How Long Should CCTV Footage Be Stored? Legal Requirements in India (2026)

By AlifTech Secure  |  CCTV & Security Solutions, Indore  |  June 2026  | www.aliftechsecure.in

Why CCTV Footage Storage Duration Matters More Than You Think

Imagine this: a theft happens in your shop. You check your DVR — and the footage from three weeks ago has already been overwritten. The recording that would have identified the thief is gone. You have cameras, but no evidence.

This is one of the most common and most avoidable problems in CCTV installations across India. Most shop owners, factory managers, and homeowners never think about CCTV footage storage duration until an incident forces the issue. By then, it is too late.

Is There a Law in India That Mandates CCTV Footage Storage Duration?

India does not have one universal law that tells every business exactly how many days to store CCTV footage. However, several important frameworks apply depending on your sector and location.

The DPDP Act 2023 — The Key National Framework

The Digital Personal Data Protection Act 2023 treats CCTV footage as personal data because it captures images of individuals. Under this Act, you cannot store personal data — including CCTV recordings — longer than is necessary for the stated purpose. In practice, this means you need a clear, documented retention policy. Store footage for as long as your security purpose justifies, then delete it. Storing footage indefinitely without reason can expose your business to compliance risk.

Sector-Specific Requirements in India

Several regulators have issued their own CCTV storage guidelines. The Reserve Bank of India requires banks and financial institutions to retain surveillance footage for a minimum of 90 days to 6 months. The Ministry of Home Affairs has advised government establishments and critical infrastructure to retain footage for at least 30 days. Many state-level police commissioners have issued advisories for commercial establishments recommending 30 to 60 days of storage.

The Bharatiya Sakshya Adhiniyam 2023 — Using Footage as Legal Evidence

If your CCTV footage ever needs to serve as evidence in a court case — which is the main reason most businesses install cameras — it must satisfy the requirements of the Bharatiya Sakshya Adhiniyam 2023 (the updated Evidence Act). This means the recording must be authentic, the timestamp must be accurate, and the chain of custody from recording to submission must be documented. Footage stored correctly and presented with a proper certificate under this Act is admissible in court. Footage stored carelessly or with an incorrect timestamp often gets rejected.

CCTV Footage Storage Duration India — Sector-Wise Quick Reference

Here is the practical guidance most security professionals and legal advisors apply for different types of establishments in India.

Why 7 Days of CCTV Storage Is Almost Never Enough

Most basic DVR packages come configured with 7 days of storage by default. Many small businesses never change this setting. Here is why that creates real problems.

• Theft is often discovered late. Stock discrepancies, missing items, and payment fraud typically surface during a weekly or monthly audit — well after 7 days of footage has been overwritten.
• Vendor and delivery disputes can take weeks to surface. If a supplier claims they delivered goods that never arrived, footage from 3 weeks ago is what resolves it — or does not, if it no longer exists.
• Insurance claims require evidence. Insurers increasingly ask for footage before settling claims for theft or damage. A claim filed 2 to 3 weeks after an incident needs footage from that date.
• Court proceedings require earlier footage. Investigations, FIRs, and court cases routinely refer to footage from days or weeks before anyone realised something had gone wrong.

How to Calculate the Right Storage Capacity for Your CCTV System

Storage duration is directly tied to how much hard drive space your NVR or DVR has. Here is how to think about it practically.

Key factors that affect storage

• Number of cameras — more cameras means more data generated per hour
• Recording resolution — 4MP cameras generate roughly double the data of 2MP cameras
• Recording mode — continuous recording fills storage much faster than motion-triggered recording
• Compression format — H.265 (newer) stores roughly half the data of H.264 for the same quality

Practical storage estimates for common setups

The DPDP Act 2023 and Your CCTV System — What You Must Do

The Digital Personal Data Protection Act 2023 changed how every Indian business should think about CCTV footage. Because footage captures individuals’ images, it qualifies as personal data under the Act. This creates three practical obligations for any business operating CCTV.

1. Display a CCTV Notice

Place a clear notice at the entrance of any premises under CCTV surveillance. The notice should state that CCTV recording is in operation. This is both a legal best practice and a deterrence measure.

