What Does "NDAA-Compliant" Actually Mean?
Section 889 of the 2019 National Defense Authorization Act (NDAA) prohibits US federal agencies from buying or using video surveillance and telecom equipment from five Chinese manufacturers deemed national security risks: Hikvision, Dahua, Hytera, Huawei, and ZTE, plus their subsidiaries and affiliates. A camera is "NDAA-compliant" if it contains no equipment or components from those companies.
That's the whole definition. There's no certification body, no sticker program, just a covered list and what's actually inside the hardware.
If you don't have a government contract, you might assume none of this applies to you. Legally, that's true: no law requires a private business to buy NDAA-compliant cameras. But over the past few years the covered list has stopped being a government procurement rule and started functioning as the de facto quality line in the commercial camera market. Here's why it's worth caring about even if you never touch federal work.
Why Would a Private Business Care?
1. These are network devices with documented security problems
A security camera is a computer on your network: it has a processor, an operating system, and firmware that needs patching. The covered-list manufacturers landed on that list because of security concerns, and their products have a track record of documented vulnerabilities. An unpatched camera isn't just a camera problem: it's a foothold on the same network that runs your point of sale, your files, and your email. Buying cameras from manufacturers under active US government restriction, whose future firmware support is uncertain, is a bet against your own network.
2. The parts supply is aging out
On June 26, 2026 the FCC prohibited importing or marketing older, previously authorized Hikvision, Dahua, and Hytera models for public-safety, government-facility, and other national-security uses, effective July 16, 2026, and no new model from these manufacturers has been authorized since November 2022. Nothing shuts off and nothing requires removal, but the supply of matching replacement units and spare parts is aging out. When a covered camera fails in year three, the matching replacement may simply not be available. We keep the dated status, with links to the FCC documents, in our post on what the import ban means for Nashville businesses.
3. Insurance and partners are starting to ask
Cyber insurance questionnaires increasingly ask what's on your network. Larger companies push security requirements down to their vendors and tenants. Landlords, franchisors, and enterprise customers each have their own version of the question. "Banned covered-list surveillance equipment" is not the answer you want to write on any of those forms, and a documented, compliant system is an easy answer to give.
4. It future-proofs the purchase
Every regulatory step since 2019 has moved one direction: federal ban, then no new model authorizations, then a July 2026 prohibition on importing or marketing even the older, previously authorized models for public-safety, government-facility, and national-security uses. Camera systems last 7-10 years. Installing covered gear today means betting that trend reverses; installing compliant gear costs about the same and removes the question entirely.
The Rebranding Trap: Your "Off-Brand" Camera Might Be Covered Gear
Here's the part that surprises building owners: Hikvision and Dahua are two of the largest camera OEMs on earth, and a huge share of their output has never worn their own logos. Budget camera lines sold online and in big-box stores have long been relabeled covered hardware underneath: same board, same firmware lineage, different sticker. The name on the housing tells you almost nothing about who built the device.
Finding out what's actually inside takes a few minutes per device if you know where to look. The FCC ID printed on every camera and recorder label resolves to the true manufacturer in the FCC's public database. The System Information page in the recorder's web interface usually names the real maker even on relabeled units. And the model numbers on your original install invoice can be cross-referenced; an installer who can't tell you who manufactured your cameras has answered a different question.
If you'd rather skip the detective work, our free on-site assessment includes a device-by-device inventory. And if the inventory does turn up covered gear, the follow-up question (what the FCC's July 2026 order does to your replacement supply) is covered in our guide to planning a swap-out under the FCC import ban.
Need help with this?
Call (629) 280-2800 or request a free assessment. We respond within 24 hours.
What Do NDAA-Compliant Cameras Cost?
Roughly the same as any professionally installed commercial camera system, because compliant brands simply are the professional commercial market. Installed cost in Middle Tennessee runs $300 to $800 per camera, with a complete 8-camera commercial system typically landing between $4,000 and $7,000.
Covered-list gear is cheaper at the register, and that's precisely how it ended up in so many buildings. But the gap narrows fast once you price a replacement swap: in most rip-and-replace projects we reuse the existing Cat6 cabling and mounting points, pull the covered units, and hang compliant cameras in their place, which puts swaps at the low end of the per-camera range. The expensive half of a camera install is the infrastructure, and yours already exists. For the brand-by-brand mapping and swap pricing by system size, see our full NDAA replacement list and cost guide.
The Compliant Brands We Install
Every camera platform ICTAlly deploys is outside the covered list:
- Avigilon: owned by Chicago-based Motorola Solutions; strong analytics and enterprise video management.
- Axis Communications: the Swedish manufacturer that essentially invented the IP camera; the reliability benchmark.
- Hanwha Vision: South Korean; excellent image quality per dollar in the commercial mid-range.
- Vivotek: Taiwanese; solid value line we install and service across Middle Tennessee.
On the rest of the network, PDK access control is built by a Utah company and Ubiquiti's UniFi gear is US-headquartered. Every project ships with a documented make-and-model inventory, so whoever asks (insurer, partner, or your own IT) gets the answer in writing.
Frequently Asked Questions
Is a private business legally required to use NDAA-compliant cameras?
No. Section 889 binds federal agencies and federal contractors. A private business with no government work can legally buy and run covered equipment. The case for compliance is practical (network security, parts availability, insurance questions, and resale value), not legal.
My covered cameras work fine. Do I have to replace them now?
No, and don't let anyone panic you into it. There's no kill switch and no removal mandate. The smart play is to find out exactly what you own, then plan a phased swap on your schedule (high-priority positions first, interior cameras by attrition) instead of doing it as an emergency when a unit dies and no replacement exists.
Are NDAA-compliant cameras more expensive?
Somewhat, at the hardware level: covered-list gear was priced aggressively, and compliant commercial cameras carry a normal market price. Installed, the difference shrinks: infrastructure and labor dominate project cost, and those are identical either way. Swap projects that reuse existing cabling land at the low end of the $300–$800 per-camera range.
Is NDAA compliance the same thing as the FCC import ban?
They're related but separate. The NDAA (Congress, 2019) bans covered equipment from federal use. The FCC actions (2022-2026) stopped new authorizations and then, in July 2026, prohibited importing or marketing the same manufacturers' older models for public-safety, government-facility, and national-security uses. Same five companies, two different levers, and both point the same direction.
Does my NVR matter, or just the cameras?
The whole system matters. Recorders, and even cameras that merely contain covered-list components, count. This is why a proper check inventories every device (camera, NVR, and network hardware) rather than just reading logos off the wall.
Find Out What You Own, In Writing
NDAA compliance starts with an inventory, not a purchase order. We'll document the actual manufacturer of every camera and recorder in your building and give you the covered-or-clean verdict in writing, with a phased swap plan and pricing if something needs to go, or a documented clean bill you can hand an insurer or partner if nothing does. Request a free assessment or call (629) 280-2800. ICTAlly installs NDAA-compliant camera systems across Nashville and Middle Tennessee.