Automakers with global supply chains are facing a significant compliance challenge as Washington moves to restrict Chinese technology in connected vehicles. With cloud-linked systems now standard in modern cars, the industry is under pressure to trace the origin of embedded software before a key US deadline in March.
For eeNews Europe readers, the implications go beyond US policy. The rule is likely to reshape automotive software supply chains, affect semiconductor sourcing strategies, and influence compliance frameworks for European OEMs exporting to the US market.
Hilary Cain, head of policy at the Alliance for Automotive Innovation, described the measure as “one of the most consequential and complex auto regulations in decades. It requires a deep examination of supply chains and aggressive compliance timelines.”
The regulation targets risks associated with cameras, microphones and GPS-enabled systems that could, in theory, transmit sensitive data. Carmakers sourcing electronics from tier-one suppliers may struggle to trace embedded code that originates in joint ventures or subcontractors in China.
“The suppliers don’t want to share source code,” said Brandon Barry, founder of Block Harbor Cybersecurity. “That’s their IP.”
Eagle acquired source code from China’s Quectel and is working with OEMs to migrate software ahead of the compliance deadline, while building domestic manufacturing capacity.
“The connected vehicle rule is a major tailwind for onshoring both software development and manufacturing,” said Mark Kvamme, Eagle’s co-founder.
The transition may come at a cost. Eagle’s modules are about 10% more expensive than Chinese-made equivalents.
European suppliers are also affected. Italian tire maker Pirelli, whose smart tires connect to the cloud, is assessing options because its largest shareholder is China’s Sinochem. Potential measures include reducing Sinochem’s 34% stake or ringfencing US operations.