,,ii ,calendar ,no4 #fga #aaith ,,congress #b;d ,session ,s4 #ddbi ,report ,no4 #aai-adf ,,in ,,the ,,senate ,,of ,,the ,,united ,,states ,april #bi1 #bjbf,mr4 ,moreno 7for himself1 ,ms4 ,slotkin1 ,mr4 ,cotton1 ,mr4 ,schmitt1 ,mr4 ,tuberville1 ,mr4 ,ricketts1 ,mr4 ,hawley1 ,mrs4 ,capito1 ,mrs4 ,fischer1 ,ms4 ,baldwin1 ,ms4 ,lummis1 ,mr4 ,cramer1 ,mr4 ,budd1 ,mr4 ,curtis1 ,mr4 ,sheehy1 ,mr4 ,sullivan1 ,mrs4 ,blackburn1 ,mr4 ,banks1 ,mr4 ,moran1 ,mr4 ,justice1 ,ms4 ,collins1 ,mr4 ,schumer1 ,mr4 ,mc,cormick1 ,ms4 ,ernst1 ,mr4 ,cornyn1 ,mrs4 ,moody1 ,mr4 ,husted1 ,mr4 ,scott of ,florida1 ,mr4 ,gallego1 ,mr4 ,marshall1 ,mrs4 ,shaheen1 ,mr4 ,hickenlooper1 ,mr4 ,peters1 ,mr4 ,kelly1 ,mrs4 ,hyde-,smith1 ,mr4 ,padilla1 ,ms4 ,rosen1 ,mr4 ,barrasso1 ,ms4 ,hassan1 ,mr4 ,heinrich1 ,mr4 ,armstrong1 ,mr4 ,merkley1 ,mr4 ,coons1 ,mr4 ,blumenthal1 ,mr4 ,schiff1 ,ms4 ,warren1 ,ms4 ,klobuchar1 ,mr4 ,boozman1 ,mr4 ,lankford1 ,ms4 ,cortez ,masto1 ,ms4 ,smith1 and ,mr4 ,daines7 introduced the following bill2 which was read twice and referred to the ,committee on ,commerce1 ,science1 and ,transportation ,september #bb1 #bjbf,reported by ,mr4 ,cruz1 with an amendment,strike out all after the enacting clause and insert the part printed in italic ,a ,,bill ,to prohibit the importation1 manufacture1 sale1 resale1 or introduction into interstate commerce in the ,united ,states of connected vehicles and related software and hardware associated with foreign adversaries4 #a4 ,short title ,this ,act may be cited as the ,connected ,vehicle ,security ,act of #bjbf4 #b4 ,findings ,congress makes the following findings3 7#a7 ,the ,united ,states automotive industry is critical to the national economy1 supporting millions of jobs1 supply chains1 and advanced manufacturing4 ,the introduction of vehicles and components controlled by foreign adversaries threatens ,united ,states economic security1 industrial competitiveness1 and technological leadership4 7#b7 ,the ,people's ,republic of ,china has rapidly expanded its automotive manufacturing capacity and is increasingly targeting export markets4 ,despite having the largest market in the world1 the ,people's ,republic of ,china exports nearly #h1jjj1jjj vehicles annually1 approximately twice the volume exported by any other country1 demonstrating the scale at which vehicles and components controlled by a foreign adversary may enter global markets1 including the ,united ,states4 7#c7 ,connected vehicles incorporate advanced information and communications technologies that collect1 process1 and transmit vast amounts of sensitive data1 including geolocation1 operational1 and personal information1 and are capable of being remotely accessed and controlled4 7#d7 ,in ,executive ,order #achgc 7#ej ,u4,s4,c4 #agja note2 relating to securing the information and communications technology and services supply chain71 the ,president declared a national emergency with respect to the threat posed by foreign adversaries creating and exploiting vulnerabilities in information and communications technology and services4 7#e7 ,the access1 control1 or influence of vehicle connectivity systems or automated driving systems by foreign adversaries creates substantial economic and national security risks to the ,united ,states1 including risks of surveillance1 espionage1 cyber intrusion1 and disruption of critical infrastructure4 ,such risks fall within the scope of the national emergency described in ,executive ,order #achgc and pose an unacceptable threat to the security and resilience of the ,united ,states4 #c4 ,definitions ,in this ,act3 7#a7 ,automated driving system ,the term automated driving system means hardware and software that1 collectively1 are capable of performing the entire dynamic driving task for a connected vehicle on a sustained basis1 regardless of whether it is limited to a specific operational design domain4 7#b7 ,connected vehicle 7,a7 ,in general ,except as provided by subparagraph 7,b71 the term connected vehicle means a vehicle driven or drawn by mechanical power and manufactured primarily for use on public streets1 roads1 and highways1 that-- 7i7 integrates onboard networked hardware with automotive software systems to communicate via dedicated short-range communication1 cellular telecommunications connectivity1 satellite communication1 or other wireless spectrum connectivity with any other network or device2 or 7ii7 is designed1 manufactured1 or originally equipped to communicate via such methods1 regardless of whether such capability is enabled1 disabled1 or removed at the time of importation1 manufacture1 sale1 resale1 or introduction of the vehicle into interstate commerce in the ,united ,states4 7,b7 ,exclusion ,the term connected vehicle does not include a vehicle operated only on a rail line4 7#c7 ,connected vehicle hardware ,the term connected vehicle hardware means-- 7,a7 a vehicle connectivity system2 and 7,b7 vehicle connectivity system hardware4 7#d7 ,country of origin ,the term country of origin1 with respect to an item1 means the country-- 7,a7 in which the item is manufactured2 or 7,b7 the government of which owns or controls1 or has jurisdiction or direction over-- 7i7 the entity manufacturing the item2 or 7ii7 the entity supplying the item4 7#e7 ,covered country ,the term covered country means-- 7,a7 the ,democratic ,people's ,republic of ,north ,korea2 7,b7 the ,people's ,republic of ,china2 7,c7 the ,russian ,federation2 and 7,d7 the ,islamic ,republic of ,iran4 7#f7 ,covered software ,the term covered software-- 7,a7 means the software-based components installed in or on a connected vehicle1 or designed to be installed in or on a connected vehicle1 including application1 middleware1 and system software1 executed by the primary processing unit or units of an item that directly enables the function of a vehicle connectivity system or automated driving system at the vehicle level2 and 7,b7 includes any machine-learning model or other artificial intelligence component that directly enables decision-making or control of an automated driving system at the vehicle level4 7#g7 ,electric vehicle ,the term electric vehicle has the meaning given that term in section #c of the ,electric and ,hybrid ,vehicle ,research1 ,development1 and ,demonstration ,act of #aigf 7#ae ,u4,s4,c4 #bejb74 7#h7 ,importation ,the term importation has the meaning given the term import in section #ajja of the ,controlled ,substances ,import and ,export ,act 7#ba ,u4,s4,c4 #iea74 7#i7 ,resale 7,a7 ,in general ,the term resale1 with respect to an item1 means the transfer of ownership of the item by an individual or entity that acquired the item for the purpose of transfer in the ordinary course of business1 and not for the use of or consumption by the individual or entity4 7,b7 ,exclusion ,the term resale does not include the transfer of a connected vehicle that was previously titled or registered to1 and used by1 a consumer or end-user or was acquired for bona fide use1 