CCTV Malaysia 2026

CCTV (closed-circuit television) is a set of cameras that record video to a recorder or the cloud so you can watch live or review footage later. In Malaysia it is one of the most common home-security upgrades, alongside auto-gates and alarm systems, and it is standard for shops, offices and gated communities.

Who typically installs it and why:

• Landed homes (terrace, semi-D, bungalow): deter break-ins, capture faces and car plates at the gate and driveway, and settle disputes. These homes usually want reliable, always-on recording.
• Condos and apartments: monitor the entrance to their own unit, a doorbell camera at the door, or an indoor camera for children, pets and helpers. Common areas are covered by the building's own CCTV.
• Renters: want a quick, no-drill Wi-Fi camera they can take with them.
• Small shops and offices: deter theft, monitor staff and customers, and hold evidence — but this is a commercial use, which triggers extra PDPA duties (covered below).

The two big decisions are technical (what cameras, wired or wireless, where the footage lives) and legal (what you are allowed to point a camera at). This guide covers both, plus real Malaysian prices.

Three choices decide most of your setup:

Camera type — IP vs analog. IP cameras feed an NVR over Ethernet or Wi-Fi, give higher resolution and smart analytics (human/vehicle detection, line-crossing), and are the mainstream default for new 2026 installs. Analog HD-over-coax (HD-TVI/AHD/CVI) feeds a DVR and is a valid budget path if you are reusing existing coax.

Power/connection — PoE vs Wi-Fi vs 4G. PoE runs one Cat5e/Cat6 cable for power and data — most reliable, hard to jam, best for whole-house coverage, but you must run cable (ideally during renovation). Wi-Fi is fast to deploy and great for flats and renters, but subject to congestion, range limits and jamming. A 4G SIM camera works where there is no home internet, using a data-only or IoT SIM that typically costs around RM30-RM80/month.

Where footage lives. An NVR/DVR with a surveillance-rated HDD (WD Purple, Seagate SkyHawk) records continuously with no monthly fee. In-camera microSD is cheapest for single Wi-Fi cameras. Cloud survives device theft but adds a subscription. Many people run a hybrid: local recording plus cloud for event clips.

Resolution. 2K (4MP/QHD) is the practical sweet spot for Malaysian homes in 2026 — clear faces and plates at typical distances without huge storage. 4K (8MP) is worth it for wide driveways and shopfronts or where you will digitally zoom, but it needs roughly 2-4x the storage and bandwidth of 1080p.

Night vision. Standard infrared (IR) gives grayscale footage. Full-colour night vision (Reolink ColorX, Dahua Full-Color, Hikvision ColorVu, Tapo ColorPro) uses a warm spotlight and wide aperture for colour images — far better for identifying clothing and vehicles at night. Aim these carefully so the light does not annoy neighbours.

PTZ vs fixed. A pan-tilt-zoom camera covers a large open area with one unit, but a PTZ pointed away from an event misses it. For fixed entry points, several fixed cameras usually beat one PTZ.

Bandwidth reality. For smooth remote 4K viewing you need meaningful upload speed — roughly 5-8 Mbps per 4K stream. On Malaysian home fibre, upload (not download) is the constraint.

How many cameras? A common landed-home layout is 4 cameras: front gate, driveway/car, front door/porch, and the back or side. Bigger homes and corner lots go to 6-8. A flat often needs just 1-2 (door + indoor).

This is the part most guides get wrong. The Personal Data Protection Act 2010 (PDPA) applies to personal data processed for commercial transactions, and it explicitly exempts data processed by an individual for personal, family or household affairs.

So for a genuine home-security setup, the PDPA generally does NOT apply to you. The popular claim that a homeowner must display signs and get consent under the PDPA is not accurate for real personal/household use — that duty flows from the PDPA, which does not cover you here.

