The policy applies to all internet-connected CCTV models made or imported since April 9. "There's always an espionage risk," Gulshan Rai, India's cybersecurity chief from 2015 to 2019, told Reuters.