Bar Security in New York: Guards, Cameras, Incident Logs, and License Conditions

A New York bar’s security obligations depend on its license conditions, the work its employees actually perform, and applicable state and local law. There is no single staffing ratio, camera specification, or incident-log retention period that answers every establishment’s compliance questions. Begin with the approved operation and the rules for the particular premises, then design a security program that staff can follow during a busy shift.

Three distinctions are especially important. A bar may have to register as a security-guard employer even though no rule requires it to hire guards. New York City’s specific surveillance law covers a defined group of establishments, not every restaurant. And a routine footage-retention schedule does not authorize deletion of evidence that must be preserved for anticipated litigation.

In this article License conditions · Guard registration · Training · Cameras · Incident reports · Evidence preservation

When are security measures mandatory?

The Alcoholic Beverage Control Law prohibits an on-premises licensee from suffering or permitting the premises to become disorderly. Security planning supports compliance, but simply hiring guards does not satisfy every obligation or insulate the licensee from enforcement. The approved application, enforceable stipulations, and subsequent SLA approvals also matter. Material representations continue under 9 NYCRR § 48.8. [1] [2]

A condition may specify the number of guards, hours of coverage, entrance monitoring, camera coverage, footage retention, or an incident log. Read its actual wording. A requirement for two guards on Friday and Saturday nights is different from authority to use security as needed. A general industry recommendation cannot amend either condition.

Keep the operative documents together: the approved method of operation, license conditions, applicable community-board stipulations, amendments, and local occupancy approvals. Give the shift manager a concise operating summary identifying who must be present, what must function, and whom to contact if a required guard or camera is unavailable.

Can the owner change the security staff without SLA approval?

SLA Advisory 2022-29 generally allows adding or removing security and increasing or decreasing staffing without prior Authority approval. There are significant exceptions: changes remain subject to approval when the existing method was approved by the Full Board or relevant municipal/community-board stipulations impose security conditions. A Full Board approval permitting security “as needed” is expressly excepted from the filing requirement. [3]

Where an amendment is required, use the method-of-operation change process and continue under the existing approval until written authorization arrives. The current form asks about security personnel and supervision; describe the actual proposed arrangement. Replacing a written minimum with management’s own assessment that business is slow is not an approved amendment. [4]

Who counts as a security guard?

Job duties matter more than titles. General Business Law § 89-f includes people principally performing protective, deterrent, observational, and related security functions. An employee called a host, floor attendant, or doorperson may fall within that definition when the employee’s actual assignment is controlling access for security or protecting patrons and the premises. Conversely, an ordinary greeting or service assignment does not automatically become security work because it occurs near the entrance. [5]

DOS guidance distinguishes employees whose listed incidental security duties do not exceed half their regularly scheduled hours from employees principally assigned security work. Armed security assignments have a separate rule. Describe the job accurately before assigning an unregistered employee to function as the evening’s bouncer. [6]

Registration and training exemptions are specific. Active police officers, retired officers, and peace officers working a second job are not interchangeable categories. DOS explains that retirement does not itself eliminate registration, and that off-duty peace-officer work generally requires registration unless a particular exemption applies. Training waivers must be considered separately. [7] [8]

What must the bar do when hiring guards directly?

Establish the employer’s own compliance

A business employing guards solely for its own protection is a proprietary security-guard employer. Although it does not need the Article 7 business license required of a company supplying guards to others, it remains subject to Article 7-A obligations. DOS requires the proprietary-employer filing, a security-guard coordinator, and the required insurance documentation. The guard’s individual registration does not replace the employer’s compliance. [5] [6]

The DOS application identifies minimum liability coverage of $100,000 per occurrence and $300,000 aggregate. These are licensing minimums, not a judgment that those limits adequately protect a particular bar. Review the actual policy, including its treatment of security operations, with the insurance professional handling the business. [6] [9]

Verify authorization before assignment

For an already registered guard, examine the registration and verify current status through the DOS Online Security Guard Registry transaction. DOS expressly distinguishes that required employment verification from its general public license lookup. Keep the transaction number and date with the employee’s records; check required training rather than relying solely on an old card or certificate. [7] [10]

The law also provides a documented employer-filed application route for eligible new guards. It requires the prescribed application, due diligence, preassignment training, fingerprints, fees, and other materials; it is not permission to hire anyone who says an application is pending. Follow the current DOS procedure, including submission within 24 hours after the registry transaction where that application procedure applies. An expired registration does not authorize continued security work. [9] [7]

Use the correct hiring-notice deadline

There is a readily avoidable timing trap. General Business Law § 89-g(5) and the DOS employer checklist describe a 15-calendar-day employment-status notice. But 19 NYCRR § 174.6 requires notice within seven days for hiring an already registered guard and for specified hires with an application pending through another employer. [9] [10]

Use the seven-day deadline for those hires, which also satisfies the broader statutory period. Report retirement, resignation, and termination within the statutory 15 calendar days. A first-time application submitted by the employing company follows the separate application procedure. Do not build a payroll reminder that waits 15 days for every type of hire.