lease1 or operation by the individual or entity transferred the vehicle4 7#aj7 ,safety equipment ,the term safety equipment1 with respect to a vehicle1 means air bags1 air bag inflators1 and seatbelt systems4 7#aa7 ,secretary ,the term ,secretary means the ,secretary of ,commerce1 acting through the ,under ,secretary of ,commerce for ,industry and ,security4 7#ab7 ,transaction ,the term transaction-- 7,a7 means any acquisition1 importation1 transfer1 installation1 dealing in1 or use of any item subject to a prohibition under section #d7;a71 including ongoing activities1 such as managed services1 data transmission1 software updates1 repairs1 or the platforming or data hosting of applications for consumer download2 and 7,b7 includes-- 7i7 any other transaction1 the structure of which is designed or intended to evade or circumvent this ,act2 and 7ii7 a class of transactions4 7#ac7 ,vehicle connectivity system ,the term vehicle connectivity system means a vehicle connectivity system hardware or covered software item installed in or on a connected vehicle1 or designed to be installed in or on a connected vehicle1 that directly enables the function of transmission1 receipt1 conversion1 or processing of radio frequency communications at a frequency over #dej megahertz4 7#ad7 ,vehicle connectivity system hardware ,the term vehicle connectivity system hardware-- 7,a7 means software-enabled or programmable components that-- 7i7 are installed in or on a connected vehicle or designed to be installed in or on a connected vehicle2 7ii7 are directly connected to a vehicle connectivity system2 and 7iii7 directly enable the function of a vehicle connectivity system or are part of an item that directly enables the function of a vehicle connectivity system2 and 7,b7 includes-- 7i7 microcontrollers1 microcomputers or modules1 systems on a chip1 networking or telematics units1 cellular modem_/modules1 ,wi-,fi microcontrollers or modules1 ,bluetooth microcontrollers or modules1 satellite communication systems1 other wireless communication microcontrollers or modules1 external antennas1 digital signal processors1 and field-programmable gate arrays2 7ii7 electronic systems integrated into a battery that directly enable or control the monitoring1 management1 security1 or external communication of battery performance or operation1 including any transmitter or interface component that performs such functions2 and 7iii7 safety equipment4 #d4 ,prohibition on connected vehicles and other transactions that threaten economic or national security 7a7 ,prohibitions 7#a7 ,connected vehicles ,on and after ,january #a1 #bjbg1 the importation1 manufacture1 sale1 resale1 or introduction into interstate commerce in the ,united ,states of a connected vehicle is prohibited if-- 7,a7 the country of origin of the connected vehicle is a covered country or the connected vehicle is designed within a covered country1 without regard to whether-- 7i7 at the time of importation1 sale1 resale1 or introduction1 the vehicle is equipped with any covered software or connected vehicle hardware subject to a prohibition under paragraph 7#b7 or 7#c72 or 7ii7 any such covered software or connected vehicle hardware-- 7,i7 is removed from the vehicle before importation1 sale1 resale1 or introduction2 or 7,,ii7 will be installed after importation1 sale1 resale1 or introduction2 or 7,b7 the manufacturer of the connected vehicle is a joint venture1 subsidiary1 or other entity in which more than #ae percent of the equity interest1 voting interest1 board representation1 or other indicia of control1 whether directly or indirectly1 is owned or controlled by an entity1 or combination of entities1 organized under the laws of1 or with its principal place of business in1 a covered country4 7#b7 ,covered software ,on and after ,january #a1 #bjbg1 the integration of covered software into a connected vehicle that is imported1 manufactured1 sold1 resold1 or introduced into interstate commerce into the ,united ,states is prohibited if-- 7,a7 the country of origin of the covered software is a covered country2 or 7,b7 the developer of the software-- 7i7 is organized under the laws of1 or has its principal place of business in1 a covered country2 or 7ii7 is a joint venture1 subsidiary1 or other entity in which more than #be percent of the equity interest1 voting interest1 board representation1 or other indicia of control1 whether directly or indirectly1 is owned or controlled by an entity1 or combination of entities1 described in clause 7i74 7#c7 ,connected vehicle hardware 7,a7 ,in general ,on and after ,january #a1 #bjcj1 the importation1 manufacture1 sale1 resale1 or introduction into interstate commerce in the ,united ,states of any connected vehicle hardware is prohibited if-- 7i7 the country of origin of the hardware is a covered country2 or 7ii7 the manufacturer of the hardware-- 7,i7 is organized under the laws of1 or has its principal place of business in1 a covered country2 or 7,,ii7 is a joint venture1 subsidiary1 or other entity in which more than #be percent of the equity interest1 voting interest1 board representation1 or other indicia of control1 whether directly or indirectly1 is owned or controlled by an entity1 or combination of entities1 described in subclause 7,i74 7,b7 ,repair and warranty ,the prohibition under subparagraph 7,a7 shall not apply to connected vehicle hardware that is imported1 manufactured1 sold1 resold1 or introduced into interstate commerce in the ,united ,states for the purpose of repair or under warranty for a connected vehicle with a model year before model year #bjcj4 7#d7 ,additional items ,subject to an applicable ruling or advisory opinion issued under subsection 7d71 a prohibition under paragraph 7#a71 7#b71 or 7#c7 applies with respect to a connected vehicle1 covered software1 or connected vehicle hardware1 as the case may be1 that is renamed1 rebranded1 restructured1 or altered to circumvent the prohibition4 7#e7 ,exception ,the prohibitions under paragraphs 7#a71 7#b71 and 7#c7 shall not apply to the importation1 manufacture1 sale1 resale1 or introduction into interstate commerce in the ,united ,states of a connected vehicle1 covered software1 or connected vehicle hardware1 as the case may be1 for the sole purpose of testing and evaluation by an entity that-- 7,a7 is organized under the laws of a ,state in the ,united ,states2 7,b7 does not have its principal place of business in a covered country2 and 7,c7 is not #be percent or more1 whether directly or indirectly1 owned or controlled by an entity1 or combination of entities1 organized under the laws of1 or with its principal place of business in1 a covered country4 7b7 ,related transactions 7#a7 ,in general ,the ,secretary shall prescribe regulations1 pursuant to section #eec of title #e1 ,united ,states ,code1 to prohibit any specific transaction relating to connected vehicles1 including the importation1 sale1 distribution1 integration1 or use of a