India’s decision to prohibit internet-connected CCTV cameras and associated hardware from Chinese manufacturers, such as Hikvision, Dahua Technology, and TP-Link, will go into effect on April 1. This ban is part of an effort to enhance security standards for connected devices amid concerns about potential surveillance and hacking risks.
Under the new certification requirements mandated by the Standardisation Testing and Quality Certification (STQC) framework, all CCTV products must obtain approval before being sold in India. The aim is to prevent these devices from posing cybersecurity threats to users’ networks. The regulations demand that CCTV cameras do not have hardcoded credentials, hidden backdoors, ensure secure firmware and update mechanisms, use strong encryption for communications, and prevent tampering at both hardware and software levels.
The government’s move comes after concerns were raised about the presence of around one million Chinese-manufactured cameras in government facilities in India, potentially jeopardizing data security. Recent reports have highlighted hacking attempts targeting consumer-grade security cameras in the Middle East, emphasizing the risks associated with such devices.
India joins other countries like the United States, the United Kingdom, and Australia in imposing restrictions on Chinese surveillance equipment. The regulations also require manufacturers to adhere to stringent testing standards for devices supplied to the Indian government. These measures include tamper-proof enclosures, robust malware detection systems, encryption, and source code testing.
Local manufacturers are not affected by these rules, which aim to ensure the security and integrity of surveillance equipment sold in India. The government is expanding its oversight to cover all such devices to safeguard against potential cyber vulnerabilities and security challenges.