What training is required, and when?

For an ordinary unarmed guard without an applicable exemption, the standard sequence is an eight-hour preassignment course, a 16-hour on-the-job course after employment begins, and continuing annual in-service training. DOS requires two annual eight-hour in-service courses during the two-year registration cycle. Use approved training providers and keep completion records. [11]

DOS and DCJS instruct guards to complete the 16-hour course within 90 days of initial employment. The underlying statute refers to 90 working days. Scheduling completion within the agencies’ stated 90-day window satisfies the earlier deadline and avoids treating “working days” as permission to postpone training contrary to published instructions. [11] [8] [12]

Armed work requires additional authorization and firearms training; an ordinary unarmed card is insufficient. DCJS also distinguishes security-guard training from NYC fireguard qualifications. A security course does not itself provide the FDNY Certificate of Fitness required for fireguard work. Staff assignments should identify which role and credential are required. [11] [12]

What changes when the bar uses a security company?

Verify the company’s appropriate DOS license and the authorization of the people actually assigned. Obtain a written agreement identifying staffing, supervision, shift coverage, incident reporting, records access, and insurance. Arrange a replacement procedure for absences before the first event. An invoice from a company is not proof that each person who arrives is authorized to work. [5] [9]

The operating plan should identify who can stop admissions, refuse service, summon emergency assistance, and end an event. The contractor and bar manager need a common reporting process. If a promoter supplies personnel, the licensee should establish the same controls rather than assume the promoter’s assurances satisfy the bar’s obligations.

Contracts can allocate responsibilities, but actual conduct matters. The licensee remains responsible for its approved operation, and civil responsibility can turn on who controls security personnel and the area where an incident occurs. Calling the workers independent contractors does not decide those questions. [2] [13]

Which NYC establishments must install surveillance cameras?

NYC Administrative Code § 10-177 applies its camera requirements to eating or drinking establishments meeting two conditions: the specified permitted use under legacy Use Group 12, as indicated in the certificate of occupancy or Place of Assembly Certificate of Operation, and the required retail liquor license. It contains express exemptions for specified longstanding clubs, institutional premises, and premises licensed under the listed Title 20 provisions. It is not a blanket camera law for every city bar or restaurant. [14]

The legacy reference requires care. NYC reorganized zoning use groups in June 2024. DOB explains that existing final certificates need not be reissued solely to change the use-group label and that prior legal restrictions remain applicable. Zoning Resolution § 11-24 likewise provides that the reclassification alone is not a change of use. [15] [16]

Read the certificate, approved use, and relevant history together. A new Roman-numeral designation does not establish that every eating establishment is covered, nor does relabeling automatically erase an existing surveillance obligation. Outside the statute’s scope, cameras or a longer retention period may still be required by an SLA condition or another applicable local rule.

What does the NYC camera rule require?

For covered premises, § 10-177 requires more than a camera mounted above the register:

Coverage: All patron entrances and exits, recording activity in front of and within 15 feet to either side.
Usable images: Adequate resolution and lighting, at least 15 frames per second, and the ability to view and export recordings to portable media.
No audio capability: The specified surveillance equipment must satisfy the statute’s express prohibition on audio capability.
Operating time: Continuous recording during business hours and for two hours after closing, with equipment maintained in working condition.
Retention: Date-and-time indexing and at least 30 days of preserved recordings.
Access controls: Secure storage, access limited to authorized personnel, their written acknowledgment of required instruction, and a log of requests, access, dissemination, and use.
Public notice: Posted notice that surveillance is operating. [14]

Test the installed system under actual nighttime lighting. Confirm that the timestamp is correct, the oldest required footage remains retrievable, and a responsible manager can export usable files. Equipment specifications on a sales receipt do not show that the system works after a lighting change, hard-drive failure, or software update.

What guard records must covered NYC venues keep?

Covered establishments retaining guards must have proof of guard registration or the security company’s license available throughout operating hours, maintain a roster showing who is working, and require guards to carry registration proof on the premises. The section creates a rebuttable guard presumption for specified entrance-control and disorder-prevention functions, with an owner exception to that presumption. It also requires the occupancy or assembly certificate to be available to NYPD on request. [14]

These local duties supplement the state rules. A roster does not cure an expired registration, and the owner exception to a presumption should not be read as a general exemption from every security obligation.

