CCTV footage
Most CCTV footage is gone within weeks, whoever owns the camera.
No Australian law sets a minimum retention period for private CCTV. The recorder’s hard drive does: when the disk fills, the system writes the new day over the oldest one, and it never asks first. If footage of an incident matters to you, the work of this page is getting it preserved before that happens.
How long CCTV footage is kept in Australia
For most privately owned systems, somewhere between a few days and a few weeks. There is no general law in Australia requiring a business, a homeowner or a strata building to keep CCTV for any period. Privacy law leans the other way: organisations covered by the Privacy Act are expected to destroy footage they no longer need. Retention comes down to the size of the recorder’s disk and how much video is being written to it.
Four cameras recording continuously at a common 2 Mbps setting write about 86 GB a day between them. A 1 TB disk holds eleven or twelve days of that before the loop comes back around. Higher resolutions shorten the window. Motion-only recording stretches it, and leaves gaps between clips. The disk decides.
| Where the cameras are | Typical window | What sets it |
|---|---|---|
| Home security kits and doorbell NVRs | Days to two weeks | Small disks, high resolutions |
| Small shops, cafes, service stations | One to four weeks | Disk size, and whether recording is motion-only |
| Large retailers and shopping centres | Around 30 days is a common corporate setting | Policy and bigger systems, not law |
| Licensed venues | 30 days or more where licence conditions apply | Liquor licence CCTV conditions |
| Council street cameras | Commonly two to four weeks | Each council's published CCTV policy |
| Police-held footage | The life of the matter | Evidence handling and records rules, once collected |
| Anything already overwritten | Gone | No lab can bring back footage the recorder has recorded over |
Does CCTV footage get deleted automatically?
Yes. That is the design. A surveillance recorder treats its disk as a ring: write until full, wrap to the start, record over the oldest footage. Nobody has to press anything, and most systems cannot be told to stop except by stopping recording altogether. So footage is not deleted on the day somebody decides to delete it. It is deleted on the day the loop reaches it, on a schedule set by disk size and bitrate that even the owner has usually never calculated.
Two other things remove footage without anyone choosing to. Motion-triggered systems never record the quiet minutes in the first place, which is why an incident can fall between clips. And a recorder that fails, or a disk that dies, takes its stored window offline in one event. That footage is often recoverable, but it is no longer something the operator can play you on request.
How to request CCTV footage in Australia
Who you ask, and what you can ask for, depends on who owns the camera. Every route shares one feature: the preservation request comes first, because every route is slower than the recorder’s loop.
From a business or private operator, anywhere in Australia
Start by asking. Many operators will preserve footage voluntarily, and some will hand it over, especially with a police event number attached. If the footage shows you, you can go further: under the Privacy Act you can request access to personal information an organisation holds about you, and identifiable footage of you counts. Organisations covered by the Act are expected to respond within 30 days, and they may meet the request in a limited form, a supervised viewing, or a copy with other people obscured.
Two limits are worth knowing before you rely on that route. Most businesses with an annual turnover under $3 million sit outside the Privacy Act, so a corner shop may have no legal duty to respond at all. And the Act gives you access to footage of you; it does not force anyone to release footage of someone else, which is what most disputes need. In both cases the practical path is the same: preservation now, release later through police or a subpoena.
In New South Wales
Footage held by a NSW government agency or council is requested under the GIPA Act, informally first, or by formal access application with an application fee. Councils commonly release street-camera footage only to police, so the fastest route to council footage of an incident is usually the police report that makes an officer ask for it. For a business’s cameras, the Privacy Act route above applies. Licensed venues with CCTV conditions on their liquor licence are typically required to keep recordings for at least 30 days, which buys you more time there than almost anywhere else.
In Queensland
Requests to Queensland agencies and councils go through the Right to Information process, on the approved form with an application fee. Footage of yourself held by a Queensland agency can also be sought as a privacy access request. For private businesses in Queensland, the Commonwealth Privacy Act rules above apply, small business exemption included. Queensland Police obtain footage directly from operators when investigating a report, which remains the quickest lever available to a member of the public.
