On June 18, 2026, the Cyberspace Administration of China (CAC), together with the Ministry of Industry and Information Technology and the Ministry of Public Security, released the 'Catalogue of Products for the Implementation of Cybersecurity Labels (First Batch)' and the associated implementation rules. This regulation introduces a voluntary cybersecurity labeling scheme for consumer connected cameras, excluding those used in public security sectors. The framework aims to enhance the cybersecurity and data protection of consumer video surveillance devices by establishing clear technical requirements and procedures for manufacturers, testing laboratories, and registration bodies.

The scheme defines three levels of network security capability—basic, enhanced, and advanced—represented by one, two, or three stars on the label. The requirements cover physical and hardware security, system and software security, network and communication security, data security, personal information protection, and security assurance. The label must display detailed information including manufacturer, model, security level, validity period, testing laboratory, applicable technical standard, and a QR code that provides access to test reports and the manufacturer's declaration of conformity.

Certification is voluntary but requires rigorous testing in accordance with standard TC260-PG-20265A. Higher security levels demand accredited laboratories and third-party penetration testing. The China Electronics Standardization Institute is responsible for registration and public disclosure of labeling information. Manufacturers must submit comprehensive documentation, including test reports, declarations of conformity, business licenses, and laboratory qualifications where applicable.

The label is valid for three years, and any changes to key technical parameters require re-evaluation and re-registration. The regulation establishes post-market controls, including possible revocation of registration for non-compliance, document falsification, or misuse of the label. Sanctions are foreseen for fraudulent practices by manufacturers or laboratories, and public complaint channels are provided.

Manufacturers are responsible for the correct printing, use, and display of the cybersecurity label, which may be placed on the product, packaging, manuals, or digital interfaces. The QR code is a central element, enabling transparency and easy access to compliance information. This regulation marks a significant step forward in cybersecurity protection for consumer devices in China, setting a robust and transparent framework for the sector.

This regulation is classified as High Impact.

Key reasons for high impact:

• Establishes a new, detailed cybersecurity labeling regime for all consumer connected cameras in China.
• Imposes technical, documentation, and testing requirements that affect product design, manufacturing, and market access.
• Requires the use of a standardized label with a QR code linking to compliance documentation, increasing transparency and traceability.
• Mandates post-market controls and sanctions for non-compliance, affecting ongoing operations and compliance management.

Who is affected?

Manufacturers, importers, distributors, testing laboratories, certification bodies, and e-commerce platforms dealing with consumer connected cameras in China.

Conclusion:

All stakeholders in the consumer camera supply chain must adapt to new compliance, documentation, and labeling obligations, with significant operational and market implications.