Hikvision Falsely Claims Security Endorsed By UK Government

Hikvision claims the UK government "endorses the security credentials of Hikvision’s products," but the UK government directly denied this to IPVM.

Moreover, Hikvision's public announcement falsely declared a "decision allowing our products to continue being used in private and public sector buildings."

To the contrary, the UK government confirmed to IPVM that it continues to ban PRC China surveillance equipment - including Hikvision - from its "sensitive sites" since November 2022, publicly detailing those 67+ sites in September 2023. (In a letter to partners, Hikvision did disclose this.)

In this post, IPVM examines Hikvision's claims, a response from the Chief Press Officer of the UK Cabinet, a statement from the Minister of State, and a letter from the UK Chief Security Officer.

Claims UK Government "Endorses" Its Security

Hikvision UK, via its Public Affairs Director Justin Hollis, declared that:

[...] The Government’s decision endorses the security credentials of Hikvision’s products and adds to a growing consensus around the safety and integrity of Hikvision technology across the UK and Ireland, as well as internationally. [emphasis added]

'Not Any Such Thing': UK Government Denies

However, the UK government denied that the "sensitive sites" ban's scope represents any kind of endorsement of a company's security.

"There's not really any such thing as an endorsement," Chief Press Officer of the UK Cabinet Daniel Hatton told IPVM. "It's not like the UK government goes around endorsing different companies."

The fact that the ban targets central government buildings - rather than most public bodies such as police - reflects the fact the UK central government has limited jurisdiction over local authorities, Hatton said.

"We have not reduced [the ban's scope]," Hatton said, explaining "we have our [own] jurisdiction that we look after."

Hatton also pointed out that local authorities are free to institute their own similar bans. Indeed, many UK local authorities have done this, such as the Scottish capital Edinburgh.

Note that the UK Cabinet Office is the UK's chief executive authority, similar to the White House in the US. It is the same entity that announced/oversees the ban.

"In No Way Is This An Endorsement"

Another UK government official remarked, "in no way is this an endorsement" of private or public sector institutions using PRC surveillance tech:

I went on to reiterate that our commitment does not extend to the wider public sector. However, in no way is this an endorsement of the use of such surveillance equipment by these organisations or by organisations in the private sector. Indeed, these organisations may instead choose to mirror our action. I believe that some of them already have, including the police. [emphasis added]

These comments were made on October 25 by Minister of State Baroness Neville-Rolfe, the same UK official who detailed the ban in September 2023.

Letter Cited By Hikvision Examined

Hikvision made the 'endorsement' claim by citing an August 2023 letter from the UK Chief Security Officer Vincent Devine.

However, the letter contains no endorsement. Rather, it states the ban does not apply to private individuals or public bodies outside the central government:

The policy represents instruction and advice to central government departments. It does not apply to private individuals or businesses or other public authorities (outside the central government estate) and was not intended to be relied upon by such persons in relation to their own use of visual surveillance equipment. The policy did not respond to any specific request for a ‘ban’ on the use of Hikvision products [emphasis added]

This is accurate since the central UK government has limited legal purview over what private individuals and local authorities can or cannot buy.

PRC Firms "Could Threaten National Security"

The UK says its ban protects it from "companies which could threaten national security", per comments made by Minister for the Cabinet Office Jeremy Quin in June 2023.

The ban impacts 67+ facilities, including Buckingham Palace, the Parliaments of England, Scotland, and Wales, the UK's top intelligence and military facilities, nuclear power stations, and more.

The ban targets all companies subject to the PRC Intelligence Law (effectively, all PRC companies including Hikvision) because this law mandates PRC firms cooperate with PRC intelligence.

Hikvision Reconfirms UK Commitment

On October 24, Hikvision UK issued an "Operations Update" "reconfirming its commitment to the UK market" while claiming its products can "continue being used" in "public sector buildings":

Today, Hikvision is reconfirming its commitment to the UK market. Following extensive UK Government engagement with Hikvision, and with the relevant legislation in the Procurement Bill having been debated and approved by all sides across the two Houses of Parliament, we welcome the decision to allow our products to continue being used in private and public sector buildings. [emphasis added]

In its longer Hikvision letter to UK & Ireland partners, Hikvision correctly notes the ban "applies to sensitive sites on the central government estate where security considerations are always paramount – for example, defence and intelligence facilities."

Spread By UK Partners

Two Hikvision partners, ADK Security and DVS, have spread this message without noting the UK government's denials.

Risks Misleading UK Dealers And End Users

Hikvision's false claim about being UK government-endorsed risks misleading UK end users. While the sensitive site's ban is indeed partial, it reflects a UK consensus that PRC devices pose a potential national security threat.

There are still many facilities, including non-defense related ones such as civilian power plants and royal buildings, banning PRC surveillance equipment, so caution is still warranted.

Hikvision No Response

Hikvision did not respond to comment requests from IPVM. If it does, we will update it.