YourVoice.Now
Back to Dashboard
S-4429Senate2026-04-29Foreign Trade and International Finance

Connected Vehicle Security Act of 2026

YourVoice.Now Summary

Your MoneyCorporate BenefitsCivil LibertiesTransparency & Accountability

Would ban new cars and car software made or designed in China, Russia, Iran, or North Korea from 2027; parts from 2030.

Your Money

Exemption for cars you already own — used sales stay allowed

The ban covers new sales by importers, carmakers, and dealers. A vehicle already titled to and used by a driver is left out, so trade-ins and used sales would still be legal.

Repair parts allowed for older cars — model year 2029 and earlier

The 2030 ban on connected parts would not apply to parts brought in to repair a 2029 or earlier model, or to honor its warranty.

Updates and repairs for banned cars — new rules could stop them

Commerce would have to write rules that block specific uses it finds risky, including software updates, data service, and repairs. Anyone named in such an order would get a certified letter naming the item.

Corporate Benefits

Protection for U.S. carmakers — rivals from four countries barred in 2027

Cars made or designed in China, Russia, Iran, or North Korea could not be sold here starting January 1, 2027. Carmakers more than 15 percent owned or controlled from those countries are covered too.

Extra time for software and parts — bans start 2030 or later

Today's Commerce rule already covers some car software and hardware from China and Russia. For anything the ban newly reaches, Commerce could not act before January 1, 2030, and must act before January 1, 2032.

Existing approvals carry over — valid until January 1, 2032

An approval granted before January 1, 2030, including one issued under today's Commerce rule, would keep working until January 1, 2032. Commerce could still change or cancel it sooner, after taking public comment.

Fines for banned sales — at least $1.5 million each

Each banned sale would cost at least $1.5 million, or five times the sale value, whichever is greater. Every day a violation continues counts as a new one.

New filing before every sale — sellers must show a vehicle is allowed

Importers, carmakers, and dealers would file a signed statement with Commerce before each sale. It would state that the vehicle or part is not banned.

Civil Liberties

Privacy guard in new cars — foreign-controlled systems barred from 2027

The bill's findings say connected cars gather location and personal data and can be reached remotely. Cars and software from China, Russia, Iran, and North Korea would be kept out of the U.S. market.

Companies' view of evidence against them — secret material stays sealed

Commerce could rely on classified information to enforce the ban. A judge could review that material in private, without the company fighting the order seeing it.

Court pause during an appeal — filing does not stop the order

Going to court would not put an enforcement action on hold. It would keep running unless the judge orders otherwise.

Transparency & Accountability

Public list of approved exceptions — first one due January 1, 2027

Commerce would publish which otherwise-banned items it has allowed, with the maker and product name where possible. It would also explain why each one is not a risk.

Congress review of each exception — 60 days to block it

Commerce would send Congress the exception and its written risk review at least 60 days ahead. The exception would not take effect if a measure blocking it becomes law in that window.

Names of firms asking for rulings — kept off the public list

Commerce would publish the items it has ruled on and update that list at least once a year. It could not publish the name of the company that asked, or anything else identifying it.

More about this bill

New cars made or designed in China, Russia, Iran, or North Korea could not be sold in the United States. That ban would start January 1, 2027. It would also reach carmakers more than 15 percent owned or controlled from those countries. The software that runs a car's network or self-driving system falls under the same date. Connected car parts follow on January 1, 2030, including cell modems, Wi-Fi chips, antennas, and air bags. Software and parts that today's Commerce rule does not already reach would start later, between 2030 and 2032. The bill's findings point to cars that collect personal and location data, and can be controlled remotely. Owning or driving the car in your driveway would not become illegal. A vehicle already titled and used could still be sold, leased, or traded in. Parts brought in to fix or honor a warranty on a 2029 or older model stay allowed. But the Commerce Department would have to write rules that can block specific uses of a banned car. Those rules could reach software updates, data service, or repairs. People named in such an order would get a certified letter that names the item. The duties would fall on importers, carmakers, and dealers, not on drivers. Each would file a signed statement that a vehicle is not banned before selling it. One banned sale would draw a fine of at least $1.5 million, or five times the sale value. The Commerce Department could allow exceptions after a written risk review. It would publish the list of allowed items by January 1, 2027. Congress would have 60 days to block each exception before it starts. Approvals granted before 2030, including ones under today's rule, would hold until January 1, 2032.

Congressional Summary

Connected Vehicle Security Act of 2026This bill prohibits the importation, manufacture, sale, resale, or introduction into U.S. interstate commerce of connected vehicles and related software and hardware components associated with China, Russia, Iran, or North Korea.Connected vehicle means a vehicle that (1) integrates onboard networked hardware with automotive software systems to communicate with any other network or device using certain methods (e.g., wireless spectrum connectivity); or (2) is designed, manufactured, or originally equipped to communicate via such methods, regardless of whether such capability is enabled, disabled, or removed at the time the vehicle enters the United States.Current regulations administered by the Department of Commerce's Bureau of Industry and Security (BIS) prohibit transactions involving vehicle connectivity system hardware and covered software designed, developed, manufactured, or supplied by persons owned by, controlled by, or subject to the jurisdiction or direction of China or Russia.The bill expands the BIS regulatory framework, including by (1) expanding the countries covered by the prohibition to include China, Russia, Iran, and North Korea (Current BIS regulations apply only to China and Russia.); and (2) specifying that certain artificial intelligence components are covered by the prohibition.By January 1, 2027, BIS must publish a list of items that are authorized for the importation, manufacture, sale, resale, or introduction into U.S. interstate commerce and would otherwise be subject to the bill's prohibition.The bill also includes enforcement mechanisms, including that BIS must assess civil penalties for violations of the prohibition.

Legislative Subjects

Administrative law and regulatory proceduresAdvanced technology and technological innovationsAdvisory bodiesAsiaChinaCivil actions and liabilityComputers and information technologyCongressional oversightDepartment of CommerceEuropeGovernment information and archivesHybrid, electric, and advanced technology vehiclesIranManufacturingMiddle EastMotor vehiclesNorth KoreaRetail and wholesale tradesRussia

Details

Congress
119th
Chamber
Senate
Status
summarized
Action
Introduced in Senate
Action Date
2026-04-29
Date Added
2026-09-01
Source
Congress.gov →

Like reading a bill in plain English?

We're building an app that does this for every bill in Congress and lets you tell your reps how you want them to vote. We're a small team getting ready to launch, and we're trying to show investors that real people want this. Be one of them. Help us get it built. Leave your email and we'll tell you the moment the app is ready.

By default, we'll only email you once — when the app launches. Unless you opt in below, you won't receive anything else. We don't share or sell your email.