On August 12, 2021, the Ministry of Industry and Information Technology released the “Opinions on Strengthening the Management of Intelligent Connected Vehicle Production Enterprises and Product Access”. The following are several key points excerpted from the “Opinions”:
Data and Network Security
-
Enterprises should establish and improve the automobile data security management system, fulfill the obligation of data security protection according to laws and regulations, implement data classification and grading management, and strengthen the protection of personal information and important data;
-
Implement data security protection technology measures to ensure that data is continuously in a state of effective protection and legal use. Compliance with requirements such as data security risk assessment and data security incident reporting should be carried out according to laws and regulations;
-
Personal information and important data collected and generated during operation within the territory of the People’s Republic of China should be stored within the territory in accordance with relevant laws and regulations. If data needs to be provided to overseas, it should be evaluated for data export security. In terms of strengthening network security assurance capability, enterprises should establish automobile network security management systems;
-
Have the technical measures to safeguard automotive electronic and electrical systems, components, and functions against network threats, have technical conditions for detecting and handling automotive network security risks, network security defects, and vulnerabilities, and ensure that vehicles and their functions are protected and that vehicle safety is ensured.
Standardize Software Online Upgrades
-
Before implementing online upgrade activities, enterprises should ensure that automobile products meet relevant requirements such as laws and regulations, technical standards, and technical specifications, and file them with the Ministry of Industry and Information Technology;
-
If the upgrade involves changes in technical parameters, enterprises are required to handle change procedures in advance according to the “Method of Management for Production Enterprises and Product Access of Road Motor Vehicles”;
-
Online upgrade activities are required to ensure product production consistency. It is explicitly stated that automatic driving functions of automobiles cannot be added or updated through online software upgrades without approval.
Strengthen Product Management
-
If enterprises produce automobile products with combined driving assistance functions, they should also take technical measures such as hands-free testing to ensure that the driver always performs the corresponding dynamic driving tasks;
-
If enterprises produce automobile products with automatic driving functions, they should ensure that automobile products meet at least the requirements of system failure identification and safety response, human-computer interaction, data recording, process protection, and simulation testing and verification;
-
Ensure that automobile products have secure and reliable spatiotemporal information services and encourage support for accepting signals from the Beidou Navigation System.
Improve Protection Measures
-
Enterprises should establish self-inspection mechanisms. If serious problems such as data security, network security, online upgrade security, driving assistance and automatic driving safety are found in the products, production and sales of relevant products should be stopped immediately according to the law, and corrective measures should be taken and reported in a timely manner;
-
The Ministry of Industry and Information Technology will guide relevant institutions to do a good job in the technical review of the production access of intelligent connected vehicles, and competent authorities at all levels should cooperate with relevant departments.### Translation
The Ministry of Industry and Information Technology (MIIT) will accelerate the revision of standards and specifications related to car data security, network security, online upgrading, driving assistance, and autonomous driving. MIIT also encourages third-party service organizations and enterprises to strengthen relevant testing, verification, and inspection capabilities.
Source
🔗Source: MIIT
This article is a translation by ChatGPT of a Chinese report from 42HOW. If you have any questions about it, please email bd@42how.com.