On 11 June 2025, the Connected Vehicle National Security Review Act was introduced to the United States Senate. The Act seeks to establish an Office of Information and Communications Technology and Services (OICTS) within the Department of Commerce’s Bureau of Industry and Security. The Act applies to companies involved in the supply chain of connected vehicles, those integrating networked hardware and wireless communications, particularly where components originate from jurisdictions or entities of concern, including China or Russia. It empowers the Secretary of Commerce to investigate, mitigate, or prohibit Information and Communications Technology related transactions that pose undue national security risks, including by issuing regulations, mandating cybersecurity measures, or excluding specific components. The Act requires annual risk assessments from the Director of National Intelligence, provides enforcement powers including subpoenas and inspections and imposes civil and criminal penalties.
Original source