connected vehicle1 covered software1 connected vehicle hardware1 or any other item subject to a prohibition under subsection 7a71 that the ,secretary determines poses an undue or unacceptable threat to the economic or national security of the ,united ,states4 7#b7 ,notice ,if the ,secretary prohibits a transaction under paragraph 7#a71 the ,secretary shall deliver1 by certified ,united ,states mail1 to the parties to the transaction a notice of the prohibition that includes an identification1 by name1 of the specific item that the ,secretary determines poses an undue or unacceptable threat to the economic or national security of the ,united ,states4 7c7 ,authorizations 7#a7 ,issuance 7,a7 ,in general ,the ,secretary1 in consultation with the ,secretary of ,defense1 the ,secretary of ,transportation1 the ,secretary of ,state1 and the ,secretary of ,energy1 may issue a general or specific authorization for the importation1 manufacture1 sale1 resale1 or introduction into interstate commerce in the ,united ,states of an item that would otherwise be subject to the prohibitions under subsection 7a7 if-- 7i7 the ,secretary determines1 based on clear and convincing evidence and a written risk assessment1 that the importation1 manufacture1 sale1 resale1 or introduction of the item does not pose1 and is not reasonably likely to pose-- 7,i7 an undue risk of data exfiltration from1 or remote manipulation or operation of1 a connected vehicle2 7,,ii7 a risk to critical infrastructure or the integrity of the industrial base of the ,united ,states2 or 7,,iii7 any other risk to the national security of the ,united ,states2 7ii7 not less than #fj days before the authorization takes effect1 the ,secretary submits to ,congress a detailed written notification1 including the determination under clause 7i7 and underlying analysis1 including the written risk assessment2 and 7iii7 during the #fj-;day period described in clause 7ii71 there is not enacted into law a joint resolution of disapproval with respect to the authorization of the item4 7,b7 ,continued validity and modification and revocation of authorizations 7i7 ,continued validity of existing authorizations ,except as provided by clauses 7ii7 and 7iii71 any general or specific authorization issued under subparagraph 7,a7 or subpart ,d of part #gia of title #ae1 ,code of ,federal ,regulations1 before ,january #a1 #bjcj1 shall remain in effect until ,january #a1 #bjcb1 unless modified1 suspended or revoked under clause 7ii74 7ii7 ,modification or revocation of general or specific authorizations ,the ,secretary may1 at any time1 modify1 suspend1 or revoke a general or specific authorization described in clause 7i7 if the ,secretary-- 7,i7 determines that the authorization no longer satisfies the requirements of subparagraph 7,a77i72 and 7,,ii7 provides the public with an opportunity to comment before modifying1 suspending1 or revoking the authorization4 7#b7 ,publication of list of authorized items 7,a7 ,in general ,the ,secretary shall publish1 pursuant to section #eec of title #e1 ,united ,states ,code1 and maintain a list of the items the importation1 manufacture1 sale1 resale1 or introduction into interstate commerce in the ,united ,states of which is authorized under paragraph 7#a74 ,the initial such list shall be published not later than ,january #a1 #bjbg4 7,b7 ,inclusions 7i7 ,in general ,to the extent possible1 the ,secretary shall include1 in the list required by subparagraph 7,a71 the manufacturer and product name for each item on the list4 7ii7 ,other identifying characteristics ,when it is not possible to include1 in the list required by subparagraph 7,a71 the manufacturer and product name for an item1 the ,secretary shall provide technical criteria sufficient to enable the automotive industry and importers to determine without undue difficulty whether the importation1 manufacture1 sale1 resale1 or introduction into interstate commerce in the ,united ,states of an item is authorized under paragraph 7#a74 ,in carrying out this clause1 the ,secretary shall protect intellectual property to the extent practicable4 7iii7 ,risk assessment ,to the extent possible1 the ,secretary shall include1 in the list required by subparagraph 7,a71 a detailed explanation about why each item on the list does not pose an undue risk described in subparagraph 7,a7 or 7,b7 of paragraph 7#a74 7#c7 ,requests for authorization ,not later than ,january #a1 #bjbg1 the ,secretary shall establish a procedure pursuant to which an importer1 manufacturer1 supplier1 or seller or reseller may seek the authorization under paragraph 7#a7 of the importation1 manufacture1 sale1 resale1 or introduction into interstate commerce in the ,united ,states of an item described in subsection 7a7 that would otherwise be subject to the prohibitions under that subsection4 7d7 ,rulings and advisory opinions 7#a7 ,in general ,not later than ,january #a1 #bjbg1 the ,secretary shall establish a procedure pursuant to which an importer1 manufacturer1 or seller or reseller may seek a binding ruling or advisory opinion with respect to whether-- 7,a7 the importation1 manufacture1 sale1 resale1 or introduction into interstate commerce in the ,united ,states of an item is or is not prohibited under this section2 or 7,b7 a connected vehicle1 covered software1 or connected vehicle hardware has been renamed1 rebranded1 restructured1 or altered to circumvent the prohibitions under subsection 7a74 7#b7 ,timing ,the ,secretary shall issue a ruling or advisory opinion under paragraph 7#a7 with respect to an item not later than #de days after receiving an application supported by a reasonably clear description of the item4 7#c7 ,publication 7,a7 ,in general ,the ,secretary shall-- 7i7 publish a list of the items for which the ,secretary has issued rulings and advisory opinions under paragraph 7#a72 and 7ii7 update that list not less frequently than annually4 7,b7 ,prohibition on publication of identifying information ,the ,secretary shall not publish the name of1 or other information that might reasonably identify1 the party that requested the ruling or advisory opinion4 7#d7 ,continued validity of existing rulings and opinions ,except as provided by paragraph 7#e71 a ruling or advisory opinion issued under this subsection or subpart ,d of part #gia of title #ae1 ,code of ,federal ,regulations1 before ,january #a1 #bjbg1 shall remain in effect4 7#e7 ,modification or revocation ,the ,secretary may modify1 suspend1 or revoke any binding ruling or advisory opinion issued under paragraph 7#a7 or subpart ,d of part #gia of title #ae1 ,code of ,federal ,regulations1 with respect to an item at any time if the ,secretary determines that the circumstances that led to the ruling or opinion have changed4 7e7 ,declaration of conformity ,the ,secretary shall establish a process under which a person that imports1 manufactures1 sells1 resells1 or introduces into interstate commerce in the ,united ,states a