Connected Vehicles
To protect the security of the connected vehicle (CV) supply chain, BIS released a final rule prohibiting the import or sale of certain CV and CV technologies in the United States when those products have a sufficient nexus to the PRC or Russia.
Overview
On January 14, 2025, the U.S. Department of Commerce’s Bureau of Industry and Security (BIS) issued a rule restricting the import and sale of certain connected vehicles and related hardware/software linked to China or Russia. BIS determined these transactions pose national security risks, as companies from these countries may be compelled to share data or allow remote access to connected vehicles in the United States.
The rule applies to vehicles under 10,001 pounds and introduces phased restrictions:
- Model Year 2027: Prohibits sales of connected vehicles by connected vehicle manufacturers owned by, controlled by, or subject to the jurisdiction or direction of China or Russia, and vehicles using their covered software.
- Model Year 2030 (or January 1, 2029, for non-model-year components): Prohibits the imports of VCS hardware from companies owned by, controlled by, or subject to the jurisdiction or direction of China or Russia.
Compliance requirements
Importers and manufacturers not engaging in prohibited transactions involving VCS hardware or covered software must submit annual Declarations of Conformity to BIS.
The rule also establishes:
- General Authorizations for low-risk transactions.
- Specific Authorizations to engage in an otherwise prohibited transaction.
- Advisory Opinions for guidance on compliance.
For more information on covered software and VCS hardware, please visit the subpage here.
General Authorizations
Declarations of Conformity
Advisory Opinions
Specific Authorizations
Covered Software & VCS Hardware