 |
The U.S. Department of Commerce (DoC) stated it's seeking a ban on the import or sale of connected cars that combine software and hardware supplied by foreign foes, notably that of the People's Republic of China (PRC) and Russia.
"The proposed rule focuses on hardware and software integrated into the Vehicle Connectivity System (VCS) and software integrated into the Automated Driving System (ADS)," the Bureau of Industry and Security (BIS) stated in a news release.
"These are the critical systems that, through specific hardware and software, allow for external connectivity and autonomous driving capabilities in connected vehicles."
The government claimed malicious access to such systems might allow enemies to gather critical data and remotely influence automobiles on American roadways.
The idea applies to all wheeled on-road vehicles such as automobiles, lorries, and buses. Agricultural and mining trucks are not covered.
The BIS claimed "certain technologies" from China and Russia offer "undue risk" to U.S. vital infrastructure, as well as people who depend on connected cars, leading to a hypothetical scenario that might endanger the national security and privacy of U.S. residents.
"This rule marks a critical step forward in protecting America's technology supply chains from foreign threats and ensures that connected vehicle technologies are secure from the potential exploitation of entities linked to the PRC and Russia," said Under Secretary of Commerce for Industry and Security Alan F. Estevez.
Pursuant to the prohibition, the import and sale of automobiles containing specified VCS or ADS hardware or software with a link to China or Russia will be forbidden.
It also intends to ban manufacturers with links to the PRC or Russia from selling connected cars that use VCS hardware or software or ADS software in the U.S., even if the vehicle was produced in the nation.
"The prohibitions on software would take effect for Model Year 2027 and the prohibitions on hardware would take effect for Model Year 2030, or January 1, 2029 for units without a model year," the BIS added.
In a synchronized statement, the White House said the action is an effort to guarantee that U.S. automotive supply networks are robust and safe from foreign threats. It said the rising connectedness of automobiles to U.S. digital networks provides an environment to capture and exploit sensitive information.
"Certain hardware and software in connected vehicles enable the capture of information about geographic areas or critical infrastructure, and present opportunities for malicious actors to disrupt the operations of infrastructure or the vehicles themselves," the White House further pointed out.
The development comes as internet-connected vehicles have increasingly become yet another avenue for companies to gather valuable data, in some cases going to the extent of capturing highly invasive videos and images via Tesla car cameras and even sharing users' driving habits with car insurance providers.