AI-generated image NEW DELHI: A new era of cyber threats is coming to the roads. As vehicles become smarter, with more software driving systems, the risk of malware attacks is no longer science fiction. In response, road transport ministry has proposed sweeping rules to make cybersecurity and software update management mandatory for vehicles equipped with advanced systems.For the first time, the ministry has put out draft rules to make cybersecurity and software update management mandatory for certain categories of vehicles in India. The proposed cybersecurity rules will apply to passenger vehicles, commercial vehicles and tractors equipped with at least one electronic control unit (ECU) with Level-3 or higher automated driving capability.As per the proposed norms, compliance to cybersecurity and cybersecurity management system would be mandatory for new models of vehicles with Level-3 automation and above, such as Mercedes Benz S Class, Audi A8, and BMW 7 Series, from Oct. This would be applicable for existing models from next April.Vehicles capable of receiving over-the-air (OTA) software updates will be next, between April and Oct 2028, followed by all other vehicles with software update capability from Oct 2029.OTA in cars refers to wireless delivery of software, firmware, or system updates directly to a vehicle via cellular networks or Wi-Fi. This is similar to smartphone updates as it eliminates the need to visit a dealership for repairs, enhancements, or new features.As per the proposed rules, vehicle manufacturers will have to comply with Automotive Industry Standards (AIS) 189, which outlines the strict regulations and frameworks that automakers and suppliers must follow to protect connected, autonomous, and modern electronic vehicles from digital attacks, hacking, and remote firmware tampering.It also proposes mandatory implementation of AIS 190, which defines the framework for secure vehicle software updates and Software Update Management Systems (SUMS). It ensures that all OTA and manual software updates on modern connected vehicles are safe, traceable, authorized, and protected from cybersecurity threats.According to the draft notification, the proposed rules align India with the UN regulatory framework adopted in the European Union, Japan and South Korea, where cybersecurity and software update management are mandatory requirements for vehicle type approval.Get the latest India news and live updates. Download the TOI App.End of ArticleFollow Us On Social MediaVideos’Break Silos, Self-Reliance’: PM Modi Holds High-Level Meet With Union SecretariesMumbai Horror: School Bus Crushed By Falling Tree In Mumbai; One Child Dead, Five Injured’Kashmir Is Not Part Of Pakistan’: PoJK Protesters Warn IslamabadAfter Converting To Islam For Love, UP’s Ayush Malik Returns To Hinduism | Watch’This Is Bigger Than Dharmendra Pradhan’: Students Demand Reforms Not ‘Political Damage Control’Another Blow To Uddhav Thackeray: Prominent Mumbai Leader Sachin Ahir Switches Sides | WatchRs 65 Lakh House, SUV, Farmhouse: Ram Temple Donation Theft Accused’s Assets Under ScannerUPI Rolls Out in Greece; ‘Enables Instant Low-Cost Cross-Border Payments,’ Says Piyush Goyal’We’ll Cut Off Those Hands That…’: Pakistan’s Provocation Over Indus Water Amid Domestic Failure’Lose Vote, Lose Benefits’: Karnataka CM DK Shivakumar’s SIR Warning Sparks Row123PhotostoriesTrying to manage PMOS? Doctors say smoking could be undoing many of the healthy changes women work so hard to make10 quotes by Sadhguru that give a new perspective on parenting5 signs you’re destined for great things in lifePersonality test: What the woman you find attractive really tells about youIndia’s silent liver epidemic: The alarming shift from infectious diseases to lifestyle-driven liver damage that doctors can no longer ignoreIs your skin barrier crying for help? 5 warning signs you should never ignore10 beautiful baby girl names that mean peace and calmness in different languagesFrom love at first sight to divorce: Gaurav Khanna and Akanksha Chamola’s relationship timeline explainedLove quote of the day by Plato: ‘The madness of love is the greatest of heaven’s blessings’Kareena Kapoor Khan vrooms in a MINI dressed to kill in pinstriped suit with corset123Hot PicksKarnataka SIRJohn CenaSergio GorWWE Summerslam PredictionsiPhone 18 Pro data leakNoida schools timingSachin AhirDK ShivakumarAP EAPCET Result 2026Top TrendingDelhi EV Vehicle Policy 2026Bengal Refinery FireSonam RaghuvanshiFIFA World Cup 2026Monaco BlastBengaluru TechieAnukalp MishraSergei IvanovMK StalinJosh Hokit
NEW DELHI: A new era of cyber threats is coming to the roads. As vehicles become smarter, with more software driving systems, the risk of malware attacks is no longer science fiction. In response, road transport ministry has proposed sweeping rules to make cybersecurity and software update management mandatory for vehicles equipped with advanced systems.For the first time, the ministry has put out draft rules to make cybersecurity and software update management mandatory for certain categories of vehicles in India. The proposed cybersecurity rules will apply to passenger vehicles, commercial vehicles and tractors equipped with at least one electronic control unit (ECU) with Level-3 or higher automated driving capability.As per the proposed norms, compliance to cybersecurity and cybersecurity management system would be mandatory for new models of vehicles with Level-3 automation and above, such as Mercedes Benz S Class, Audi A8, and BMW 7 Series, from Oct. This would be applicable for existing models from next April.Vehicles capable of receiving over-the-air (OTA) software updates will be next, between April and Oct 2028, followed by all other vehicles with software update capability from Oct 2029.OTA in cars refers to wireless delivery of software, firmware, or system updates directly to a vehicle via cellular networks or Wi-Fi. This is similar to smartphone updates as it eliminates the need to visit a dealership for repairs, enhancements, or new features.As per the proposed rules, vehicle manufacturers will have to comply with Automotive Industry Standards (AIS) 189, which outlines the strict regulations and frameworks that automakers and suppliers must follow to protect connected, autonomous, and modern electronic vehicles from digital attacks, hacking, and remote firmware tampering.It also proposes mandatory implementation of AIS 190, which defines the framework for secure vehicle software updates and Software Update Management Systems (SUMS). It ensures that all OTA and manual software updates on modern connected vehicles are safe, traceable, authorized, and protected from cybersecurity threats.According to the draft notification, the proposed rules align India with the UN regulatory framework adopted in the European Union, Japan and South Korea, where cybersecurity and software update management are mandatory requirements for vehicle type approval.