US issues final rule barring Chinese, Russian connected car tech

Summary: The U.S. Commerce Department has announced a new rule prohibiting the import of certain vehicle connectivity technologies from China and Russia, citing national security concerns. This regulation aims to prevent foreign adversaries from accessing sensitive data and potentially manipulating connected vehicles.

Threat Actor: Chinese and Russian state-sponsored cyber actors | Volt Typhoon
Victim: U.S. critical infrastructure | U.S. critical infrastructure

Key Point :

• New regulations will ban imports of vehicle connectivity systems from China and Russia.
• Connected cars with foreign technology pose a risk of hacking and data theft.
• The rule will take effect in phases, starting in January 2026 for software and January 2029 for hardware.
• Automakers must comply with annual declarations to the Commerce Department.
• The auto industry supports the rule, recognizing the need to mitigate risks from foreign adversaries.