If you've been quoting on public sector or commercial tender work recently, there's a good chance you've seen NDAA compliance listed as a specification requirement — possibly without a full explanation of what it means or why it's there. And if you're still sourcing cameras from manufacturers on the banned list, the gap between where the market is heading and what you're currently installing is worth closing sooner rather than later.

This article explains what NDAA compliance actually means in a UK context, why the requirement is intensifying in 2026, and what it means practically for how you spec and source equipment on commercial and public sector jobs.

What NDAA compliance means — and why UK installers need to understand US legislation

NDAA stands for the National Defense Authorization Act — annual US federal legislation that sets the defence budget and procurement policy for the United States government. Section 889 of the 2019 NDAA is the relevant part for CCTV installers: it prohibits US federal agencies and their contractors from procuring or using video surveillance and telecommunications equipment from five named Chinese manufacturers.

Those five are: Hangzhou Hikvision Digital Technology, Dahua Technology, Huawei Technologies, ZTE Corporation, and Hytera Communications — along with any of their subsidiaries and affiliates.

For a camera or recorder to be considered NDAA compliant, it must not contain components, chipsets, or firmware from any of those entities. That's a broader requirement than simply checking the brand name on the front of the unit — a camera sold under a different brand that uses Hikvision or Dahua chipsets internally is not NDAA compliant, regardless of the label.

The reason UK installers need to understand US legislation is straightforward: the UK government and UK public sector bodies have adopted materially similar positions, and the UK market is increasingly requiring compliance that mirrors the NDAA standard even where it isn't technically mandated by UK law. Our existing post on NDAA compliant CCTV solutions covers the background in detail — it's a useful reference if you're new to this area.

The UK government's position — and where it stands in 2026

The UK government's position on Chinese-made surveillance cameras has hardened considerably since 2022. In November of that year, the Cabinet Office directed all government departments to stop installing surveillance cameras from manufacturers subject to China's National Intelligence Law on sensitive government sites — a direction that named Hikvision and Dahua cameras specifically.

The deadline for removing existing equipment from sensitive government sites was set for April 2025. As of early 2026, this transition is largely complete, with government departments reporting full or near-full compliance.

That removal programme has had direct consequences for the wider UK market. Government guidance has put pressure on local authorities and public sector buyers to rethink their CCTV systems. The scale of the legacy problem has also become clearer: Hikvision and Dahua cameras were used by 73% of local authorities, 35% of police forces, and 63% of schools in the UK. Replacing that volume of equipment takes time, and much of that replacement work is landing on the desks of UK CCTV installers right now.

While there is no UK law that mandates NDAA compliance for private organisations, several types of organisation should prioritise compliant equipment — and the trend is clearly moving towards broader adoption beyond central government.

Who is requiring NDAA compliance in 2026

The requirement is coming from several directions simultaneously, and understanding which applies to your customers helps you have a more informed conversation about why it matters.

Central government and sensitive sites. The directive is clear and effectively complete — non-compliant equipment should not be installed on government estate, and legacy equipment has largely been removed from sensitive sites. If you're working on any government-contracted installation, NDAA-compliant equipment is not optional.

Local authorities and public sector bodies. Local councils, NHS trusts, housing associations, and other public bodies are under increasing pressure from the National Protective Security Authority (NPSA) to take supply chain security seriously. While this doesn't yet apply to all public sector organisations, guidance from the NPSA makes it clear that public bodies are expected to take supply chain security, data handling, and cyber assurance seriously. In practice, many local authority CCTV tenders now include an explicit NDAA compliance requirement, and that number is increasing.

Private sector organisations with public sector or US-linked contracts. If your commercial customer supplies services to public sector organisations or to US federal contractors, their security equipment may fall within the scope of those contracts' compliance requirements. This is more common than most installers realise — facilities management companies, logistics operators, and professional services firms with public sector work may face downstream compliance pressure.

Risk-conscious commercial clients. Beyond formal requirements, NDAA compliance is increasingly being asked about by commercial customers who've read about the issue in the trade press or whose insurance broker has flagged it. The cyber security angle — that non-compliant cameras may have vulnerabilities or data transmission risks not present in compliant equipment — is landing with facility managers and IT teams in a way it wasn't two or three years ago.

The practical risk of ignoring it on tender work

If you're bidding on public sector CCTV work and your spec includes non-compliant equipment, you risk disqualification — not on price or technical grounds, but on compliance grounds. That's an increasingly expensive lesson to learn after you've invested time in a detailed proposal.

Our post on tender-ready CCTV proposals covers how to structure a competitive tender submission — and compliance with procurement requirements, including NDAA, is part of what separates a proposal that passes initial scrutiny from one that doesn't.

On replacement and upgrade jobs at existing sites, non-compliant equipment may also create problems at the handover stage if the end user's IT or security team runs a compliance check. This is now standard practice at many NHS trusts and larger local authorities, and it creates a difficult conversation if the cameras you've just installed fail it.

What NDAA compliance looks like in practice for installers

There are a few practical points worth being clear on when you're speccing NDAA-compliant systems.

