Compliance • Storage • CCTV
How Long Should You Keep CCTV Footage? Storage, Retention and the Law
There’s no single legal minimum retention period for CCTV footage in Australia. The Privacy Act says keep it only as long as you need it. Industry standards suggest 30 days for residential, 60–90 for commercial, and longer for licensed venues. Here’s how to decide what’s right for your system — and what happens if you need footage you’ve already deleted.
Primary sources: NSW Surveillance Devices Act.
Is There a Legal Minimum Retention Period in Australia?
No universal minimum exists. The Australian Privacy Act 1988 and the Australian Privacy Principles (APPs) say personal information (including CCTV footage) should only be retained for as long as it is needed for the purpose it was collected. After that, it must be destroyed or de-identified.
However, specific industries and situations have their own rules:
- NSW liquor-licensed venues: Some licence conditions require 30-day minimum retention of CCTV footage. Check your specific licence conditions.
- NSW WorkSafe incidents: Workplace incident recorded on CCTV, the footage must be preserved and made available to SafeWork NSW investigators. Deleting it after an incident may constitute obstruction.
- Police requests: When NSW Police request CCTV footage as part of an investigation, you're obligated to preserve and provide it. Deleting footage you know police may request is a potential offence.
- Insurance claims: Making a claim that relies on CCTV evidence, retain the footage until the claim is fully resolved.
Industry Standard Retention Periods
| Property type | Recommended retention | Why |
|---|---|---|
| Residential home | 14–30 days | Most incidents are discovered within a week. 30 days covers delayed-discovery scenarios (holiday returns, etc.) |
| Small business / retail | 30–60 days | Customer disputes, theft claims, and insurance investigations may take weeks to surface |
| Licensed venue (NSW) | 30–90 days | Some liquor licence conditions mandate 30 days minimum. Police investigations for assault/intoxication may take longer. |
| Warehouse / logistics | 30–60 days | Inventory discrepancies may not surface until stocktake cycles |
| Construction site | 30 days (or project duration) | Theft and vandalism claims; WHS incident documentation |
| Strata common area | 30 days | OC by-law should specify; 30 days is typical for residential strata |
How NVR Storage Capacity Affects Retention
Your NVR's hard drive size directly determines how long footage is kept before overwriting begins. The math depends on camera count, resolution, compression, and whether you record 24/7 or motion-only.
Rough guide for motion-triggered recording with H.265 compression:
- 4 cameras × 4MP × 2TB HDD: ~30 days of footage
- 4 cameras × 4MP × 4TB HDD: ~60 days
- 8 cameras × 4MP × 4TB HDD: ~30 days
- 8 cameras × 4K × 8TB HDD: ~30 days
For 24/7 continuous recording, halve these estimates. For motion-only with low activity (residential), you may get 50–100% longer than these figures.
When the drive fills up, the NVR overwrites the oldest footage automatically. If you need to retain specific footage (incident, police request, insurance), export and save it separately before it's overwritten.
Secure Deletion — What It Means and Why It Matters
Under the Australian Privacy Principles, when footage is no longer needed and no legal hold applies, it should be securely destroyed. For NVR systems, the normal overwrite cycle handles this automatically — old footage is overwritten by new recording. For exported footage stored on a computer or USB drive, use secure deletion (overwrite the file, don't just move it to the recycle bin).
Why this matters: if you retain footage indefinitely without justification, you're holding personal information longer than the Privacy Act intends. If a data breach exposes old footage you shouldn't still have, you may face regulatory scrutiny.
Frequently Asked Questions
How long should I keep CCTV footage at home?
14–30 days is the standard residential recommendation. Most incidents are discovered within a week. A 2TB NVR with 4 cameras at 4MP typically holds 30 days of motion-triggered footage before overwriting begins.
Is there a legal minimum CCTV retention period in Australia?
No universal legal minimum exists. The Privacy Act says keep footage only as long as needed. Some NSW liquor licence conditions mandate 30 days. Workplace incidents must be preserved for SafeWork NSW. Police-requested footage must be retained. Beyond those situations, retention is at the owner's discretion.
What happens if police ask for footage I've already deleted?
If the footage was overwritten through normal NVR operation and you had no reason to know it would be requested, you're not at fault. If you deliberately deleted footage you knew police might request, that could constitute obstruction. When in doubt, export and preserve any footage related to a known incident.
How much hard drive space do I need for 30 days of CCTV?
For 4 cameras at 4MP with H.265 compression and motion-triggered recording: approximately 2TB. For 8 cameras at the same spec: approximately 4TB. For 4K cameras or 24/7 continuous recording, double these estimates.
Can I keep CCTV footage forever?
You can, but you shouldn't. The Australian Privacy Act requires personal information (including footage of identifiable people) to be destroyed when no longer needed. Indefinite retention without justification may breach the Privacy Act. Normal NVR overwrite handles this automatically — exported footage should be managed with a retention schedule.
Should I upgrade my NVR storage for longer retention?
Only if your business or insurance requires it. For most residential systems, 30 days is sufficient. Adding a larger HDD (4TB vs 2TB) costs $100–$200 and doubles your retention. For commercial sites needing 60–90 days, size your HDD accordingly during installation.
Need help sizing your CCTV storage?
We'll calculate the right NVR + HDD size for your camera count, resolution, and retention needs — residential or commercial.