EXTENDMAX - In the era of rapid digital technology development, surveillance cameras have become an indispensable tool for ensuring security, management, and monitoring across various fields. However, this development also presents information security risks, as millions of surveillance cameras become targets of cyberattacks, leading to the leakage of sensitive data and violations of privacy. Given this reality, the issuance of technical regulations on information security for surveillance cameras is not only necessary but also urgent, aiming to protect national, personal, and organizational information systems from increasingly complex cybersecurity threats. On August 23, 2024, the Ministry of Information and Communications issued the National Technical Regulation QCVN 135:2024/BTTTT on basic information security requirements for surveillance cameras using Internet Protocol, seeking public opinion. This regulation is expected to take effect on January 1, 2026.
What is Internet Protocol Camera
Surveillance cameras using Internet Protocol, also known as IP Cameras, are a type of digital camera capable of sending and receiving data over the Internet. Unlike traditional analog cameras, IP cameras do not require a separate recording device but can operate independently, transmitting live footage directly to network-connected devices such as phones, computers, or storage servers.
>>>Learn more : Market access requirement for cameras
Why need QCVN 135:2024/BTTTT
Forecasts suggest that by 2025, there will be over 75 billion IoT devices connected to the Internet globally, with 1 billion of those being surveillance cameras. According to the General Department of Customs, Vietnam has imported and deployed more than 16 million surveillance cameras over the past five years. It is projected that by 2025, this number will exceed 20 million, roughly equivalent to one-fifth of Vietnam's population. On average, Vietnam imports 3.2 million surveillance cameras and IP cameras each year, under the code 8525.80, comprising more than 163 different product types. Of these, 96.3% are imported from China, 0.6% from South Korea, and 3.1% from other countries.
Surveillance cameras are attractive targets for hackers, posing numerous risks of exploitation and intrusion, which can lead to unauthorized control. The results of such attacks may include the illicit collection of users' personal data, used for fraudulent activities, causing damage to both personal and organizational assets and reputations. Additionally, compromised cameras can be exploited for cyberattacks, spreading malware across information systems.
According to the monitoring system of the Ministry of Information and Communications, there are currently more than 800,000 surveillance cameras in Vietnam publicly sharing images on the Internet, of which 360,000 cameras (45%) have vulnerabilities that can be exploited and taken over. On social media, many groups openly trade leaked images and videos from surveillance cameras, with prices ranging from 200,000 to 1 million VND. In 2021, an average of 1 million IP addresses from Vietnam were involved in botnet networks each month, with 48,690 of those directly related to malware from surveillance cameras (5%).
Moreover, another risk arises from the fact that most information systems utilizing surveillance cameras in Vietnam have not fully implemented the network information security measures mandated by Decree 85/2016/ND-CP. Approximately 90% of these systems have not undergone cybersecurity assessments before operation, nor have they undergone regular annual security checks.
Application scope of QCVN 135:2024/BTTTT
QCVN 135:2024/BTTTT is mandatory for surveillance cameras with HS codes listed in Annex C as follows:
Appendix C
(Regulates)
HS code of internet protocol surveilance cameras
| TT | Name of goods and product according to QCVN | HS code | Description of goods and products |
| 1 | Internet protocol surveilance cameras | 8525.60.00 8525.81.10 8525.81.90 8525.82.10 8525.82.90 8525.83.10 8525.83.90 8525.89.10 8525.89.90 | Digital cameras, capable of connecting via Internet Protocol, perform part or all of the surveillance and recording functions. |
Taking effect date of QCVN 135:2024/BTTTT
The Circular issuing QCVN 135:2024/BTTTT is expected to take effect from January 1, 2026. Accordingly, surveillance cameras using Internet Protocol (IP Cameras) will be required to undergo testing and certification of conformity to QCVN 135:2024/BTTTT from January 1, 2026.
View the full draft and contribute feedback for QCVN 135:2024/BTTTT here: https://mic.gov.vn/van-ban-phap-luat/du-thao/2205.htm
