How long should we keep office camera recordings? Is it a privacy violation? Is it compliant with KVKK?
Under KVKK, camera recordings can be kept for 30-90 days. Elevators/entry points can be recorded for security purposes. Placing cameras in employee rooms / restrooms is prohibited. You must inform employees during hiring.
we were keping recordings too but didnt know how long to keep them.. and we set it to 90 days good
edit: fixed a few typos.
Recorded areas: 1. Entrance 2. Elevator 3. Corridor. Retention period: 90 days. Notification: Mandatory.
NVR (Network Video Recorder) handles the loop by overwriting old recordings. Configure it for 90-day retention.
I have a question. An untested backup is not a backup.
This is my opinion, I'm not claiming it's absolute truth.
Thanks, that was the answer I was looking for. The biggest time-waster for us was not knowing who had the final say.
This is my opinion, I'm not claiming it's absolute truth.
Three different views emerged, they all complement each other. Everyone rushing into camera footage retention gets stuck at the same point.
Trying to do this alone is the most expensive way. If I were you, I'd go this route.
You're right. An automated scan report is not the same as a penetration test.
Everyone rushing into camera footage retention gets stuck at the same point. Of course, it varies if your situation is different.
Absolutely. If I were to add anything: If you don't write this down from the start, it leads to arguments later.
This is my opinion, I'm not claiming it's absolute truth.
I was thinking the same thing. Don't rely on a single measure; go layer by layer.
When you try to change everything at once, nothing settles. This is my opinion, I'm not claiming it's absolute truth.
i'm curious too. anyway if you scold false alarms, nobody will report again.
im also curious if anyone does it differently.
Doki · Incident response support · 2026
I disagree with you on this point. If you scold false alarms, nobody will report again.
Proven by experience.
If you're going this route, sort this out first. When we decide without measuring, we always end up in the same place.
Just leaving this note, it might be useful.
Saved. People defend habits, not processes. Resistance comes from there.
Most incidents start with a leaked password, not a vulnerability. If you have questions, write them; I'll answer as best I can.
I can't fully agree with this. Your time to detect an issue directly determines its cost.
Hope this helps.