Protect your home or small office, record what matters, and stay compliant with Sri Lanka’s new data protection rules.
Quick Take
- Best for most homes: 2–4 × 4MP (2K) IP PoE dome cameras + 1 × NVR (1–2 TB) + router VLAN, with 7–14-day retention.
- Budget/apartment setups: 2 × Wi-Fi cameras with microSD + cloud backup on motion.
- Legal must-dos (2025): Put up a notice, limit what you record, secure footage, set a deletion window, and be ready for access requests under the PDPA. dpa.gov.lkParliament of Sri Lanka
1) Camera Types (What to buy—and when)
| Type | When to choose | Pros | Watch-outs |
| IP PoE (wired) Dome/Bullet | Houses, small offices, long-term reliability | Stable, higher quality, one cable (power+data), neat NVR setup | Needs cabling + PoE switch |
| Wi-Fi (plug-in) | Rentals, apartments, quick installs | Fast setup, cheap, app access | Wi-Fi dropouts, needs good signal, more cloud reliance |
| Doorbell cams | Gate/door knock detection | Visitor logs, two-way talk | Battery charging or wiring; check rain rating |
| PTZ (pan-tilt-zoom) | Large yards, car parks | Wide coverage, active tracking | Costly; moving parts wear out |
| Outdoor bullet | Perimeter, driveways | Longer lens options, visible deterrent | More conspicuous (vandal risk) |
| Indoor dome | Living areas, lobbies | Discreet, wider FoV | Don’t face bedrooms/bathrooms (privacy) |
Specs that matter in Sri Lanka
- Resolution: 4MP (2K) is the sweet spot; 8MP (4K) if you need plate clarity at distance.
- Night vision: IR 20–40 m; ColorVu/ColorNight sensors help in low light.
- WDR (120 dB+): Handles glare from gates/streets at noon.
- IP67 + metal housing: Survives monsoon and coastal spray.
- Vandal rating (IK10): For low-mount outdoor cams.
- Audio: Only enable where appropriate; audio has extra consent considerations (see Legal). Parliament of Sri Lanka
2) Recording & Storage (How long, where, and how much)
| Option | Best for | How it works | Pros | Cons | Typical cost (LKR) |
| NVR + HDD (on-prem) | Houses/offices with ≥2 cams | All cams record to one box | Reliable, central, no monthly fees | NVR is a single point of failure | 35,000–70,000 (NVR) + 15,000–25,000 (1–2 TB HDD) |
| MicroSD in-camera | 1–2 Wi-Fi cams | Records to the camera itself | Cheap, easy | If stolen/damaged, footage gone | 3,000–10,000 per card (64–256 GB) |
| Cloud storage | Apartments, remote access | Clips uploaded on motion | Off-site backup, easy sharing | Ongoing fee; bandwidth use | 500–1,200 per cam/month (brand-dependent) |
| Hybrid (NVR + Cloud clips) | Evidence resilience | Local 24/7 + cloud events | Best of both worlds | Cost + config | NVR + 300–800 per cam/month |
Retention: 7–14 days covers most incidents for homes; small offices often choose 14–30 days. After that, auto-delete to reduce risk and storage cost. (This also aligns with data minimization under the PDPA.) Parliament of Sri Lanka
3) Network & Power (Make it stable)
- PoE over Wi-Fi if you can: fewer dropouts, cleaner installs.
- Separate camera VLAN on your router; block cameras from the open internet unless cloud is required.
- Strong passwords + 2FA in camera/NVR apps.
- UPS/backup: 650–1000 VA keeps NVR + router up for brief outages.
- Cable: Use outdoor-rated Cat6 for runs; protect with conduit in sun/rain.
4) Placement that actually works
- Priority views: Gate/doorway (face height), driveway/vehicle, rear access, cash desk (SME).
- Mount at 8–10 ft (2.5–3 m) to balance face detail and tamper-resistance.
- Avoid aiming into neighbors’ bedrooms/yards if not necessary to your purpose. Mask or crop the frame if needed.
- Avoid backlight: Don’t point directly at the sun/bright streetlights; use WDR and angles.
5) How much will a small system cost? (2025 ballpark)
| Setup | What’s included | Cameras | Storage | Installed price (LKR) |
| Starter (Wi-Fi) | 2 × 4MP Wi-Fi cams, 128 GB per cam, app setup | 2 | On-cam (microSD) | 60,000–95,000 |
| Standard (PoE) | 4 × 4MP PoE domes, 4-ch NVR, 1 TB HDD, PoE switch, cabling | 4 | NVR (1 TB) | 185,000–260,000 |
| Extended (PoE) | 6 × 4MP PoE (mix of bullet/dome), 8-ch NVR, 2 TB HDD | 6 | NVR (2 TB) | 285,000–380,000 |
Prices vary by brand, cable length, heights/risers, and wall drilling. Ask for a site survey for an exact quote.