2. Define and Document Your Retention Period

Write down how long you store footage and why. For a retail shop, this might be: ‘CCTV footage retained for 45 days to investigate potential theft or disputes.’ This documented policy demonstrates that your storage duration is purposeful, not indefinite.

3. Delete Footage When the Retention Period Ends

Do not store footage indefinitely simply because your hard drive has space. Configure your NVR or DVR to overwrite footage automatically after the retention period. Only extract and preserve footage if a specific incident requires it — and document that extraction.

5 Common CCTV Storage Mistakes Indian Businesses Make

1. Setting 7 days of storage and never reviewing whether it is adequate for their actual needs.
2. Buying a DVR with a small hard drive to save money upfront — then discovering footage is gone when an incident happens.
3. Keeping footage indefinitely on an overloaded hard drive — which causes recording failures when the drive is full.
4. Using continuous recording at 4MP resolution when H.265 compression and motion-triggered recording would store 3 to 4 times more days of footage on the same drive.
5. Never backing up footage of specific incidents before it gets overwritten — losing the only evidence of a theft or dispute.

Choosing the Right CCTV Storage Setup for Your Needs

The right storage configuration depends on what kind of business you run and what legal or practical requirements you face.

For homes and small shops

A 4-camera system with a 2TB NVR running H.265 compression and motion-triggered recording gives you 40 to 60 days of footage — more than enough for most residential and small retail situations. This configuration keeps costs low while providing the storage depth that actually makes footage useful.

For factories and medium businesses

An 8 to 16 camera setup with a 4 to 8TB NVR, H.265 compression, and motion-triggered recording on low-risk areas (with continuous recording at dispatch and storage zones) gives 30 to 60 days across the full system. Make sure your NVR supports remote alerts when hard drive health degrades — a failing hard drive is the most common reason footage is unavailable after an incident.

For banks, hospitals, and compliance-driven businesses

These businesses need dedicated surveillance-grade hard drives, redundant storage, and a documented policy that matches their regulator’s requirements. Cloud backup for critical camera feeds provides an additional safeguard against hard drive failure or physical theft of the NVR.

Why Choose AlifTech Secure for Your CCTV Installation in Indore?

At AlifTech Secure, we do not just install cameras — we help you configure a system that actually serves your security and legal needs. That means recommending the right hard drive size for your camera count and resolution, configuring H.265 compression to maximise storage duration, setting motion-triggered recording on appropriate zones, and making sure remote access works on your phone from day one.

We supply only BIS/STQC certified cameras — CP Plus, Prama, Matrix, and HiFocus — and we provide certificate documentation with every installation. Every system includes a proper CCTV notice for your premises and a briefing on your retention obligations under the DPDP Act.

• Local installation service in Indore with fast response
• BIS-certified cameras — CP Plus, Prama, Matrix, HiFocus
• Storage consultation included — we recommend the right HDD size for your retention needs
• 265 compression and motion-triggered recording configured as standard
• Remote access set up on your phone before we leave
• AMC for ongoing hard drive monitoring, firmware updates, and camera maintenance

The Bottom Line on CCTV Footage Storage in India

The DPDP Act 2023 requires that you have a purpose, a policy, and a process — not that you store footage forever. Keep what you need, document why you need it, and make sure your system is actually configured to store it that long.

If you are not sure whether your current CCTV system stores footage for long enough, or if your NVR’s hard drive is the right size for your camera count, call us. A quick site visit tells you exactly where you stand.

• India has no single universal law on CCTV storage — but sector-specific guidelines and the DPDP Act 2023 both apply
• Banks need 90 days to 6 months. Shops and factories: 30 to 60 days. Homes: 15 to 30 days.
• 7 days of storage is almost never adequate for commercial use
• 265 compression + motion-triggered recording can double or triple footage retention on the same hard drive
• The DPDP Act requires a CCTV notice, a documented retention policy, and deletion when the period ends

AlifTech Secure — Indore

Call / WhatsApp:  +91 9109106826

www.aliftechsecure.in  |  aliftechsecure@gmail.com

112 Basement, Akbar Ali Complex, MG Road, Palasia Square, Indore — 452001

AlifTech Secure  |  CCTV & Security Solutions, Indore MP  |  www.aliftechsecure.in  |  +91 9109106826