NDAA Section 889 Explained: A UK CCTV Installer's Guide
Summary
NDAA Section 889 is a US federal procurement law from 2019 that bans the United States government and its contractors from using surveillance equipment made by five named Chinese companies — Huawei, ZTE, Hytera, Hikvision and Dahua. For most UK installers selling to UK private homes, businesses, retail and SME commercial sites, NDAA does not apply: it is a US law, not a UK law, and Hikvision and HiLook remain fully legal to sell, install and use across the UK private sector. The UK government has its own, separate restriction (announced November 2022) that bars Chinese surveillance gear from central government "sensitive sites" only — not from local councils, businesses or households.
This guide walks UK installers through what NDAA actually says, what the UK government's separate position is, and which clients realistically need NDAA-compliant kit. For the small minority who do, Netview stocks Veracity, Vigitron and Ajax product lines that are NDAA-compliant by design.
What is NDAA Section 889?
NDAA Section 889 is a clause in the United States National Defense Authorization Act for fiscal year 2019, which became law in August 2018. It restricts the US federal government — and any organisation that contracts with the US federal government — from buying, using or paying with federal money for telecommunications and video surveillance equipment from a specific short list of Chinese manufacturers (The Coalition for Government Procurement — Section 889 explained).
Section 889 has two parts that took effect on different dates:
Part A (effective August 2019) prohibits US federal agencies from buying covered equipment.
Part B (effective August 2020) is the wider one — it prohibits US federal agencies from contracting with any company that uses covered equipment anywhere in its operations, even if the equipment isn't being used on the federal contract itself. This is what catches private companies in the rule.
Critically, Section 889 is a procurement rule, not a cybersecurity standard. It does not test whether a product is secure, whether it has vulnerabilities, or whether the manufacturer has remediated them. It simply names companies whose products federal contractors may not use.
Which manufacturers are covered by NDAA Section 889?
Section 889 names exactly five Chinese companies plus their subsidiaries and affiliates (Wiley Law — Long-awaited NDAA Section 889 rule on Huawei, ZTE and video companies):
| Company | Equipment type covered | Coverage scope |
|---|---|---|
| Huawei Technologies | Telecoms + video surveillance | Always covered, all products |
| ZTE Corporation | Telecoms + video surveillance | Always covered, all products |
| Hytera Communications | Two-way radio | Only if used for "prohibited purpose" |
| Hangzhou Hikvision Digital Technology | Video surveillance | Only if used for "prohibited purpose" |
| Dahua Technology | Video surveillance | Only if used for "prohibited purpose" |
For Hytera, Hikvision and Dahua, "prohibited purpose" specifically means: security of US government facilities, surveillance of US critical infrastructure, or other US national security purposes. A Hikvision camera watching a US shop floor is not by itself prohibited — but if that shop floor is a federal facility, or the company is a federal contractor, it is.
The list also captures subsidiaries and affiliates. That includes companies acquired by or merged with the named manufacturers. HiLook, as a Hikvision sub-brand, falls under the Hikvision designation. Pyronix has been part of the Hikvision group since 2016 and falls under the same scope when supplied to a US federal customer.
Does NDAA apply to UK businesses?
Generally, no. NDAA is United States federal law and applies primarily to US federal entities and their contractors. Hikvision UK's own public position on this is unambiguous: "For most organisations in Europe and UK, it won't affect any buying decisions" (Hikvision UK — NDAA compliance page).
A UK CCTV installer fitting cameras for a Leicester pub, a Midlands logistics warehouse, a Birmingham retail unit or a Nottingham housing development has no NDAA exposure whatsoever. The law literally does not apply to that work.
NDAA only becomes relevant in the UK in three narrow scenarios:
1. You are selling into a project that is funded by, or contracted to, the US federal government — for example, fitting cameras at a US Air Force base on UK soil, a US embassy, or a UK company that is itself a US federal contractor.
2. You are supplying a UK enterprise whose parent company is a US federal contractor and whose corporate procurement policy mirrors NDAA across all global operations.
3. Your client has voluntarily adopted an NDAA-equivalent procurement standard for non-legal reasons — typically defence, aerospace, critical national infrastructure, or some healthcare and finance sectors with their own internal compliance frameworks.
If none of those describe your client, NDAA is not a constraint on your specification.
The UK government's separate position on Chinese surveillance
UK central government has its own, completely separate restriction on Chinese surveillance equipment, and it is often confused with NDAA. They are different policies with different scopes.
In November 2022, Cabinet Office Minister Oliver Dowden announced that central government departments would stop deploying surveillance equipment made by companies "subject to the National Intelligence Law of the People's Republic of China" at sensitive sites (CNN — UK bans Chinese surveillance cameras from sensitive sites). The announcement covered roughly 67 sensitive facilities including Buckingham Palace, the UK Parliament estates, top intelligence and military buildings, and nuclear power stations.
