Is CCTV Mandatory in Indian Factories? The Honest 2026 Answer

No central Indian law orders every factory to install CCTV. What is regulated centrally is the camera you buy: from 1 April 2026 only cameras meeting MeitY's Essential Requirements may be sold in India. Installation becomes compulsory only through triggers — women on night shift, buyer audits, AEO assessment or tender terms.

If you run a 200–1000 worker plant in Ludhiana, Tiruppur, Pune or Hosur, you have probably heard both myths in the same week: "CCTV is now compulsory in every factory" and "the new rules ban CCTV unless it's Indian." Both are wrong, and both cost money — one makes you over-buy, the other makes you freeze a project you should have finished. Here is the separation that matters.

Key points

• Three different rulebooks get mixed up. Certification rules govern what you may buy; labour law governs when you must install; data law governs how you may use the footage. They have different authorities, different dates and different consequences.
• The Factories Act 1948 is no longer the operative statute. The four labour codes, including the Occupational Safety, Health and Working Conditions Code, 2020, came into force on 21 November 2025, and the OSH (Central) Rules, 2026 came into force on 8 May 2026. Anyone still quoting "Section 66 of the Factories Act" as live law is working off old notes — though state notifications issued under the old Act still shape practice until state OSH rules replace them.
• Night shift for women is the single biggest real trigger. The OSH Code's women's-employment provision permits women to work between 7 pm and 6 am subject to consent and prescribed conditions — and the Central Rules list CCTV surveillance of the workplace as one of those conditions, alongside written consent, safe pick-up and drop, lit entry/exit and pathways, and nearby toilets and drinking water.
• Retention periods come from the states, not the centre. Karnataka's 2019 night-shift conditions required CCTV footage to be kept at least 45 days — shorter than the three-month complaint window under the POSH Act, a mismatch the same commentary flags.
• The buy-side rule is hard and dated. CCTV cameras were brought under compulsory registration by gazette order S.O. 1652(E) of 9 April 2024, and MeitY's office memorandum of 16 January 2026 withdrew the remaining sell-through relaxation for pre-April-2025 stock, with effect from 1 April 2026.
• Exporters have a separate, quieter driver. AEO security criteria require documented physical security and access control at every premises where cargo is handled; in practice, assessors expect camera coverage of storage and access areas — but the AEO circular does not name CCTV as such.

The myth in the first direction: "every factory must have CCTV now"

There is no provision in the OSH Code, and no rule in the Central Rules 2026, that says a factory as such must install cameras. A 400-worker forging unit running one general shift with an all-male workforce, selling only into the domestic market, is under no statutory obligation to put up a single camera.

Where the obligation appears, it appears conditionally — attached to something you chose to do: run women at night, get AEO-certified, sell to a buyer with a security code, bid for a defence or PSU tender. That distinction is what your consultant should be charging you for, and often isn't.

The myth in the other direction: "the new rules ban CCTV"

Also wrong. What the 1 April 2026 regime bans is the sale of non-conforming cameras. Cameras must meet MeitY's Essential Requirements — secure software practices, access controls, network encryption, tamper resistance, vulnerability testing — evidenced through BIS registration under the Compulsory Registration Order. STQC certification sits on top of that as the usual gate for government and critical-infrastructure procurement rather than for a private plant's ordinary purchase. Certification bodies confirm the regime bites at the point of sale in the Indian market.

Practically: your existing installed base does not become illegal overnight, but your next purchase order must be for certified models, and spares for a discontinued non-compliant line get hard to source. That is a real capex-timing decision, not a legal panic. We work through it in BIS and STQC 2026 factory camera compliance and the approved camera list.

Scenario table: when cameras actually become compulsory for you

The state layer is where owners get caught

The Central Rules 2026 bind central-sphere establishments. Most factories are in the state sphere — and states notify their own rules and their own night-shift conditions, on their own timetables. Until your state notifies, the operative conditions are often still the state's earlier night-shift notification, carried forward in substance.

That is why the answer to "how many days must I keep footage" is different in Bengaluru and in Faridabad, and why a Tiruppur knitwear unit and a Manesar auto-component unit can both be compliant with different camera counts. Check your own state's notification, not a national blog summary. We track the differences in which Indian states require CCTV for women's night shifts and give the paperwork version in the night-shift retention checklist.

