New EU regulation for cybersecurity in new cars

The vehicle industry is changing

On the one hand, the EU will no longer allow vehicles that run on petrol or diesel from 2035, and on the other, autonomous driving is set to become a reality in the near future.

Another important topic is the Cybersecurity. In the European Union, a Cybersecurity Management System (CSMS) has been mandatory for all newly developed vehicle types since July 2022 and for all new vehicles from July 2024. For vehicle development, these regulations mean that cybersecurity must be taken into account at a very early stage.

From July 7, 2024, new rules for software and data security in cars will come into force in the EU. After some car manufacturers are unable to comply with the rules for some of their vehicle types, they will simply be removed from the range.

Prominent victims

The best-known victim is probably the VW Up. But well-known models such as the T6.1 and the Porsche Maca, Cayman and Boxter models are also affected.

Some Skoda and Seat models, the Renault Zoe and the two-seater Smart from Mercedes Benz will also be discontinued. According to the companies, it would be too expensive to redevelop the electronic architectures.

The regulation can only be circumvented if the vehicles are not only produced and delivered, but also registered by July 7, 2024.

Exceptions confirm the rule

One exception is the T6.1 California motorhome version, for which orders are still being accepted at short notice, as motorhomes are only affected by the regulation from September 1. 

Here you can clearly see how difficult it is for the industry to present its products to Hacker attacks to protect them. A large part of the automotive industry is also not yet prepared for the new regulation — even though it has been in force for new cars since 2022.

Everyone is in demand

But this challenge does not only affect car companies! Vulnerabilities and security gaps can occur throughout the entire supply chain.

While cyber criminals know their way around the IT playing field, IT security is still uncharted territory for many companies in the automotive sector.

Which should be urgently remedied, because the next steps in networking, such as “over the air” updates or data connection with the infrastructure (such as traffic lights), are already in the pipeline. And the safety rules will not be limited to the EU, as they originate from the UNECE, the UN transport organization.

How secure is your company? Find out out!