Hemaya Compliance Checklist for Ras Al Khaimah Businesses (2026)

Short answer: To be Hemaya-compliant in Ras Al Khaimah, your CCTV must be designed and installed by a GRA-approved provider, built to the Hemaya specification for your premises category, cover entrances, exits and emergency exits with identifiable images, record continuously and keep footage for at least 90 days (30 days for a building under construction), run on a UPS for at least 30 minutes, be covered by a signed annual maintenance contract, show CCTV signage, restrict access to authorised people, and be backed by a valid Hemaya certificate that you renew before it expires.

Use this as a working checklist — print it, or walk your premises with it. For the reasoning behind each rule, see our complete guide to GRA CCTV requirements.

1. Before you buy anything

• Confirm your premises falls within scope. Most commercial premises do — shops, offices, warehouses, hotels, schools, clinics, mosques, towers, apartment buildings and construction sites. If you are unsure, ask GRA.
• Get the current Hemaya specification for your premises category (shop, warehouse, residential building, hotel, school, factory or high-security facility). Specifications differ by category.
• Choose a GRA-approved integrator and confirm their approval is valid today. Verify with GRA on +971 7 235 7779 or [email protected], or on the GRA Hemaya portal.
• Do not buy cameras from a generic spec list found online. Buy against the approved design.

2. Design and submission

• Site survey completed: entry points, blind spots, lighting conditions and cable routes recorded.
• Camera layout drawing prepared.
• Camera schedule prepared (every camera, its position and its purpose).
• Storage calculation done for the full retention period at your real resolution and frame rate.
• Bill of Quantities (BOQ) prepared.
• Design submitted through the GRA Hemaya process and approved before installation starts.

3. Coverage

• Every entrance, exit and emergency exit is covered.
• Faces at each entrance are identifiable — not silhouettes. Entrances facing a bright glass door or street need a camera with strong backlight handling (WDR) or a better angle.
• Other areas in the approved design are covered — commonly receptions, lobbies, cash counters, parking areas, vehicle entrances and critical corridors.
• No cameras in toilets, bathrooms, bedrooms, changing rooms, treatment rooms, similar private areas, or areas designated for women. This carries a penalty.

4. Recording and storage

• Recording runs continuously on every camera.
• The recorder actually holds at least 90 days (30 days for a building under construction). Check the date of the oldest recording on the system, not the disk size on the box.
• Recordings cannot be altered by unauthorised people.
• Recommended: surveillance-grade hard drives (for example WD Purple or Seagate SkyHawk) built for 24/7 writing.
• A UPS that keeps the system running for at least 30 minutes in a power cut — required by Hemaya Version 4.1.
• Recorder password-protected, date and time stamps correct, and recording restarts automatically after a power cut.

5. Access and data handling

• Viewing is restricted to authorised persons, and you keep a written authorised-user list.
• You know how to export footage, because it must be supplied to RAK Police on official request.
• The system is not connected to any unlicensed external party.
• Footage is not transferred, stored externally (including cloud services) or published without approval from the competent authority.

6. Signage

• A clear notice shows that CCTV surveillance is operating.

7. Installation

• What is installed exactly matches the approved design — same positions, same models, same count. This is the most common reason for failed inspections.
• Only equipment that meets the Hemaya specification is used.
• Outdoor cameras are weather-rated for RAK conditions — heat, dust and, near the coast, salt air (Version 4.1 requires IP66 or IP67 outdoors).
• Cameras are full-colour day and night (not infrared-only) and at least 1080p; at least two outdoor cameras have true WDR.
• Entrance cameras are mounted no higher than 2.5 m (categories 1–6); categories 1–4 use fixed cameras of at least 4MP at public entrances.
• Audio recording is enabled on cameras covering customer-service and cashier areas (categories 1–6).
• No wireless cameras and no supplementary camera systems — Version 4.1 does not permit them.
• Cabling is concealed and numbered at both ends, and cameras are numbered to match their positions.

8. Inspection and certification

• Image quality demonstrated on every required camera.
• Recording and 90-day retention demonstrated.
• Hemaya certificate issued and filed.

9. After certification — staying compliant

Compliance is not a one-day event. A dead camera or a failed disk is a compliance problem, not just a technical one.

• Cameras cleaned, refocused and repositioned on a schedule. Cameras drift over time from vibration, knocks and cleaning.
• Recorder health checked: disks, temperature, power and error logs.
• Storage and retention verified periodically.
• Firmware kept up to date.
• Annual maintenance contract signed — mandatory for the facility owner under Version 4.1.
• Mobile access used only where your category allows it (Category 5 with approval; never Category 6).
• Every visit and repair logged in a maintenance record.

Monthly 5-minute self-check

10. Renewal

• Certificate expiry date in the calendar, with a reminder at least one month ahead.
• System audited before resubmission, not after.
• Renewal submitted before the expiry date.

Do not plan around the grace period. A 30-day grace period from expiry generally applies, but it is subject to approval and not automatic. Staying inside it does not avoid a penalty, and an expired certificate can block your trade licence renewal.

Records to keep together

A CCTV maintenance contract handles most of section 9 and keeps these records up to date for you — see the AMC plans.

Frequently asked questions

Can I install Hemaya CCTV myself?

No. Installation and maintenance must be carried out by a provider approved by RAK Police and GRA.

How long must I keep CCTV recordings in RAK?

At least 90 days (30 days for a building under construction), without unauthorised alteration. Check the oldest recording on your recorder to confirm it really holds 90 days.

What is the most common reason for failing a Hemaya inspection?

An installation that does not match the approved design — a camera moved, a model swapped or a camera added after approval.

When should I start my Hemaya renewal?

At least one month before the expiry date, with a system audit before you resubmit.

This checklist is general guidance based on RAK Law No. 3 of 2015 as amended by Law No. 6 of 2021 and the Hemaya System specification Version 4.1. It is not legal advice. Requirements change and vary by premises category — always confirm the current rules with GRA. Official sources: Hemaya specification Version 4.1 (PDF) · list of approved integrators · GRA regulation guide (PDF).

Note: RADON COMPUTER follows the rules and regulations of the Government of Ras Al Khaimah's General Resources Authority (GRA). This guide is general information. For further details and clarifications, please contact the authority directly at gra.rak.ae.

Let us tick the boxes for you

RADON COMPUTER is a GRA-approved integrator that handles the full process — survey, design, submission, installation, inspection and renewal. Book a free compliance inspection or message us on WhatsApp at +971 56 566 5529.