Last updated:
New federal regulations for video surveillance set two compliance deadlines in 2026. Since July 16, 2026, the FCC has barred the import and marketing of previously approved equipment on its Covered List, including Hikvision and Dahua cameras used for public safety, government facilities and national security purposes. On October 13, 2026, the FCC’s definition of critical infrastructure took effect, extending the ban to equipment used to watch critical infrastructure. Cameras already bought can still be used, and privacy rules for business cameras still come mainly from state law and the federal Wiretap Act.
Key Takeaways
- The FCC’s import and marketing ban on previously approved covered equipment took effect July 16, 2026; it doesn’t stop businesses from using cameras they already own.
- From October 13, 2026, the ban also applies to Hikvision, Dahua and Hytera equipment used for physical security surveillance of critical infrastructure.
- “NDAA compliant” means free of the equipment named in Section 889 of the 2019 defense act, which matters most to federal agencies, federal contractors and federal grant recipients.
- Replacement parts for covered cameras aren’t exempt, so plan replacements before devices fail.
- Federal law allows audio recording only with one party’s consent, and some states are stricter, so many businesses switch camera audio off.
- No federal rule sets a retention period for private business footage; a written policy on retention and access fills that gap.
What Changed for Business Security Cameras in 2026
New federal regulations for video surveillance brought two compliance deadlines in 2026. On July 16, the FCC’s ban on importing and marketing previously approved equipment from companies on its Covered List took effect. On October 13, that ban reached equipment used to watch critical infrastructure.
Neither rule makes the cameras on your walls illegal to use. What they change is what you can buy, replace and add later. Whether your cameras are recorded on site or watched through live video monitoring, the hardware question is the same, and the privacy rules on where cameras point and what they record haven’t changed.
If you manage several sites and want a second look at your camera setup, Contact for inquiry and we’ll walk through it with you.
2026 Video Surveillance Compliance Deadlines at a Glance
The federal deadlines that matter to business camera systems come from two places: Section 889 of the 2019 defense act and the FCC’s Covered List.
| Date | What took effect | Who it affects |
|---|---|---|
| August 13, 2019 | Federal agencies may not buy covered telecom or video surveillance equipment (Section 889(a)(1)(A)) | Federal agencies |
| August 13, 2020 | Agencies may not contract with companies that use covered equipment in their systems (Section 889(a)(1)(B)) | Federal contractors |
| November 2022 | The FCC stops approving new covered devices | Manufacturers and sellers |
| July 16, 2026 | Import and marketing ban on previously approved covered equipment | Sellers, integrators and anyone buying replacements |
| October 13, 2026 | The FCC’s critical infrastructure definition takes effect, so the ban covers equipment used to watch critical infrastructure | Operators of critical infrastructure sites |
| Pending | A July 17, 2026 FCC proposal to apply the same ban to equipment added to the list in 2025 | Watch for a final order |
The dates come from FAR 52.204-25, the FCC’s July 2026 Federal Register notice and its September 2026 final rule.
Does the FCC Ban Affect Cameras You Already Own?
No. The FCC’s June 26, 2026 notice (DA 26-635) says the prohibition “will not affect the continued use or operation of already-purchased” equipment. What changes is supply. The FCC refused to exempt spare parts and replacements, so a failed covered camera or recorder may have no like-for-like replacement from a U.S. seller.
The scope depends on the manufacturer. Huawei and ZTE equipment is covered for every use. Hikvision, Dahua and Hytera equipment is covered when used for public safety, security of government facilities, physical security surveillance of critical infrastructure or other national security purposes.
Critical infrastructure has a narrower meaning than many people assume. The FCC’s 2026 rule covers systems and assets in the 16 critical infrastructure sectors, such as healthcare, financial services and commercial facilities, only when they’re used to provide one of 55 National Critical Functions. Equipment merely connected to those sectors isn’t included. An ordinary office lobby camera is unlikely to qualify; cameras guarding a hospital’s power plant or a water facility may.
Which Businesses Need NDAA Compliant Cameras?
NDAA compliant cameras are cameras and recorders free of the equipment named in Section 889: Huawei, ZTE, Hikvision, Dahua and Hytera, plus their subsidiaries and affiliates. Three groups need them most:
- Federal agencies, barred from buying covered equipment since 2019.
- Federal contractors. Since August 13, 2020, agencies can’t contract with a company that uses covered equipment as a substantial or essential part of any system.
- Federal grant and loan recipients. Under 2 CFR 200.216, they can’t spend those funds on covered equipment.
If your company holds a federal contract or spends federal money on security, check every camera and recorder before your next renewal. For other businesses, NDAA compliant security camera systems are a practical choice rather than a legal duty: they avoid the replacement problem the FCC ban creates.
Security Camera Privacy Laws That Still Apply
No single federal law governs where a business may point its security cameras. Privacy laws regarding security cameras come mainly from state law, with federal law stepping in for audio.
Audio Recording
The federal Wiretap Act allows recording a conversation only when the recorder is a party to it or one party consents (18 U.S.C. § 2511(2)(d)). A lobby camera that picks up two visitors talking is neither, and some states require every party’s consent. Many businesses switch camera audio off unless they’ve checked their state’s rules.
Private Spaces and Camera Angles
Keep cameras out of restrooms, locker rooms and changing areas, and angle them away from neighboring windows and apartments. Good camera coverage watches entrances, exits and blind spots without looking into places where people expect privacy. Post clear signs at monitored entrances; check your state’s rules on wording.
Retention and Who Controls the Footage
No federal rule sets a general retention period for private business footage, so a written security camera retention policy does the job. It should say how long footage is kept, who may view it, how police and court requests are handled and when footage is held for a claim or lawsuit. Put in writing who controls the footage: your business, your landlord or a monitoring provider.
Facial Recognition
Some states regulate face scans as biometric data and require notice or consent. Before turning on face matching, check your state’s rules and get legal advice.
A Five-Step Video Surveillance Compliance Check
- List your hardware. Record the brand and model of every camera, recorder and video management system, then compare them with the FCC’s Covered List.
- Check your federal ties. Federal contracts, grants and loans bring Section 889 into play.
- Plan replacements. Budget to swap covered devices before they fail; when you replace commercial security cameras, ask the seller for the FCC ID and NDAA status in writing.
- Review audio and angles. Turn off audio you don’t have consent for, and re-aim any camera that looks into a private space.
- Write the policy. Retention period, viewing access and how requests for footage are handled.
This guide is general information, not legal advice. For your situation, especially near critical infrastructure, speak with a lawyer.
Keep Your Cameras Watched With Monitex Security
Compliance decides which cameras you can buy and where they can point. It doesn’t decide who is watching them. With Monitex Security:
- Trained monitoring operators watch your cameras live, 24/7.
- Operators warn intruders through on-site speakers and contact police when needed.
- You receive incident reports with timestamped footage.
- We can connect your existing cameras or set up new ones.
Contact for inquiry and we’ll walk through your cameras and sites with you.