connected vehicle or connected vehicle hardware is required to submit a declaration1 to be known as a declaration of conformity1 to the ,secretary before importing1 manufacturing1 selling1 reselling1 or introducing the vehicle or hardware that certifies that the vehicle or hardware is not subject to a prohibition under subsection 7a74 7f7 ,civil penalties 7#a7 ,in general ,the ,secretary shall assess a civil penalty for each transaction that is a violation of a prohibition under subsection 7a7 in an amount that is not less than the greater of-- 7,a7 #a1ejj1jjj2 or 7,b7 five times the value of the transaction4 7#b7 ,continuing violations ,in the case of a violation that occurs on more than one day1 each day on which the violation continues shall be treated as a separate violation4 7g7 ,classified information ,the ,secretary may rely on classified information in carrying out this section1 which may be submitted to a reviewing court ex parte and in camera4 7h7 ,petitions for review ,the filing in a court of a petition for review shall not stay the effectiveness of any action under this section unless ordered by the court4 #e4 ,use of existing advisory bodies2 interagency coordination 7a7 ,use of existing advisory bodies 7#a7 ,in general ,in carrying out this ,act1 the ,secretary may consult1 as appropriate1 with existing advisory committees of the ,department of ,transportation and other relevant ,federal agencies1 including the ,advisory ,committee on ,automation in ,transportation1 on matters relating to connected vehicles and associated national security risks4 7#b7 ,scope of consultation ,consultation under paragraph 7#a7 may include consideration of-- 7,a7 risks relating to data security1 cybersecurity1 and supply chain integrity associated with connected vehicles2 7,b7 the effectiveness of authorities and regulations issued under this ,act2 7,c7 emerging technologies and threat vectors relevant to connected vehicle ecosystems2 and 7,d7 recommendations made to the ,secretary with respect to regulatory1 enforcement1 and policy measures to mitigate risks described in subparagraph 7,a74 7b7 ,interagency coordination ,in carrying out this ,act1 the ,secretary may consult and coordinate1 as appropriate1 with the ,federal ,communications ,commission and other relevant ,federal agencies to ensure alignment with respect to the scope1 timeline1 and implementation of any prohibitions or restrictions issued under this ,act1 including to avoid duplicative1 inconsistent1 or conflicting regulatory requirements4 #f4 ,reports ,not later than one year after the date of the enactment of this ,act1 and annually thereafter1 the ,secretary shall submit to ,congress a report-- 7#a7 describing activities carried out to enforce the prohibitions under section #d1 including enforcement actions taken and resources utilized2 7#b7 providing a detailed accounting of items covered by such prohibitions during the #a-year period preceding submission of the report2 7#c7 explaining any exclusions1 exemptions1 or determinations made by the ,secretary1 including the rationale and criteria applied2 7#d7 assessing the effectiveness of such prohibitions in decreasing the threats to the economic and national security of the ,united ,states posed by connected vehicles2 7#e7 including metrics on enforcement1 compliance rates1 violations identified1 penalties assessed1 and any identified gaps or challenges2 and 7#f7 making recommendations with respect to further decreasing such threats4 #g4 ,severability2 regulatory continuity 7a7 ,severability ,if any provision of this ,act1 or the application of such provision to any person or circumstance1 is held to be invalid1 the remainder of this ,act1 and the application of the remaining provisions to any person or circumstance1 shall not be affected4 7b7 ,restoration of prior regulations ,if a court of competent jurisdiction enters a final judgment holding invalid or unenforceable a provision of this ,act and supersedes regulations prescribed to carry out section #d1 the ,secretary may1 notwithstanding any other provision of this ,act1 reissue or reinstate1 in whole or in part1 any similar regulations that were in effect on the day before the date of the enactment of this ,act4 #h4 ,interaction with regulations 7a7 ,rule of construction ,nothing in this ,act shall be construed to prohibit1 limit1 or otherwise affect the authority of the ,secretary of ,commerce to implement or administer subpart ,d of part #gia of title #ae1 ,code of ,federal ,regulations1 as added by the final rule of the ,bureau of ,industry and ,security entitled ,securing the ,information and ,communications ,technology and ,services ,supply ,chain3 ,connected ,vehicles 7#ij ,fed4 ,reg4 #ecfj74 7b7 ,delayed implementation for software and hardware not covered by regulations ,in the case of covered software and connected vehicle hardware that is subject to a prohibition under paragraph 7#b7 or 7#c7 of section #d7;a7 and is not subject to subpart ,d of part #gia of title #ae1 ,code of ,federal ,regulations1 as in effect on the day before the date of the enactment of this ,act1 the ,secretary shall implement the prohibition under section #d7;a7 after ,january #a1 #bjcj1 and before ,january #a1 #bjcb4 7c7 ,treatment of prior exclusions 7#a7 ,in general ,subject to paragraph 7#b71 any exclusion or exception to a prohibition under subpart ,d of part #gia of title #ae1 ,code of ,federal ,regulations1 as in effect on the day before the date of the enactment of this ,act1 shall remain valid and shall apply to the prohibitions under section #d7;a74 7#b7 ,rulemaking ,beginning ,january #a1 #bjcj1 the ,secretary shall conduct a rulemaking1 pursuant to section #eec of title #e1 ,united ,states ,code1 to determine whether exclusions or exceptions described in paragraph 7#a7 should be continued1 modified1 or terminated for the purposes of this ,act4 #a4 ,short title ,this ,act may be cited as the ,connected ,vehicle ,security ,act of #bjbf4 #b4 ,findings ,congress makes the following findings3 7#a7 ,the ,united ,states automotive industry is critical to the national economy1 supporting millions of jobs1 supply chains1 and advanced manufacturing4 ,the introduction of vehicles and components controlled by foreign adversaries threatens the industrial competitiveness and technological leadership of the ,united ,states4 7#b7 ,the ,people's ,republic of ,china has rapidly expanded its automotive manufacturing capacity and is increasingly targeting export markets4 ,despite having the largest market in the world1 the ,people's ,republic of ,china exports nearly #h1jjj1jjj vehicles annually1 approximately twice the volume exported by any other country1 demonstrating the scale at which vehicles and components controlled by a foreign adversary may enter global markets1 including the ,united ,states4 7#c7 ,connected vehicles incorporate advanced information and communications technologies that collect1 process1 and transmit vast