The Chinese Surveillance Ban: How Global Restrictions Are Reshaping the CCTV Industry

For two decades, the global CCTV market ran on a simple default. A handful of Chinese manufacturers made cameras cheaper than anyone else, and buyers everywhere installed them without asking where the footage went after it left the lens. That default is falling apart. One government after another has decided that a surveillance camera is not a neutral box.It is an internet-connected computer with a microphone, a network port, and firmware written by a company that answers to a foreign state. Once that camera points at a power plant, a bank vault, a defence site, or a public street, the question of who can reach the feed stops being a procurement footnote and becomes a national-security problem. The result is a wave of restrictions now grouped loosely under the label "Chinese surveillance ban." It already covers the United States, the United Kingdom, Australia, parts of Europe, and, most recently, India. If you buy, sell, or build surveillance hardware, the rules of your market have quietly changed. Here is what is happening, why, and what it should change about your next purchase order.
Why Chinese Surveillance Brands Came Under Scrutiny
The objection was never that the cameras are cheap or simply that they are made in China. It comes down to three factors that, stacked together, make the footage hard to trust.
The legal reach
China's National Intelligence Law, enacted in 2017, requires Chinese organisations and citizens to support and cooperate with state intelligence work. Security analysts read this to mean a manufacturer can be compelled to hand over data or access, no matter where its cameras are physically installed. A unit in Mumbai or Manchester does not escape the law that governs the company that built it.
The documented vulnerabilities
These are on the record, not hypothetical:
- In 2017, the US Department of Homeland Security disclosed a backdoor in Hikvision cameras that let an attacker impersonate any user account without credentials.
- Researchers have since found critical flaws affecting tens of millions of devices.
- Investigators have caught cameras sending encrypted user and login data to servers in China even with cloud features switched off.
The state ownership
Hikvision's largest shareholder traces back to a state-owned defence-electronics group. For any government that depends on the hardware, that ownership turns an ordinary vendor relationship into a sovereignty exposure.
The worry, in short: footage captured anywhere could in principle be reached by a foreign state, and the technical record shows the doors have genuinely existed. That single thread runs through every restriction below.
A Map of the Restrictions, Country by Country
The measures are not identical. Some are outright sales bans, some restrict government procurement, and others screen out non-compliant hardware through certification. The direction of travel points one way.
United States - the template
Section 889 of the National Defense Authorization Act (NDAA) bars federal agencies, their contractors, and recipients of federal grants from buying or using covered surveillance equipment, with Hikvision and Dahua named among the brands. In 2022 the FCC banned new equipment authorisations for these companies, so newer products cannot legally be imported or sold. A 2024 appeals court ruling largely upheld that authority, and through 2025 the FCC pushed major retailers to pull millions of prohibited listings. "NDAA-compliant" is now standard language in American tenders.
United Kingdom and Australia - removing what was installed
- UK (2022): the government banned installation of these cameras at sensitive sites and advised departments to disconnect and remove existing units, citing manufacturers subject to the National Intelligence Law of the People's Republic of China.
- Australia (2023): a government inquiry counted close to 900 Chinese-made devices across roughly 250 agency sites, including defence and foreign-affairs buildings, and the federal government moved to strip them out.
Europe - fragmented but moving
There is no bloc-wide ban, yet the European Parliament voted to remove Hikvision equipment from its own premises, and several member states have issued warnings or restrictions of their own. For a region that polices data protection as hard as it does through GDPR, surveillance hardware that may ship footage abroad is an obvious next target.
India - the most market-wide move
India did not name and ban individual companies. It built a gate that untrusted products cannot get through, and Indian brands and integrators need to read it closely.
India's STQC Mandate: A Quiet Filter on Untrusted Cameras
Under Essential Requirements issued by the Ministry of Electronics and Information Technology (MeitY), every internet-connected CCTV camera sold in India must be tested and certified by STQC (Standardisation Testing and Quality Certification), a government body.
