Commerce Dept. to look at privacy, cyber risks from Chinese-sourced connected vehicle equipment

The U.S. Department of Commerce, via the Bureau of Industry and Security, is launching an advance notice of proposed rulemaking to evaluate national security risks from connected vehicles and related technologies sourced from China and other adversaries, citing data exfiltration and potential remote disruption threats. Drawing on authorities from prior executive orders, officials highlight the growing software-driven nature of vehicles, China’s legal leverage over domestic firms, and demonstrated vulnerabilities in vehicle APIs and fleet management systems, and seek public comments on definitions, critical components, risks, mitigations, and bug bounty practices.