amounts of sensitive data1 including geolocation1 operational1 and personal information1 and are capable of being remotely accessed and controlled4 7#d7 ,in ,executive ,order #achgc 7#ej ,u4,s4,c4 #agja note2 relating to securing the information and communications technology and services supply chain71 the ,president declared a national emergency with respect to the threat posed by foreign adversaries creating and exploiting vulnerabilities in information and communications technology and services4 7#e7 ,the access1 control1 or influence of vehicle connectivity systems or automated driving systems by foreign adversaries creates substantial economic and national security risks to the ,united ,states1 including risks of surveillance1 espionage1 cyber intrusion1 and disruption of critical infrastructure4 ,such risks fall within the scope of the national emergency described in ,executive ,order #achgc and pose an unacceptable threat to the security and resilience of the ,united ,states4 #c4 ,definitions ,in this ,act3 7#a7 ,automated driving system ,the term automated driving system means hardware and software that1 collectively1 are capable of performing the entire dynamic driving task for a connected vehicle on a sustained basis1 regardless of whether the system is limited to a specific operational design domain4 7#b7 ,connected vehicle 7,a7 ,in general ,except as provided by subparagraph 7,b7 or 7,c71 the term connected vehicle means a vehicle driven or drawn by mechanical power1 regardless of propulsion technology1 and manufactured primarily for use on public streets1 roads1 and highways1 that has a gross vehicle weight rating of #d1ecf kilograms 7#aj1jjj pounds7 or less and-- 7i7 integrates onboard networked hardware with automotive software systems to communicate1 at a radio frequency over #dej megahertz1 via dedicated short-range communication1 cellular telecommunications connectivity1 satellite communication1 or other wireless spectrum connectivity with any other network or device2 or 7ii7 is designed1 manufactured1 or equipped to communicate as described in clause 7i71 regardless of whether the capability to communicate as described in clause 7i7 has been removed before the time of importation1 manufacture1 sale1 resale1 or introduction of the vehicle into interstate commerce in the ,united ,states4 7,b7 ,exclusion ,the term connected vehicle does not include a vehicle operated only on a rail line4 7,c7 ,application to section #i ,in section #i1 the term connected vehicle applies without regard to the limitation on the gross vehicle weight rating under subparagraph 7,a74 7#c7 ,covered country ,the term covered country means-- 7,a7 the ,democratic ,people's ,republic of ,north ,korea2 7,b7 the ,people's ,republic of ,china2 7,c7 the ,russian ,federation2 and 7,d7 the ,islamic ,republic of ,iran4 7#d7 ,covered software 7,a7 ,in general ,except as otherwise provided in this paragraph1 the term covered software means a software-based component1 including any application1 middleware1 system software1 and any machine-learning model or other artificial intelligence component1 that is installed in or on a connected vehicle1 or designed to be installed in or on a connected vehicle1 and that is executed by the primary processing unit or units of an item that directly enables1 at the vehicle level1 the function of a vehicle connectivity system or automated driving system1 including decision-making or control of an automated driving system4 7,b7 ,exclusion ,the term covered software does not include-- 7i7 open-source software1 unless that open-source software has been modified for proprietary purposes and not redistributed or shared2 or 7ii7 software subcomponents that were designed1 developed1 manufactured1 or supplied prior to ,march #ag1 #bjbf1 as long as those software subcomponents are not maintained1 augmented1 or otherwise altered by a foreign entity of concern after ,march #ag1 #bjbf4 7#e7 ,electric vehicle battery ,the term electric vehicle battery means a rechargeable battery designed to store and supply electrical energy for the propulsion of a hybrid or electric vehicle4 7#f7 ,foreign entity of concern ,the term foreign entity of concern means-- 7,a7 any individual1 wherever located1 who-- 7i7 acts as an agent1 representative1 or employee1 or acts in any other capacity at the order1 request1 or under the direction or control1 of a covered country or of a person whose activities are directly or indirectly supervised1 directed1 controlled1 financed1 or subsidized in whole or in majority part by a covered country2 or 7ii7 is a citizen or resident of a covered country or a country controlled by a covered country1 and is not a ,united ,states citizen or alien lawfully admitted for permanent residence in the ,united ,states2 or 7,b7 an entity-- 7i7 with a principal place of business in1 headquartered in1 incorporated in1 or otherwise organized under the laws of a covered country or a country controlled by a covered country2 7ii7 that is a subsidiary or affiliate of an entity described in clause 7i72 or 7iii7 wherever organized or doing business1 that is owned or controlled by a covered country1 or that is subject to other circumstances1 such as through participation in a partnership or joint venture or other formal or informal relationship1 in which an individual described in subparagraph 7,a7 or an entity described in clause 7i71 or a combination of such individuals or entities1 possesses the power1 direct or indirect1 whether or not exercised1 through-- 7,i7 ownership of a majority or a dominant minority of the total outstanding voting or financial interest in the entity1 board representation1 proxy voting1 a special share1 contractual arrangements1 formal or informal arrangements to act in concert1 or other means1 to determine1 direct1 or decide important matters affecting the entity2 7,,ii7 with respect to an entity that manufactures1 develops1 designs1 or supplies a connected vehicle1 ownership or control of more than #ae percent of the total outstanding equity interest1 voting interest1 board representation1 or other indicia of control2 7,,iii7 with respect to an entity that manufactures1 develops1 designs1 or supplies covered software1 ownership or control of more than #be percent of the total outstanding equity interest1 voting interest1 board representation1 or other indicia of control2 or 7,,iv7 with respect to an entity that manufactures or supplies vehicle connectivity system hardware1 ownership or control of more than #be percent of the total outstanding equity interest1 voting interest1 board representation1 or other indicia of control4 7#g7 ,importation ,the term importation has the meaning given the term import in section #ajja of the ,controlled ,substances ,import and ,export ,act 7#ba ,u4,s4,c4 #iea74 7#h7 ,resale 7,a7 ,in general ,the term resale1 with respect to a vehicle1 software1 or hardware1 means the transferring of ownership of the vehicle1 