news

Congresswoman Debbie Dingell (MI-06) today released the following statement on the Department of Commerce’s final rule to prohibit certain transactions involving the sale or import of connected vehicles integrating specific pieces of hardware and software, or those components sold separately, with a sufficient nexus to the People’s Republic of China (PRC) or Russia. 

“As our vehicles become smarter, safer, and increasingly connected, it’s important we’re taking action to mitigate security risks, especially when this technology is coming from countries of concern, like China and Russia. An investigation by the Department of Commerce concluded that technology from these adversarial countries poses a real risk both to consumers and to American infrastructure,” Dingell said. “For example, we know that Chinese automakers are deploying autonomous vehicles in the U.S. for surveillance and data collection, meanwhile banning American vehicles from their own streets. This rule is an important step to combat the real threat that foreign-made connected vehicle technology poses. We must maintain our leadership at the forefront of the global auto industry in a way that protects Americans’ privacy and safety and strengthens our national security.”

The final rule establishes that hardware and software integrated into the Vehicle Connectivity System (VCS) and software integrated into the Automated Driving System (ADS), the systems in vehicles that allow for external connectivity and autonomous driving capabilities, present an undue and unacceptable risk to national security when designed, developed, manufactured, or supplied by persons with a sufficient nexus to the PRC or Russia. Malicious access to these critical supply chains could allow our foreign adversaries to extract sensitive data, including personal information about vehicle drivers or owners, and remotely manipulate vehicles.   

Today’s final rule prohibits the import of VCS hardware or connected vehicles containing such hardware, and the import and sale of vehicles containing VCS or ADS software, with a sufficient nexus to the PRC or Russia. VCS is defined as the set of systems that allow the vehicle to communicate externally, including telematics control units, Bluetooth, cellular, satellite, and Wi-Fi modules. ADS includes the components that collectively allow a highly autonomous vehicle to operate without a driver.  

The rule also prohibits manufacturers with a sufficient nexus to the PRC or Russia from selling new connected vehicles that incorporate VCS hardware or software or ADS software in the United States, even if the vehicle was made in the United States.    

The software-related prohibitions will take effect for Model Year 2027. The hardware-related prohibitions will take effect for Model Year 2030, or January 1, 2029, for units without a model year. Prohibitions on the sale of connected vehicles by manufacturers with a sufficient nexus to the PRC or Russia, even if manufactured in the United States, take effect for Model Year 2027.

Last year, Dingell sent a letter to the Department of Commerce urging them to take action to address the privacy and security risks and trade implications posed by connected vehicle technology manufactured and controlled by foreign adversaries, including China.