The Connected Vehicle Rule, finalised by the US Department of Commerce’s Bureau of Industry and Security (BIS) in January 2025, aimed to address concerns that internet-connected cars could collect sensitive data and potentially be remotely accessed through technologies such as cellular modules, Wi-Fi, Bluetooth, cameras, sensors and automated driving software. It applies to any automaker that is owned, controlled by, or subject to the direction of entities from China or Russia.