software1 or hardware by an individual or entity that acquired the vehicle1 software1 or hardware for the purpose of transfer in the ordinary course of business1 and not for the use of or consumption by the individual or entity4 7,b7 ,exclusion ,the term resale does not include the transfer of a connected vehicle that was previously titled or registered to1 and used by1 a consumer or end-user or was acquired for bona fide use1 lease1 or operation by the individual or entity that was transferred the vehicle or by a dealer 7as defined in section #cjajb7;a77#b7 of title #di1 ,united ,states ,code74 7#i7 ,secretary ,the term ,secretary means the ,secretary of ,commerce1 acting through the ,under ,secretary of ,commerce for ,industry and ,security4 7#aj7 ,transaction ,the term transaction-- 7,a7 means any acquisition1 importation1 transfer1 installation1 dealing in1 or use of any vehicle1 software1 or hardware subject to a prohibition under subsection 7a7 or 7b7 of section #d1 including ongoing activities1 such as managed services1 data transmission1 software updates1 repairs1 or provision of platform services or data hosting of applications for consumer download2 and 7,b7 includes-- 7i7 any other transaction1 arrangement1 practice1 or course of conduct1 the structure or purpose of which is designed or intended to evade or circumvent this ,act2 and 7ii7 a class of transactions4 7#aa7 ,vehicle connectivity system ,the term vehicle connectivity system means vehicle connectivity system hardware or a covered software item installed in or on a connected vehicle1 or designed to be installed in or on a connected vehicle1 that directly enables the function of transmission1 receipt1 conversion1 or processing of radio frequency communications at a frequency over #dej megahertz4 7#ab7 ,vehicle connectivity system hardware 7,a7 ,in general ,the term vehicle connectivity system hardware-- 7i7 means software-enabled or programmable components that-- 7,i7 are installed in or on a connected vehicle or designed to be installed in or on a connected vehicle2 7,,ii7 are directly connected to a vehicle connectivity system2 and 7,,iii7 directly enable the connectivity functions of a vehicle connectivity system or are part of an item that directly enables the function of a vehicle connectivity system2 7ii7 includes microcontrollers1 microcomputers or modules1 systems on a chip1 networking or telematics units1 cellular modems or modules1 ,wi-,fi microcontrollers or modules1 ,bluetooth microcontrollers or modules1 satellite communication systems1 other wireless communication microcontrollers or modules1 external antennas1 digital signal processors1 and field-programmable gate arrays2 and 7iii7 includes electronic systems integrated into an electric vehicle battery that directly enable or control the monitoring1 management1 security1 or external communication of battery performance or operation1 including any transmitter or interface component that performs such functions4 7,b7 ,exclusion ,the term vehicle connectivity system hardware does not include component parts that do not contribute to the connectivity function of vehicle connectivity system hardware1 which may include items such as brackets1 fasteners1 plastics1 passive electronics1 diodes1 field effect transistors1 and bipolar junction transistors4 #d4 ,prohibition on connected vehicles and other transactions that threaten national security 7a7 ,prohibitions 7#a7 ,connected vehicles ,on and after ,january #a1 #bjbg1 the importation1 manufacture1 sale1 resale1 or introduction into interstate commerce in the ,united ,states of a connected vehicle is prohibited if-- 7,a7 the connected vehicle is primarily designed1 primarily developed1 or manufactured in1 or supplied from1 a covered country1 without regard to whether-- 7i7 at the time of importation1 sale1 resale1 or introduction1 the vehicle is equipped with any covered software or vehicle connectivity system hardware subject to a prohibition under paragraph 7#b7 or 7#c72 or 7ii7 any such software or hardware-- 7,i7 is removed from the vehicle before importation1 sale1 resale1 or introduction2 or 7,,ii7 will be installed after importation1 sale1 resale1 or introduction2 or 7,b7 the manufacturer1 developer1 designer1 or supplier of the connected vehicle is a foreign entity of concern4 7#b7 ,covered software ,the integration of covered software into a connected vehicle that is imported1 manufactured1 sold1 resold1 or introduced into interstate commerce in the ,united ,states is prohibited if-- 7,a7 the connected vehicle into which the covered software is integrated was manufactured for model year #bjbg or later2 and 7,b7 7i7 the covered software is designed1 developed1 or manufactured in1 or supplied from1 a covered country2 or 7ii7 the manufacturer1 developer1 designer1 or supplier of the software is a foreign entity of concern4 7#c7 ,vehicle connectivity system hardware 7,a7 ,in general ,on and after ,january #a1 #bjcj1 the integration of any vehicle connectivity system hardware into a connected vehicle that is imported1 manufactured1 sold1 resold1 or introduced into interstate commerce in the ,united ,states is prohibited if-- 7i7 the hardware is manufactured in1 or supplied from1 a covered country2 or 7ii7 the manufacturer or supplier of the hardware is a foreign entity of concern4 7,b7 ,repair and warranty ,the prohibition under subparagraph 7,a7 shall not apply to vehicle connectivity system hardware that is-- 7i7 integrated into a vehicle that is manufactured for a model year before model year #bjcj2 or 7ii7 imported1 manufactured1 sold1 resold1 or introduced into interstate commerce in the ,united ,states for the purpose of repair1 or under warranty1 for a connected vehicle of a model year before model year #bjcj4 7#d7 ,additional items ,a prohibition under paragraph 7#a71 7#b71 or 7#c7 applies with respect to a connected vehicle1 covered software1 or vehicle connectivity system hardware1 as the case may be1 that is renamed1 rebranded1 restructured1 or altered to circumvent the prohibition4 7#e7 ,exception ,the prohibitions under paragraphs 7#a71 7#b71 and 7#c7 shall not apply to the importation1 manufacture1 sale1 resale1 or introduction into interstate commerce in the ,united ,states of a connected vehicle1 covered software1 or vehicle connectivity system hardware1 as the case may be1 for the sole purpose of testing and evaluation if-- 7,a7 in the case of a connected vehicle1 the vehicle is not intended to be driven on public roads2 or 7,b7 in the case of a connected vehicle1 covered software1 or vehicle connectivity system hardware1 the testing or evaluation is by-- 7i7 an entity that-- 7,i7 is organized under the laws of a ,state in the ,united ,states2 7,,ii7 does not have its principal place of business in a covered country2 and 7,,iii7 is not a foreign entity of concern2 or 7ii7 a ,federal agency4 7#f7 ,treatment of individuals ,for purposes of this subsection1 a connected vehicle1 