Hotel security staff: own team, security company or neither?

In Türkiye, both an in-house private security unit and security supplied by a company depend on a provincial private security commission decision and the governor's permission (Law No. 5188, Article 3). The law does not name hotels. Compare the three models on cover, control, guest manner and training, then confirm your case with the provincial authority.

The job advert says "security staff wanted". The person who turns up may be a night porter with a torch, an employee of a private security company, or a member of the hotel's own private security unit, and in Türkiye those three are not the same thing in law. After reading this you will know what the Private Security Services Law requires before anyone stands at your door, who may legally hold the post, and how to compare hotel security in-house or outsourced on the lines that matter: cover, control, cost shape and guest manner.

What does Law 5188 require before a guard stands at your door?#

A private security unit inside your organisation, or security supplied by a company, needs a decision of the provincial private security commission and the governor's permission. The framework is the Private Security Services Law (Özel Güvenlik Hizmetlerine Dair Kanun, Law No. 5188, Resmî Gazete 26 June 2004, No. 25504; consolidated text, last changed by Law No. 7533, in force 30 November 2024), published by the Presidency Legislation Information System. Read it as written, not as a supplier summarises it.

Article 3 lists three arrangements that depend on that permission: protecting people with armed staff, setting up a private security unit within an organisation, and having security provided by a security company. Permission follows a commission decision. For meetings, concerts, stage shows and similar events, and for temporary or urgent cases such as moving money or valuables, the governorship may give permission without a commission decision.

Having an in-house unit does not stop the organisation from also using a security company when needed. The two routes are not mutually exclusive, so a hotel with its own unit can still contract extra guards for a congress week.

Ending an arrangement is also a process. Apart from temporary cases, private security can be ended by a commission decision and the governor's approval, on an application made at least one month in advance. If your season ends in October, that month belongs in the calendar, not in a phone call. The text speaks of organisations and protected areas; it does not mention hotels, so do not read "hotels must" or "hotels need not" into it.

If you are building the whole function from scratch, start with the wider picture in hotel security from the entrance to the night shift before deciding who staffs it.

Who may legally work as a private security guard?#

Article 10 lists the conditions a person must meet, and Article 11 makes the governorship issue the work permit after a positive security investigation and archive check. These conditions apply whoever signs the payslip, your hotel or a contractor.

Citizenship and age: the person must be a Turkish citizen, 18 or over. Education: at least eight years of primary or middle school for unarmed duty, and at least high school for armed duty. That education line is the practical boundary between a gate post and an armed post, and it is worth knowing before you write a job advert.

The record conditions are strict. No conviction for an intentional offence carrying a prison sentence of one year or more; no conviction for listed offences such as theft and fraud even if pardoned, and no decision deferring the announcement of the verdict for those offences; no ongoing prosecution for offences against state security, the constitutional order, privacy or sexual immunity, or for drug offences. Health: no illness or disability that prevents the duty.

Training and vetting: basic private security training under Article 14, plus a positive security investigation. The work permit itself comes from the governorship. The practical check is documentary: ask for the work permit and the training record, and keep a copy in the personnel file. A reference from another property is not the same document.

What may a private security guard actually do?#

Article 7 gives a defined set of powers, and they are narrower and more procedural than most hotel teams assume. Each power comes with conditions, and none of them transfers automatically to whoever wears the uniform.

Entrance screening: passing people who want to enter the protected area through a detector gate, searching them with a detector, and passing their belongings through an X-ray or similar system. Identity: asking for identity and carrying out checks at meetings, concerts, sports events, shows, funerals and weddings. Apprehension: holding a person under Article 90 of the Criminal Procedure Code, the code that governs arrest and detention, and handing over to the general police.

Safekeeping: criminal items, possible evidence or dangerous items found in a search are taken into safekeeping, with the general police informed at once; abandoned and found property is also taken into safekeeping. Disaster and assistance: guards may enter workplaces and homes in the area in fires, earthquakes and similar disasters or when help is called for, and protect the scene and evidence. Force may be used only within the provisions the article cites. A guard records and hands over; a guard does not decide who is guilty.