The real legal risk from over-pointing a home camera comes from other law, not the PDPA:

• Nuisance, invasion of privacy and harassment. A Malaysian household has been sued for aiming home CCTV at a neighbour's property, echoing the well-known Lew Cher Phow v Pua Yong Yong dispute. Persistently recording into a neighbour's home or private space can ground a civil claim.
• Practical rule: cover your own property — gate, porch, car, boundary. Incidental capture of the public road is generally tolerated; deliberately framing a neighbour's windows, garden or front door is where you get into trouble. Angle cameras down and use privacy-masking zones.
• Audio is more sensitive than video. Recording others' private conversations adds legal risk — disable microphones that reach beyond your property.

Your shop, office or small-business CCTV is different — it is processing in a commercial context, so footage that identifies people is "personal data" and the PDPA applies. Good practice:

• Display clear CCTV-notice signage.
• Use footage only for the stated security purpose.
• Restrict who can access it.
• Keep it no longer than necessary (define a retention period).
• Store it securely.

The 2024 amendment. The Personal Data Protection (Amendment) Act 2024 received Royal Assent in October 2024. Two of its headline changes took effect 1 June 2025:

1. Data-breach notification (applies to all sizes) — notify the Commissioner as soon as practicable (within 72 hours), and notify affected individuals if significant harm is likely. This duty applies regardless of business size.
2. Data Protection Officer (DPO) — threshold-based, not universal. Under the Commissioner's 25 February 2025 DPO guideline, appointment is only mandatory above set thresholds — processing the personal data of 20,000+ individuals, sensitive personal data of 10,000+ individuals, or carrying out regular and systematic monitoring. A typical small shop or office CCTV setup almost never meets these thresholds, so most small businesses do not need to appoint a formal DPO — but the breach-notification duty above still applies to them.

Penalties for breaching the data protection principles rose from RM300,000 to a maximum RM1,000,000 fine and up to 3 years' imprisonment.

Sharing clips online. In 2025 it was widely reported that sharing a CCTV clip online can attract a PDPA fine in a commercial context, and it can expose anyone to defamation claims. Share footage with PDRM first, not social media.

In stratified property (condos, gated schemes), the common areas — corridors, lift lobbies, façades and car parks — are controlled by the Joint Management Body (JMB) or Management Corporation (MC) under the Strata Management Act 2013 and the scheme by-laws.

What this means for your camera:

• A camera inside your own unit facing your own doorway is usually fine.
• A camera mounted on, drilled into, or pointing along a common-property corridor typically needs the JMB/MC's written approval and must comply with house rules.
• The building's own CCTV, installed by the JMB/MC, is a management/commercial use and should follow PDPA-style good practice (signage, access control, retention limits).

Before you install in a condo:

Getting approval first is far cheaper than being ordered to take a camera down later.

Below are approximate 2026 street prices for popular single cameras sold in Malaysia. Prices move with Shopee/Lazada promos, so treat these as a guide and verify live. Entry Wi-Fi cameras start around RM95, while premium PoE units run up to about RM600.

Video doorbells are a fast-growing category: Tapo D130/D230 (RM199-329), Xiaomi Smart Doorbell 3 (~RM309), EZVIZ EP3x Pro (RM199-349) and Reolink PoE/Wi-Fi doorbells (RM325-665) are the popular picks.

The head-to-head most Malaysian buyers search for is Tapo vs EZVIZ vs Xiaomi for DIY Wi-Fi, and Hikvision vs Dahua for professionally installed systems.

Verdict shortcuts: Tapo and Xiaomi win on price for indoor/apartment use; Tapo and EZVIZ lead the mid-range outdoor Wi-Fi segment; Reolink is the DIY power-user choice for 24/7 PoE recording; Hikvision and Dahua are the "safe" picks for whole-house and shop systems because of their strong local installer and service networks. All of them support local recording with no subscription.

