Automotive industry warns: End of cybersecurity updates imminent

German car manufacturers plan to discontinue cybersecurity updates for their vehicles after ten years. The automotive industry warns of high subsequent costs for car owners and repair shops.

There is currently a debate about the long-term cybersecurity of vehicles. German manufacturers are planning to... ten years without any cybersecurity updates for the vehicles to provide more. Several associations, such as the Central Association of the German Motor Vehicle Industry (ZDK) and ADAC"Protection against cyberattacks in cars must not have an expiration date," reads a joint statement. Manufacturers must ensure cybersecurity throughout the entire lifespan of vehicles. mandatory as part of operational safety  .

The background is a possible end to the Maintenance of cybersecurity systemsAccording to the German Association of the Automotive Industry (VDA), providing cybersecurity support until the end of the vehicles' lifespan is "practically impossible".

"A fixed expiration date for cybersecurity would be a step backward in security policy with far-reaching consequences for road safety and consumer protection," he explains. ZDK President Thomas Peckruhn"Vehicles today are digitally networked systems – their security doesn't end on a specific date. Those who put a time limit on cybersecurity expose drivers to avoidable risks and undermine trust in modern mobility. Security must not have an expiration date!"

Rejection of manufacturer's plans to end support 

The VDA proposes a binding "EoCSS" (End of Support / End of Service) UN Regulation No. 155 proposes a regulatory-accepted end to active cybersecurity measures for vehicles that continue to participate in road traffic. A solution that lasts until the end of the vehicle's lifespan is, in fact, "an insurmountable technical, organizational, and economic challenge," according to a [document/document/etc.]. Stellungnahme.

You might also be interested in:

Operations management

Football goals and sports equipment from Schäper in craftsmanship quality

Operations management

Automechanika has its own area for young automotive professionals.

Mobility

High-tech behind glass

➡️ Currently, the regulation requires vehicle manufacturers to operate a cybersecurity management system (CSMS) by [date]. End of Life (EoL) of a vehicle type.

The industry alliance around the ZDK (German Association of Motor Trades and Repairs) considers a change to the current UN regulation irresponsible. "Ending cybersecurity updates for motor vehicles would devalue millions of vehicles overnight – not technically, but by definition," says Peckruhn. "This directly impacts owners' wallets, as costly upgrades to the digital hardware would be necessary to maintain adequate protection. This approach would deprive independent workshops of their very foundation for service and repairs." 

Do not set a time limit for cybersecurity

The practical consequences for consumers and automotive repair shops would be serious: vehicles could lose their operating permit despite being technically roadworthy, or their usability could be severely restricted. Safety risks would increase, while maintenance and repairs would become more difficult. "If updates are not released, a safe vehicle will gradually become a risk – for drivers, businesses, and all traffic," warns Peckruhn.

The associations propose a risk-based, lifetime-oriented approach prior to – as an integral part of type approval, operating permit and consumer protection: Cybersecurity must also be guaranteed beyond the end of production and reflect the reality of an aging vehicle fleet and a strong used car market. 

Especially in Germany, with its large number of older vehicles, this is crucial for security of supply, sustainability, and social participation in mobility. "Digitalization must not lead to vehicles being effectively pushed out of the system prematurely," Peckruhn continued. 

In addition to the ZDK and the ADAC, the German Federal Association of Tire Dealers and Vulcanizers (BRV), the German Rubber Industry Association (wdk), the German Association of Automotive Glaziers as the German Association of Automotive Parts Dealers (GVA) for the topic.  

Source: ZDK; VDA

DHB now also digital!Simply click here and register for the digital German Crafts Journal (DHB)!