The bill aims to address security risks from foreign adversaries' control of connected vehicles. It emphasizes concerns about economic security, industrial competitiveness, and technological leadership, highlighting threats of surveillance, espionage, and cyber intrusion. The bill prohibits the importation, manufacturing, sale, or resale of connected vehicles, covered software, and hardware posing a national security threat. It also establishes regulations, authorizations, penalties, and requires annual reports. The bill aims to mitigate national security risks associated with connected vehicles and maintain supply chain integrity. It addresses severability, restoration of regulations, delayed implementation, treatment of prior exclusions, and mandates a rulemaking process for their continuation or modification.
Connected Vehicle Security Act of 2026
This bill prohibits the importation, manufacture, sale, resale, or introduction into U.S. interstate commerce of connected vehicles and related software and hardware components associated with China, Russia, Iran, or North Korea.
Connected vehicle means a vehicle that (1) integrates onboard networked hardware with automotive software systems to communicate with any other network or device using certain methods (e.g., wireless spectrum connectivity); or (2) is designed, manufactured, or originally equipped to communicate via such methods, regardless of whether such capability is enabled, disabled, or removed at the time the vehicle enters the United States.
Current regulations administered by the Department of Commerce's Bureau of Industry and Security (BIS) prohibit transactions involving vehicle connectivity system hardware and covered software designed, developed, manufactured, or supplied by persons owned by, controlled by, or subject to the jurisdiction or direction of China or Russia.
The bill expands the BIS regulatory framework, including by (1) expanding the countries covered by the prohibition to include China, Russia, Iran, and North Korea (Current BIS regulations apply only to China and Russia.); and (2) specifying that certain artificial intelligence components are covered by the prohibition.
By January 1, 2027, BIS must publish a list of items that are authorized for the importation, manufacture, sale, resale, or introduction into U.S. interstate commerce and would otherwise be subject to the bill's prohibition.
The bill also includes enforcement mechanisms, including that BIS must assess civil penalties for violations of the prohibition.