The Procurement Act 2023, which received Royal Assent in October 2023, then committed the government to publishing a removal timeline for existing Chinese surveillance kit at sensitive sites within six months of Royal Assent. The current target for full removal is April 2025.
The crucial point for installers: the UK Cabinet Office policy explicitly does not apply to private businesses, local councils outside the central government estate, or households. It is an internal government procurement instruction. A UK installer selling to a Tesco store, a Leicester care home, or a Mayfair townhouse is unaffected by it (NPSA — Security update on surveillance equipment).
What did change is the perception. Some local authorities, NHS trusts and large corporates have proactively adopted similar policies even though they are not legally required to, citing reputational risk or supply-chain alignment with central government. That is a procurement decision, not a legal obligation.
When should UK installers actually care about NDAA?
The realistic UK installer NDAA-decision tree is short. Ask the customer three questions before specifying any kit:
Question 1. Are you selling to, or contracted to, a US federal agency or US federal contractor at any tier? If yes, NDAA applies. Specify NDAA-compliant equipment.
Question 2. Is the site a UK central government building on the sensitive-sites list (Buckingham Palace, Parliament estates, military, intelligence, nuclear, or specific listed facilities)? If yes, the UK Cabinet Office restriction applies. Avoid Hikvision, HiLook, Pyronix and Dahua; specify a non-Chinese alternative.
Question 3. Has the client written NDAA or "no Chinese surveillance equipment" into their tender or procurement policy as a contractual requirement? If yes, treat it as a binding spec regardless of whether the law forces them to. If the answer to all three is no — and for the great majority of UK installer projects it is — Hikvision and HiLook remain the right specification on price, range, AcuSense AI performance and same-day UK availability.
For installers who want a defensible audit trail, the question to put in writing on every quotation is: "Confirmed: this site does not require NDAA-compliant equipment." That single sentence in the spec keeps the conversation clean if the question ever comes up later.
NDAA-compliant alternatives in the Netview range
Netview is primarily a Hikvision wholesaler, and Hikvision-family products will continue to be the right answer for the vast majority of UK installs. For the small minority of projects where NDAA or the UK Cabinet Office restriction applies, Netview also stocks several brands that are NDAA-compliant by virtue of where they are designed and manufactured.
Veracity is a Scottish company (Glasgow) that manufactures video transmission, network and PoE infrastructure aimed at IP CCTV installers. The full Veracity range is NDAA-compliant. Key SKUs in stock:
- VCS-4P1 CAMSWITCH 4 Plus — 4+1 port 802.3at PoE switch
- VCS-4P1-MOB CAMSWITCH 4 Mobile — low-voltage mobile PoE switch for vehicles and remote sites
- VHW-HWPS-B HIGHWIRE Powerstar IP-over-coax base and VHW-HWPS-C2 Powerstar Duo — re-use existing coax for IP + PoE
- VLS-1P-BC LONGSPAN Long-Range PoE-over-coax base — extends Ethernet up to 1 km over coax
- VOR-ORM-GXT OUTREACH Max GXT extender and VOR-ORM-XT external IP extender — outdoor gigabit Ethernet + PoE extension
- VAD-PSP POINTSOURCE Plus portable PoE injector — installer commissioning tool
Vigitron is a US-based (San Diego) network and surveillance infrastructure manufacturer; its products are NDAA-compliant by virtue of US country-of-origin. In stock:
- VI00103 NetMux Multiplexer — PoE splitter and combiner
Ajax Systems is headquartered in Ukraine and produces wireless intruder, fire and access control equipment. Ajax products are NDAA-compliant and are not subject to the UK Cabinet Office restriction. The Ajax range is fully covered in our Ajax fire alarm vs intruder alarm UK compliance guide and the Ajax EN54 Fire Detection installer guide.
What Netview does not currently stock as a primary range is NDAA-compliant IP cameras themselves — for those, the UK trade typically specifies Bosch, Axis, Hanwha, i-Pro or Avigilon, none of which are in Netview's current portfolio. If a project genuinely requires NDAA-compliant cameras, call the trade desk on 01163 800 838 and we'll source what's appropriate from our wholesale partners; we'll never sell a project Hikvision in a known NDAA-restricted application.
How to verify a product is NDAA-compliant
The phrase "NDAA-compliant" is not a certification scheme. There is no NDAA badge, no audit body, no list a manufacturer can pay to be on. A product is NDAA-compliant if and only if it is not produced by — and does not use components produced by — the five named companies (Huawei, ZTE, Hytera, Hikvision, Dahua) or their subsidiaries.
