Hikvision & Dahua Restrictions: Cloud VMS Options for Existing Systems | iFovea

Business owner reviewing Hikvision Dahua camera restriction migration plan with cloud VMS options

If you’ve searched “are Hikvision cameras banned” or “are Dahua cameras banned,” you’ve probably found headlines that make it sound like everything is illegal and every camera needs to come down immediately. The reality is more specific — and the right action for your organization depends heavily on who you are, what you do, and how your surveillance system was funded.

This page explains what the actual restrictions are, what they mean for different categories of organizations, why many businesses still have these systems installed, and what practical options exist for organizations evaluating their next step. iFovea has a stake in this conversation, so we’ll be clear about what we can and can’t help with.

What Actually Happened With Hikvision and Dahua Restrictions

The restrictions on Hikvision and Dahua in the United States developed across multiple regulatory actions over several years. Here’s the factual timeline:

NDAA Section 889 (2019)

The National Defense Authorization Act for Fiscal Year 2019 included Section 889, which prohibits federal agencies from purchasing video surveillance equipment manufactured by Hikvision, Dahua, Hytera, Huawei, or ZTE. A subsequent rule under Part B extended this to cover the use of such equipment by federal contractors — meaning any company doing business with the federal government must conduct a “reasonable inquiry” to confirm they are not using these products. FAR 52.204-25 implements these requirements.

FCC Covered List and Secure Equipment Act (2022)

In November 2022, the FCC stopped granting equipment authorizations for new Hikvision, Dahua, Hytera, Huawei, and ZTE products in the United States under the Secure Equipment Act of 2021. This meant no new models from these manufacturers could legally enter the U.S. market. Products already authorized could still be sold while supplies lasted — creating a gray market period.

FCC October 2025 Action

On October 28, 2025, the FCC voted unanimously (3-0) to adopt a Second Report and Order establishing a process to revoke previously granted authorizations for covered equipment. The FCC also launched “Operation Clean Carts,” working with major U.S. online retailers to remove millions of listings for unauthorized or banned Chinese electronics, including previously authorized Hikvision and Dahua products. New equipment acquisition through compliant authorized channels has become effectively impossible for these brands.

The Critical Distinction: Who Is Affected and How

The restrictions described above do not apply equally to every organization. Understanding your category is essential before taking action:

Organization Type Restriction Level Recommended Action
Federal agencies Cannot purchase or use covered equipment Full compliance review; replacement likely required
Federal contractors (Part B) Cannot use covered equipment in operations while holding federal contracts Legal/compliance review required; “reasonable inquiry” certification needed
Grant-funded organizations (schools, universities, municipalities, nonprofits receiving federal funds) May be prohibited from purchasing or using covered equipment with federal funds Review grant conditions; legal review strongly recommended
Critical infrastructure (utilities, telecom, transportation, financial) Sector-specific guidelines may apply; evolving regulatory environment Sector-specific compliance review recommended
Private commercial businesses (no federal contracts or federal funding) No current federal mandate to remove existing lawfully installed equipment Risk-based assessment; practical migration planning
Private commercial businesses considering new purchases Cannot easily purchase new Hikvision/Dahua through authorized channels Transition to NDAA-compliant or cloud-compatible brands
Important: iFovea does not provide legal or compliance advice. Federal contractors, grant-funded organizations, regulated entities, and any organization uncertain about their compliance obligations should consult qualified legal counsel before making decisions about existing surveillance equipment.

Why Many Businesses Still Have These Systems Installed

The answer is straightforward: Hikvision and Dahua captured an estimated 40%+ of the U.S. commercial IP camera market through the 2010s. Most U.S. businesses that installed commercial IP camera systems between 2010 and 2020 have at least some Hikvision or Dahua equipment — often with no prior knowledge of the regulatory issues that would emerge years after installation.

Private commercial businesses operating these systems for non-federal purposes are not in violation of any current law by having them installed. The equipment was legal to purchase at the time, and no federal statute currently mandates removal from private commercial facilities. The restrictions are primarily prospective (limiting new purchases) and focused on federal procurement and contracting relationships.

The Practical Pressures Pushing Migration

Even for private businesses not legally required to remove existing equipment, several practical pressures are accelerating migration decisions:

  • No new equipment or parts available. When a Hikvision camera fails, finding a direct replacement through authorized, compliant channels has become extremely difficult. The gray market exists but carries its own risks.
  • Declining firmware support. With no U.S. market presence, firmware security updates for existing Hikvision and Dahua products have become uncertain. Known vulnerabilities with no available patch represent ongoing cybersecurity risk.
  • Cyber insurance scrutiny. Some commercial cyber insurers have begun scrutinizing the use of named Chinese-manufactured network equipment. Policy underwriting and renewal terms may be affected.
  • The NVR is the immediate problem. Most businesses with these systems aren’t struggling with the cameras themselves — they’re struggling with aging NVR hardware that has no remote access, no AI capabilities, unreliable storage, and no path to modern cloud functionality.
  • Business requirements have changed. Remote access, AI analytics, multi-site visibility, and role-based access controls are now operational requirements for many businesses — things local NVRs cannot provide.