Write your contract in tasks, not in powers. "Check the staff entrance with the detector wand at shift change" is a task. "Search guests" is a power with conditions attached, and it belongs in the contract only after counsel has read it.

What is a night porter or a doorman not?#

A night porter, doorman or receptionist is an employee doing a job, not a private security guard, and the permission, training and vetting rules attach to private security work rather than to everyone who watches a door. The distinction is the task and its legal basis, not the uniform.

An employee who notes who comes in, keeps the key log and calls the police is doing reception and night work. A person posted to protect the building under a permission is doing private security. What the unbadged employee does not carry is the Article 7 powers: detector and X-ray screening at the entrance, identity checks at events and apprehension, and the training and vetting that sit behind them. What the property loses without a permitted arrangement is a documented chain from screening to police handover, and a person whose authority a guest, an insurer or a court can check.

The third model, no dedicated security staff, is a real choice, not a failure to decide. It means the desk, the night manager and technical measures carry the load, and it has to be written down: who watches which door, who calls whom at 03:00, what the desk does before the police arrive. Where the function sits in the chart also matters: a security post that reports to the front office manager at night behaves differently from one that reports to a duty manager with authority to close the bar. For the reporting lines, see hotel organisation chart: who decides what.

How do the three models compare?#

Compare them on five lines: legal basis, who you actually manage, the shape of the cost, cover when someone is absent, and how it feels to a guest. The table below is a frame; fill the cost line with your own figures for one season.

Legal basis: an own unit and a company contract both rest on the commission decision and the governor's permission. No dedicated staff needs no such permission, and also has no Article 7 powers behind it. Who you manage: with an own unit you manage people, rotas and discipline inside your own chain of command; with a company you manage a contract, a supervisor and a service level, and the individual guard is the contractor's employee.

Cost shape: an own unit is a fixed payroll across twelve months, including the empty ones. A contract turns part of that into a figure tied to shifts or months, with a notice period. The question is not which is cheaper on paper but who carries February. Cover: a company can usually replace an absent guard from its own pool; an own unit of three has no fourth, and a single guard on a night gate cannot leave the gate. Manner: the same person at the same door for years is recognised by returning guests and knows the regulars; a rotating contract guard does not, so guest-facing behaviour has to be written into the job description or the contract either way. Both staffed routes rest on the same Article 10 conditions and work permits, so check them the same way.

For how the rota itself is built, read hotel shift planning: covering the desk, floors and nights.

What should a security contract settle before you sign?#

Settle hours, tasks, reports and data in writing, then carry the questions the law cannot answer for you to the provincial authority and to counsel. A contract that leaves these to goodwill will be read differently by both sides on the night it matters.

Hours and relief: shift pattern, handover routine, who covers absence and how quickly, and the notice period at season end. If you are ending a permitted arrangement, the one-month application rule belongs in your planning. Tasks: a written list drawn from the Article 7 powers and your own house rules, plus what the guard must not do, for example hold guest room keys, handle cash, or enter an occupied room alone.

Reports: a shift log, an incident report format, who receives it and for how long it is kept. A log nobody reads is decoration. Data: camera footage, identity checks and visitor logs are personal data. Agree who decides what happens to them, what is kept, for how long and who may view it, and have counsel confirm the allocation under KVKK, the personal data protection law. The detail is in CCTV in hotels under KVKK: notices, placement and footage.

Questions for the provincial authority: does our property need permission for a unit or for a contract, what does the application require, how long does it take, and what changes when the season starts.

What to do next#

Fill the comparison table with your own figures for one season, then take two questions to the people who can answer them: the provincial private security commission through the governorship, on whether your property needs permission for a unit or a contract, and your counsel, on the tasks you want performed and the data you will hold. Sign nothing until both answers are in writing, because the permission, the training and the powers all sit on the same legal base, and a contract cannot supply what the law withholds. The law itself is the consolidated text of Law No. 5188 on mevzuat.gov.tr (opens in a new tab), Presidency Legislation Information System (viewed 7 November 2026); read it before the brochure.