On September 29, 2021, the First Department of Equipment Industry of MIIT and Cybersecurity Administration held a publicity session on the Opinions on Strengthening the Access Management of ICV Manufacturers and Products (hereinafter referred to as “the Opinions”). This session made requirements for relevant participants in ICV industries.

The Opinions was first issued by the Ministry of Industry and Information Technology (MIIT) on August 12, 2021. This document was made in accordance with several regulations to help promote the sustainable development of the ICV industry. These regulations include the Road Traffic Safety Law of the People's Republic of China, Cybersecurity Law of the People's Republic of China, Data Security Law of the People's Republic of China, and the Measures for Access Management of Road Motorized Vehicles Manufacturers and Products.

The Opinions consist of 5 parts that include 11 detailed requirements listed below:

  l   strengthening data security and cybersecurity management

  l   regulating software online update

  l   clarifying manufactures' responsibility in updating security

  l   no online update auto-driving function without government permission

  l   strengthening product management

  l   strictly in line with informing responsibilities

  l   strengthening security management on auto-drive products

  l   defining functions that the products should possess

  l   supporting policies

  l   building self-inspection system

  l   strengthening supervision

The following requirements and information were mentioned during September 29th’s publicity session:

1. Manufactures should follow new shifts within ICV development and strengthen the security management of vehicles (including data security, cybersecurity, upgrading, functions and expected functions of software) to ensure product quality and consistency.

2. Local authorities, testing institutions and industrial organizations should cooperate with vehicle manufacturers to implement the Opinions.

According to the requirements of the Opinions, MIIT is very likely to further release more official documents with detailed implementation rules. Meanwhile, the development of relevant key standards is in the pipeline to help foster these document’s implementation.

To maintain compliance and promote market access for their products, BESTAO suggests that relevant MNCs and foreign stakeholders in China conduct a self-evaluation of the data security, cybersecurity and online upgrading in accordance with the requirements illustrated in this document.

If you need more information or any help on the topic, please contact:

assistant@bestao-consulting.com