6) Legal Basics for Home & Small-Office CCTV in Sri Lanka (2025)
Sri Lanka’s Personal Data Protection Act, No. 9 of 2022 (PDPA) is now in force (operationalized 18 March 2025). Recording identifiable people (visitors, staff, customers) is personal data processing—even at home or a small office—so follow these essentials: dpa.gov.lkParliament of Sri Lanka
Your responsibilities (plain English)
- Have a clear purpose
Only record to deter/identify crime, manage entry, or protect safety—don’t use footage for unrelated reasons. (Purpose limitation.) Parliament of Sri Lanka - Tell people they’re on camera
Put a visible notice at the gate/entrance (“CCTV in operation: for security & safety. Contact: 07X-XXXXXXX”). This supports transparency obligations. Parliament of Sri Lanka - Minimize what you capture
Don’t aim at private spaces (bathrooms/bedrooms/neighbor’s interior). Use privacy masks if your camera sees beyond your boundary. (Data minimization.) Parliament of Sri Lanka - Keep it secure
Strong passwords, access controls, and encryption where possible. Limit who can view/export footage. (Security safeguards.) Parliament of Sri Lanka - Delete on a schedule
Set an auto-deletion period (e.g., 14–30 days) unless footage is needed for an incident. (Storage limitation.) Parliament of Sri Lanka - Be ready for access requests
If a person asks for footage of themselves (a data subject request), be prepared to respond reasonably. Blur others if needed. (Data subject rights.) Parliament of Sri Lanka - Audio recording = more sensitive
Only enable microphones if truly needed and your notice mentions it. Audio can raise additional consent/expectation issues. (Fair processing.) Parliament of Sri Lanka - If you use cloud storage
Choose reputable providers and check where data is stored. Cross-border transfers must follow PDPA’s rules/instruments once specified by the regulator. dpa.gov.lk
Note: The PDPA framework is evolving (there’s a 2025 amendment bill and new directives/guidelines). Keep an eye on the official Data Protection Authority website for updates. documents.gov.lkdpa.gov.lk
7) A simple CCTV policy you can copy (home or SME)
Purpose: Security and safety for occupants, visitors, and property.
Scope: Cameras cover entrances, perimeter, and common areas only.
Signage: “CCTV in operation” notice at entrances; contact number listed.
Access: Footage viewable only by [Owner/Manager]; exports are logged.
Retention: Auto-delete after 14/21/30 days unless needed for an incident/police request.
Sharing: Only with law enforcement upon written request or if required by law.
Review: Annual check of camera angles, passwords, retention, and signage.
8) Buying Checklist (print this)
- Camera type/brand chosen (PoE vs Wi-Fi), 4MP or higher
- Night vision range adequate (20–40 m), WDR enabled
- NVR with enough channels + 1–2 TB HDD
- Cabling plan (Cat6, conduit), PoE switch size
- Router config (VLAN/guest network), strong passwords, 2FA
- UPS for router + NVR (and gate cam if critical)
- Retention window set (14–30 days)
- Signage printed and installed at entry
- Privacy masks configured to avoid neighbors’ interiors
- Simple written CCTV policy saved and shared with staff/tenants
9) Frequently Asked Questions
Q1. Is it legal to record my gate and the public road?
Yes, generally—but follow PDPA transparency and minimization: notify via signage and avoid unnecessary capture of neighbors’ private spaces. Parliament of Sri Lanka
Q2. Can I point a camera at a shared corridor in my apartment?
Yes if it’s for security, with signage and limited angles. Avoid pointing into other units. Keep retention short. Parliament of Sri Lanka
Q3. How long should I keep footage?
Keep the shortest window that still meets your security need (7–30 days for most homes/offices). Longer retention must be justified. Parliament of Sri Lanka
Q4. What if the police ask for footage?
Provide relevant clips upon a formal request and log what you shared and why. Keep unrelated faces protected where practical. Parliament of Sri Lanka
Q5. Do I need to register my home CCTV?
No general registration for private CCTV—just comply with PDPA obligations and any condo/office building by-laws. Watch for regulator directives. dpa.gov.lk
10) Need help picking and installing the right system?
LankaFix can design, supply, and install the right-sized CCTV with a compliant setup (signage, retention, access controls)—and we’ll train you to use it.
- Call: 0770440404
- WhatsApp: 0719888848
- Book online: lankafix.com
Sources & references
- Data Protection Authority of Sri Lanka – PDPA commencement (Mar 18, 2025). dpa.gov.lk
- Personal Data Protection Act, No. 9 of 2022 (scope, principles, rights). Parliament of Sri Lanka
- DPA site: guidelines & draft directives (cross-border instruments, management programs). dpa.gov.lk
- 2025 amendment bill (context—framework is evolving). documents.gov.lk
