EU’s latest automotive cybersecurity regulations raise concerns about model discontinuation and increased surveillance efforts

The European Union’s new cybersecurity regulations are causing a stir in the automotive industry, leading to the discontinuation of several older models. These regulations mandate stringent cybersecurity measures in vehicles in response to the increasing threat of cyber attacks on modern cars.

In today’s technologically advanced world, modern cars are equipped with a myriad of cameras and high-tech sensors that support various safety and convenience systems. While these advancements have revolutionized the driving experience, they have also made vehicles vulnerable to cyber attacks and hacking attempts. This has prompted global regulatory bodies like the United Nations and the European Union to introduce strict rules regarding cybersecurity in automobiles.

The United Nations regulation R155, in force since July 2022, mandates a management system by automotive OEMs to address cybersecurity threats. Additionally, R156 ensures that vehicle software updates are conducted securely to protect against cyber threats. These regulations apply to all new vehicles sold in the European Union from July 7, 2024, emphasizing the seriousness of the cybersecurity issue in the automotive industry.

The introduction of these regulations has forced several automakers to discontinue older models in the European market. Models from brands like VW, Porsche, Audi, Renault, and Smart are among those affected. Mercedes-Benz claims to be well-prepared for the new regulations and states that their portfolio will not be impacted. Concerns have also been raised about data privacy and surveillance, with experts warning about the potential for modern vehicles to be used as “spying machines on four wheels” transferring sensitive data to manufacturers.

A recent study conducted by the German Center of Automotive Management and Cisco Systems highlights the vulnerability of modern vehicles to cyber attacks, especially with the rise of software-defined vehicles and interconnected supply chains. The introduction of strict regulations by global regulatory bodies reflects the seriousness of the issue and the need for automakers to prioritize cybersecurity in their vehicles.