India Introduces Cybersecurity Regulations for Connected Vehicles

The Indian government has proposed mandatory cybersecurity regulations for connected and autonomous vehicles, set to take effect in October 2026. The Ministry of Road Transport and Highways aims to align with global standards, requiring compliance with India's AIS-189 cybersecurity standard. New rules will apply to passenger vehicles, goods carriers, and tractors with advanced Electronic Control Units (ECUs). Manufacturers must establish a Cyber Security Management System to manage risks throughout a vehicle's lifecycle. Compliance deadlines are staggered, with existing models needing to comply by April 2027 and OTA-capable vehicles by 2028. The regulations are expected to enhance data safety and cybersecurity for vehicle owners. Public feedback on the draft notification is invited for 30 days before finalization.

Key Points: • New cybersecurity rules for connected vehicles in India will be mandatory from October 2026. • Manufacturers must comply with AIS-189 standards and establish a Cyber Security Management System. • Compliance deadlines vary for new and existing models, with full implementation by 2029.