EU Prepares Stricter Cybersecurity Rules for Automakers

The Europe Union is gearing up for stricter cybersecurity regulations set to come into force this summer, prompting adjustments in the portfolios of several automotive manufacturers to meet the rigorous electronic safety standards. 

The new regulations, stemming from United Nations regulations R155 and R156, aim to address the growing cybersecurity threats posed by modern vehicle technology, particularly in electric vehicles (EVs).

"It is about sensitive data that can be siphoned off — especially with electric cars. From the perspective of intelligence agencies, these cars, with their many sensors and cameras, are nothing but spying machines on four wheels,” explains Moritz Schularick, Economist, in an interview with German media Handelsblatt.

A joint study titled "Automotive Cyber Security," conducted by Germany's Center of Automotive Management (CAM) and US software giant Cisco Systems, underscores the looming risks to the automotive industry. Stefan Bratzel, CAM director and study co-author, stresses the mounting cyber threats due to the increasing connectivity and digitalization in cars, production, and logistics.

The impact of these regulations is evident as manufacturers like Volkswagen, Porsche, Audi, Renault, and Smart are phasing out older models that do not meet the new cybersecurity standards. "Otherwise, we would have to integrate a completely new electronic architecture [in the car model], which would simply be too expensive,” emphasizes Thomas Schäfer, Brand chief, VW.

In parallel, UL, a global safety science leader, has secured approval from the Netherlands Vehicle Authority (RDW) to act as a technical service for auditing and testing vehicles for compliance with UN regulations R155 and R156. This designation applies not only to the Netherlands but also extends to 64 countries worldwide, including the European Union and the United Kingdom.

UN regulations R155 and R156 mandate the adoption of measures to manage vehicle cyber risks, secure vehicles by design, detect and respond to security incidents, and facilitate safe software updates.