Hotel CCTV: Who Watches Lobby, Parking, and Staff Areas

Hotel CCTV works best when it is split by job. Reception watches the lobby and entrance live, security handles parking, corridors, and replaying footage, and the duty manager approves any copy that leaves the system. Investigations start from hotel records such as check-in time and room number. From 16 January 2027, Indonesia's new data protection regulation also expects signs and a written retention policy.

Most hotels have the cameras already. What is usually missing is the agreement on who looks at what, who may replay footage, and what happens when a guest asks for a copy. Without it, everyone shares one recorder login, and nobody can say later who watched or downloaded what.

Who needs which cameras?

Start from the tasks each team performs on a normal shift, not from the camera list. A receptionist needs to see who is walking towards the desk; they do not need the staff entrance or the car park.

This is a starting point, not a fixed rule. A small hotel may combine reception and night security in one person. What matters is that each account belongs to one person, so the permission can follow that person when their job changes. The CCTV user access guide explains how to test those permissions from an operator's account rather than trusting the admin screen.

Replay deserves extra care. Many recorders allow only a few simultaneous replay sessions; the model in a building I worked on allowed one per recorder. If the reception PC keeps a replay session open, security may be refused exactly when they need it. The article on running several recorders covers those capacity limits.

Where should cameras never point?

Guest rooms, bathrooms, toilets, and changing rooms are off limits. Beyond those obvious cases, check the angle. A corridor camera should cover the corridor, not look into a room when its door opens. A parking camera should cover the hotel's bays, not the neighbour's house.

The new implementing regulation puts this in writing. PP 33/2026, Article 18(2) says visual recording devices may only be placed and used to monitor the intended area, in line with the purpose of monitoring. When a camera is installed or moved, have someone check the actual picture, not just the floor plan.

What does Indonesian law expect from hotel CCTV?

The base rule is Article 17 of the Personal Data Protection Law (UU 27/2022). Cameras in public places must serve security, disaster prevention, or traffic purposes. They must display information in the monitored area. They must not be used to identify a person, except for crime prevention and law enforcement.

PP 33/2026 adds the detail. It was promulgated on 16 July 2026 and takes effect six months later, on 16 January 2027 (Katadata, 3 September 2026). For hotel operators, four articles matter most:

Article 19 also says where the notice goes: at the entrance of an enclosed monitored area, or somewhere easy to read before entering an open one. A sticker on the camera itself does not meet that. This table summarises the text; it is not legal advice. Have legal counsel review your signs and policy before January.

How do you trace an incident quickly?

Begin with the hotel's own records, not with scrolling through video. A guest complaint usually comes with a room number, a check-in time, a parking ticket, or a rough moment ("after breakfast"). The front-office system — the hotel's reservation and guest register, often called a PMS — turns that into a time window and a list of areas.

Two steps are often skipped. First, check the recorder's clock against the hotel system before trusting a timestamp; a recorder that drifts by several minutes can put a guest in the wrong place. The clock drift article explains why that matters for evidence. Second, mark the clip in the recorder or VMS (the video management software) and write a short note: who asked, what was found, and the case number if any. The next shift can then continue without searching again.

What if a guest asks for a copy of the footage?

This request is common after a scratched car or a missing bag. Footage of the lobby or parking lot almost always shows other guests too, so handing over a file is rarely the right first step. A safer routine:

• The duty manager reviews the footage with the guest on site.
• If the matter goes to the police, the copy is given on an official request, which matches the law-enforcement exception in Article 17.
• Every copy is logged: who approved it, which cameras and time range, who received it, and the format.
• Copies are made from accounts with export rights only, never from a shared login.

Write this routine down and train reception on it. The receptionist is the person the guest asks first, and "I will ask the duty manager" should be the standard answer.

How long should footage be kept?

There is no single number for every hotel. Article 75 asks each operator to set its own period and document it, including how footage is destroyed and who is responsible. The period should match the incidents you actually handle: guests often report parking damage days after checkout, so a retention period shorter than a typical stay plus a week can erase the evidence before anyone asks.

Check the recorders too. A policy that says 30 days means little if the disks only hold 12 days at the current bitrate. The CCTV storage sizing guide shows how to calculate it.

Add CCTV to the shift handover as well: cameras offline, open incidents, clips waiting for approval, and any clock that has drifted. These take one minute to note and save hours when an incident crosses two shifts.

What should you prepare for a discussion?

Prepare a list of cameras by area, the recorders they use, the roles on each shift, and how guests' requests for footage are handled today. Add your current retention period and where the signs are.

In the Pantau CCTV management project, operators work from areas assigned to their accounts and activity is recorded per user. It is one example of site-specific development; many existing VMS products also offer role-based access, so configuring what you already have may be enough. For integration with recorders and existing devices, see IoT system development. For reservations, rooms, and guest records, see the hotel management system service.

Describe your hotel's cameras and teams. The initial 15-minute discussion is free. Surveys, configuration, and development are scoped after discussing the site.