Saudi Arabia has moved from CCTV being discretionary to legally mandated. Under the Law of the Use of Security Surveillance Cameras, businesses in defined categories are required to install and maintain systems meeting Ministry of Interior specifications, with non-compliance carrying real financial penalties — including fines reported around SAR 5,000 for failing to meet the minimum 90-day retention requirement.
What the regulation actually requires. Minimum footage retention of 90 days; camera resolution sufficient to support identification and investigation; strict control over footage access, transfer, and disclosure — recordings can generally only be shared with the Ministry of Interior, the Presidency of State Security, or in response to a court order. Recordings relevant to an active investigation must be preserved unaltered until that investigation concludes.
Design implications of the 90-day retention floor. For a large mixed-use development, this can mean the difference between a modest NVR cluster and a dedicated storage array with meaningful RAID redundancy and a retention-management policy that automatically purges footage at 90 days unless flagged for an active investigation.
Access control and chain of custody. Because footage disclosure is legally restricted, system design needs access logging and role-based permissions built in — who can view, export, and share footage needs to be auditable.
Camera selection for the Saudi environment. Extreme summer heat and dust push toward higher-rated IP66/IP67 outdoor housings with heat-tolerant electronics, and strong sun glare favors wide dynamic range (WDR) camera selection.
| Design factor | Minimum requirement | Typical ASDV practice |
|---|---|---|
| Retention period | 90 days minimum | 90 days as floor; up to 120-180 days for high-security sites |
| Resolution | Sufficient for identification | Minimum 4MP for entrances/vehicle gates, WDR for high-contrast facades |
| Footage access | MOI/State Security/court order only | Role-based access control with full audit logging |
| Storage resilience | Implied by retention mandate | RAID-protected storage, redundant recording paths for critical zones |
| Environmental rating | Not specified | IP66/67 outdoor housings, heat-derated electronics |
Common mistakes
The most common failure is sizing storage to a generic 30-day assumption, under-provisioning by a factor of three or more once corrected for the Saudi 90-day floor. A second is neglecting the access-control and audit-trail layer.
Future outlook
As Vision 2030 developments scale up, we expect continued tightening of technical enforcement and growing integration between CCTV systems and centralized city-level command platforms, particularly in NEOM and Qiddiya.