Connected Vehicle Security Act of 2026

This bill prohibits the importation, manufacture, sale, resale, or introduction into U.S. interstate commerce of connected vehicles and related software and hardware components associated with China, Russia, Iran, or North Korea.

Connected vehicle means a vehicle that (1) integrates onboard networked hardware with automotive software systems to communicate with any other network or device using certain methods (e.g., wireless spectrum connectivity); or (2) is designed, manufactured, or originally equipped to communicate via such methods, regardless of whether such capability is enabled, disabled, or removed at the time the vehicle enters the United States.

Current regulations administered by the Department of Commerce's Bureau of Industry and Security (BIS) prohibit transactions involving vehicle connectivity system hardware and covered software designed, developed, manufactured, or supplied by persons owned by, controlled by, or subject to the jurisdiction or direction of China or Russia.

The bill expands the BIS regulatory framework, including by (1) expanding the countries covered by the prohibition to include China, Russia, Iran, and North Korea (Current BIS regulations apply only to China and Russia.); and (2) specifying that certain artificial intelligence components are covered by the prohibition.

Summary by the Congressional Research Service.