• Posted by: Michael Johnson
• September 25, 2024

U.S. Proposes Ban on Chinese, Russian Tech in Connected Vehicles

The U.S. Department of Commerce (DoC) has proposed a new rule aimed at banning the import or sale of connected vehicles that integrate software and hardware produced by foreign adversaries, specifically targeting technologies from the People's Republic of China (PRC) and Russia. This initiative seeks to protect national security by preventing potential threats from foreign-made technologies embedded in critical vehicle systems.

The proposed rule focuses on two main components: the Vehicle Connectivity System (VCS) and the Automated Driving System (ADS). According to a press statement from the Bureau of Industry and Security (BIS), these systems enable external connectivity and autonomous driving capabilities in connected vehicles, making them potentially vulnerable to exploitation.

“These are the critical systems that, through specific hardware and software, allow for external connectivity and autonomous driving capabilities in connected vehicles,” the BIS stated.

The agency emphasized that unauthorized access to these systems could allow adversaries to harvest sensitive data or even remotely manipulate vehicles on American roads. The rule applies to all wheeled on-road vehicles, including cars, trucks, and buses, but excludes agricultural and mining vehicles.

The BIS identified "certain technologies" from China and Russia as posing an "undue risk" to U.S. critical infrastructure and those who rely on connected vehicles. This concern extends to potential scenarios that could undermine the national security and privacy of U.S. citizens.

"This rule marks a critical step forward in protecting America's technology supply chains from foreign threats and ensures that connected vehicle technologies are secure from the potential exploitation of entities linked to the PRC and Russia," stated Under Secretary of Commerce for Industry and Security Alan F. Estevez.

If enacted, the proposed ban would prohibit the import and sale of vehicles containing VCS or ADS hardware or software linked to China or Russia. This prohibition would also affect manufacturers with ties to these countries, preventing them from selling connected vehicles with such technologies in the U.S., even if the vehicles are assembled domestically.

The proposed timeline for implementing the prohibitions is as follows:

• Software Ban: Effective for Model Year 2027 and beyond.
• Hardware Ban: Effective for Model Year 2030, or January 1, 2029, for units without a designated model year.

In a coordinated statement, the White House supported the proposed rule, highlighting its importance for ensuring resilient and secure automotive supply chains. The administration noted that the increasing connectivity of vehicles to U.S. digital networks presents significant risks, potentially allowing foreign actors to gather and exploit sensitive information.

"Certain hardware and software in connected vehicles enable the capture of information about geographic areas or critical infrastructure, and present opportunities for malicious actors to disrupt the operations of infrastructure or the vehicles themselves," the White House noted.

This proposal comes at a time when internet-connected vehicles are being used to collect vast amounts of valuable data. In some cases, companies have been found to capture invasive videos and images using in-car cameras and even share users' driving habits with car insurance providers.

The rule aims to safeguard U.S. citizens and critical infrastructure from potential threats posed by foreign technologies, particularly as connected vehicles become more integrated with digital networks and autonomous driving capabilities. If adopted, the proposed measures will play a key role in fortifying national security against emerging technological risks.