Connected Vehicle Security Act of 2026

In this Act:

(1) Automated driving system. The term automated driving system means hardware and software that, collectively, are capable of performing the entire dynamic driving task for a connected vehicle on a sustained basis, regardless of whether it is limited to a specific operational design domain.

(2) Connected vehicle

(A) In general. Except as provided by subparagraph (B), the term connected vehicle means a vehicle driven or drawn by mechanical power and manufactured primarily for use on public streets, roads, and highways, that—

(i) integrates onboard networked hardware with automotive software systems to communicate via dedicated short-range communication, cellular telecommunications connectivity, satellite communication, or other wireless spectrum connectivity with any other network or device; or

(ii) is designed, manufactured, or originally equipped to communicate via such methods, regardless of whether such capability is enabled, disabled, or removed at the time of importation, manufacture, sale, resale, or introduction of the vehicle into interstate commerce in the United States.

(B) Exclusion. The term connected vehicle does not include a vehicle operated only on a rail line.

(3) Connected vehicle hardware. The term connected vehicle hardware means—

(A) a vehicle connectivity system; and

(B) vehicle connectivity system hardware.

(4) Country of origin. The term country of origin, with respect to an item, means the country—

(A) in which the item is manufactured; or

(B) the government of which owns or controls, or has jurisdiction or direction over—

(i) the entity manufacturing the item; or

(ii) the entity supplying the item.

(5) Covered country. The term covered country means—

(A) the Democratic People's Republic of North Korea;

(B) the People's Republic of China;

(C) the Russian Federation; and

(D) the Islamic Republic of Iran.

(6) Covered software. The term covered software—

(A) means the software-based components installed in or on a connected vehicle, or designed to be installed in or on a connected vehicle, including application, middleware, and system software, executed by the primary processing unit or units of an item that directly enables the function of a vehicle connectivity system or automated driving system at the vehicle level; and

(B) includes any machine-learning model or other artificial intelligence component that directly enables decisionmaking or control of an automated driving system at the vehicle level.

(7) Electric vehicle. The term electric vehicle has the meaning given that term in section 3 of the Electric and Hybrid Vehicle Research, Development, and Demonstration Act of 1976 (15 U.S.C. 2502).

(8) Importation. The term importation has the meaning given the term import in section 1001 of the Controlled Substances Import and Export Act (21 U.S.C. 951).

(9) Resale

(A) In general. The term resale, with respect to an item, means the transfer of ownership of the item by an individual or entity that acquired the item for the purpose of transfer in the ordinary course of business, and not for the use of or consumption by the individual or entity.

(B) Exclusion. The term resale does not include the transfer of a connected vehicle that was previously titled or registered to, and used by, a consumer or end-user or was acquired for bona fide use, lease, or operation by the individual or entity transferred the vehicle.

(10) Safety equipment. The term safety equipment, with respect to a vehicle, means air bags, air bag inflators, and seatbelt systems.

(11) Secretary. The term Secretary means the Secretary of Commerce, acting through the Under Secretary of Commerce for Industry and Security.

(12) Transaction. The term transaction—

(A) means any acquisition, importation, transfer, installation, dealing in, or use of any item subject to a prohibition under section 4(a), including ongoing activities, such as managed services, data transmission, software updates, repairs, or the platforming or data hosting of applications for consumer download; and

(B) includes—

(i) any other transaction, the structure of which is designed or intended to evade or circumvent this Act; and

(ii) a class of transactions.

(13) Vehicle connectivity system. The term vehicle connectivity system means a vehicle connectivity system hardware or covered software item installed in or on a connected vehicle, or designed to be installed in or on a connected vehicle, that directly enables the function of transmission, receipt, conversion, or processing of radio frequency communications at a frequency over 450 megahertz.

(14) Vehicle connectivity system hardware. The term vehicle connectivity system hardware—

(A) means software-enabled or programmable components that—

(i) are installed in or on a connected vehicle or designed to be installed in or on a connected vehicle;

(ii) are directly connected to a vehicle connectivity system; and

(iii) directly enable the function of a vehicle connectivity system or are part of an item that directly enables the function of a vehicle connectivity system; and

(B) includes—

(i) microcontrollers, microcomputers or modules, systems on a chip, networking or telematics units, cellular modem/modules, Wi-Fi microcontrollers or modules, Bluetooth microcontrollers or modules, satellite communication systems, other wireless communication microcontrollers or modules, external antennas, digital signal processors, and field-programmable gate arrays;

(ii) electronic systems integrated into a battery that directly enable or control the monitoring, management, security, or external communication of battery performance or operation, including any transmitter or interface component that performs such functions; and

(iii) safety equipment.