MEITY Issue New Compliance Updates for CCTV Cameras in India - Banner-01

MeitY Updates Compliance Rules for ER-Certified IP Cameras

Anonymous
2 min read

The Ministry of Electronics and Information Technology (MEITY) has released a circular detailing the software update process for ER-Certified IP Cameras. OEMs are required to proactively monitor, document, and report all firmware & other changes to the Bureau of Indian Standards (BIS) via BIS CCL update process, ensuring strict compliance with security protocols and End-of-Life (EoL) requirements. Compliance Blueprint (Effective

The Ministry of Electronics and Information Technology (MEITY) has released a circular detailing the software update process for ER-Certified IP Cameras. OEMs are required to proactively monitor, document, and report all firmware & other changes to the Bureau of Indian Standards (BIS) via BIS CCL update process, ensuring strict compliance with security protocols and End-of-Life (EoL) requirements.

Compliance Blueprint (Effective 26.11.2025):

  1. Zero Tolerance on End-of-Life (EoL)

  • Rule: Firmware must not contain any EoL libraries or components.
  • Deadline: Devices with EoL components that remain unpatched 6 months past expiry will be deemed non-compliant under the BIS Act, 2016.
  • Action: Maintain a Software & Hardware BOM register to track component versions, EoL status, and known CVEs.

  1. Types of Changes

  • Minor Changes (Cosmetic updates, UI tweaks):
  • Action: Submit Impact Analysis Report + Updated Firmware Hash.
  • Major Changes (Security/Feature Additions, e.g., Kernel updates):
  • Action: Submit Lab Verification Report to BIS for approval.

  1. When is a CCL Update Required?

  • Emergency vulnerability fixes 
  • Voluntary updates 
  • EoL component replacements 
  • Security-critical changes (software & hardware) 
  • Other hardware/software modifications 

  1. Emergency Fixes (Vulnerabilities)

  • Immediate Action: Patch vulnerabilities without delay. 
  • Requirement: Notify BIS via email with an Impact Analysis Report within 10 working days.
  • CCL Update: Upload relevant test reports to the BIS portal once available.

  1. BIS Portal Updates

  • Major Changes: CCL update option is now live on the BIS portal. 
  • Minor Changes: Submit via hardcopy to BIS head office, followed by email confirmation. 

  1. Surveillance Audit Review

Even after ER BIS certification, OEMs must: 

  • Continuously track EoL status 
  • Report all major & minor changes to BIS 
  • Expect MeitY audits verifying firmware hashes, secure boot, kernel/bootloader versions, source code scans, and CVE mitigation. 

Let’s keep CCTV infrastructure secure, compliant, and resilient against evolving threats. 

Follow us and Stay Updated!

If you are lagging with the latest compliance news, updates, amendments and so on then we have various options for you to stay up-to-date.

Subscribe to our Free Monthly Newsletter or watch our Latest News & Updates Space for daily updates to stay ahead with the latest regulations and notifications without spending a dime!