The US Department of Commerce is proposing a ban on the import or sale of connected vehicles that integrate software and hardware from foreign adversaries [5], specifically China and Russia [5], due to national security concerns [6] [7] [9] [10].

Description

This move would effectively prevent Chinese cars and trucks from entering the US market and require American and other major automakers to remove Chinese software and hardware from vehicles in the United States. The ban targets Vehicle Connectivity System (VCS) and Automated Driving System (ADS) components that enable external connectivity and autonomous driving capabilities in connected vehicles [8]. It would also extend to vehicle software and hardware produced by Russia and potentially other US adversaries [9]. Concerns include the potential for remote sabotage [10], unauthorized surveillance [3], cyberattacks [3], and data collection by foreign adversaries [10]. The ban would essentially prohibit all vehicles manufactured in China from being sold in the US [9], with Chinese automakers able to seek exemptions [9]. The ban extends to all wheeled on-road vehicles except for agricultural and mining vehicles [5], with the goal of protecting America’s technology supply chains from foreign threats and ensuring the security of connected vehicle technologies [5]. The regulation would make software prohibitions effective in the 2027 model year [9], with the hardware ban taking effect in the 2030 model year or January 2029 [9]. The Commerce Department is seeking public comments on the proposal and aims to finalize it by Jan. 20 [9]. The White House supports the ban as a measure to safeguard US automotive supply chains from foreign threats and prevent malicious actors from disrupting infrastructure or vehicles through connected vehicle technologies [5]. The proposed rule covers connected vehicles that use network connections for various features [10], such as Bluetooth and WiFi [10]. The Alliance for Automotive Innovation [9], representing major automakers [9], has stated that some manufacturers may need more time to comply with the proposed regulations [9]. Interested stakeholders are encouraged to provide input as the final rule is developed under the Bureau of Industry and Security’s (BIS) ICTS authorities, incorporating public feedback from an Advance Notice of Proposed Rulemaking [8]. This move is part of a broader effort to secure supply chains in key computing technology between the US and China [10], with the Commerce Department aiming to issue a final regulation before the end of the Biden administration [10], with a 30-day public comment period [7] [10]. The Chinese government has denied US allegations of embedding hackers in US infrastructure and opposes the US’s actions against Chinese companies [10]. This ban follows a previous ban on products and services from Russian cybersecurity firm Kaspersky Lab [10]. The Biden administration’s proposed ban on Chinese- and Russian-made hardware and software in internet-connected vehicles in the United States is intended to safeguard cars that can communicate externally [1], providing a route for US adversaries to access and collect data and remotely manipulate cars on American roads [1]. Connected vehicles are seen as a potential threat due to the large amount of information they gather through sensors and cameras [1]. US Secretary of Commerce Gina Raimondo highlighted the risks posed by foreign adversaries having access to this information [1], emphasizing the importance of protecting national security and the privacy of US citizens [1]. The ban is not about trade or economic advantage but is a strictly national security action [1]. President Biden’s executive order in February aimed to strengthen the country’s ability to respond to cybersecurity threats [1], particularly from China [1] [2]. The White House initiative is part of a larger effort to address vulnerabilities for potential foreign interference [1]. The prohibitions on Chinese and Russian software in connected vehicles will take effect for the 2027 model year [1], while prohibitions on hardware will take effect for the model year of 2030 [1]. The ban will cover vehicle connectivity systems and automated driving systems [2] [4], including hardware components and software for networking modules [2]. Import restrictions will apply to components with ties to China or Russia [2], affecting vehicles operating on public roads [2]. Interested parties will have 30 days to submit feedback before the rules are finalized [2], with restrictions set to take effect in 2029 [2]. Initiatives to support small and medium-sized automakers include a grant to boost Michigan’s electric vehicle supply chain and a fund to invest in automakers and component suppliers [2].

Conclusion

The proposed ban on Chinese and Russian software and hardware in connected vehicles in the United States is a significant step towards safeguarding national security and protecting against potential threats posed by foreign adversaries. The regulation aims to secure supply chains and ensure the safety and privacy of US citizens. Interested stakeholders are encouraged to provide feedback as the final rule is developed [4], with restrictions set to take effect in the coming years. This move underscores the importance of addressing cybersecurity threats and strengthening defenses against potential foreign interference in connected vehicle technologies.

References

[1] https://www.cbsnews.com/news/biden-administration-proposes-ban-on-chinese-russian-software-in-cars/
[2] https://siliconangle.com/2024/09/23/us-moves-ban-import-certain-connected-vehicle-parts-china-russia/
[3] https://www.csoonline.com/article/3538831/us-to-ban-connected-vehicle-tech-from-china-russia-due-to-national-security-risks.html
[4] https://www.whitehouse.gov/briefing-room/statements-releases/2024/09/23/fact-sheet-protecting-america-from-connected-vehicle-technology-from-countries-of-concern/
[5] https://thehackernews.com/2024/09/us-proposes-ban-on-connected-vehicles.html
[6] https://www.npr.org/2024/09/23/nx-s1-5122472/china-russia-car-parts
[7] https://insideevs.com/news/734717/china-ban-evs-software-commerce/
[8] https://www.bis.gov/press-release/commerce-announces-proposed-rule-secure-connected-vehicle-supply-chains-foreign
[9] https://www.nbcnews.com/news/world/biden-proposes-banning-chinese-technology-connected-cars-us-roads-rcna172381
[10] https://www.cnn.com/2024/09/23/tech/us-car-software-ban-china-russia/index.html