Auto cybersecurity rules in works; framework to be ready in six months

New Delhi: India has begun work on a stringent cybersecurity compliance framework that will apply to all new vehicles sold in the country, officials said. The government initiative follows recent instances of unauthorised tampering of e-rickshaw batteries through mobile apps.

The proposed framework mandating cybersecurity safeguards would be ready in the next six months, one of the officials told ET.

"We are evaluating the interventions required," the official said, adding that the safeguards under the proposed framework will emphasise on hacking-proof ability compliance for all new vehicles sold in the country.


Features where drive data is collected, processed, and used to give commands to the vehicle are being examined, the official said. He said the possibility of improving cybersecurity of existing connected vehicles through over-the-air updates is also being examined.

Also read | Govt proposes three-year PUCC validity for BS-VI vehicles

While the government banned mobile apps used for hacking e-rickshaw batteries, concerns have surfaced about a possible sabotage of semi-autonomous vehicles having the latest driver assist technologies such as automatic parking, braking, and lane assist.

According to a Niti Aayog assessment, 90% of all passenger vehicles sold in 2030 will be advanced driver assistance systems (ADAS)-enabled with safety features such as lane departure warning, adaptive cruise control, and automatic emergency braking.

The Centre is also in discussions over collection of data by these new-age vehicles.

Also read | New ₹ coming: Why Indian govt wants new banknotes and how these currencies will help

"These vehicles share their location over the internet and process vast information regarding surroundings," a second official said, adding the government is examining whether vehicle makers are storing and utilising the commuter and driver data in compliance with appropriate frameworks such as the Digital Personal Data Protection Rules (DPDP), 2025.