How should incident logs and emergency procedures work?

Follow any log requirement in the license conditions. Even without a prescribed form, a consistent incident report helps management identify recurring problems and preserve an accurate account. As an operating practice, record the date, time, location, people involved, staff observations, action taken, emergency calls, witness contact information voluntarily supplied, and the corresponding camera files. Distinguish firsthand observations from what someone else reported.

For example, “customer staggered, repeatedly dropped a glass, and was refused another drink at 12:18 a.m.” is more useful than an unexplained conclusion such as “problem customer.” Record injuries and assistance without speculation about diagnoses. Do not rewrite an original account to make different witnesses agree; identify later corrections as corrections.

NYPD’s 2018 nightlife guide recommends prompt emergency reporting, scene protection, manager involvement, and retention of criminal-incident reports for three years. It also recommends a general staffing ratio of one guard for every 75 patrons. Those are guidelines, not universal statutory staffing and retention requirements for every New York bar. A license condition can impose a different binding obligation. [17]

For an immediate threat or medical emergency, call 911 promptly and follow emergency responders’ directions. Assign someone to guide responders to the location. Preserve relevant evidence without delaying assistance. Staff procedures should emphasize de-escalation, clear supervision, and lawful intervention; a guard’s registration does not settle whether a particular use of force is lawful.

When must footage be kept longer than the routine schedule?

The 30-day NYC minimum is not permission to erase relevant footage on day 31 after a serious incident. In VOOM HD Holdings LLC v EchoStar Satellite L.L.C., 93 A.D.3d 33 (1st Dep’t Jan. 31, 2012), the court explained that preservation obligations arise when litigation is reasonably anticipated, before a lawsuit necessarily begins. The case involved electronic communications, but its preservation principle also informs handling of relevant digital recordings. [18]

Pegasus Aviation I, Inc. v Varig Logistica S.A., 26 N.Y.3d 543 (Dec. 15, 2015), explains the required showing for spoliation sanctions: control and a preservation duty, culpability in the loss, and relevance. The Court of Appeals also rejected treating failure to institute a litigation hold as gross negligence automatically. Loss does not produce the same sanction in every case, but ordinary negligence can still have consequences. [19]

After a potentially serious claim, suspend routine deletion of relevant footage and records. Preserve adequate lead-up and aftermath, relevant entrances and exits, reports, staffing rosters, communications, and transaction records. Keep an original export and document who obtained or shared copies. An isolated short clip may omit the events needed to understand what happened. Coordinate the scope and duration of a hold with the claim’s handling rather than applying an automatic deletion date.

State guard-employment files have their own rule. Section 89-g(7) requires specified application, due-diligence, photograph, and training records during employment and for one year afterward, followed by destruction. Manage those confidential files separately from incident evidence and address any applicable preservation hold before destruction. Do not turn a general recommendation to retain incident reports into indefinite retention of every personnel document. [9]

What do assault cases teach bar operators?

In Martinelli v Dublin Deck, Inc., 198 A.D.3d 635 (2d Dep’t Oct. 6, 2021), the court affirmed dismissal where the injury arose from an unforeseeable, spontaneous attack and security assigned to the area intervened immediately. The duty is reasonable protection against foreseeable harm when there is an opportunity to act; a bar is not an insurer against every unexpected assault. The circumstances and response mattered. [20]

In Ballard v Sin City Entertainment Corp., 188 A.D.3d 554 (1st Dep’t Nov. 19, 2020), the court reinstated claims presenting factual questions about prior violence, control of the area outside the club, and the club’s possible status as a special employer of contract bouncers. It did not find final liability. The decision shows why outsourcing guards or pointing to a public sidewalk does not automatically resolve responsibility. [13]

Together, these decisions favor specific management attention: recognize escalating conduct, respond to prior incidents, clarify staff control, and preserve an accurate record. Cameras document events; they do not replace timely supervision or a workable response plan.

What should the manager verify before each busy shift?

Use a brief opening check tied to the establishment’s actual obligations:

People: Required staffing is present; registrations, training status, assignments, and the duty roster are current.
Premises: Entrances, exits, queues, and circulation remain consistent with the approved operation and safe occupancy.
Equipment: Required cameras record usable, correctly timed images; authorized staff can retrieve and preserve footage.
Response: Staff know who controls admissions and service, calls 911, documents incidents, and handles evidence.
Follow-through: The next manager receives unresolved incident information, preservation instructions, and any required corrective action.

Rodriguez Law can assist with security-related license conditions, proposed operating changes, and compliance planning that connects the SLA approval with the premises’ state and local requirements.

SCHEDULE AN INITIAL CONSULTATION