NDAA-Compliant Security Cameras: What Michigan Businesses Need to Know in 2026

On June 26, 2026, the FCC expanded its ban on Hikvision and Dahua surveillance equipment to cover older, previously-approved models — and the change took effect in early July. If your Michigan business holds a government contract, receives federal grant money, or works in schools, healthcare, or critical infrastructure, the cameras on your wall may now be a compliance problem. This guide explains what NDAA compliance means, who it actually applies to, and how to tell whether your system is at risk.

What Is NDAA Compliance?

NDAA compliance refers to Section 889 of the 2019 National Defense Authorization Act, a federal law that prohibits government agencies, their contractors, and recipients of federal funding from buying or using video surveillance equipment from specific Chinese manufacturers deemed national-security risks. The named companies are Hikvision, Dahua, Huawei, Hytera, and ZTE — along with their subsidiaries and affiliates.

The catch that trips up most businesses: the ban isn't just about the brand on the box. It extends to OEM and rebranded products — cameras sold under a different name but manufactured by a banned company. Industry analyses consistently show that a large share of budget cameras sold online are rebadged Hikvision or Dahua hardware, which means many businesses own banned equipment without realizing it.

Does NDAA Compliance Actually Apply to You?

For a private business with no government ties, NDAA compliance is currently a best practice, not a legal requirement. But the list of organizations that are legally obligated is broader than most people expect:

• Federal contractors and subcontractors — Section 889(a)(1)(B) bans covered equipment anywhere in your operations, even in areas unrelated to the government work.
• Schools and universities receiving federal funding such as E-rate or Title I grants.
• Healthcare organizations holding federal contracts, grants, or loans.
• Critical infrastructure operators — energy, water, communications, transportation, and the other CISA-defined sectors.
• Any business bidding on government work — you may have to attest that your network is free of covered equipment before you can win the contract.

There's a subtle trap worth calling out: simply maintaining a banned camera system you installed years ago counts as a "covered service." An integrator who still logs in to support an old Hikvision system — even at an unrelated site — can be disqualified from federal security contracts. That's one reason MSS operates a strict zero-subcontractor, compliant-only policy.

How to Tell If Your Cameras Are Compliant

You can't always trust the label. Verifying compliance takes a few steps:

• Check the brand first. Anything branded Hikvision, Dahua, Huawei, Hytera, or ZTE is automatically non-compliant. So are known sub-brands like Hikvision's HiLook and HiWatch, and Dahua-owned Lorex.
• Check the chipset. A camera can carry a "safe" brand name but still use a banned HiSilicon (Huawei) system-on-chip, which makes it non-compliant. Compliant chipsets come from makers like Ambarella and Texas Instruments.
• Request documentation. Ask your manufacturer or integrator for a written compliance statement and a Bill of Materials confirming component origins.
• Don't forget the whole system. True compliance covers the cameras, the NVR, the video management software, and the mobile app — not just the cameras.

What Are Your Compliant Options?

The good news is that the compliant market is deep and professional. Michigan Security Systems installs NDAA-compliant lines built for commercial and government environments, including Axis Communications (a Sweden-based open-platform standard for federal and enterprise work) and Hanwha Vision (strong AI analytics with competitive pricing). For access control, PDK (ProdataKey) rounds out a fully compliant, cloud-managed ecosystem.

One myth worth dispelling: replacing non-compliant cameras rarely means starting from scratch. If you already run an IP camera system, your cabling and network infrastructure — usually the most expensive part of an installation — can often be reused. In many cases only the cameras and recorder need to change, which keeps a compliance upgrade far more affordable than a ground-up rebuild.

What Michigan Businesses Should Do Now

If any of the federally-connected categories above apply to you, don't wait for an audit to find the problem. A qualified integrator can walk your site, inventory every networked device, and tell you exactly where you stand:

• Audit your existing cameras, recorders, and networked devices for banned brands and chipsets.
• Document compliance with manufacturer statements and purchase records — essential for audits and grant applications.
• Plan a phased replacement of any non-compliant equipment, reusing existing infrastructure where possible.
• Standardize future purchases on NDAA- and TAA-compliant brands to protect your eligibility going forward.

This article is general information, not legal advice. For questions about how Section 889 applies to your specific contracts or funding, consult your legal counsel.