On 17 March 2026, the National Cybersecurity Standardisation Technical Committee closes the consultation on a guideline for cybersecurity requirements for consumer-type connected cameras with cybersecurity identification. The guideline applies to manufacturers and developers of consumer connected cameras used by individuals and households. It outlines cybersecurity capability requirements across five areas: physical and hardware security, system and software security, network and communications security, data security and personal information protection, and security assurance, with the aim of supporting the implementation of China’s proposed cybersecurity labelling regime for such devices. The guideline sets out requirements including the use of strong passwords and authentication mechanisms, encryption and protection of critical security parameters, secure boot and firmware verification, minimisation of network services, vulnerability management and security updates, audit logging, and transparent personal information processing rules aligned with national information security standards. It also indicates that higher security levels may involve additional practices such as secure development lifecycle management, threat modelling, and third-party penetration testing.
Original source