The US Department of Commerce (DoC) said it is proposing to ban the import or sale of connected vehicles that incorporate software and hardware made by foreign adversaries, particularly the People’s Republic of China (PRC) and Russia.
“The proposed rule focuses on hardware and software integrated into the vehicle connectivity system (VCS) and software integrated into the automated control system (ADS),” according to the Bureau of Industry and Security (BIS). said in a press statement.
“These are critical systems that enable external connectivity and autonomous driving capabilities in connected vehicles through dedicated hardware and software.”
The agency said nefarious access to such systems could allow adversaries to collect sensitive data and remotely manipulate cars on American roads.
The offer applies to all wheeled road vehicles such as cars, trucks and buses. Farm and quarry equipment not included.
The BIS said that “certain technologies” from China and Russia pose an “undue risk” to critical U.S. infrastructure and those who rely on connected vehicles, leading to a potential scenario that could undermine national security and the privacy of U.S. citizens. .
“This rule marks an important step forward in protecting US technology supply chains from external threats and ensures that connected vehicle technologies are protected from potential exploitation by entities linked to the PRC and Russia,” said Commerce Under Secretary for Industry and Security Alan F Esteves.
Under the ban, the import and sale of vehicles with certain VCS or ADS hardware or software associated with China or Russia would be prohibited.
It also aims to bar manufacturers with ties to the PRC or Russia from selling connected vehicles in the US that include VCS hardware or software or ADS software, even if the vehicle was made domestically.
“Software bans will go into effect in the 2027 model year, while hardware bans will go into effect in the 2030 model year or January 1, 2029 for non-model year devices,” BIS said.
In a coordinated statement, the White House said the move is one to ensure the U.S. automotive supply chain is resilient and protected from external threats. He added that the growth of connecting vehicles to US digital networks creates an environment for the collection and use of sensitive information.
“Certain hardware and software in connected vehicles allow the capture of information about geographic areas or critical infrastructure and enable attackers to disrupt the operation of the infrastructure or the vehicles themselves,” the White House also noted. noted.