Hikvision UK has publicly described "NDAA-compliant" as "an invented and misleading concept" (Hikvision UK NDAA page) on the basis that there is no formal certification process behind the term. Strictly speaking they are correct that it is not a regulatory certification, but the term remains the de facto industry shorthand and is widely accepted in US federal procurement.
Practical installer checks for verification:
Check the manufacturer's country of origin. Cameras made in the US, UK, Japan, South Korea, Taiwan, Sweden, Germany or Israel are typically NDAA-compliant. Cameras made in mainland China require closer inspection.
Check ownership chain. A product is covered if its manufacturer is owned or controlled by Huawei, ZTE, Hytera, Hikvision or Dahua. HiLook is Hikvision-branded; Pyronix is Hikvision-owned; some lesser-known brands are OEM rebadges of Hikvision or Dahua hardware.
Ask for a written NDAA statement. Most genuinely compliant manufacturers publish a one-page declaration confirming they are not on the Section 889 covered entity list. Veracity, Vigitron and Ajax all provide these on request.
Beware of the "compliant chipset" myth. Some Hikvision and Dahua resellers have at times marketed individual SKUs as "NDAA-compliant" because they use a non-Hikvision chipset. This argument has not been accepted under FAR clause 52.204-25 — the rule is about the producing entity, not the chipset.
Frequently asked questions
Is it illegal to sell Hikvision cameras in the UK?
No. Hikvision and HiLook are fully legal to sell, install and use in the UK private sector and at any non-sensitive UK government site. There is no UK retail ban, only a central government policy on sensitive sites.
Does NDAA apply to a UK installer fitting cameras at a US embassy in London?
Yes. The premises are US federal territory under host-country agreement, and any kit installed there must be NDAA-compliant. Specify a non-Hikvision alternative for that scope of work.
Are HiLook cameras NDAA-compliant?
No. HiLook is a Hikvision sub-brand and falls under the Section 889 covered-entity scope when used for a prohibited purpose.
Is Pyronix NDAA-compliant?
Pyronix has been part of the Hikvision group since 2016. Pyronix products are not NDAA-compliant when supplied to a US federal contractor. They remain unaffected by NDAA in standard UK private and commercial installs.
Can I tell a customer their old Hikvision system is illegal?
Almost never in the UK. Existing Hikvision installs in private homes, businesses and most public-sector premises remain fully legal and supported. Only UK central government sensitive sites have a removal deadline (April 2025), and that is a procurement directive, not a legal mandate to the camera owner.
Does the UK Cabinet Office ban apply to my local council?
No. The November 2022 Cabinet Office instruction explicitly applies to central government departments only. Local authorities are outside the scope, although some councils have voluntarily adopted similar policies.
What replaces a Hikvision camera at an NDAA-restricted site?
Common alternatives in UK trade include Bosch, Axis, Hanwha Vision, i-Pro and Avigilon. Netview can source from wholesale partners on request — call the trade desk for spec advice.
Where Netview can help
Netview is an authorised UK wholesaler for Hikvision, HiLook and Ruijie, alongside Ajax, Pyronix, Veracity, Vigitron and Securiflex. For most UK installer projects, Hikvision and HiLook remain the right specification on price, performance, AcuSense AI, ColorVu low-light, Live Guard active deterrence and same-day Leicester dispatch.
For the small number of projects where NDAA Section 889 applies, the UK Cabinet Office sensitive-sites restriction applies, or a customer has voluntarily written non-Chinese surveillance into their procurement policy, we stock NDAA-compliant transmission and PoE infrastructure from Veracity (UK) and Vigitron (US), and the full Ajax range for wireless intruder and fire detection. Where a project specifically requires NDAA-compliant IP cameras, call the trade desk and we'll source from our wholesale partners — we don't sell Hikvision into a known NDAA-restricted application.
For deeper technical resources across the rest of our supported platforms, see the Hikvision firmware hub, the iVMS-4200 installer guide and the Ajax EN54 Fire Detection installer guide.
For spec advice on an NDAA-conscious project, a UK central government tender, or any installer-specific compliance question, call the Netview trade desk on 01163 800 838 or email the team — we'll tell you straight whether your project actually needs NDAA-compliant kit, and recommend the right product family if it does.
Netview is an authorised UK wholesaler for Hikvision, HiLook and Ruijie, and stocks Ajax, Pyronix, Vigitron, Veracity and Securiflex alongside. All compliance claims in this post are sourced from US federal law, UK government statements and manufacturer guidance — always verify current law and procurement policy with a qualified compliance adviser before relying on any single source for a specific contract.
About the Author
