China’s top internet, technology, and security regulators have jointly issued new cybersecurity labeling rules for consumer internet-connected cameras, establishing a three-tiered rating system aimed at protecting user privacy and data security.

The regulations, introduced by the Cyberspace Administration of China, the Ministry of Industry and Information Technology, and the Ministry of Public Security, apply strictly to standalone, internet-enabled cameras purchased and used by individuals or organizations for audio and video collection. Commercial cameras used for public safety and law enforcement are excluded from the directive.

Under the new rules, consumer connected cameras must feature a cybersecurity label with a three-year validity period. The label will display the manufacturer’s name, product model, cybersecurity capability rating, the testing laboratory, and an official registration code.

The security tiers are categorized by rising capability levels, beginning with the Basic Level, denoted by a single star, which indicates a device meets foundational cybersecurity standards for consumer devices. The Enhanced Level, represented by two stars, requires the product to achieve an advanced level of security compared to peer products. The highest tier, the Leading Level, is marked with three stars and signifies industry-leading cybersecurity performance.

The implementation guidelines place heavy emphasis on data security and personal information protection. Regulators will require third-party laboratories to audit documentation regarding how sensitive personal data is anonymized. Furthermore, compliance testing will include real-world simulation tests such as reviewing live streams and stored recordings to verify that sensitive data remains continuously masked and secure during both storage and transmission.