,i #aaeth ,,congress #ast ,session ,h4 ,r4 #cdjg ,,in ,,the ,,house ,,of ,,representatives ,july #bf1 #bjag,mr4 ,kinzinger 7for himself and ,ms4 ,clarke of ,new ,york7 introduced the following bill2 which was referred to the ,committee on ,energy and ,commerce ,a ,,bill ,to amend chapter #cja of subtitle ,,vi of title #di1 ,united ,states ,code1 to require a cybersecurity plan for highly automated vehicles1 and for other purposes4 #a4 ,cybersecurity of automated driving systems 7a7 ,in general ,chapter #cja of subtitle ,,vi of title #di1 ,united ,states ,code1 is amended by inserting after section #cjabi 7as added by section #d7 the following new section3 #cjacj4 ,cybersecurity of automated driving systems 7a7 ,cybersecurity plan ,a manufacturer may not sell1 offer for sale1 introduce or deliver for introduction into commerce1 or import into the ,united ,states1 any highly automated vehicle1 vehicle that performs partial driving automation1 or automated driving system unless such manufacturer has developed a cybersecurity plan that includes the following3 7#a7 ,a written cybersecurity policy with respect to the practices of the manufacturer for detecting and responding to cyber attacks1 unauthorized intrusions1 and false and spurious messages or vehicle control commands4 ,this policy shall include-- 7,a7 a process for identifying1 assessing1 and mitigating reasonably foreseeable vulnerabilities from cyber attacks or unauthorized intrusions1 including false and spurious messages and malicious vehicle control commands2 and 7,b7 a process for taking preventive and corrective action to mitigate against vulnerabilities in a highly automated vehicle or a vehicle that performs partial driving automation1 including incident response plans1 intrusion detection and prevention systems that safeguard key controls1 systems1 and procedures through testing or monitoring1 and updates to such process based on changed circumstances4 7#b7 ,the identification of an officer or other individual of the manufacturer as the point of contact with responsibility for the management of cybersecurity4 7#c7 ,a process for limiting access to automated driving systems4 7#d7 ,a process for employee training and supervision for implementation and maintenance of the policies and procedures required by this section1 including controls on employee access to automated driving systems4 7b7 ,effective date ,this section shall take effect #ahj days after the date of enactment of this section4 4 7b7 ,enforcement authority ,section #cjafe7;a77#a7 of title #di1 ,united ,states ,code1 is amended by inserting #cjacj1 after #cjabg14 7c7 ,clerical amendment ,the analysis for chapter #cja of subtitle ,,vi of title #di1 ,united ,states ,code1 is amended by inserting after the item relating to section #cjabi 7as added by section #d7 the following new item3 #cjacj4 ,cybersecurity of automated driving systems4 4 7d7 ,definitions ,section #cjajb of title #di1 ,united ,states ,code1 is amended-- 7#a7 in subsection 7a7-- 7,a7 by redesignating paragraphs 7#a7 through 7#ac7 as paragraphs 7#b71 7#c71 7#d71 7#e71 7#h71 7#i71 7#aj71 7#aa71 7#ab71 7#ac71 7#ae71 7#af71 and 7#ag71 respectively2 7,b7 by inserting before paragraph 7#b7 7as so redesignated7 the following3 7#a7 automated driving system means the hardware and software that are collectively capable of performing the entire dynamic driving task on a sustained basis1 regardless of whether such system is limited to a specific operational design domain4 2 7,c7 by inserting after paragraph 7#e7 7as so redesignated7 the following3 7#f7 dynamic driving task means all of the real time operational and tactical functions required to operate a vehicle in on-road traffic1 excluding the strategic functions such as trip scheduling and selection of destinations and waypoints1 and including-- 7,a7 lateral vehicle motion control via steering2 7,b7 longitudinal vehicle motion control via acceleration and deceleration2 7,c7 monitoring the driving environment via object and event detection1 recognition1 classification1 and response preparation2 7,d7 object and event response execution2 7,e7 maneuver planning2 and 7,f7 enhancing conspicuity via lighting1 signaling1 and gesturing4 7#g7 highly automated vehicle-- 7,a7 means a motor vehicle equipped with an automated driving system2 and 7,b7 does not include a commercial motor vehicle 7as defined in section #caaja74 2 7,d7 by inserting after paragraph 7#ac7 7as so redesignated7 the following3 7#ad7 operational design domain means the specific conditions under which a given driving automation system or feature thereof is designed to function4 2 and 7,e7 by adding at the end the following3 7#ah7 vehicle that performs partial driving automation does not include a commercial motor vehicle 7as defined in section #caaja74 2 and 7#b7 by adding at the end the following3 7c7 ,revisions to certain definitions 7#a7 ,if ,,sae ,international 7or its successor organization7 revises the definition of any of the terms defined in paragraph 7#a71 7#f71 or 7#ad7 of subsection 7a7 in ,recommended ,practice ,report ,j#cjaf1 it shall notify the ,secretary of the revision4 ,the ,secretary shall publish a notice in the ,federal ,register to inform the public of the new definition unless1 within #ij days after receiving notice of the new definition and after opening a period for public comment on the new definition1 the ,secretary notifies ,,sae ,international 7or its successor organization7 that the ,secretary has determined that the new definition does not meet the need for motor vehicle safety1 or is otherwise inconsistent with the purposes of this chapter4 ,if the ,secretary so notifies ,,sae ,international 7or its successor organization71 the existing definition in subsection 7a7 shall remain in effect4 7#b7 ,if the ,secretary does not reject a definition revised by ,,sae ,international 7or its successor organization7 as described in paragraph 7#a71 the ,secretary shall promptly make any conforming amendments to the regulations and standards of the ,secretary that are necessary4 ,the revised definition shall apply for purposes of this chapter4 ,the requirements of section #eec of title #e shall not apply to the making of any such conforming amendments4 7#c7 ,pursuant to section #eec of title #e1 the ,secretary may update any of the definitions in paragraph 7#a71 7#f71 or 7#ad7 of subsection 7a7 if the ,secretary determines that materially changed circumstances regarding highly automated vehicles have impacted motor vehicle safety such that the definitions need to be updated to reflect such circumstances4 4