The testing targets exactly where imported hardware has a poor record:
- Firmware integrity
- Vulnerability exposure
- Data handling and where footage goes
The practical impact is large. Several foreign brands that dominate the Indian market, Hikvision and Dahua among them, had not secured STQC certification as of recent reporting. A regime that sounds like routine paperwork works, in reality, as a security filter on who can legally sell connected cameras in the world's most populous country. For brands and system integrators, that turns a geopolitical headline into an immediate sourcing decision: whatever you rebrand or install has to clear STQC, and the factory behind it has to prove it.
What the Restrictions Mean If You Buy, Sell, or Build
Set the politics aside and three working consequences remain.
- Market access is now a constraint. A non-compliant camera is no longer just a quality gamble. In a growing list of markets it cannot legally be sold or installed in the projects that matter most: government, defence, banking, energy, telecom, critical infrastructure. For a brand white-labelling imported hardware, the compliance obligation travels with the product, so the brand, not the original factory, carries the exposure.
- Data sovereignty is a buying criterion. Buyers now ask where footage lives, who hosts it, and whose laws govern it, not only what the camera can see. Cameras that phone home to overseas servers fail that test by design, and encrypted storage on domestic infrastructure is shifting from a nice-to-have to a tender line item.
- The supply chain is a risk surface. Long lead times from distant factories, opaque component sourcing, and no local accountability for patches or replacements all turn into liabilities the day a security advisory drops. Sharper buyers now ask who holds the certification licence, who owns the customer data, and who answers the phone when a vulnerability is published.
Where Trusted, Made-in-India Manufacturing Fits
This is the environment Adiance was built for. As a full-stack OEM and ODM manufacturer based in Ahmedabad, Adiance produces intelligent CCTV with fully domestic manufacturing, the kind of supply chain the new rules reward rather than penalise.
The compliance footing is concrete:
- BIS-ER registration (R-72003735) on hardware, plus an STQC-certified VMS, the exact approval India's regime now demands.
- CE, FCC, RoHS, and ONVIF standards met for export, so partners selling abroad start aligned to NDAA-style sourcing expectations.
Behind the certifications sits manufacturing discipline:
- An in-house SMT line running a nine-stage controlled workflow.
- A capacity of 12 lakh (1.2 million) units a year.
For brands that want their own label: the white-label model leaves the partner owning the brand and the customer data, with a clear path to domestic certification and lead times of 45 to 60 days from Ahmedabad.
None of this means a single manufacturer solves a geopolitical problem. The useful takeaway is narrower: the Chinese surveillance ban has rewritten what counts as a buyable camera, with certification, data residency, and supply-chain accountability now at the centre, and those criteria favour trusted, locally made alternatives.
Build on a Surveillance Supply Chain That Passes the New Rules
The market has shifted from "how cheap?" to "how trusted?" If you are a brand, integrator, or distributor that needs CCTV which clears certification, keeps data in-country, and carries no geopolitical baggage, Adiance can manufacture it under your label or ours.
Frequently Asked Questions
Why are Chinese surveillance cameras being banned around the world?
Governments point to national-security and data-privacy risks. China's National Intelligence Law can compel manufacturers to cooperate with the state, documented backdoors have affected millions of devices, and major vendors carry state-linked ownership. Together these raise the prospect that footage could be reached by a foreign government.
Are Hikvision and Dahua banned everywhere?
No. The rules vary by country. The US bars federal use and new equipment authorisations, the UK and Australia have removed them from government and sensitive sites, parts of Europe restrict them, and India is enforcing mandatory STQC certification that uncertified products cannot pass. Few countries impose a blanket consumer ban, but the restricted zone keeps widening.
What does NDAA-compliant mean for CCTV?
It means the equipment contains no components or services from manufacturers named under Section 889 of the US National Defense Authorization Act. The term is now common in US government and enterprise tenders and serves as shorthand for trusted sourcing in export markets.
What is STQC certification and why does it matter in India?
STQC is a Government of India certification that, under MeitY's Essential Requirements, every internet-connected CCTV camera sold in India must obtain. It tests security and quality parameters, and uncertified connected cameras face restriction from sale, which makes it decisive in Indian CCTV procurement.