Is CCTV Mandatory in Indian Factories? The Honest 2026 Answer
No central Indian law orders every factory to install CCTV. What is regulated centrally is the camera you buy: from 1 April 2026 only cameras meeting MeitY's Essential Requirements may be sold in India. Installation becomes compulsory only through triggers — women on night shift, buyer audits, AEO assessment or tender terms.
If you run a 200–1000 worker plant in Ludhiana, Tiruppur, Pune or Hosur, you have probably heard both myths in the same week: "CCTV is now compulsory in every factory" and "the new rules ban CCTV unless it's Indian." Both are wrong, and both cost money — one makes you over-buy, the other makes you freeze a project you should have finished. Here is the separation that matters.
Key points
- Three different rulebooks get mixed up. Certification rules govern what you may buy; labour law governs when you must install; data law governs how you may use the footage. They have different authorities, different dates and different consequences.
- The Factories Act 1948 is no longer the operative statute. The four labour codes, including the Occupational Safety, Health and Working Conditions Code, 2020, came into force on 21 November 2025, and the OSH (Central) Rules, 2026 came into force on 8 May 2026. Anyone still quoting "Section 66 of the Factories Act" as live law is working off old notes — though state notifications issued under the old Act still shape practice until state OSH rules replace them.
- Night shift for women is the single biggest real trigger. The OSH Code's women's-employment provision permits women to work between 7 pm and 6 am subject to consent and prescribed conditions — and the Central Rules list CCTV surveillance of the workplace as one of those conditions, alongside written consent, safe pick-up and drop, lit entry/exit and pathways, and nearby toilets and drinking water.
- Retention periods come from the states, not the centre. Karnataka's 2019 night-shift conditions required CCTV footage to be kept at least 45 days — shorter than the three-month complaint window under the POSH Act, a mismatch the same commentary flags.
- The buy-side rule is hard and dated. CCTV cameras were brought under compulsory registration by gazette order S.O. 1652(E) of 9 April 2024, and MeitY's office memorandum of 16 January 2026 withdrew the remaining sell-through relaxation for pre-April-2025 stock, with effect from 1 April 2026.
- Exporters have a separate, quieter driver. AEO security criteria require documented physical security and access control at every premises where cargo is handled; in practice, assessors expect camera coverage of storage and access areas — but the AEO circular does not name CCTV as such.
The myth in the first direction: "every factory must have CCTV now"
There is no provision in the OSH Code, and no rule in the Central Rules 2026, that says a factory as such must install cameras. A 400-worker forging unit running one general shift with an all-male workforce, selling only into the domestic market, is under no statutory obligation to put up a single camera.
Where the obligation appears, it appears conditionally — attached to something you chose to do: run women at night, get AEO-certified, sell to a buyer with a security code, bid for a defence or PSU tender. That distinction is what your consultant should be charging you for, and often isn't.
The myth in the other direction: "the new rules ban CCTV"
Also wrong. What the 1 April 2026 regime bans is the sale of non-conforming cameras. Cameras must meet MeitY's Essential Requirements — secure software practices, access controls, network encryption, tamper resistance, vulnerability testing — evidenced through BIS registration under the Compulsory Registration Order. STQC certification sits on top of that as the usual gate for government and critical-infrastructure procurement rather than for a private plant's ordinary purchase. Certification bodies confirm the regime bites at the point of sale in the Indian market.
Practically: your existing installed base does not become illegal overnight, but your next purchase order must be for certified models, and spares for a discontinued non-compliant line get hard to source. That is a real capex-timing decision, not a legal panic. We work through it in BIS and STQC 2026 factory camera compliance and the approved camera list.
Reference table: when cameras actually become compulsory for you
This is the table to bookmark. Each row is a real trigger, who it binds, the primary source, and the honest caveat — because the caveat is usually where the money decision hides. Read across, not just down.
