CCTV storage and retention: how long should you keep footage?
There is no single legal answer to how long CCTV footage should be kept. The right retention period depends on why you record, what you promise residents, and how you store and protect the footage.
Start with purpose, not a number
Retention should be driven by the purpose of the system. A small retail shop may only need a week to investigate a till dispute. An apartment building with car park incidents, after-hours access and insurer requirements may need 30 days or more. A high-risk logistics site may need longer again.
Write the retention period into your CCTV policy and privacy notice, then configure the recorder to match it. Keeping footage forever creates risk without adding much value.
Typical retention periods
- 14 to 30 days is common for apartments, retail and offices.
- 60 to 90 days is used where incidents are often reported late, or where insurance requires it.
- Longer periods should be justified by a specific risk, not habit.
Check your insurance policy and any strata or building requirements before you settle on a number. If a incident is reported late, a short retention period can mean the footage is already gone.
The storage maths
Storage is driven by camera count, resolution, frame rate, compression and how much movement the camera sees. A useful rule of thumb: 16 cameras recording continuously at around 2 Mbps is roughly 10 TB for 30 days. At 4 Mbps it is closer to 20 TB. Motion-based recording and smart codecs can reduce that significantly, but they should be designed, not guessed.
Always leave headroom. A recorder that is 95% full is a recorder that will overwrite the footage you need.
NVR, cloud or both
A local network video recorder is still the default for most buildings: predictable cost, high bandwidth and no monthly fee. Cloud storage is useful for a small number of critical cameras, remote sites or a second copy of key evidence. A hybrid approach, with local recording plus cloud backup for selected cameras, is often the best balance.
Protecting the evidence
- Time sync every recorder to a reliable time source. Wrong timestamps undermine otherwise good footage.
- Restrict export rights and keep a log of who exported what.
- Export clips with a hash or native player so the file can be verified.
- Store exports securely and record the chain of custody.
- Test playback monthly, not only when an incident happens.
Privacy and access
CCTV is personal information. Limit who can view and export footage, use signage at entry points, and avoid audio recording unless you have a clear lawful basis. Residents and visitors should be able to find your privacy notice, and staff should know how to handle a police or insurer request.
WIS Security designs CCTV systems with retention, access and evidence handling built in. See our CCTV service or book a site assessment.
WIS Security designs, installs and supports security systems across Melbourne. See our CCTV design and installation service or request a free assessment.