covered software1 or vehicle connectivity system hardware shall not be considered to be designed1 developed1 manufactured in1 or supplied by a foreign entity of concern based solely on the country of citizenship of one or more individuals who are employed by1 contracted by1 or otherwise similarly engaged in design1 development1 manufacturing1 or supply activities through an entity that is not a foreign entity of concern4 7b7 ,related transactions 7#a7 ,in general ,the ,secretary shall prescribe regulations1 pursuant to section #eec of title #e1 ,united ,states ,code1 to prohibit any specific transaction relating to connected vehicles1 including the importation into the ,united ,states1 sale1 distribution1 integration1 or use of a connected vehicle1 covered software1 or vehicle connectivity system hardware1 that the ,secretary determines poses an undue or unacceptable threat to the national security of the ,united ,states4 7#b7 ,notice ,if the ,secretary prohibits a transaction under paragraph 7#a71 the ,secretary shall deliver1 by certified ,united ,states mail1 to the parties to the transaction a notice of the prohibition that includes an identification1 by name1 of the specific vehicle1 software1 or hardware that the ,secretary determines poses an undue or unacceptable threat to the national security of the ,united ,states4 7c7 ,authorizations 7#a7 ,issuance 7,a7 ,in general ,the ,secretary may issue a general or specific authorization for the importation1 manufacture1 sale1 resale1 or introduction into interstate commerce in the ,united ,states of a connected vehicle1 covered software1 or vehicle connectivity system hardware that would otherwise be subject to a prohibition under subsection 7a7 if-- 7i7 the ,secretary determines that the importation1 manufacture1 sale1 resale1 or introduction of the vehicle1 software1 or hardware does not pose1 and is not reasonably likely to pose-- 7,i7 an undue risk of data exfiltration from1 or remote manipulation or operation of1 a connected vehicle2 7,,ii7 a risk to critical infrastructure of the ,united ,states2 or 7,,iii7 any other risk to the national security of the ,united ,states2 7ii7 upon issuing an authorization under this subparagraph1 the ,secretary submits to ,congress a detailed written notification that-- 7,i7 includes the determination under clause 7i7 and the underlying analysis1 including a written risk assessment1 that supports that determination2 and 7,,ii7 redacts confidential business information and other sensitive proprietary information2 and 7iii7 in the case of an authorization issued on or after ,january #a1 #bjcj1 there is not enacted into law a joint resolution of disapproval with respect to the authorization4 7,b7 ,limited authority for certain entities ,the ,secretary may not issue a general or specific authorization under subparagraph 7,a7 to import1 manufacture1 sell1 resell1 or introduce into interstate commerce in the ,united ,states a connected vehicle otherwise subject to the prohibition under subsection 7a77#a7 to an entity with a principal place of business in1 headquartered in1 incorporated in1 or otherwise organized under the laws of a covered country or that is a subsidiary or affiliate of such an entity1 unless the entity-- 7i7 is selling passenger vehicles in the ,united ,states as of the date of the enactment of this ,act2 and 7ii7 has been manufacturing passenger vehicles in the ,united ,states for not less than #e years before such date of enactment4 7,c7 ,continued validity and modification and revocation of authorizations 7i7 ,continued validity of authorizations under regulations ,except as provided by clause 7iii71 any general or specific authorization issued under subpart ,d of part #gia of title #ae1 ,code of ,federal ,regulations1 before the date of the enactment of this ,act shall remain in effect until the earlier of-- 7,i7 the date specified in the terms of the authorization2 or 7,,ii7 ,january #a1 #bjcj4 7ii7 ,expiration of authorizations issued before ,january #a1 #bjcj ,except as provided by clause 7iii71 any general or specific authorization issued under subparagraph 7,a7 after the date of the enactment of this ,act and before ,january #a1 #bjcj1 shall remain in effect until the earlier of-- 7,i7 the date specified in the terms of the authorization2 or 7,,ii7 ,january #a1 #bjcj4 7iii7 ,modification or revocation of general or specific authorizations ,the ,secretary may1 at any time1 modify1 suspend1 or revoke a general or specific authorization described in clause 7i7 or issued under subparagraph 7,a7 if the ,secretary determines that the authorization no longer satisfies the requirements of subparagraph 7,a77i74 7iv7 ,publication required ,not later than ,january #a1 #bjbg1 the ,secretary shall publish a list of all general or specific authorizations issued under subpart ,d of part #gia of title #ae1 ,code of ,federal ,regulations1 before the date of the enactment of this ,act4 7#b7 ,publication of authorizations 7,a7 ,in general ,the ,secretary shall publish and maintain a list of all general and specific authorizations issued under paragraph 7#a77;,a7 after the date of the enactment of this ,act4 7,b7 ,initial list ,the initial list required by subparagraph 7,a7 shall be published not later than ,january #a1 #bjbg4 7,c7 ,inclusions 7i7 ,in general ,to the extent possible1 the ,secretary shall include in the list required by subparagraph 7,a7 the manufacturer and product name for the connected vehicles1 covered software1 and vehicle connectivity system hardware on the list4 7ii7 ,risk assessment ,to the extent possible1 the ,secretary shall include in the list required by subparagraph 7,a7 a detailed explanation about why the connected vehicles1 covered software1 and vehicle connectivity system hardware on the list do not pose any of the risks described in paragraph 7#a77;,a77i74 7#c7 ,identification of trusted suppliers 7,a7 ,in general ,the ,secretary shall create and maintain a list of trusted entities that supply connected vehicles1 covered software1 vehicle connectivity systems1 and vehicle connectivity system hardware4 7,b7 ,determination ,the ,secretary may determine an entity is a trusted supplier for purposes of subparagraph 7,a7 if the entity does not pose an undue or unacceptable national security risk4 7#d7 ,protection of confidential business information ,the ,secretary shall establish a robust process to redact confidential business information and other sensitive information from publication in the lists required by paragraphs 7#a77;,c77iv7 and 7#b74 7#e7 ,procedures for authorization ,not later than ,january #a1 #bjbg1 the ,secretary shall establish a procedure pursuant to which-- 7,a7 an importer1 manufacturer1 supplier1 or seller or reseller may seek the authorization under paragraph 7#a7 of the importation1 manufacture1 sale1 resale1 or introduction into interstate commerce in the ,united ,states of connected vehicles1 covered software1 or vehicle