Guarding contract: the terms that must be in it
A guarding contract should describe in measurable terms what you are buying and what happens when it is not delivered: scope and post orders, hours, replacement time, reporting, incident handling, KPIs, liability and insurance, roles for personal data and CCTV, subcontracting, price review, and termination with a handover that leaves no gap. This guide is a practical checklist, not legal advice: have a lawyer review the final text.
Updated: 6 min readSources: 4
What should a guarding contract say about scope and hours?
Which posts, which hours on each day of the week, which duties, and the written post orders as an annex. Whatever is not written here, you cannot demand later.
- Posts: each post by name and location (e.g. “main gate”, “perimeter patrol”).
- Schedule: hours per day, including Sundays and public holidays, in a table. Not “24-hour guarding” without a breakdown.
- Post orders: what the guard does, what they do not do, whom they call. As an annex, with a procedure for every change.
- Changes and extra hours: how you request extra cover, with how much notice, at what price.
- Exclusions: whatever is not included, stated explicitly.
What replacement clause does a guarding contract need?
A clause that sets how quickly an empty post is covered, how you are told, and what happens to the hours left uncovered. The time should be a number, not “immediately”.
- Replacement time: the maximum time from a guard’s no-show until someone else is on the post.
- Notification: who tells you and how, whenever the post is empty even briefly.
- Uncovered hours: that they are not invoiced, and what credit or penalty applies.
- Team stability: notice before a permanent change of guard, and a briefing for the new guard on the post orders.
- Work licences: that every guard on your site holds a personal work licence, category A or B (Law 2518/1997, art. 3), and that you are given its number.
Which reports, incident handling and KPIs should a guarding contract set?
A shift report and an incident log in a set format and frequency, a notification time for every incident, and a few measurable indicators reviewed every month.
- Reports: which ones (shift, patrol, monthly summary), how often, in what format, and where you see them.
- Incidents: what counts as an incident, how quickly you are told, by whom, and when a written report follows.
- Escalation: an ordered contact list for day, night and holidays.
Keep the KPIs few, and measure them from records, not estimates:
- Hours covered ÷ hours contracted.
- Patrols completed ÷ patrols scheduled, per checkpoint.
- Incident notification time.
- Replacement time.
- Reports delivered on time.
OVIT gives clients patrols, incidents and reports in one live picture through the Guardly platform, so the KPIs are measured from the same records you see.
What should a guarding contract say about liability and insurance?
Who is liable for damage caused during guarding, up to what amount, and a civil liability policy with its amount and cover written into the contract. Law 2518/1997 does not require such insurance, so you are only protected if you write it in.
- Liability: which damage the company answers for, with what cap and which exclusions.
- Policy: type, amount of cover, insurer, term.
- Proof: a copy or certificate of cover at signing and at every renewal.
- Notice: a duty to tell you if the policy lapses or changes.
Civil liability insurance is not a duty under Law 2518/1997; it is a term you negotiate. Have your lawyer review the caps and exclusions alongside the policy itself.
What should a guarding contract set out for personal data and CCTV?
Who is responsible for the camera system and visitor records, what the guard does with them, how long they are kept and who puts up the signs. The Hellenic Data Protection Authority applies its Directive 1/2011 alongside the GDPR.
The Hellenic Data Protection Authority states that Directive 1/2011 still applies alongside the GDPR and Law 4624/2019, that no permit or notification to the Authority is needed, and that cameras may not be used to monitor or evaluate employees (art. 27 Law 4624/2019). The contract should state:
- Roles: who is the controller for the cameras and visitor logs, and whether the guarding company processes data on your behalf.
- Access: who sees the live feed, who exports footage, and how that is logged.
- Retention: under article 8 of Directive 1/2011, footage is deleted within 15 working days at most if no incident occurs; footage of an incident against the controller may be kept 30 days, and of one involving a third party, 3 months.
- Signs: clearly visible, placed before anyone enters camera range, naming the controller, the purpose and a contact for data-subject rights (art. 12) — and who puts them up.
- Employees: that the guard uses the cameras to protect the site, not to monitor or evaluate your staff.
What should a guarding contract say about subcontracting and price review?
That the company may not pass the guarding to another without your written consent, and that the price changes only by a set, transparent method. Both protect you from changes you would otherwise find out about afterwards.
- Subcontracting: only with written consent, only to a licensed company, with the same obligations and the main contractor still liable to you.
- Same staff, same checks: a work-licence number for every guard, whoever employs them. Every company reports its staff and their posts to the police each month (Law 2518/1997, art. 4).
- Price review: when (e.g. once a year, or when the minimum wage changes — the current one applies from 1 April 2026, Joint Ministerial Decision 8934/27.3.2026), by what formula, with how much notice.
- Extra hours: prices for extra cover, nights, Sundays and holidays, agreed in advance.
How does a guarding contract end without a gap in cover?
With a notice period, grounds for termination after repeated breaches, and a written handover plan so the new company takes over before the old one leaves. Changeover day is the most exposed day in guarding.
- Notice: a period for both parties, written as a number of days.
- Termination for breach: e.g. repeated uncovered hours or undelivered reports, after written warning.
- Handover plan: an overlap of at least one shift between the outgoing and incoming guard.
- Return: keys, cards, codes — signed for, and codes changed after the handover.
- Records: reports, incident log and post orders handed over; data returned or deleted as agreed.
This guide is not legal advice. Use it as a checklist and have a lawyer review the final text of the contract.
For what to ask before you reach the contract, see questions to ask before signing. For your own site, request an offer or see our guarding services.
At a glance
- Posts, hours per day and post orders as an annex: what is not written cannot be demanded.
- Replacement time, incident notification time and KPIs should be numbers.
- Civil liability insurance is not required by Law 2518/1997; write the amount, cover and proof of cover into the contract.
- For CCTV: roles, access, retention of at most 15 working days without an incident, signs, and no evaluation of employees.
- Subcontracting only with written consent; exit with a handover plan and no gap; the final text reviewed by a lawyer.
Frequently asked questions
Is civil liability insurance mandatory in a guarding contract in Greece?
Law 2518/1997 does not require it. That is why it must be written into the contract, with its amount, cover and proof that it is in force.
How long can CCTV footage be kept in Greece?
Under article 8 of Directive 1/2011, up to 15 working days if no incident occurs; 30 days for an incident against the controller and 3 months for one involving a third party.
Do I need a lawyer for a guarding contract?
Yes. This guide is a checklist, not legal advice; have a lawyer review the final text, especially liability, insurance and data protection.
Sources
Every legal or pay point in this guide was checked against the official sources below.
- Ν. 2518/1997 (ΦΕΚ Α΄ 164) — κωδικοποιημένο κείμενο, Ελληνική Αστυνομία: άρθρα 3 §1, 4Checked
- ΚΥΑ 8934/27.3.2026 (ΦΕΚ Β΄ 1759/27.03.2026) — κατώτατος μισθός από 1.4.2026Checked
- Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα — Βιντεοεπιτήρηση: εισαγωγή (Οδηγία 1/2011, ΓΚΠΔ, ν. 4624/2019 άρθρο 27)Checked
- ΑΠΔΠΧ, Οδηγία 1/2011 για τη χρήση συστημάτων βιντεοεπιτήρησης — άρθρα 8 και 12Checked
Want us to look at your site?
Talk to the OVIT operations team — a real person answers.