What the auto industry is asking for
CNET reported on September 5, 2026 that the Alliance for Automotive Innovation had urged US congressional leaders to pass a permanent ban on the sale, import and manufacture of Chinese connected vehicles, hardware and software before the current Congress ends. The group represents major automakers and suppliers, so its letter is an industry advocacy position rather than a government security finding.
The request covers more than complete vehicles. It would also reach connected components and software that enable communications or automated driving. The Alliance argues that such systems can collect and transmit sensitive vehicle and consumer data and says a statutory ban would give the policy a more durable basis. Congress has not enacted the requested prohibition, and the letter does not by itself change what manufacturers or consumers may buy.
Existing US rules already restrict key technology
The proposal arrives on top of a federal rule finalized by the Commerce Department's Bureau of Industry and Security in January 2025. That rule targets vehicle connectivity hardware and software, as well as automated-driving software, when it has a sufficient nexus to China or Russia.
The restrictions are phased. BIS says prohibitions on covered software and on sales by connected-vehicle manufacturers with the relevant China or Russia nexus apply from model year 2027. Restrictions on covered connectivity hardware apply from model year 2030, or January 1, 2029 for hardware without a model year. The rule covers passenger vehicles below 10,001 pounds and includes authorization and declaration mechanisms for some lower-risk or exceptional transactions.
That distinction matters. The current framework regulates defined technologies, suppliers and model years. The Alliance is asking lawmakers for a broader permanent statute that explicitly covers Chinese vehicles, hardware and software. The scope, exceptions and interaction with the existing BIS process would depend on the final text of any bill.
Privacy and supply-chain implications
Modern cars combine cellular links, Bluetooth, Wi-Fi, satellite services, cameras, microphones, location data and software updates. Regulators therefore treat some vehicle systems as information and communications technology, not only mechanical components. A compromised supplier or remote service could create risks involving data access or control, but individual risk claims still need evidence tied to a particular system and threat model.
For automakers, broader legislation could push more supplier mapping, software provenance checks and redesign work across global platforms. It could also affect joint ventures and components made in one country with software developed in another. Consumers are unlikely to see an immediate change from the industry's letter, but future rules could narrow model availability or alter how connected features are sourced and certified.
What to watch next
The next concrete signal is legislative text: definitions of a Chinese manufacturer, covered hardware and software, transition dates, exemptions and enforcement authority. It will also matter whether Congress preserves the BIS authorization process or replaces it with a stricter categorical ban.
Until then, the confirmed change is political pressure from the US auto industry. The existing BIS rule remains the operative federal framework.