India has tightened its digital security framework by mandating stricter compliance standards for telecom equipment, video surveillance systems and data protection. The move follows heightened concerns over vulnerabilities in public surveillance infrastructure and emerging espionage risks identified during recent investigations.

Authorities have long been wary of the widespread use of imported surveillance equipment in critical networks, particularly amid fears that unsecured systems could be exploited for spying. Recent discoveries of espionage modules with links to Pakistan have intensified scrutiny, while global examples have highlighted how compromised urban camera networks can enable real time tracking of high value targets.

Under the new rules, all video surveillance systems sold in India must meet mandatory essential requirements, including disclosure of the origin of key hardware components, testing for vulnerabilities that allow unauthorized remote access, and certification by accredited laboratories. Government departments are barred from procuring equipment that fails to meet these standards and have been advised to secure existing networks.

The broader legal framework has also been strengthened through the Telecommunication Act, 2023 and the Digital Personal Data Protection Act, 2022, along with earlier directives requiring telecom procurement from trusted sources. Officials said the measures reflect the growing importance of safeguarding interconnected digital infrastructure.