A new set of rules regarding the cybersecurity and software update requirements have been proposed by the Ministry of Road Transport and Highways (MoRTH) to ensure the enhanced security of vehicles from cyberattacks in India.
The MoRTH has provided a draft notification where it requests amendment of Central Motor Vehicles Rules (CMVR), 1989, which will introduce two new rules: Rule 125-T and Rule 125-U, related to cybersecurity and software updates in certain vehicles.
Under the proposed Rule 125-T, specified categories of motor vehicles will be required to comply with Cyber Security and Cyber Security Management System (CSMS) requirements in accordance with AIS-189 standards.
The proposed rule will apply to motor vehicles in categories M, N and T fitted with at least one Electronic Control Unit (ECU), as well as L7 vehicles with Level 3 automation, as specified under AIS-189. The requirements will remain based on AIS-189 until corresponding Bureau of Indian Standards (BIS) specifications are notified under the Bureau of Indian Standards Act, 2016.
The draft also proposes Rule 125-U, which introduces mandatory Software Update Management System (SUMS) requirements for eligible vehicles.
Under the proposal, motor vehicles in categories M, N, T, A and C will be required to comply with software update and Software Update Management System requirements in accordance with AIS-190 standards. These standards will remain applicable until corresponding BIS specifications are notified under the Bureau of Indian Standards Act, 2016.
The proposed regulations will be implemented in phases depending on vehicle type and model.
For both CSMS and SUMS requirements:
In addition, the proposed CSMS framework will also apply from October 1, 2029, to vehicles that neither support software updates nor have OTA capability.
The draft amendment has been issued under Section 110 of the Motor Vehicles Act, 1988. As required under the Act, the Centre has invited objections and suggestions before finalising the rules.
The draft rules have been published for public consultation, and the Centre has invited objections and suggestions from stakeholders and the public within 30 days from the date the notification was made available to the public, after which the proposal will be considered before finalisation.
"The said draft rules will be taken into consideration after the expiry of thirty days from the date on which the copies of this notification as published in the Gazette of India, are made available to the public; The objections or suggestions which may be received from any person in respect of the said draft rules before the expiry of the aforesaid period will be considered by the Central Government," the draft notification read.
Leave a Reply