Vietnam Formally Enforces QCVN 11:2026/BCA Cybersecurity Requirements for IP Surveillance Cameras

The One Lab Provides End-to-End Testing, Declaration of Conformity and Vietnam Market Access Support

Overview

Vietnam has formally implemented new cybersecurity compliance requirements for Internet Protocol surveillance cameras under QCVN 11:2026/BCA, the National Technical Regulation on Surveillance Cameras Using Internet Protocol — Baseline Cybersecurity Requirements.

The regulation was promulgated by Vietnam’s Ministry of Public Security under Circular No. 48/2026/TT-BCA, issued on May 12, 2026. It became effective on July 1, 2026, replacing the previous QCVN 135:2024/BTTTT requirements for IP surveillance cameras.

A subsequent regulatory development, Circular No. 125/2026/TT-BCA, formally places Internet Protocol surveillance cameras on the Ministry of Public Security’s list of products and goods classified as having a medium level of risk. Circular No. 125/2026/TT-BCA was issued on June 30, 2026 and took effect on July 1, 2026.

What Products Are Affected?

The requirements apply specifically to surveillance camera devices using Internet Protocol that are manufactured, imported, distributed or placed on the Vietnamese market.

Manufacturers should therefore carefully assess whether their products fall within the scope of QCVN 11:2026/BCA. Relevant products may include:

• Network and IP surveillance cameras
• Wi-Fi or Ethernet-connected CCTV cameras
• Cloud-connected security cameras
• Smart home and commercial surveillance cameras
• Cameras with remote monitoring or network management functions

Traditional analogue CCTV products without an Internet Protocol interface may require a separate scope assessment and should not automatically be assumed to fall within QCVN 11:2026/BCA.

The regulation establishes baseline cybersecurity requirements intended to address common security risks in connected camera products. These requirements include areas such as authentication, access control, protection of security-sensitive information, secure software and firmware management, network interface security and the prevention of unauthorized access.

Important：Testing and Conformity Requirements

Under Circular No. 125/2026/TT-BCA, regulated products must complete the applicable conformity assessment process before being placed on the Vietnamese market.

The regulatory framework provides two principal conformity pathways:

1. Declaration of Conformity based on third-party certification results issued by an appropriately designated or recognized certification body; or
2. Declaration of Conformity based on the manufacturer’s or responsible organization’s self-assessment, supported by acceptable testing or conformity assessment evidence.

For QCVN 11:2026/BCA, supporting evidence may include test results issued by a designated testing organization or conformity assessment results from an international, regional or foreign organization recognized in accordance with Vietnamese regulations.

Although the regulatory framework allows both certification-based and self-assessment-based approaches, the detailed operational arrangements for the certification route have not yet been fully established.

Based on The One Lab’s current regulatory monitoring and local market experience, projects are therefore presently being handled primarily through the Declaration of Conformity, or DoC, pathway, supported by appropriate QCVN 11 testing evidence. Manufacturers should continue monitoring further announcements concerning designated certification bodies, detailed certification procedures and authority filing requirements.

The One Lab’s Vietnam QCVN 11 Compliance Solution

The One Lab provides manufacturers with an end-to-end solution for navigating the new Vietnam cybersecurity compliance requirements for IP surveillance cameras.

Our support may include:

• Product scope and regulatory applicability assessment
• Review of product architecture, network interfaces and cybersecurity functions
• QCVN 11 requirement mapping and preliminary gap analysis
• Identification of applicable test items and representative test models
• Coordination of QCVN 11 testing through qualified local resources
• Review and preparation of technical documentation
• Test report and evidence package review
• Declaration of Conformity documentation preparation
• Coordination with the Vietnamese importer, local representative and relevant authorities
• Product label and conformity-marking review
• Regulatory submission and project follow-up
• Monitoring of future certification-route announcements

By coordinating technical assessment, testing, documentation and local regulatory procedures through one integrated project team, The One Lab helps manufacturers reduce duplicated work, address compliance gaps earlier and minimize the risk of customs delays or market-entry interruptions.

Manufacturers planning to export IP cameras to Vietnam are encouraged to begin with a product scope review and cybersecurity gap assessment. Even where the final certification route remains under development, early preparation of testing samples, firmware information, security documentation and DoC evidence can significantly reduce the time required to complete compliance once the applicable procedure is confirmed.

About The One Lab

The One Lab provides cybersecurity compliance, product testing coordination and global market access services for connected devices, Internet of Things products and electrical and electronic equipment.

Our team supports manufacturers with requirement interpretation, conformity planning, cybersecurity testing evidence, technical documentation, local application coordination and certification project management across Vietnam and other international markets.

For Vietnam QCVN 11 support, manufacturers may contact The One Lab with their product specifications, network interfaces, firmware information, existing cybersecurity test reports and intended market-entry schedule for an initial compliance assessment.