Connected Vehicle Security Act of 2026

New rules for connected vehicles

If enacted, the bill would define what counts as a "connected vehicle," covered software, and vehicle connectivity hardware. Those definitions would take effect upon enactment and list parts like modems, Wi‑Fi/Bluetooth, microcontrollers, FPGAs, battery electronics, airbags, and seatbelt systems. It would name China, Russia, Iran, and North Korea as covered countries and exclude vehicles that only operate on rail lines. The bill would let the Commerce Secretary keep using existing BIS connected‑vehicle exclusions and require a rulemaking starting January 1, 2030 to review those exclusions. For covered software and hardware not already covered by BIS rules, bans would begin after January 1, 2030 but before January 1, 2032. If a court finally invalidates part of the Act, the Secretary could reissue earlier regulations to preserve enforcement.