If you operate facilities in more than one Gulf country, you are dealing with more than one CCTV rulebook. A camera system that passes inspection in Kuwait City can fail one in Dubai. A retention setting that satisfies Riyadh falls a month short in Doha.
This guide puts every GCC surveillance law side by side. If you only operate in Kuwait, start with our full breakdown of Kuwait CCTV Law 2015/61. If your footprint crosses borders, read on.
The Short Version
Five of the six GCC states regulate CCTV through dedicated legislation or a formal regulatory agency. One does not.
- Qatar moved first with Law No. 9 of 2011
- Abu Dhabi followed the same year with Law No. 5 of 2011, creating the Monitoring and Control Center
- Kuwait enacted Law No. 61 of 2015 after the Imam Sadiq Mosque attack
- Dubai formalised its regime under SIRA with Law No. 12 of 2016
- Saudi Arabia issued the region's newest law by Royal Decree in October 2022
- Bahrain and Oman still have no standalone CCTV law. Requirements arrive sector by sector through ministry resolutions, central bank rules and police licensing conditions
The direction of travel is clear. Retention periods are converging, resolution floors keep rising, and every new instrument ties camera compliance more tightly to your trade licence.
The Comparison Table
| KUWAIT | QATAR | SAUDI ARABIA | ABU DHABI | DUBAI | |
|---|---|---|---|---|---|
| Legal instrument | Law No. 61 of 2015 | Law No. 9 of 2011 | Security Surveillance Camera Law, Royal Decree M/34 (2022) | Law No. 5 of 2011 (MCC Law) | Law No. 12 of 2016 (SIRA) |
| Regulator | Ministry of Interior | MOI Security Systems Department | Ministry of Interior with State Security and SDAIA | Monitoring and Control Center | Security Industry Regulatory Agency |
| Retention | 120 days | 120 days | 90 days | Up to 180 days | 31 days minimum, longer for high-risk categories |
| Resolution floor | 3MP (PTZ exempt) | Per SSD spec sheets | HD or higher | 2MP, IP cameras only | Full HD 1080p |
| Who must install | 16 facility categories: malls, hotels, banks, fuel stations and more | Compounds, hospitals, malls, banks, hotels, warehouses | Ministries, oil and gas, hotels, malls, banks, mosques, healthcare, roads | Vital places and establishments designated by the MCC | Licensed commercial categories per SIRA guidelines |
| Installer rules | MOI-approved systems | SSD approval | MOI approval to install, operate or maintain | MCC permits and accreditation certificates | SIRA-licensed installer, certificate tied to trade licence renewal |
| Headline penalties | Inspectors with judicial police powers, seizure | Up to 3 years' jail, QR 50,000, licence cancellation | SAR 500 to 20,000 by violation type | Up to 2 years' jail, AED 50,000 to 200,000 | Fines, licence suspension |
Bahrain and Oman are absent from the table for a reason. Neither publishes a unified technical standard, so there is no single retention figure or resolution floor to quote. Bahrain regulates through Ministry of Interior resolutions and Central Bank of Bahrain rulebook requirements. Oman enforces Royal Oman Police guidelines through commercial licensing.
What the Laws Share
Read the five instruments together and a common architecture appears.
Interior ministries own enforcement. Every GCC CCTV regime sits with the interior ministry or an agency reporting into it. This is security legislation, not data protection legislation, and enforcement reflects that.
Privacy carve-outs are near identical. Kuwait, Qatar and Saudi Arabia all prohibit cameras in bedrooms, patient rooms, toilets, changing rooms and women's facilities. The wording barely varies between the three.
Footage is evidence first. All five regimes prohibit altering recordings and require handover to authorities on request. Tampering carries some of the heaviest penalties in each law.
Compliance is tied to your licence. In Dubai the link is explicit: no SIRA certificate, no trade licence renewal. Qatar and Saudi Arabia can suspend or cancel licences for non-compliance. Kuwait's Law 111/2013 on commercial shop licences is referenced directly in Law 61/2015.
Where They Diverge
Retention is the biggest operational difference. Dubai's 31-day floor is a quarter of Kuwait's 120 days. If you standardise storage across a GCC estate, Kuwait and Qatar set your baseline, not Dubai.
Permit-first versus obligation-first. Abu Dhabi requires MCC approval before you operate a single camera. Kuwait works the other way: the law obliges you to install, then the MOI approves the system. The distinction matters for project sequencing and go-live dates.
Saudi Arabia is the modern outlier. The 2022 law brings the Saudi Data and AI Authority into the framework and includes a formal appeal route to the administrative court. It reads like surveillance law written in the data protection era. Expect future amendments elsewhere in the Gulf to borrow from it.
Kuwait's technical bar is high. A 3MP minimum across all fixed cameras, 15 frames per second and 120-day retention put Kuwait among the most demanding specifications in the region. Systems designed for Dubai's 1080p floor do not automatically pass in Kuwait.
Which GCC Country Has No CCTV Law?
Bahrain. It is the only GCC state with neither a standalone surveillance statute nor a dedicated regulatory agency for security systems. Oman comes close, but the Royal Oman Police at least operates a structured compliance regime through licensing, covering placement, signage and secure storage.
For operators, the absence of law does not mean the absence of obligations. It means obligations are scattered across sector rules, which is often harder to track than a single statute.
Designing for More Than One Rulebook
Aspire Security designs multi-site video surveillance systems against the strictest applicable standard, so one architecture satisfies every jurisdiction you operate in. Talk to our team about a compliance review of your regional estate.
