India tightens digital security norms; stricter rules for telecom, CCTV

India has tightened its digital security framework, mandating stricter compliance for telecom equipment, CCTV systems and data protection, amid heightened concerns over vulnerabilities in surveillance infrastructure and emerging espionage risks, according to a report by The Times of India.

The move comes against the backdrop of long-standing concerns over the widespread use of imported CCTV equipment, particularly from Chinese manufacturers—in critical and public surveillance networks. These concerns have intensified after security agencies recently identified Pakistan-linked espionage modules operating within India, raising fresh questions over the potential exploitation of unsecured surveillance systems.



Also Read: Why India holds the balance in a shifting global security triangle


Global precedents have also underscored the risks. Security experts have pointed to instances such as Israel’s reported targeting of Iranian leadership, where infiltration of urban surveillance networks, including traffic cameras, enabled real-time tracking of high-value targets, the report said.

Against this backdrop, the government has notified mandatory Essential Requirements (ERs) for CCTV systems in the Indian market. The rules require disclosure of the origin of critical hardware components such as system-on-chip (SoC), testing against vulnerabilities that allow unauthorised remote access, and certification through accredited labs. So far, 507 CCTV models have been certified under these norms.


Also Read: ULFA-I alliance threatens Assam elections: Security think tank warns of deadly attacks

Government departments have been barred from procuring CCTV equipment that does not meet these standards, with ministries advised to secure existing video surveillance networks.

At a broader level, the legal backbone has been strengthened through the Telecommunication Act, 2023 and the Digital Personal Data Protection Act, 2022. The earlier National Security Directive on Trusted Sources (2021) mandates procurement of telecom equipment only from approved vendors, underscoring the growing importance of securing interconnected digital infrastructure.

With inputs from TOI