Vietnam has issued a new national technical regulation (QCVN 135: 2024/BTTTT) aimed at addressing the growing cybersecurity risks of IP surveillance cameras.

Effective from January 1, 2026, the regulation requires all imported and domestically produced IP cameras to meet strict security standards before they can be distributed or used in the country.

Rising cybersecurity risks from surveillance cameras

Surveillance cameras have become an essential tool for security and monitoring, but they also pose serious cybersecurity risks.

According to cybersecurity experts, these devices are often targets for hackers, leaving personal and national security data vulnerable.

Vietnam’s Department of Information Security (under the Ministry of Information and Communications) recently reported that over 800,000 surveillance cameras in Vietnam were found publicly broadcasting images online.

About 45% of these devices contained security vulnerabilities, making them susceptible to hacking, data theft, and unauthorized remote control.

Hackers have exploited these vulnerabilities to steal personal data, conduct scams, and compromise businesses and government agencies. Additionally, hacked cameras have been used to launch cyberattacks and spread malware, threatening national security.

On social media, hundreds of online groups have emerged selling hacked surveillance footage, with membership fees ranging from $8 to $40.

Urgent need for national security regulations

Recognizing the growing threat, Vietnam’s Ministry of Information and Communications (MIC) has taken proactive steps to strengthen cybersecurity regulations. In 2021, the ministry introduced a list of basic cybersecurity requirements for consumer IoT devices, including surveillance cameras.

In May 2024, MIC issued a set of security criteria for IP surveillance cameras, outlining safety guidelines for manufacturers, importers, and users. However, the government recognized that voluntary compliance was insufficient, necessitating a mandatory national regulation.

On December 31, 2024, MIC officially issued QCVN 135: 2024/BTTTT, setting binding security standards for all IP cameras used in Vietnam.

New security requirements for IP cameras

Under QCVN 135: 2024/BTTTT, all IP cameras in Vietnam must comply with 11 key security requirements, including:

Unique password initialization for each device

Vulnerability management and regular security updates

Secure data storage for sensitive user information

Encrypted communication channels to prevent interception

Protection against unauthorized access through external interfaces

Data privacy safeguards to protect user information

Automatic recovery mechanisms in case of security breaches

Secure data deletion protocols when resetting or disposing of devices

These security measures aim to ensure that IP cameras in Vietnam meet global cybersecurity standards, reducing risks for both individuals and national security.

The regulation will be implemented in two phases:

February 15, 2025 – Trial application begins for compliance testing and certification.

January 1, 2026 – Full enforcement, requiring all IP cameras in Vietnam to comply before they can be sold or used.

Cybersecurity experts believe that once fully enforced, the regulation will significantly reduce hacking risks and enhance national security.

Van Anh