The Four Options for Organizations With Existing Systems

Option 1: Full Rip-and-Replace

Replace all Hikvision and Dahua cameras with NDAA-compliant hardware (Axis, Hanwha, Bosch, Uniview, Milesight, etc.) and deploy a new cloud VMS platform on new hardware. This is the required path for federal contractors and may be required for grant-funded organizations. It’s the highest-cost, highest-disruption option for private commercial businesses but eliminates hardware risk entirely. See the cost comparison guide.

Option 2: Phased Camera Replacement

Prioritize replacement of cameras in highest-risk or highest-value positions — primary entrances, cash handling areas, loading docks — with NDAA-compliant hardware while retaining compatible cameras in lower-priority positions. A phased approach balances cost control against risk reduction over a 12–36 month timeline.

Option 3: Replace the NVR/VMS Layer First

For private commercial businesses, replacing the local NVR with cloud VMS while retaining compatible existing IP cameras may address the most immediate operational problems — lack of remote access, no AI analytics, NVR hardware failure risk — while deferring the camera replacement decision. This path does not address any compliance obligations around the cameras themselves.

Option 4: Migrate Compatible Cameras to Cloud VMS

If existing Hikvision or Dahua cameras support ONVIF protocols, they can connect to iFovea’s cloud VMS platform through the iFovea Gateway. This removes NVR dependency, adds cloud access and AI analytics, and allows private commercial organizations to modernize operations while planning the longer-term camera replacement strategy.

What iFovea Can and Cannot Do

iFovea CAN help with:

  • Connecting ONVIF-compatible existing cameras to cloud VMS
  • Replacing local NVR dependency with cloud access and AI analytics
  • Evaluating which cameras are technically compatible
  • Supporting phased migration from mixed camera inventories
  • Providing cloud VMS for NDAA-compliant replacement cameras
  • White-label VMS for integrators managing this transition for clients

iFovea CANNOT help with:

  • Making Hikvision or Dahua cameras NDAA compliant
  • Bypassing or resolving regulatory compliance obligations
  • Providing legal or compliance advice
  • Sourcing restricted cameras or NVR equipment
  • Guaranteeing that any existing camera reuse is appropriate for your specific regulatory situation

Frequently Asked Questions

Are Hikvision cameras banned in the United States?

For federal agencies and federal contractors: yes, their purchase and use is prohibited under NDAA Section 889. The FCC also stopped authorizing new Hikvision equipment for sale in the U.S. in 2022. For private commercial businesses without federal contracts or federal funding: no current federal law prohibits continued use of lawfully installed existing equipment. However, acquiring new equipment through authorized compliant channels has become effectively impossible.

Are Dahua cameras banned in the United States?

The same framework applies to Dahua as to Hikvision. Dahua is named in NDAA Section 889 and the FCC’s Covered List. Federal agencies and contractors are prohibited from purchasing or using Dahua equipment. Private commercial businesses with no federal relationships have no current federal mandate to remove existing equipment.

Can I still use existing Hikvision or Dahua cameras in my private business?

Private commercial businesses without federal contracting relationships, federal grants, or regulated compliance requirements are not currently subject to a federal mandate requiring removal of existing equipment. The operational, cybersecurity, and insurance landscape creates practical pressures for migration planning even in the absence of a legal mandate.

Can iFovea make my Hikvision or Dahua cameras NDAA compliant?

No. iFovea does not make restricted hardware NDAA compliant. Connecting Hikvision or Dahua cameras to iFovea cloud VMS does not change the compliance status of the cameras. Federal contractors should consult legal counsel.

I’m a federal contractor. What do I need to do?

NDAA Section 889 Part B requires federal contractors to conduct a “reasonable inquiry” into their use of covered equipment, certify compliance in SAM.gov, and report discoveries within one business day. The compliance deadline has been extended to December 2026. Consult your legal counsel and contracting officers for specific guidance. iFovea recommends full replacement of covered equipment with NDAA-compliant cameras for federal contractors, paired with cloud VMS to provide the remote access and analytics capabilities your operations require.

What cameras should I use to replace Hikvision or Dahua?

NDAA-compliant camera manufacturers include Axis, Hanwha (Samsung), Bosch, Avigilon (now Motorola Solutions), Vivotek, and others that have publicly confirmed NDAA compliance for specific models. iFovea supports all major NDAA-compliant camera brands through ONVIF compatibility. Use the camera compatibility guide to check specific models.

Related Resources

Request a Camera Compatibility and Risk Review

Tell us about your existing camera system — brands, count, locations, and whether your organization has any federal contracting or grant relationships. We’ll help identify your technical migration options and flag scenarios where compliance review is required.

This review is technical, not legal. Organizations with compliance obligations should also consult qualified legal counsel.

Request a Compatibility and Risk Review

transparent ifovea no logo
Platform