| Context — who it applies to | Is CCTV mandatory? | Where it comes from (source) | Honest caveat |
|---|---|---|---|
| Single day shift, men only, domestic sales — the default plant | No | No statute compels installation | This is where most Indian factories legitimately sit. Nothing forces a camera. |
| Women working after 7 pm / before 6 am — any factory rostering women at night | Yes, in practice | OSH (Central) Rules, 2026 conditions list CCTV of the workplace among the night-work conditions; state notifications set the rest | CCTV alone is not compliance — written consent, transport, lit paths and a working POSH committee are conditions too |
| Women night shift in Karnataka | Yes, with ≥45-day retention | 2019 state notification conditions | Confirm the notification's current status under the state's OSH rules with your inspectorate |
| Women night shift in Haryana | Yes — inside and around premises; CCTV+GPS in transport vehicles | Notification No. 11/6/2022-4Lab dated 4 July 2025 | Transport-vehicle CCTV/GPS is an explicit extra here, unlike some states |
| Women night shift in Tamil Nadu / Maharashtra (and other states) | Yes — coverage and retention conditions attach | State night-shift notifications; note some run through the Shops & Establishments route rather than factory law | The exact instrument (factory vs shops-and-establishments) and the retention number vary by state — verify the notification that binds your premises |
| Exporter seeking or holding AEO — any premises where cargo is handled | In practice yes, at cargo-handling and storage areas | AEO physical-security and access-control criteria | The AEO circular does not name "CCTV" as such — it expects documented physical security; assessors read that as camera coverage |
| Supplying a global brand with a security or social-compliance code | Yes, contractually | Buyer code of conduct — not Indian law | This obligation lives in your contract, not a statute; scope follows the buyer's audit standard |
| Bidding for defence, railway, PSU or smart-city work | Usually yes — and often certified-camera-only | Tender technical conditions + STQC certification required for government-funded CCTV deployments under the Public Procurement Order | Government procurement adds the STQC gate on top of BIS registration — a stricter bar than a private plant faces |
| Site classified as critical infrastructure (e.g. certain defence/ordnance, energy, ports) | Often yes | Sector or security-regulator conditions for that class of site | An ordinary private factory is not "critical infrastructure"; RBI's bank/ATM CCTV mandates do not reach a factory floor |
| Food-processing factory (FSSAI-licensed) | Not mandated by FSSAI nationally | No national FSSAI CCTV rule; a 2017 proposal was never enacted, though some state/municipal rules exist (e.g. Maharashtra restaurants over 50 seats) | Retail-buyer and export food-safety audits may still demand camera coverage — that is contract, not FSSAI |
| Pharma factory (Schedule M / GMP) | Not mandated by Schedule M | Revised Schedule M (2023, compliance by 31 Dec 2025) requires computerised monitoring and data integrity — not CCTV | WHO-GMP and customer audits often expect coverage of critical/dispensing areas, but the rule itself does not order it |
| Any of the above, buying from 1 April 2026 | Cameras you buy must be ER-compliant (STQC too, for government) | MeitY Essential Requirements + BIS Compulsory Registration Order | This governs which camera you may install, not whether you must have one |
The honest negatives: mandates people assume but that don't exist
Three assumptions cost owners money because they sound plausible:
- "FSSAI makes food factories install CCTV." It does not, nationally. A 2017 proposal was floated and never enacted; what exists are scattered state and municipal rules aimed mostly at restaurants and institutional kitchens, not manufacturing units. If your food plant runs cameras, it is almost always because a retail buyer or export audit asked — a contract, not a food-safety statute.
- "Revised Schedule M requires surveillance." The 2023 GMP overhaul (compliance by 31 December 2025) tightens quality systems, computerised monitoring and data integrity. It does not order CCTV. Customer and WHO-GMP audits may expect coverage of dispensing and critical areas, but that expectation is not the rule text.
- "Every plant is 'critical infrastructure' now." Almost none are. That label — and the CCTV conditions that ride with it — attaches to specific defence, ordnance, energy and port-class sites. Banking CCTV mandates (RBI, for branches and ATMs) do not reach a factory floor at all.
If one of the real triggers in the table binds you, the practical next step is to turn that row into a paper trail. We lay the paperwork out in the factory CCTV compliance checklist, map every 2026 date to a calendar in the India factory CCTV compliance calendar, and cover the single most common trigger — night-shift women — end to end in running women on the night shift: the CCTV the 2026 rules now expect.
The state layer is where owners get caught
The Central Rules 2026 bind central-sphere establishments. Most factories are in the state sphere — and states notify their own rules and their own night-shift conditions, on their own timetables. Until your state notifies, the operative conditions are often still the state's earlier night-shift notification, carried forward in substance.
That is why the answer to "how many days must I keep footage" is different in Bengaluru and in Faridabad, and why a Tiruppur knitwear unit and a Manesar auto-component unit can both be compliant with different camera counts. Check your own state's notification, not a national blog summary. We track the differences in which Indian states require CCTV for women's night shifts and give the paperwork version in the night-shift retention checklist.
Footage is personal data now — that changes the "just record everything" habit
The Digital Personal Data Protection Rules, 2025 were notified on 14 November 2025, and the government has built in an eighteen-month period for phased compliance — which puts the bulk of substantive employer obligations, including notice, purpose limitation and security safeguards, in May 2027.
Identifiable video of your workers is personal data. That means: post notice, define why you are recording, restrict who can pull footage, and delete on a written schedule rather than "whenever the disk fills." Storing five years of everything is not extra safety — it is extra liability and extra electricity. See DPDP and worker CCTV.
