Connected vehicles rule: vehicle connectivity systems and automated driving systems with a China or Russia nexus (15 CFR part 791, subpart D)
Prohibits importing vehicle connectivity system hardware, and importing or selling connected vehicles that run vehicle connectivity or automated driving system software, designed, developed, manufactured, or supplied by persons owned by, controlled by, or subject to the jurisdiction or direction of China or Russia; a manufacturer with that nexus may not sell connected vehicles in the United States at all. The stated risk is compelled data sharing and remote access to vehicles on US roads. If one subcomponent of an automated driving system is supplied from that nexus, the whole software suite is treated as such. Importers and manufacturers file annual Declarations of Conformity with recordkeeping; specific and general authorizations and advisory opinions are available.
Draft mapping. Drafted by the Register's agents from the rule's text and not yet confirmed by a person. It is the Register's reading, not legal advice: whether and how the rule applies to you is a question for counsel.
Controls this rule maps to
Required by the text The rule's text requires a measure that is this control, or plainly includes it. Implied A binding rule whose purpose needs this control, but whose text does not name it. The Register's reading. Recommended A voluntary standard or guidance recommends it; nothing binds you to it. Proposed Appears in a proposed rule or proposed provision that is not yet in force.
| Control | Strength | Where in the rule, and why | Confidence | Missing or failed in |
|---|---|---|---|---|
| Provenance of the actor's software and hardware C-A3 | Required by the text | §§ 791.302–791.304: prohibited hardware, covered software (vehicle connectivity and automated driving system software), and manufacturer transactions with a China or Russia nexus | high | 1 case |
| Containment and isolation C-E5 | Implied | the rule's stated purpose: removing a path by which a foreign party could reach vehicle systems remotely through the connectivity system | medium | 5 cases |
| Reporting integrity C-V2 | Required by the text | § 791.305: annual Declaration of Conformity, with records kept and material changes reported within 60 days | high | 1 case |