Connected and vulnerable: cybersecurity in vehicles

Figures & data

Table 1. Overview of relevant instruments.

Legal framework concerning vehicles	Legal framework beyond vehicle safety
UN Regulation No. 155	EU Cybersecurity Act
UN Regulation No. 156	NIS Directive
EU General Safety Regulation	EU General Product Safety Directive
EU Regulation on type-approval of vehicles	EU Directive on contracts for the sale of goods
EU Motor Insurance Directive	EU Product Liability Directive
Standards	EU proposed AI Regulation
	National legal frameworks

Table 2. An overview of the identified principles of cybersecurity in vehicles and the contributions of each of the legislative instruments discussed.

1. No unauthorised access	2. Limitation of damage	3. Restoration of state of cybersecurity	4. Compensation	5. Legal consequences hackers	6. Preserve state of cybersecurity
UN Regulation No. 155
UN Regulation No. 156
EU General Safety Regulation 2019/2144
EU Type-approval Regulation 2018/858					EU Type-approval Regulation 2018/858
Standards	Standards	Standards	Standards (negligence)		Standards
EU Cybersecurity Act (?)
EU NIS Directive	EU NIS Directive
EU General Product Safety Directive (?)	EU General Product Safety Directive (?)
EU Directive on contracts for the sale of goods (consumer protection)		EU Directive on contracts for the sale of goods (consumer protection)
EU proposed AI Regulation					EU proposed AI Regulation
			Motor Insurance Directive
EU Product Liability Directive (incentive)	EU Product Liability Directive (incentive)		EU Product Liability Directive		EU Product Liability Directive (incentive)
National legal frameworks (incentive)			National legal frameworks	National legal frameworks (Convention on Cybercrime, Directive 2013/40/EU)	National legal frameworks (incentive)