NDAA Compliance for Surveillance Cameras: What Every Security Professional Needs to Know
Published Mon Feb 09 2026
Adiance Technologies
Section 889 of the NDAA prohibits US federal agencies from using surveillance equipment from Hikvision, Dahua, and other Chinese manufacturers. This guide explains what NDAA compliance means, who it affects, and how to ensure your security infrastructure meets these requirements.
What Is NDAA Section 889?
Section 889 of the John S. McCain National Defense Authorization Act contains two key prohibitions. Part A (effective August 2019) prohibits US federal agencies from procuring equipment using covered telecommunications equipment. Part B (effective August 2020) prohibits agencies from contracting with any entity that uses covered equipment, regardless of whether it is used in the contract performance.
Which Companies Are Banned Under NDAA?
The NDAA specifically names five Chinese companies: Huawei Technologies and ZTE Corporation (telecommunications), Hytera Communications (radio), and Hikvision and Dahua Technology (video surveillance). The ban extends to all subsidiaries, affiliates, and white-label products — simply rebranding a camera from a banned manufacturer does not make it NDAA-compliant.
Who Does NDAA Compliance Affect?
While the law directly applies to US federal agencies, its impact is far broader. US government contractors cannot use banned equipment anywhere in their organization. Many state and local governments have adopted similar restrictions. Allied nations including the UK and Australia have implemented similar bans. Enterprise buyers increasingly require NDAA compliance as a cybersecurity best practice.
Cybersecurity Vulnerabilities in Banned Equipment
In 2021, a vulnerability (CVE-2021-36260) in Hikvision cameras was rated 9.8/10 on the CVSS severity scale, allowing remote code execution. CISA issued an advisory warning of active exploitation. Chinese national security laws require companies to cooperate with intelligence work, creating fundamental conflicts for organizations protecting sensitive video data.
What Makes a Surveillance Camera NDAA-Compliant?
A truly NDAA-compliant camera must use non-Chinese SoC (no HiSilicon — use Ambarella, Novatek, or Qualcomm), have no banned company involvement in design or manufacturing, maintain a transparent supply chain with full component traceability, and use independently developed firmware not derived from code of banned manufacturers.
How to Verify NDAA Compliance
Verification requires due diligence: check the SoC chipset model (red flag: HiSilicon Hi35xx), request a formal NDAA compliance letter, verify the MAC address OUI prefix, analyze firmware strings for references to banned companies, and request a complete Bill of Materials showing component origins. Beware the white-label trap — some distributors rebrand Chinese cameras and sell them as compliant.
The Indian Manufacturing Advantage for NDAA Compliance
India has emerged as a leading source of NDAA-compliant surveillance equipment. Indian manufacturers offer non-Chinese SoC ecosystems, cost competitiveness (20-35% lower than Korean or Japanese alternatives), deep engineering expertise, certification support for global markets, and full white-label OEM/ODM flexibility.
How Adiance Ensures NDAA Compliance
Adiance Technologies manufactures a complete range of NDAA-compliant products: cameras with Ambarella, Novatek, or Qualcomm chipsets, end-to-end in-house manufacturing, full BOM documentation with component origin certificates, independently developed firmware, formal NDAA compliance declaration letters, and a complete product range including S-Series Edge AI cameras, Eco-Series, NVRs, and STQC-certified Cloud VMS.
Need NDAA-compliant surveillance cameras?
Explore NDAA-Compliant ProductsRelated Articles & Resources
FAQs
What does NDAA-compliant mean for CCTV cameras?
NDAA-compliant means the camera is not manufactured by, or contain components from, companies banned under Section 889 — specifically Hikvision, Dahua, Huawei, ZTE, and Hytera. The camera must use non-Chinese SoC chipsets and have a transparent, verifiable supply chain.
Are Hikvision cameras banned in the US?
Hikvision cameras are banned from use in US federal government installations under NDAA Section 889. The FCC also revoked authorization for new Hikvision equipment in 2022. While private use is not banned, many enterprises and state governments have adopted similar restrictions.
How can I tell if a camera is truly NDAA-compliant?
Check the SoC chipset (should not be HiSilicon), verify the MAC address prefix against IEEE OUI database, request a formal NDAA compliance letter, and ask for a complete Bill of Materials showing component origins.
Is Adiance NDAA-compliant?
Yes. All Adiance cameras are available with non-Chinese SoC options (Ambarella, Novatek, Qualcomm), manufactured entirely in-house, and come with full NDAA compliance documentation including component traceability certificates.
Table of Contents
What Is NDAA Section 889?
Which Companies Are Banned Under NDAA?
Who Does NDAA Compliance Affect?
Cybersecurity Vulnerabilities in Banned Equipment
What Makes a Surveillance Camera NDAA-Compliant?
How to Verify NDAA Compliance
The Indian Manufacturing Advantage for NDAA Compliance
How Adiance Ensures NDAA Compliance
Related Articles & Resources