Footage is personal data now — that changes the "just record everything" habit

The Digital Personal Data Protection Rules, 2025 were notified on 14 November 2025, and the government has built in an eighteen-month period for phased compliance — which puts the bulk of substantive employer obligations, including notice, purpose limitation and security safeguards, in May 2027.

Identifiable video of your workers is personal data. That means: post notice, define why you are recording, restrict who can pull footage, and delete on a written schedule rather than "whenever the disk fills." Storing five years of everything is not extra safety — it is extra liability and extra electricity. See DPDP and worker CCTV.

What cameras will not do for you

Be clear-eyed, because vendors will not be.

They do not make you compliant by themselves. The night-shift conditions also demand written consent, safe pick-up and drop from residence, lit entry, exit and pathways, displayed emergency contact numbers and POSH compliance with a functioning Internal Committee. A perfect 64-camera install with no consent letters on file fails the inspection.

They do not prevent an accident. A camera records a hand going into an unguarded press; it does not stop it. If the money choice is between a fixed guard on the press and two more cameras, buy the guard. Detection is a second layer — see machine guarding and danger-zone detection.

They create obligations you did not have. Once footage exists, it can be summoned — by a labour inspector, by a POSH inquiry, by a buyer's auditor, by a court. If your practice is bad, cameras document that it was bad. Fix the practice first.

They can wreck floor trust. Cameras pointed at rest areas, canteen tables, changing-area approaches or the union notice board buy you nothing operationally and cost you cooperation. Cover process, material, gates and hazard zones — not people at rest. Where to place cameras on the shop floor has the practical map.

More cameras ≠ more coverage. Plants routinely end up over-camera'd at the gate and blind over the finished-goods dock and the scrap yard, which is exactly where the loss is. How many cameras a factory floor needs is a layout question, not a quantity question.

So should you install, if nothing forces you?

The compliance answer and the business answer are different, and honest advice keeps them apart.

Nothing forces a single-shift, male-workforce, domestic-market plant to install cameras. But three things commonly change that decision inside a year: the first serious order from a buyer with an audit clause, the first attempt to run a third shift, and the first large inventory shrink nobody can explain. Owners who wait for one of these end up buying under deadline, at the worst price, from whoever answers the phone.

If you are going to be forced within a year anyway, buy on your own timetable — with certified hardware, a defensible retention policy and camera positions chosen for evidence and throughput rather than for the inspector's photograph. Costs are laid out in what a factory camera AI system costs in India, and if you already have DVRs on site, retrofitting analytics onto existing CCTV is usually cheaper than a rip-and-replace.

FAQ

Is CCTV mandatory in factories in India in 2026? No general statute requires every factory to install CCTV. The OSH Code 2020 and the OSH (Central) Rules, 2026 make camera surveillance a condition attached to specific situations — most commonly employing women between 7 pm and 6 am. Certification rules from 1 April 2026 govern which cameras you may buy, not whether you must have them.

Does the Factories Act 1948 still require CCTV? The Factories Act 1948 has been subsumed into the OSH Code 2020, which came into force on 21 November 2025. It never contained a CCTV mandate anyway — camera conditions came from state notifications attached to night-shift permissions. Those state conditions still shape practice during the transition to state rules under the OSH Code.

How long must factory CCTV footage be retained in India? There is no single national number. Retention comes from your state's night-shift conditions, your buyer's contract or your own policy — Karnataka's 2019 conditions specified at least 45 days. Because POSH complaints can be filed within three months, many plants deliberately retain around 90 days for the areas relevant to worker safety.

Can my workers refuse to be recorded? Not generally, where recording is for legitimate safety and security purposes on the factory premises. But under the DPDP Rules 2025, you owe them notice of what is recorded and why, restricted access, and deletion on schedule. Recording toilets, changing areas or rest spaces is not defensible under any reading.

Will non-certified cameras already installed become illegal after 1 April 2026? The Essential Requirements regime bites at the point of sale in India, not retroactively on installed equipment. Practically, plan replacements: new purchases must be ER-compliant, and non-compliant model lines will lose spares and firmware support. Tender and AEO evaluators increasingly ask for certification proof on the whole estate.

Do export buyers actually check cameras during audits? Security-focused audits and AEO assessments look at coverage of gates, storage and dispatch, plus who can access footage. Social-compliance audits care more about consent, retention and whether cameras intrude on private areas. A well-documented, narrowly-scoped system passes both; a sprawling unlogged one raises questions in the second.