CCTV in Clinics and Small Hospitals: Where Cameras Help, Where They Don’t

Where does CCTV actually help in a clinic or small hospital?

CCTV helps most in shared, public-facing areas where disputes, theft or safety incidents happen: the entrance, reception, pharmacy counter, corridors, parking and the cash desk. These are places where people already expect to be seen, and where a clear recording can settle a question quickly.

• Entrance and exits: who came in and when, including after hours and at emergency doors.
• Reception and waiting area: queue disputes, aggression towards front-desk staff and items left behind.
• Pharmacy counter: what was handed over, and stock moving in or out of the dispensing area.
• Cash or billing desk: cash handling and payment disputes, with the camera behind the cashier looking at the counter, not at a keypad.
• Corridors and stairs: movement between floors, falls and unattended areas at night.
• Parking and the gate: vehicle damage, ambulance access and anyone loitering near the building.

A clinic on Sohna Road or a nursing home in a DLF phase usually needs only a handful of cameras to cover these points well. More cameras are not the goal. Good angles, decent night images and a recorder that keeps running after a power cut matter more. Our guide to CCTV camera types helps you match dome, bullet and night-vision cameras to each spot.

Where must cameras never go?

Keep cameras out of consultation rooms, examination and procedure rooms, toilets and changing areas. These are places where patients undress, describe symptoms or receive treatment, and recording them can expose exactly what a clinic is trusted to keep private.

We did not find an official Indian guideline that lists rooms where clinics may not place CCTV, so treat this as privacy good practice rather than a quoted rule. The law does draw a hard line in places, though. Section 66E of the Information Technology Act, 2000 makes it an offence to capture or share images of a person’s private area without consent where they reasonably expect privacy, and a camera that can see a changing area or an examination couch creates that risk.

• Consultation and doctor’s chambers
• Examination rooms, ultrasound and ECG rooms, and physiotherapy cubicles
• Procedure rooms, minor OT, dressing rooms and labour rooms
• Toilets, washrooms and the area just outside their doors
• Changing areas for patients and for staff
• Ward beds and recovery areas, unless clinical staff decide there is a specific safety need

Camera placement table for a clinic

Use this table as a starting plan, then adjust it to your floor layout and the advice of your doctors and lawyer.

Should clinic cameras record audio?

In most clinics, no. Turn off the microphone on every camera unless you have a specific reason and legal advice. At a reception desk, patients say their names, phone numbers and often their symptoms out loud, so an audio track can record health information that video alone would not.

Many IP cameras ship with a built-in microphone, and some have it switched on by default. Check the audio setting in each camera and in your recording software after installation, and again after any firmware update or camera reset. If you believe audio is needed for a security reason, such as aggression at an emergency entrance, write down why, keep it to that one point and mention it on the notice sign.

What should your CCTV notice say, and who can view footage?

Put a clear CCTV notice at each entrance, and allow only a few named people to view, play back or export footage. A notice tells patients and visitors what is being recorded. Access rules decide who can actually see it.

• Notice wording: that CCTV is in use, the purpose (safety and security), that consultation rooms and toilets are not recorded, and who to contact with questions.
• Languages: English and Hindi, in large print, at eye level near the entrance and reception.
• Live view: reception or the guard can watch the entrance and parking, but not play back old footage.
• Playback and export: only the owner, administrator or a named manager.
• Settings: only one administrator account, never a shared password.
• Audit log: software that records who viewed or exported footage, so access can be checked later.

How long should you keep footage, and what about police or patient requests?

Decide a fixed retention period in writing, let the recorder overwrite older footage automatically, and save only the clips you need for an incident. Keeping everything forever adds risk without adding much value.

Many small clinics keep a few weeks of rolling footage, but the right period depends on your disk space and legal advice. Note that the DPDP Rules, 2025 contain one-year retention requirements for certain personal data and processing logs in Rules 6 and 8, and it is not yet settled how they apply to rolling CCTV footage. Ask a lawyer before you fix the number, and keep your recording software’s access and export logs in any case.

1. Police request: ask for a written request or notice, such as an order under Section 94 of the Bharatiya Nagarik Suraksha Sanhita, 2023, and note the officer’s name and station.
2. Export the exact clip: only the time range and cameras asked for, in original quality.
3. Record the hand-over: date, time, cameras, clip length and who received it.
4. Patient request: verify identity, export only the relevant minutes, and blur or crop other patients where you can.
5. Lock the clip: stop it from being overwritten until the matter is closed, then delete it.

Does the DPDP Act apply to CCTV footage, and should it stay on site?

Very likely yes. The Digital Personal Data Protection Act, 2023 defines personal data as data about an individual who is identifiable by or in relation to it, and digitally recorded footage of a recognisable patient fits that wording. The Act does not mention CCTV by name, so how notice, consent and rights apply to cameras is not spelled out yet.

Most duties under the Rules start 18 months after their publication in November 2025, as described in the PIB release of 14 November 2025. Section 8(5) of the Act already sets the direction: protect the data with reasonable security safeguards. Section 17(1)(c) exempts processing for preventing, detecting or investigating offences from several duties, which matters when police ask for footage. Our DPDP Act checklist for clinic websites covers the rest of your patient data.

Where the footage is stored is part of that safeguard. On-site recording keeps video on disks inside your clinic, works when the internet is down and needs no upload bandwidth. Cloud recording is easy to view from anywhere, but footage of patients sits with an outside provider, so check their contract and access controls. Read our on-premise vs cloud CCTV storage guide before you decide.

How DVM Techno Can Help

DVM Techno makes DVM VigiCore, on-premise video management software for Windows. It records IP cameras locally, keeps footage and AI processing on your own hardware, and has roles, permissions and an audit log, so you can decide who views, plays back or exports video. Lossless clip export helps when you hand footage to police. The free download works with up to 4 cameras without a licence. Our Kasni team also offers CCTV installation around Kasni and Jhajjar. Call +91-8448523313.

Frequently Asked Questions