are both written around fixed video surveillance.13
No SIRA requirement for a guard to wear a body camera has been published. Our guide to when body cameras are mandatory sets out role by role which side of the line each contract falls on. Where a body camera appears in a private security deployment, a client contract is asking for it and no regulator is. That has a direct consequence: the guarding company owns the compliance position, because nobody handed it one.
SIRA's specification sets numbers that turn up in tenders written for body-worn equipment. They are useful reference points and they are not body-worn rules.
| What the specification sets | Figure | What it applies to |
|---|---|---|
| Minimum resolution | 1080p Full HD, PAL colour | Fixed cameras in a regulated installation |
| Environmental sealing | IP66, or an IP66 enclosure | Outdoor fixed cameras in Gulf heat, humidity and dust |
| Cameras facing a light source | Wide dynamic range at 110 dB minimum, auto iris, IR cut filter | Fixed cameras |
| Frame rate | 25 fps per PAL camera. 10 fps minimum for motion-triggered recording | Recording devices in the installation |
| Retention | 31 days minimum for motion-triggered recording | The installed system |
| Storage sizing | Calculated capacity plus 20 per cent | The installed system |
Scroll the table sideways on a narrow screen.
Where a tender cites these at a worn camera, ask which document it is quoting before pricing against it. Most of the range we supply clears 1080p and IP66 comfortably, so the answer is usually straightforward. Asking the question is the part that matters.
Three of SIRA's requirements restate what federal privacy law already asks of anyone with a camera, so they hold regardless of which document formally applies. Cameras are worn in the open, and covert installation needs prior authorisation. Premises display notices that surveillance is in operation. Cameras are not directed into areas where people expect privacy, which for a worn camera means restrooms, hotel rooms and private residences.14
Regulated installations also carry obligations that a body camera programme is wise to mirror even where it is not bound by them: an annual maintenance contract with four preventive visits a year, a logbook covering recordings, backups and maintenance with the operator's name and signature, and VideoGuard connectivity so SIRA can verify configuration remotely.15
Article 44 of the cybercrime law covers recording and transmitting conversations without consent, and legal commentary treats the UAE as an all-party consent jurisdiction for private conversations.9 A body camera in a corridor picks up conversations that have nothing to do with the incident it was switched on for.
Separately, SIRA's technical standard prohibits microphones on the security systems it regulates unless approval has been obtained.14 That prohibition is written for a fixed installation. How it is read against a camera worn by a guard is a question to put to SIRA for a specific deployment, and it is worth putting in writing, because an assumption either way is exposure.
Every camera in our range can be configured for this, and firmware on several models can lock the setting so it is not left to the officer. Agreeing the configuration before the first unit ships is considerably easier than changing it across a deployed fleet.
Footage of an identifiable person is personal data under the PDPL, and once a face can identify someone it is biometric data.8 That classification restricts where it can be sent, who can open it and how long it can be held.
The Dubai Electronic Security Centre publishes the Information Security Regulation, the mandatory baseline for Dubai government entities and their contracted partners. It runs to thirteen domains across governance, operation and assurance.16 For a camera programme it resolves into three requirements: role-based access, logging that records who reached which file and when, and an offload path the officer cannot interrupt.
In practice that means docking that writes to a dedicated network behind a firewall, automatically, with no window in which a file can be paused, edited or deleted before it lands. Any manual step in that path is the point at which the evidentiary value of the footage starts to erode.
DESC's Cloud Service Provider Security Standard applies to any cloud provider serving Dubai government and semi-government entities. It aggregates ISO/IEC 27001, 27002 and 27017, the ISR itself, and the Cloud Security Alliance Cloud Controls Matrix.17 The practical effect is pressure toward in-country hosting, which is why the major cloud platforms operate UAE regions.18 Footage from enforcement work does not go to offshore servers.
DIFC Law No. 5 of 2020 and the ADGM Data Protection Regulations replace the mainland PDPL inside their jurisdictions.3 If guards work a corporate headquarters in the DIFC, the guarding company and its client sit as processor and controller under DIFC law, with accountability obligations that include risk assessments and documented processing activities.
| Regime | Applies in | Breach notification |
|---|---|---|
| Federal PDPL, Law No. 45 of 2021 | UAE mainland | Required. Timing set by the executive regulations and UAE Data Office guidance |
| DIFC Law No. 5 of 2020 | Dubai International Financial Centre | Notify the Commissioner of Data Protection as soon as practicable |
| ADGM Data Protection Regulations | Abu Dhabi Global Market | Notify the Commissioner without undue delay, and within 72 hours where feasible |
Scroll the table sideways on a narrow screen.
A breach here is broader than a hack. A lost camera, a clip emailed to the wrong client, or an officer posting footage to social media are all breaches, and inside a free zone each triggers a notification clock.
Article 54 of Federal Decree-Law No. 35 of 2022 gives electronic records the same probative force as physical evidence, provided they meet the authenticity conditions.20 Having the video is the start of the argument rather than the end of it. Three pillars decide whether it is accepted.
A broken chain of custody is the most common reason digital evidence is rejected in UAE courts.19 The chain is the documented record of who collected the file, who opened it, how it moved and where it was held. ISO/IEC 27037:2012 is the reference standard for identifying, collecting, acquiring and preserving digital evidence, and UAE forensic practice follows it.21 Where material sits on foreign servers, mutual legal assistance treaties are the route, and it has to be translated and certified to meet domestic standards.