Brand name isn't enough. Some cameras sold under lesser-known brand names use Hikvision or Dahua chipsets internally. Every piece inside the camera — from the video chip to the firmware — must be from allowed manufacturers. When speccing NDAA-compliant equipment, source from a supplier who can confirm the internal component supply chain, not just the product label.

Recorders matter as well as cameras. NDAA compliance applies to the full surveillance system, not just the cameras. NVRs using components from banned manufacturers are equally non-compliant. When you're sourcing NVRs wholesale, confirm that the recorder as well as the cameras meets the NDAA standard.

Document your compliance. On public sector jobs, being able to demonstrate NDAA compliance — with evidence from your supplier — is becoming a standard expectation. Keep a record of where your equipment comes from and what compliance documentation the manufacturer or supplier provides. This is part of what a trade account with a reputable network camera wholesaler should give you access to.

Understand the OEM question. Some NDAA-compliant branded products are manufactured under licence or using components that need careful scrutiny. When in doubt, ask your supplier directly — a good supplier should be able to provide clear answers about the supply chain for the products they stock.

The cybersecurity case — beyond just compliance

The compliance requirement is one driver, but the underlying reason for it is worth understanding and passing on to your customers.

NDAA-compliant cameras typically offer stronger cybersecurity protections, more reliable firmware updates, and reduced risk of unauthorised data access. For a customer running a networked IP CCTV system connected to their business network or the internet, these aren't abstract benefits — they're material to the security of their wider IT infrastructure.

The UK's National Cyber Security Centre has consistently flagged networked surveillance devices as a potential vulnerability in business networks, and the risk is real: cameras that don't receive regular firmware updates, or that have known vulnerabilities in their firmware, are potential entry points for attackers. This is directly relevant to our post on what's changing in CCTV specs and compliance — the direction of travel on both procurement requirements and cyber security expectations is the same.

The replacement opportunity for installers

For installers who are already sourcing NDAA-compliant equipment, the current environment represents a significant commercial opportunity. The volume of legacy non-compliant equipment across UK public sector sites — schools, NHS facilities, council buildings, housing associations — that still needs replacing is substantial.

If you're able to present a compliant alternative spec with clear documentation of the compliance basis, you're in a much stronger position than competitors who haven't thought about this. Our post on how to choose the best CCTV system for your business is worth sharing with customers who are navigating a compliance-driven replacement decision — it helps frame the decision around the right criteria rather than just replacing like-for-like.

And on the quality side, non-compliant equipment tends to cluster at the lower end of the specification range — which means a compliant replacement is often also a genuine upgrade in image quality, firmware support, and long-term reliability. Our post on how CCTV installers can avoid warranty issues — part 1 makes the point about how equipment quality directly affects your post-installation workload — that argument applies directly to compliance-driven replacement work too.

Sourcing NDAA-compliant equipment from FVS CCTV

FVS CCTV's FV-PRO range is designed with NDAA compliance in mind. As a trade supplier to installers across the UK, we're clear on the supply chain behind the products we stock — and we can support you with compliance documentation for tender submissions.

As an established cctv equipment wholesale supplier, we stock a full range of NDAA-compliant IP cameras, NVRs, and IP CCTV systems — along with all the cctv parts wholesaler accessories, cabling, and sundries you need to complete a job from one account.

FAQs

Is NDAA compliance legally required for UK commercial CCTV installations? 

Not for private sector installations as a matter of UK law. However, it is effectively required on central government sites, increasingly expected across the wider public sector, and beginning to appear as a formal requirement in commercial tenders where the end customer has public sector or US federal supply chain links.

How do I know if a camera is genuinely NDAA compliant? 

Ask your supplier for documentation confirming the supply chain for the specific product. The compliance requirement extends to internal components — chipsets, firmware, and sub-components — not just the brand name. A reputable supplier should be able to provide this.

Do NVRs also need to be NDAA compliant? 

Yes. NDAA Section 889 applies to video surveillance equipment as a whole — including recorders. Speccing compliant cameras with a non-compliant recorder doesn't make the system compliant.

Will NDAA compliance requirements spread to private sector clients? 

The direction of travel suggests yes, at least for organisations with public sector supply chains, cyber insurance requirements, or data security obligations. Speccing compliant equipment now avoids having to re-visit this conversation with the same client in twelve to eighteen months.

Does NDAA compliance affect the price of equipment significantly?

There is sometimes a price differential between compliant and non-compliant equipment, though this gap has narrowed considerably as the market has shifted. On a full system specification, the difference is rarely significant enough to be the deciding factor — particularly when the compliance requirement is non-negotiable on the job in question.

Build your next public sector or commercial spec on compliant equipment

If you're working on tender submissions or replacement projects where NDAA compliance is a requirement — or where you want to get ahead of it before it becomes one — FVS CCTV's trade team can help you spec and source the right equipment with confidence.

Browse our NDAA compliant CCTV range, explore our full IP CCTV product range, and apply for a trade account to access trade pricing across the full range. For specific questions about compliance documentation or product availability, call us on 0208 863 0666 or get in touch online.