What cameras will not do for you
Be clear-eyed, because vendors will not be.
They do not make you compliant by themselves. The night-shift conditions also demand written consent, safe pick-up and drop from residence, lit entry, exit and pathways, displayed emergency contact numbers and POSH compliance with a functioning Internal Committee. A perfect 64-camera install with no consent letters on file fails the inspection.
They do not prevent an accident. A camera records a hand going into an unguarded press; it does not stop it. If the money choice is between a fixed guard on the press and two more cameras, buy the guard. Detection is a second layer — see machine guarding and danger-zone detection.
They create obligations you did not have. Once footage exists, it can be summoned — by a labour inspector, by a POSH inquiry, by a buyer's auditor, by a court. If your practice is bad, cameras document that it was bad. Fix the practice first.
They can wreck floor trust. Cameras pointed at rest areas, canteen tables, changing-area approaches or the union notice board buy you nothing operationally and cost you cooperation. Cover process, material, gates and hazard zones — not people at rest. Where to place cameras on the shop floor has the practical map.
More cameras ≠ more coverage. Plants routinely end up over-camera'd at the gate and blind over the finished-goods dock and the scrap yard, which is exactly where the loss is. How many cameras a factory floor needs is a layout question, not a quantity question.
So should you install, if nothing forces you?
The compliance answer and the business answer are different, and honest advice keeps them apart.
Nothing forces a single-shift, male-workforce, domestic-market plant to install cameras. But three things commonly change that decision inside a year: the first serious order from a buyer with an audit clause, the first attempt to run a third shift, and the first large inventory shrink nobody can explain. Owners who wait for one of these end up buying under deadline, at the worst price, from whoever answers the phone.
If you are going to be forced within a year anyway, buy on your own timetable — with certified hardware, a defensible retention policy and camera positions chosen for evidence and throughput rather than for the inspector's photograph. Costs are laid out in what a factory camera AI system costs in India, and if you already have DVRs on site, retrofitting analytics onto existing CCTV is usually cheaper than a rip-and-replace.
FAQ
Is CCTV mandatory in factories in India in 2026? No general statute requires every factory to install CCTV. The OSH Code 2020 and the OSH (Central) Rules, 2026 make camera surveillance a condition attached to specific situations — most commonly employing women between 7 pm and 6 am. Certification rules from 1 April 2026 govern which cameras you may buy, not whether you must have them.
Does the Factories Act 1948 still require CCTV? The Factories Act 1948 has been subsumed into the OSH Code 2020, which came into force on 21 November 2025. It never contained a CCTV mandate anyway — camera conditions came from state notifications attached to night-shift permissions. Those state conditions still shape practice during the transition to state rules under the OSH Code.
How long must factory CCTV footage be retained in India? There is no single national number. Retention comes from your state's night-shift conditions, your buyer's contract or your own policy — Karnataka's 2019 conditions specified at least 45 days. Because POSH complaints can be filed within three months, many plants deliberately retain around 90 days for the areas relevant to worker safety.
Can my workers refuse to be recorded? Not generally, where recording is for legitimate safety and security purposes on the factory premises. But under the DPDP Rules 2025, you owe them notice of what is recorded and why, restricted access, and deletion on schedule. Recording toilets, changing areas or rest spaces is not defensible under any reading.
Will non-certified cameras already installed become illegal after 1 April 2026? The Essential Requirements regime bites at the point of sale in India, not retroactively on installed equipment. Practically, plan replacements: new purchases must be ER-compliant, and non-compliant model lines will lose spares and firmware support. Tender and AEO evaluators increasingly ask for certification proof on the whole estate.
Do export buyers actually check cameras during audits? Security-focused audits and AEO assessments look at coverage of gates, storage and dispatch, plus who can access footage. Social-compliance audits care more about consent, retention and whether cameras intrude on private areas. A well-documented, narrowly-scoped system passes both; a sprawling unlogged one raises questions in the second.
Does FSSAI or pharma Schedule M require CCTV in a factory? No. FSSAI has no national CCTV mandate for food manufacturing — only scattered state and municipal rules, mostly for restaurants and institutional kitchens. The revised Schedule M (2023) tightens quality systems, computerised monitoring and data integrity but does not order CCTV. In both sectors, cameras usually appear because a retail buyer, export audit or WHO-GMP assessor expects coverage of critical areas — a contractual or audit driver, not a statutory one.
This article explains the general regulatory landscape and is not legal advice. Camera obligations turn on your state, your sector, your buyers and your specific facts, and the rules are changing through 2026–2027. Confirm what binds your plant with your factory inspectorate and a qualified labour/customs advisor before you rely on it for a purchase or a compliance decision.