Match the system to your situation rather than chasing the highest resolution:

• Landed home, want reliability + no monthly fee: IP + PoE cameras to an NVR with a surveillance HDD. Use 2K cameras at entries and a 4K on the driveway. Add a cloud/off-site backup of event clips against NVR theft. Reolink DIY kits (RM1,800-4,500) or a professionally installed Hikvision/Dahua package (RM799-2,999+) fit here.
• Renter / apartment / quick setup: 2K Wi-Fi cameras (Tapo, Xiaomi, EZVIZ) with microSD and optional cloud. Get JMB/MC approval before any common-area coverage.
• Small shop / office: IP + NVR for continuous coverage, and comply with the PDPA — signage, restricted access, defined retention, and the 1 June 2025 breach-notification duty (a formal DPO is only required above the processing thresholds).
• Cheapest plug-and-play: Xiaomi, Tapo C200/C210, EZVIZ C6N (RM95-200), microSD, no subscription.
• Best value outdoor Wi-Fi: Tapo C320WS/C520WS (RM229-319) or EZVIZ C8 series.
• No cabling at all: Tapo C425, Reolink Argus, or a battery video doorbell (RM300-650). These record on motion only to save battery, so they are not true 24/7.
• Best doorbells: Xiaomi Doorbell 3 (~RM309) and EZVIZ EP3x Pro.

Hardware + installation. DIY Wi-Fi cameras cost only the camera price (entry to mid-range Wi-Fi units roughly RM95-400 each; premium PoE cameras go higher) with zero labour. For wired systems, professional installation is the norm.

Many installers advertise "from RM799, done in about 4 hours" for a basic package.

Ongoing fees — mostly avoidable. A local microSD card (32-256GB, ~RM25-120 one-time) or an NVR/DVR removes any subscription. Cloud plans are optional: Tapo Care runs roughly RM10-17/month per camera (or ~RM99-169/year), and EZVIZ CloudPlay about RM13-33/month depending on retention. These add AI detection and longer history; free tiers are limited to short rolling clips. A 4G SIM camera adds a data-only SIM plan of roughly RM30-80/month. Confirm exact plan prices at checkout — some are regional approximations.

How much storage do I need? It depends on resolution, frame rate and how many cameras record continuously. As a rough guide, a 1-2TB surveillance HDD holds roughly one to a few weeks of continuous footage for a small 4-camera 2K system before it loops over the oldest data. 4K needs 2-4x more. Use surveillance-rated drives (WD Purple, Seagate SkyHawk) — desktop drives fail early under 24/7 writes. For microSD, buy high-endurance cards.

Loop recording warning. Small drives can auto-overwrite (loop) and erase evidence within days. If a camera captures a crime, export or preserve the clip before it is overwritten.

MCMC certification. Wireless cameras and 4G devices sold in Malaysia should carry MCMC (SIRIM) type-approval for the radio/telecom equipment. Buy from official brand stores and reputable local retailers so the device is certified for use here.

Power and internet outages. A wired NVR/DVR system stops recording if it loses power unless it is on a UPS (uninterruptible power supply); adding a small UPS keeps it running during short cuts. CCTV does not strictly need the internet to record — local recording works offline — but you lose remote viewing and cloud upload until the connection returns. Battery cameras keep working through a power cut but still need Wi-Fi for alerts.

A sensible order of work:

1. Decide home type and coverage — list the exact points you want to see (gate, door, car, back).
2. Pick wired-PoE (reliable, landed) or Wi-Fi (quick, flats), and where footage lives. For a site with no home internet, a 4G SIM camera on a ~RM30-80/month data plan is the fallback.
3. If in a condo, get JMB/MC written approval for any common-area coverage first.
4. Buy from official stores/reputable retailers; check MCMC certification and warranty.
5. Aim every camera at your own property, angle down, set privacy masks and mind audio.
6. Set the clock correctly and confirm recording and remote viewing work.

If you need footage for a PDRM report:

• Make the police report promptly at the nearest station or via PDRM e-reporting, and mention you have CCTV footage.
• Preserve the original file with intact date/time metadata — export the native clip, do not just screen-record it. Keep the source card/device if asked.
• Let PDRM take or verify the footage; get their go-ahead before circulating it.
• Do not post it publicly prematurely — that can expose you to defamation claims (and PDPA issues for a business) and may prejudice the investigation.
• Make sure loop recording does not overwrite the clip before you hand it over.