South Korea: RRA Consults on IP Camera Technical Standards
South Korea RRA Opens Consultation on IP Camera Technical Standards: Revised Scope and Security-Test Exemptions for Terminal Devices
On September 15, 2026, South Korea's National Radio Research Agency (RRA), operating under the Ministry of Science and ICT (MSIT), opened a public consultation on a proposed partial amendment to the Technical Standards for Terminal Devices (단말장치 기술기준). The draft focuses on Internet Protocol-based video surveillance devices — commonly known as IP cameras — and pursues two objectives: clarifying which products fall within the regulatory scope, and reducing duplicate testing for devices that already hold recognized information security certifications.
Stakeholders may submit comments until November 13, 2026.
Regulatory Background: How Korea Reached This Point
The consultation is the latest step in a multi-year government effort to tackle IP camera hacking in Korea, where weak or default passwords have repeatedly been exploited to access private video feeds.
November 14, 2024 – MSIT, the Personal Information Protection Commission, the Korea Communications Commission and the National Police Agency jointly announced a comprehensive package of IP camera security measures. A central commitment was to revise the telecommunications equipment technical standards under the Radio Waves Act so that manufacturers build stronger password protection into product design.
December 22, 2025 – The RRA notified the resulting amendment, which introduced mandatory secure-password requirements for video information processing devices. Under the rule:
Passwords must be at least 8 characters combining three character types (uppercase, lowercase, numbers, special characters), or at least 10 characters combining two types.
After a maximum of five consecutive incorrect entries, the device must block access for between 30 seconds and 60 minutes.
Cloud-based devices may demonstrate compliance through the separate test conditions defined in KS X 3078.
Devices that applied for conformity assessment before the effective date remained under the previous rules.
The 2026 proposal builds on this framework rather than replacing it. Having established baseline security requirements, the RRA is now fine-tuning how they apply in practice.
What the Proposed Amendment to Korea IP Camera Technical Standards Changes
1. Refined application scope for IP cameras
The draft clarifies which IP-based video surveillance devices are subject to the security provisions of the Technical Standards for Terminal Devices. Since the 2025 rule took effect, manufacturers and test laboratories have had to interpret how the requirements apply across a broad and fast-evolving product category from standalone network cameras to cloud-managed devices and multi-function products with integrated video capture. A clearer scope definition is intended to reduce interpretation gaps and inconsistent assessments.
2. Exemption from tests that overlap with information security certifications
The RRA is also considering exempting IP cameras from terminal-equipment tests that duplicate evaluations already performed under recognized information security certification schemes. Korea operates separate security assurance frameworks relevant to IP cameras, including the IoT security certification program run under MSIT and the Korea Internet & Security Agency (KISA). Where a device has already been verified against equivalent security criteria, re-testing the same functions during KC conformity assessment adds cost and time without adding assurance.
Certification Impact Summary
Area | Current situation | Proposed change | Impact on certification |
Scope of IP camera requirements | Security provisions apply to IP-based video information processing devices; boundaries can be open to interpretation | Clarified definition of which devices are covered | Fewer classification disputes; some products may move in or out of scope |
Security testing | Password and access-control functions tested during KC conformity assessment | Exemption for tests already covered by recognized information security certifications | Potentially shorter test plans and lower costs for certified devices |
Cloud-based cameras | Compliance via KS X 3078 test conditions | No change indicated in the consultation summary | Existing pathway remains |
Products already certified | Earlier applications kept prior rules | Transition provisions to be defined in the final notice | Monitor final text for grandfathering terms |
Certification mark | KC mark via RRA conformity assessment | Unchanged | KC remains mandatory before import or sale |
What This Means for Manufacturers
Scope clarity could change your product's status. IP camera makers, video door-phone and NVR-adjacent manufacturers, and producers of smart-home devices with built-in cameras should review the revised scope definition carefully. A product that was borderline under the current wording may be explicitly included or excluded under the new text.
Security certifications may become a strategic asset. If the exemption is adopted, holding a recognized Korean information security certification could translate directly into a leaner KC testing process. Manufacturers that have postponed IoT security certification because it was voluntary may want to reassess the cost-benefit balance, particularly for product families with frequent model variants.
Password and lockout requirements still apply. The consultation does not signal any relaxation of the 2025 security baseline. Firmware must continue to enforce the password complexity rules and lockout behavior described above.
Importers and foreign brands should engage now. Most IP cameras sold in Korea are manufactured overseas. Foreign manufacturers and their local representatives are directly affected and have a formal opportunity to raise practical concerns such as recognition of test reports or certification equivalence before the rule is finalized.
Timeline and Required Actions
Regulatory timeline
Date | Milestone | Status |
November 14, 2024 | Joint government IP camera security measures announced | Completed |
December 22, 2025 | RRA notifies secure-password requirements for IP cameras | Completed |
September 15, 2026 | RRA opens public consultation on partial amendment | Completed |
November 13, 2026 | Comment deadline | Open |
After consultation | RRA reviews comments and finalizes text | Pending |
To be announced | Publication of final notice and effective date | Pending |
Required actions for manufacturers
Obtain and review the draft text from the RRA or the legislative notice portal, focusing on the revised device definitions and the list of test items eligible for exemption.
Map your product portfolio against the proposed scope to identify models that may be newly covered or released from the requirements.
Inventory existing security certifications (for example, Korean IoT security certification) held for each model and match them to the potentially exempt test items.
Submit comments before November 13, 2026, particularly on certification equivalence, transition periods and treatment of products already certified.
Coordinate with your test laboratory and local representative to plan for updated test plans once the final notice is published.
Track the final notice for its effective date and any transitional provisions, and update your certification roadmap for Korea accordingly.
Conclusion
The RRA's consultation signals a maturing approach to IP camera regulation in South Korea: the security baseline introduced in 2025 remains in place, while the agency moves to remove ambiguity and avoid redundant testing. For manufacturers, the proposal offers a potential reduction in certification burden provided they understand where their products sit within the revised scope and which security credentials will count.
With the comment window closing on November 13, 2026, now is the time to review the draft and make your position known. CERTA Global Consulting monitors Korean type approval and KC certification developments and can help you assess the impact on your product portfolio.