The failure mode is mundane. A guard downloads a clip to an unsecured laptop and emails it to the client. The metadata is damaged, the audit trail has a hole in it, and a recording that would have settled the matter is worth nothing. This is the argument for automated offload and role-based access, and it is a stronger argument than the compliance one.
As synthetic video becomes easier to produce, the cryptographic signature and metadata written at the moment of capture become the answer to a claim that footage was manipulated. Federal Decree-Law No. 34 of 2021 already penalises creating or circulating manipulated content used for defamation or fraud, with at least a year of detention and fines to AED 500,000.10
Recording an identifiable person without consent is an offence under Article 44 whether or not anything is published.9 That is what makes the civilian position tighter than most people assume, and it is why the UAE has none of the street-photography and confrontation-recording culture found in other jurisdictions.
Where this comes up most often is family and civil proceedings, when someone tries to submit a recording of a spouse made secretly at home. It runs into the Penal Code and the cybercrime law at the same time.22 A judge keeps discretion and may admit such material where a child's safety is at stake, weighing that against the privacy breach, but the person who made the recording still carries exposure for having made it.
For an organisation the practical read is short: the fact that footage would help your case is not, by itself, a basis for having recorded it. Apply that test to a camera policy before an incident, not after one.
Each duty on this page has a hardware or system answer. These are the lines worth putting in a tender document, because they are the ones that decide whether a deployment can meet its obligations at all.
The cross-cutting answers. The full set, including product and vehicle questions, is on our FAQ hub.
Yes. Body-worn cameras are lawful to buy, own and operate, and no licence attaches to the device. What the law regulates is the act of recording a person and what happens to the footage afterwards. Federal Decree-Law No. 34 of 2021 makes recording someone without consent an offence, and the Personal Data Protection Law makes whoever runs the cameras responsible for everything they capture.
A lawful deployment comes down to four things: a basis to record, notice so people are not surprised, respect for the places that stay off limits, and custody of the file once it exists.
No permit for the camera itself has been published. Guarding companies and their officers are licensed by SIRA in Dubai, and SIRA approves the security system installed at a premises, which is where its approved-equipment list applies. A camera an officer wears is not part of that installation.
If a tender asks for SIRA-approved equipment, send us the wording and we will tell you which part of the specification the camera falls under.
Yes, and no regulator requires it. When a guard wears a camera it is a client contract asking for it. That puts the compliance position on the guarding company, which satisfies it the same way each time: a written policy setting out when the camera runs, signage at the site, officers who say they are recording, and footage only a named list of people can reach.
Treat audio as the highest-risk part of the deployment. Article 44 of the cybercrime law covers recording and transmitting conversations without consent, and legal commentary describes the UAE as an all-party consent jurisdiction for private conversations. Separately, SIRA prohibits microphones on the security systems it regulates unless approval has been obtained.
In practice audio is a decision to take deliberately and document, with notice given at the point of contact, rather than a setting left on because the device shipped that way. Where a deployment has no clear basis for it, video only is the safer position.
It regulates cameras used to document violations and to execute judicial judgments, and it reaches private companies contracted by a government entity as well as government staff. Five duties: no recording in homes, places of worship or changing rooms; people are told that recording is happening; footage is encrypted and stored by the government entity under DESC policy; nothing is copied to personal devices; and officers are trained before they are granted enforcement powers.
Private homes, places of worship and changing rooms, under Dubai's Resolution No. 13 of 2026. The Penal Code separately makes photographing a person in a private place without authorisation an offence for anyone.
The exception runs the other way in Abu Dhabi, where police may record in private places during a legally authorised search or arrest. A warrant removes the privacy expectation that the offence protects.
There is no single figure covering everybody. Resolution 13 of 2026 defers retention to Dubai Electronic Security Centre policy for the entities it covers. SIRA's technical standard sets 31 days for the fixed camera systems installed at regulated premises, which is a useful reference point and is not a body-worn rule. Everyone else sets their own.
In practice the number comes from the claim or complaint window in your operating contract, and it is also the figure that sizes the storage.
Yes, when it is authentic, intact and lawfully collected. Article 54 of Federal Decree-Law No. 35 of 2022 gives electronic records the same probative force as physical evidence, provided the authenticity conditions are met.
The pillar private deployments fail on is lawful collection, and the one they damage accidentally is integrity. A clip downloaded to an unsecured laptop and emailed onward has a broken audit trail, and a broken chain of custody is the most common reason digital evidence is rejected.
This page is general information about UAE law, prepared to help security, fleet and procurement teams scope a camera deployment. More guides are collected on our resources hub. It is not legal advice and it does not create a professional relationship. Regulations change and their application depends on the facts of a specific deployment. Take advice from a qualified UAE practitioner before relying on any position set out here.
Send us the tender wording, the emirate and the kind of post the camera is worn on. We will come back with the configuration that meets the obligations on this page, and say plainly where a question belongs with your legal advisers instead.
Complete body-worn camera systems for government and enterprise operators across the UAE and GCC.
© 2026 BodyCamera.ae
Two ways to deploy. Browse below.
Tell us where the cameras will be deployed and we will arrange a demonstration with the right models for your sector.
