BIS/STQC 2026 for Factory Cameras: What Owners Must Do

From 1 April 2026, every CCTV camera sold in India must carry both BIS registration (IS 13252 safety) and STQC/ER-01 security certification — the relaxation for older stock is withdrawn. For a plant owner it means one thing: buy only ER-01/STQC-certified models, and get the certificate number in writing before you pay.

If you are about to expand or replace cameras on your shop floor, the rules changed underneath you. Here is exactly what applies, by when, and what to check so your money doesn't land on hardware that is now illegal to sell.

What actually changed — and the dates that matter

Two separate government requirements now stack on every CCTV camera in India:

1. BIS safety registration (older rule). CCTV cameras and recorders sold in India must be registered with the Bureau of Indian Standards under the Compulsory Registration Scheme (CRS), tested to IS 13252 (Part 1):2010 / IEC 60950-1 for electrical and fire safety. This is the baseline "is the box safe" test.
2. STQC security testing (new layer). MeitY notified the Essential Requirements for Security of CCTV Cameras (ER-01) as an amendment to the Electronics and Information Technology Goods (Requirements for Compulsory Registration) Order, 2021. This adds a cybersecurity test done by STQC (Standardisation Testing and Quality Certification) labs under the IoT System Certification Scheme (IoTSCS).

The timeline, per MeitY and BIS documents:

• 9 April 2024 — the Essential Requirements for CCTV cameras were notified via MeitY gazette order S.O. 1652(E), amending the CRS Order, 2021 and giving industry a transition window.
• 9 April 2025 — end of the transition window: new CRS registrations for CCTV cameras require ER-01 security testing to be passed (BIS CRS CCTV implementation guidelines).
• 16 January 2026 — MeitY Office Memorandum withdraws the relaxation that had allowed sale of cameras made or imported before 9 April 2025 (MeitY Office Memoranda; corroborated by industry reporting).
• 1 April 2026 — no sale of any CCTV camera that does not conform to ER-01 is permitted.

In plain terms: as of April 2026, old inventory can no longer be legally sold to you, and a camera needs both stamps — BIS (safety) and STQC/ER-01 (security).

What ER-01 actually tests

ER-01 is a cybersecurity standard aimed mainly at network/IP cameras and recorders. STQC-approved labs test broadly across four areas:

• Hardware security — unique cryptographic keys and certificates per device; secure debug interfaces.
• Firmware/software — tamper detection, vulnerability testing, secure update process.
• Network security — encrypted data transmission and penetration testing against cyberattacks.
• Secure process conformance — encryption of traffic between cameras, recorders and viewing devices.

For a factory this is not paperwork trivia. A cheap uncertified IP camera on your network is a documented entry point — default passwords, open ports and unencrypted streams are how surveillance systems get hijacked. ER-01 is the government forcing that door shut.

The two certifications, side by side

Both are required now. A camera with only the old BIS safety mark, and no ER-01, is not compliant for sale after 1 April 2026.

What this means for buying — and the price question

Expect the certified market to look different, especially for imports.

• Chinese-chipset brands are largely out. Industry reporting through 2026 indicates most Hikvision and Dahua models built on Chinese-origin chipsets have not been certified, effectively removing them from legal sale; a few lines on non-Chinese chipsets have reportedly passed STQC. Verify any specific model's status on the STQC certified list yourself before ordering — do not assume.
• Certified brands have stepped up. The STQC IoTSCS certified list names makers including CP Plus (Aditya Infotech), Prama, Sparsh, Matrix (Matrix Comsec) and Honeywell (STQC IoTSCS certified product list); the number of certified brands and models is small and changing, so treat any brand list as a snapshot. One caveat worth knowing: the Prama name is tied to Hikvision's Indian joint venture, Prama Hikvision India, in which Hikvision holds the majority stake — so confirm the specific certificate holder and the chipset origin on the STQC portal rather than assuming full independence from Hikvision. Always confirm the specific SKU's certificate.
• Prices likely rose at the mid/high end. Industry estimates put the premium for certified cameras at roughly 10–20% at the mid-to-high end from compliance costs, with budget lines relatively stable (indicative — not an official figure). For a metal or auto-components plant re-camering a floor, treat it as a per-unit budget line, not a surprise.

For verticals with tighter audit exposure — pharma (GMP), food/FMCG (FSSAI), auto-components (customer/IATF audits) — buying uncertified cameras now is a double risk: illegal to sell and a finding waiting to happen in your next audit.

The five-minute buyer's checklist

Before you release a purchase order, ask the vendor for:

1. The BIS CRS registration number (R-xxxxxxx) for the exact model.
2. The STQC/ER-01 test certificate for that model — not a generic brand claim.
3. Confirmation the model is on the current STQC IoTSCS certified list (and check the R-number on the BIS CRS portal) — don't take a screenshot on trust.
4. That DVR/NVR and recorders are covered too, not just the cameras.
5. Written confirmation the stock is post-April-2025 compliant, not old inventory being cleared.

If a quote is unusually cheap right now, that is the most likely place non-compliant stock is being pushed.

After compliance: placing them right

Getting certified cameras is the legal floor, not the finish line — a compliant camera pointed at a blind wall still sees nothing useful. Once you know which certified models you're buying, the harder question is how many and where. This is where Mama fits: you record a short phone walkthrough of the floor, and it returns a camera placement plan — how many, ceiling vs wall, which zones and hazards — plus a plain-language read of the space, without waiting on a site survey. Compliance decides what you may buy; the walkthrough decides where it earns its keep.

FAQ

Do these rules apply to cameras already installed in my factory? The 1 April 2026 restriction targets sale of non-compliant cameras, not retroactive removal of installed ones. But for any replacement, expansion or new site, you must buy ER-01/STQC-certified models. Check the latest MeitY/BIS wording before assuming existing stock is grandfathered.

Is BIS registration enough, or do I also need STQC? Both. BIS CRS (IS 13252) covers electrical safety; STQC/ER-01 is the newer cybersecurity test. From 1 April 2026 a camera needs both to be legally sold in India.

Are Hikvision and Dahua banned in India? Not by name — the rule is that uncertified cameras can't be sold. Reporting in 2026 indicates most Hikvision/Dahua models on Chinese chipsets did not get STQC certification and so can't be sold, while some models on other chipsets reportedly passed. Note also that Hikvision operates in India through its joint venture, Prama Hikvision India, in which Hikvision holds the majority stake. Verify the specific model's certificate before buying.

How much more will compliant cameras cost? Industry estimates suggest roughly 10–20% more at the mid-to-high end from compliance costs, with budget cameras relatively stable (indicative, not an official figure). Treat it as a per-unit budget line rather than a fixed number, and confirm current pricing with your vendor.

Does ER-01 apply to DVRs and NVRs too, or only cameras? CCTV cameras, DVRs and NVRs all fall under the BIS CRS scope, and the ER-01 security requirements focus on network-connected cameras and recorders. Ask your vendor for certification covering the recorder as well as the cameras.