EU Auto Rules Shift Gears on Cybersecurity Standards

The EU's Euro 7 emissions standard, rolling out in phases from November, introduces explicit cybersecurity requirements for vehicle manufacturers for the first time. Beyond emission limits, manufacturers must secure data transmission related to emissions and battery durability, obtain security certificates, and demonstrate risk and threat analyses aligned with UN Regulation No. 155 on cybersecurity management systems. The move is partly driven by past scandals like Dieselgate and growing concerns about tampering with odometers and emissions data. Experts note that modern vehicles' software complexity and multi-vendor integration create significant attack surfaces, including risks to GPS, financial data, and safety-critical systems like brakes. While industry pushback is not expected to be significant—since cybersecurity is already a concern for manufacturers—integration challenges and timeline pressures may pose difficulties, especially for heavy machinery makers with lower cybersecurity maturity.