What Does "NDAA-Compliant" Actually Mean?
Section 889 of the 2019 National Defense Authorization Act (NDAA) prohibits US federal agencies from buying or using video surveillance and telecom equipment from five Chinese manufacturers deemed national security risks: Hikvision, Dahua, Hytera, Huawei, and ZTE — plus their subsidiaries and affiliates. A camera is "NDAA-compliant" if it contains no equipment or components from those companies.
That's the whole definition. There's no certification body, no sticker program — just a covered list and what's actually inside the hardware.
If you don't have a government contract, you might assume none of this applies to you. Legally, that's true: no law requires a private business to buy NDAA-compliant cameras. But over the past few years the covered list has stopped being a government procurement rule and started functioning as the de facto quality line in the commercial camera market. Here's why it's worth caring about even if you never touch federal work.
Why Would a Private Business Care?
1. These are network devices with documented security problems
A security camera is a computer on your network — it has a processor, an operating system, and firmware that needs patching. The covered-list manufacturers landed on that list because of security concerns, and their products have a track record of documented vulnerabilities. An unpatched camera isn't just a camera problem: it's a foothold on the same network that runs your point of sale, your files, and your email. Buying cameras from manufacturers under active US government restriction, whose future firmware support is uncertain, is a bet against your own network.
2. The parts supply is being cut off
In June 2026 the FCC extended its import ban to cover even older, previously grandfathered models from these manufacturers. Nothing shuts off — but replacement units, spare parts, and matching hardware stop flowing into the country. When a covered camera fails in year three, the matching replacement may simply not be available. We covered the details in our post on what the import ban means for Nashville businesses.
3. Insurance and partners are starting to ask
Cyber insurance questionnaires increasingly ask what's on your network. Larger companies push security requirements down to their vendors and tenants. Landlords, franchisors, and enterprise customers each have their own version of the question. "Banned covered-list surveillance equipment" is not the answer you want to write on any of those forms — and a documented, compliant system is an easy answer to give.
4. It future-proofs the purchase
Every regulatory step since 2019 has moved one direction: federal ban, then no new model authorizations, then a full import ban. Camera systems last 7-10 years. Installing covered gear today means betting that trend reverses; installing compliant gear costs about the same and removes the question entirely.
The Rebranding Trap: Your "Off-Brand" Camera Might Be Covered Gear
Here's the part that surprises building owners: most covered cameras in the field don't say Hikvision or Dahua anywhere on them. Both companies are enormous OEMs — they build cameras that get relabeled and sold under dozens of other brand names. Budget camera lines sold online and in big-box stores have historically been full of relabeled covered hardware. The logo on the housing proves very little.
Three ways to check what you actually own:
- Check the FCC ID. Every camera and recorder has an FCC ID on its label. The first characters identify the actual manufacturer, and the full ID can be looked up in the FCC's public database.
- Log into the recorder. The System Information page in your NVR or camera web interface usually lists the real manufacturer and model, even on rebranded units.
- Pull the install invoice. Cross-reference the model numbers. If your installer can't tell you who actually made your cameras, that answer tells you something too.
If you'd rather not crawl through admin pages, we inventory the make and model of every device as part of a free on-site assessment — about an hour for a typical small building.
Need help with this?
Call (629) 280-2800 or request a free assessment. We respond within 24 hours.
What Do NDAA-Compliant Cameras Cost?
Roughly the same as any professionally installed commercial camera system — because compliant brands simply are the professional commercial market. Installed cost in Middle Tennessee runs $300 to $800 per camera, with a complete 8-camera commercial system typically landing between $4,000 and $7,000.
Covered-list gear is cheaper at the register, and that's precisely how it ended up in so many buildings. But the gap narrows fast once you price a replacement swap: in most rip-and-replace projects we reuse the existing Cat6 cabling and mounting points, pull the covered units, and hang compliant cameras in their place — which puts swaps at the low end of the per-camera range. The expensive half of a camera install is the infrastructure, and yours already exists.
The Compliant Brands We Install
Every camera platform ICTAlly deploys is outside the covered list:
- Avigilon — owned by Chicago-based Motorola Solutions; strong analytics and enterprise video management.
- Axis Communications — the Swedish manufacturer that essentially invented the IP camera; the reliability benchmark.
- Hanwha Vision — South Korean; excellent image quality per dollar in the commercial mid-range.
- Vivotek — Taiwanese; solid value line we install and service across Middle Tennessee.
On the rest of the network, PDK access control is built by a Utah company and Ubiquiti's UniFi gear is US-headquartered. Every project ships with a documented make-and-model inventory, so whoever asks — insurer, partner, or your own IT — gets the answer in writing.
Frequently Asked Questions
Is a private business legally required to use NDAA-compliant cameras?
No. Section 889 binds federal agencies and federal contractors. A private business with no government work can legally buy and run covered equipment. The case for compliance is practical — network security, parts availability, insurance questions, and resale value — not legal.
My covered cameras work fine. Do I have to replace them now?
No, and don't let anyone panic you into it. There's no kill switch and no removal mandate. The smart play is to find out exactly what you own, then plan a phased swap on your schedule — high-priority positions first, interior cameras by attrition — instead of doing it as an emergency when a unit dies and no replacement exists.
Are NDAA-compliant cameras more expensive?
Somewhat, at the hardware level — covered-list gear was priced aggressively, and compliant commercial cameras carry a normal market price. Installed, the difference shrinks: infrastructure and labor dominate project cost, and those are identical either way. Swap projects that reuse existing cabling land at the low end of the $300-$800 per-camera range.
Is NDAA compliance the same thing as the FCC import ban?
They're related but separate. The NDAA (Congress, 2019) bans covered equipment from federal use. The FCC actions (2022-2026) stopped new authorizations and then banned imports of the same manufacturers' gear. Same five companies, two different levers — and both point the same direction.
Does my NVR matter, or just the cameras?
The whole system matters. Recorders, and even cameras that merely contain covered-list components, count. This is why a proper check inventories every device — camera, NVR, and network hardware — rather than just reading logos off the wall.
Find Out What You Own — In Writing
One hour on site: we inventory every camera and recorder, tell you plainly whether any of it is covered equipment, and price a phased swap if it is. If your system comes back clean, you get that documented too. Request a free assessment or call (629) 280-2800. ICTAlly installs NDAA-compliant camera systems across Nashville and Middle Tennessee.