US Proposes Ban on Chinese Vehicle Software, Hardware

These technologies, which are meant to promote safety, now pose “new and growing threats,” according to the White House.
“These technologies include computer systems that control vehicle movement and collect sensitive driver and passenger data as well as cameras and sensors that enable automated driving systems and record detailed information about American infrastructure,” the White House announcement reads.
The Commerce Department has concluded that location technologies could be used to capture information about or disrupt critical infrastructure, as a foreign adversary could remotely control such vehicles to use them for surveillance and data collection.
“In an extreme situation, a foreign adversary could shut down or take control of all their vehicles operating in the United States all at the same time, causing crashes, blocking roads.”
White House national security adviser Jake Sullivan highlighted the scale of the risk.
“With potentially millions of vehicles on the road, each with 10- to 15-year lifespans, the risk of disruption and sabotage increases dramatically,” Sullivan told the same briefing.
The department began collecting public comments on the issue on March 1 as part of its assessment of the risk level of these technologies. If the rule is finalized, the software ban would take effect beginning with model year 2027 cars, and the hardware prohibitions would take effect for model year 2030 cars, or on Jan. 1, 2029, for units without a model year, according to the White House. Car manufacturers told the bureau that they often do not know the source of specific component suppliers, and the delayed implementation schedule is meant to give manufacturers time to do due diligence.
The Alliance for Automotive Innovation, a group representing major automakers such as GM, Toyota, Hyundai, and Volkswagen, warned that changing software and hardware could take time. The Commerce Department is considering exemptions for the final rule to minimize supply-chain disruptions.
Under this new rule, Ford would have to halt imports of the Lincoln Nautilus, and GM, the Buick Envision. Both models are produced in China.
“We anticipate at this point that any vehicle that is manufactured in China and sold in the U.S. would fall within the prohibitions,” said Liz Cannon, who heads the Commerce Department’s information and communications technology office. GM and Ford are aware that going forward, production in China for the United States market “would need to be shut down in China and moved elsewhere,” she added.
While China exports few cars to the United States, it exports many car parts.
“In 2023, Mexico was the largest auto parts supplier to the United States, with China ranking third, but China was also the second-largest auto parts supplier for Mexico,” the letter reads. “Most Chinese companies are Tier-2 and Tier-3 suppliers but are steadily expanding their market share as Chinese car exports increase globally and progress towards manufacturing more technologically advanced components.”
These state-influenced lower prices, part of the CCP’s Made in China 2025 initiative, have helped Chinese manufacturers gain a foothold in the global supply chain, affecting the connected vehicle market as well.
Yole Group, a technology market analyst, reported that Chinese LiDAR manufacturers controlled 73 percent of the market in 2022.
LiDAR is aiding and replacing traditional sensing technologies such as cameras and radar, according to Ouster. The technology is able to map the environment in 3D with precision, within millimeters of accuracy, and in all lighting conditions.
LiDAR sensors are inherently networked devices, capturing and transmitting a continuous stream of data, typically ranging from 100 to 1,000 megabytes per second, according to Ouster. The LiDAR data are transmitted via an ethernet port to a system or device that is often connected to the internet.
If data are manipulated during transmission, it could also result in “unsafe driving conditions or even accidents,” as “attacks would attempt to spoof sensor data or jam sensor signals,” according to the Cepton brief.
In the final rule, the Commerce Department’s Bureau of Industry and Security is targeting vehicle connectivity systems and automated driving systems, which control the LiDAR technology.