Through police, or a solicitor
If the incident is a crime, report it and hand over the camera details in the same call: address, camera position, date, time window. Police can obtain footage that operators will not release to individuals, but an officer has to collect it before the loop does, and police workloads do not move at recorder speed. That is why your separate preservation request to the operator matters even after you have reported. In civil matters, a solicitor can seek footage by subpoena once proceedings are on foot, and a preservation letter sent now is what keeps that option alive.
Requesting footage from a private company
Companies mostly say no to individuals, and not out of obstruction. Footage almost always shows other people, staff and customers included, whose privacy the company has to weigh, and many have a written policy of releasing only to police or a court. Work with that rather than against it:
- Ask for preservation, not release. Few operators refuse to save a window pending a police request. It costs them minutes.
- Put it in writing today, with the date, time span and camera location.
- Get the police event number to them. An event number turns your request into part of an investigation.
- If the footage shows you, make a Privacy Act access request for footage of yourself. Larger companies have a process for exactly this.
A preservation request you can send today
Copy this into an email, or hand it over on paper. It asks the operator to do the one urgent thing, stopping the overwrite, and it deliberately does not demand they hand you anything.
Subject: Request to preserve CCTV footage, [date of incident] To the manager / owners corporation / security team at [premises], I am asking you to preserve CCTV footage before your system records over it. What happened: [one line, e.g. "a collision in your car park"] When: [date], between [time] and [time] Where: [address, and the spot on the premises] Cameras: any camera covering [the entrance / the car park / the register] Could you export this window now, or otherwise make sure it is not overwritten. Most recorders reuse their oldest footage automatically, some within days. I am not asking you to release the footage to me. Once preserved, it can be provided to police [event number: ______] or produced under subpoena if it comes to that. Please reply confirming the window has been saved and who is holding it. [Name] [Phone] [Date]
Can overwritten CCTV footage be recovered?
No. Overwriting is not deletion: the new footage occupies the same physical space on the disk, and what was there before no longer exists anywhere. No lab can undo an overwrite, and anyone who says otherwise is selling you something.
Deleted is a different word. Footage removed through the recorder’s own menu, a disk that was formatted, or a recorder that failed or was reset usually still holds its video, because those operations clear the index rather than the footage. Until the loop reuses the space, that footage can be recovered by reading the disk directly. The difference between the two cases is time, which is the theme of this whole page.
If the recorder is yours
Everything above is written for people asking someone else. If you own the recorder, and the footage you need is deleted, missing after a reset, or trapped in a machine that will not boot, that is our work: we read the recorder’s disk directly, in its own proprietary format, and export the window you need. The one urgent decision is the recorder still running, because it is consuming its oldest footage as it runs. Stop it, or pull the disk, then call. Proof of ownership, or an instructing solicitor’s engagement, is required before anything is touched.
General information about how retention and access requests work in Australia, current at the time of writing. It is not legal advice, processes and fees change, and your situation may turn on facts this page cannot know. For anything contested, talk to a solicitor.
Common questions
How long do police keep CCTV footage?
Once police collect footage it becomes evidence and follows the matter: held through the investigation and any court proceedings, then dealt with under records and disposal rules, which can mean years. The catch is the word collect. Reporting an incident preserves nothing by itself; the footage stays on the operator's recorder, on the operator's overwrite clock, until an officer obtains it. If the window matters, ask the operator to preserve it as well as reporting it.
How long do supermarkets keep CCTV footage?
No law sets a figure. Large chains run bigger systems and commonly configure around 30 days, but that is policy and capacity rather than obligation, and a small grocer's recorder may loop in under a fortnight. Treat every retail window as short: get a preservation request to the store manager within days, with the date, the time span, and which register or aisle.
How long do apartment buildings keep security footage?
Buildings mostly run consumer-grade recorders, and one to four weeks is common before the loop comes around. The cameras belong to the owners corporation, so the request goes to the strata or building manager, in writing, the week it happens. A strata manager's response time is measured in weeks and the recorder's loop in days, which is why the preservation request needs to go first rather than last.
Does a business have to give me its CCTV footage?
Mostly no. If the footage shows you, and the business is large enough to be covered by the Privacy Act, you can request access to it as your personal information, and they may provide it with other people obscured, or as a supervised viewing. Businesses under about $3 million turnover are largely outside the Act, and no business is obliged to release footage of somebody else to you. What you can almost always get is preservation, which keeps the footage alive for police or a subpoena to collect.