CCTV in a UAE Café: What It's For and What the Rules Expect
21 September 2026 · MidaOne
Most café owners buy cameras twice. The first time is a cheap kit bought in a hurry after something went missing, mounted wherever the cable reached, pointed at the room in general. The second time is after they discover that the footage from the first set does not show the one thing they needed it to show, or that the system does not meet a requirement nobody mentioned when they bought it. Cameras are one of the few purchases in a café where the specification is partly decided for you by an authority, and where getting it wrong is only discovered on the day it matters.
Is CCTV actually required for a café in the UAE?
The honest answer is that it depends on where you are, and that you should get it from the authority rather than from a supplier. There is no single nationwide café camera rule to point at. Security and surveillance systems are regulated at emirate level, and food premises can pick up a second, separate requirement through the municipality or food safety authority — which means two different bodies can have an interest in the same camera on your wall, for entirely different reasons.
In Dubai, security systems are regulated by the Security Industry Regulatory Agency, which sits under Dubai Police and sets technical standards for covered premises and licenses the companies permitted to install them. In Abu Dhabi, surveillance systems are regulated through the emirate's monitoring and control centre, on a similar model. In Sharjah, the municipality has for some years required food establishments to install cameras, with coverage of the areas where food is prepared and conditions attached to how recordings are kept and who may delete them; that has been widely reported but is worth confirming in its current form with the municipality directly. In every case the questions that decide what you actually buy are the same, and none of them can be answered from a blog.
What to confirm before you buy anything
Ask your own licensing authority and municipality, in writing, and keep the reply. Whether premises of your type and size are in scope at all. Whether the installer has to hold a licence, and how to check that a company genuinely does. What specification is expected, and whether any part of the system has to be registered, approved or inspected. How long recordings must be retained, in what condition, and whether you are permitted to delete them on your own authority. Who is entitled to view footage, and how you are expected to respond when an inspector or the police ask for it. Treat a supplier's answer to any of these as a sales position until the authority confirms it, and be especially careful with figures quoted on security-vendor websites — they circulate widely, they conflict with each other, and they are not what you want to be relying on when an inspector is standing in front of you. The cost of getting this wrong is not only a penalty; it is discovering during a licence renewal that something you assumed was optional is not.
Where the cameras actually need to point
Requirements aside, most café systems fail for a mundane reason: the cameras cover the room but not the events. A wide shot of the seating area is close to useless for the things owners actually want to resolve. The positions that earn their place are specific.
- The till — the single most valuable angle in the building, and the one most often got wrong. It should cover the cash drawer, the hands at it and the face of whoever is standing there, close enough to be identifiable rather than a shape in an apron.
- The back door and delivery point — where stock arrives and, when there is a problem, where it leaves. A short-delivered order and a bag going the other way both happen here.
- The stock room or walk-in entrance — not the shelves, the doorway. What matters is who went in and what they carried out.
- The preparation area — often the one covered by a food-safety requirement rather than a security one, which is why it is worth knowing which rule applies to you before choosing an angle.
- The front door — for the ordinary reasons, and because it is the one camera that reliably establishes when someone was in the building.
Mind the things that ruin an angle in practice. A camera pointed into a bright window records silhouettes all afternoon. One mounted directly above a head sees a cap. Poor light after dark turns an identifiable face into an argument. And a system with no synchronised, correct clock is far harder to line up against a till record, which is the point of having both.
Footage answers 'what', the till answers 'why'
This is where cameras genuinely pay for themselves, and it is not the way most owners imagine. Video on its own is a slow, subjective way to investigate anything: hours of it, no search, and a conclusion that rests on what somebody thinks they saw. Your sales data is the opposite — searchable, timestamped, and specific about what was rung up, by whom, and how it was paid. Used together they are strong. The pattern comes from the numbers first: a shift where the cash counted keeps landing under what the till expected, refunds clustering around one person, or stock disappearing faster than sales explain it. Then you go to the footage, for that till, at those minutes, and see what happened. That order matters, both because it is far quicker and because it keeps you honest — as where café stock actually disappears argues, measurement has to come before accusation, and a camera pointed at a person you have already decided about is not evidence, it is confirmation.
It also means the cheapest half of a security system is not the cameras. If every member of staff shares one login, footage is the only way to attribute anything, and you have made the slow tool do all the work. Give people their own access with permissions that match the job, and most questions get answered before anyone opens a video player — staff permissions on the till covers how to set that up without making the rush harder to work.
Staff, privacy and the footage itself
Recording people carries obligations regardless of why you installed the system, and UAE law takes privacy and the misuse of recorded material seriously. Some of it is simple good practice: tell your team the café is monitored and where, put it in the staff handbook rather than springing it on someone, and never put cameras anywhere people change, wash or expect privacy. Some of it is stricter than owners expect. Footage is not yours to share for entertainment or to shame a customer or an employee on social media; a clip posted publicly has caused people far more trouble than the incident in it. Keep access limited to the people who genuinely need it, know where the recorder physically sits and who can reach it, and take proper advice from a UAE lawyer before using footage in a disciplinary matter or handing it to anyone other than the authorities.
Where MidaOne fits
MidaOne does not connect to cameras, and any vendor telling you their point-of-sale makes CCTV unnecessary is selling. What it does is make the footage searchable, by giving you the record that tells you where to look. Staff roles and permissions are scoped by role and by branch, so activity is attributable to a person rather than to a shared till. Shift closes show cash expected against cash counted with the difference, which is usually the first sign that something is wrong. Sales by employee and by hour narrow a pattern to a shift, and the receipt list carries every sale, including the ones that were refunded. Start there and the camera becomes a way of confirming a specific minute, which is the only way anyone actually uses one.
See who rang what, on every shift, across every branch. Free for 14 days, no card.
Start your free trialFrequently asked questions
Is CCTV mandatory for restaurants and cafés in the UAE?
It depends on the emirate and on your premises, and there is no single nationwide café rule to rely on. Surveillance systems are regulated at emirate level, and food premises can pick up a separate requirement through the municipality or food safety authority, so confirm in writing with both whether your café is in scope before you buy.
Who regulates CCTV systems in Dubai?
Security systems in Dubai are regulated by the Security Industry Regulatory Agency, which sits under Dubai Police, sets technical standards for the premises it covers and licenses the companies allowed to install them. Ask them directly whether your premises type is covered and what is expected, rather than relying on an installer's summary.
How long does a café have to keep CCTV footage in the UAE?
Retention requirements vary by emirate and by the type of premises, and the figures quoted on security-supplier websites conflict with each other. Get the retention period that applies to you from your own licensing authority or municipality in writing, along with whether you are permitted to delete recordings yourself.
Where should cameras be placed in a café?
Prioritise the till, covering the drawer, the hands and an identifiable face; the back door and delivery point; the stock room doorway; the preparation area; and the front entrance. Avoid pointing cameras into bright windows or mounting them directly overhead, and make sure the system clock is correct so footage lines up with your sales records.
Can I use CCTV footage to discipline a member of staff?
Tread carefully and take advice from a UAE lawyer first. Tell your team in advance that the premises are monitored and put it in the handbook, keep access to recordings limited, and never publish footage of staff or customers. A camera supports a case built from your own records; it is a poor place to start one.
A café that has cameras and no idea what its till data says will watch hours of video and still be guessing. A café that reads its numbers weekly usually needs about ninety seconds of footage, on a known till, at a known minute — and normally only to confirm something it already suspected. Buy the system the authority requires, point it at the places where money and stock actually move, and let the paperwork tell it where to look.