connectivity system hardware that would otherwise be subject to a prohibition under subsection 7a72 and 7,b7 the ,secretary may issue such an authorization on the ,secretary's own initiative4 7d7 ,advisory opinions 7#a7 ,in general ,not later than ,january #a1 #bjbg1 the ,secretary shall establish a procedure pursuant to which an importer1 manufacturer1 or seller or reseller may seek an advisory opinion with respect to whether-- 7,a7 the importation1 manufacture1 sale1 resale1 or introduction into interstate commerce in the ,united ,states of a connected vehicle1 covered software1 or vehicle connectivity system hardware is or is not prohibited under this section2 or 7,b7 a connected vehicle1 covered software1 or vehicle connectivity system hardware has been renamed1 rebranded1 restructured1 or altered to circumvent the prohibitions under subsection 7a74 7#b7 ,timing 7,a7 ,in general ,the ,secretary shall issue an advisory opinion under paragraph 7#a7 with respect to a connected vehicle1 covered software1 or vehicle connectivity system hardware not later than #de days after receiving an application for such an advisory opinion that is supported by a reasonably clear description of the vehicle1 software1 or hardware1 as the case may be4 7,b7 ,failure to issue ,if the ,secretary fails to issue an advisory opinion within the #de-;day period described in subparagraph 7,a71 the ,secretary shall notify the relevant committees of ,congress 7including1 at a minimum1 the ,committee on ,energy and ,commerce of the ,house of ,representatives and the ,committee on ,commerce1 ,science1 and ,transportation of the ,senate7 of that failure not later than #g days after the #de-;day period has elapsed4 7,c7 ,exclusion ,this paragraph shall not apply in any case in which an applicant under subparagraph 7,a7 has not made good faith efforts to provide prompt responses to inquiries or requests for additional information or materials from the ,secretary that are necessary for the consideration of the application4 7#c7 ,publication 7,a7 ,in general ,the ,secretary shall-- 7i7 publish a list of all connected vehicles1 covered software1 and vehicle connectivity system hardware for which the ,secretary has issued advisory opinions under paragraph 7#a72 and 7ii7 update that list not less frequently than annually4 7,b7 ,prohibition on publication of identifying information ,the ,secretary shall not publish the name of1 or other information that might reasonably identify1 the party that requested the advisory opinion under paragraph 7#a74 7#d7 ,continued validity of existing advisory opinions ,except as provided by paragraph 7#e71 an advisory opinion issued under this subsection or subpart ,d of part #gia of title #ae1 ,code of ,federal ,regulations1 before ,january #a1 #bjbg1 shall remain in effect4 7#e7 ,modification or revocation ,the ,secretary may modify1 suspend1 or revoke any advisory opinion issued under paragraph 7#a7 or subpart ,d of part #gia of title #ae1 ,code of ,federal ,regulations1 at any time if the ,secretary determines that the circumstances that led to the opinion have changed4 7e7 ,declaration of conformity ,the ,secretary shall establish a process requiring a person1 before importing1 manufacturing1 selling1 reselling1 or introducing into interstate commerce in the ,united ,states a connected vehicle1 covered software1 or vehicle connectivity system hardware1 to submit to the ,secretary a declaration1 to be known as a declaration of conformity1 that certifies that the vehicle1 hardware1 or incorporated covered software is not subject to a prohibition under subsection 7a74 7f7 ,safe harbor ,the ,secretary shall prescribe regulations establishing a safe harbor period of one year during which a person may cure a violation of subsection 7a74 ,during that period1 civil penalties shall not accrue with respect to the violation if the person-- 7#a7 promptly upon discovery discloses the violation to the ,bureau of ,industry and ,security and diligently undertakes all legally available remedial measures2 7#b7 cooperates with the ,bureau and provides all reasonably available information it is legally permitted to provide that the ,secretary may require to verify the violation and the cure2 7#c7 completes the cure within the period prescribed by the ,secretary1 including by submitting any corrected declaration of conformity or obtaining any authorization1 ruling1 or advisory opinion required by this section2 and 7#d7 did not engage in willful misconduct1 knowing violation1 fraud1 material misrepresentation1 or conduct intended to evade or circumvent this section4 7g7 ,civil penalties 7#a7 ,in general ,except as provided by paragraph 7#c71 the ,secretary shall assess a civil penalty for each transaction that is a violation of a prohibition under subsection 7a7 in an amount that is not less than the greater of-- 7,a7 #a1ejj1jjj2 or 7,b7 five times the value of the transaction4 7#b7 ,continuing violations ,in the case of a violation that occurs on more than one day1 each day on which the violation continues shall be treated as a separate violation4 7#c7 ,exception ,a civil penalty shall not apply under paragraph 7#a7 in a case in which an individual transports a vehicle into the ,united ,states in violation of a prohibition under subsection 7a7 if-- 7,a7 the vehicle is owned1 leased1 rented1 or otherwise in the possession of the individual for personal use2 and 7,b7 the individual does not know that the vehicle1 or covered software or vehicle connectivity system hardware integrated into the vehicle1 is subject to the prohibition4 7h7 ,classified information ,the ,secretary may rely on classified information in carrying out this section1 which may be submitted to a reviewing court ex parte and in camera4 7i7 ,petitions for review ,the filing in a court of a petition for review shall not stay the effectiveness of any action under this section unless ordered by the court4 #e4 ,use of existing advisory bodies2 interagency coordination 7a7 ,use of existing advisory bodies 7#a7 ,in general ,in carrying out this ,act1 the ,secretary may consult1 as appropriate1 with existing advisory committees of the ,department of ,transportation and other relevant ,federal agencies on matters relating to connected vehicles and associated national security risks4 7#b7 ,scope of consultation ,consultation under paragraph 7#a7 may include consideration of-- 7,a7 risks relating to data security1 cybersecurity1 and supply chain integrity associated with connected vehicles2 7,b7 the effectiveness of authorities and regulations issued under this ,act2 7,c7 emerging technologies and threat vectors relevant to connected vehicle ecosystems2 and 7,d7 recommendations made to the ,secretary with respect to regulatory1 enforcement1 and policy measures to mitigate risks described in subparagraph 7,a74 7b7 ,interagency coordination ,in carrying out this ,act1 the ,secretary may consult and coordinate1 as appropriate1 with the ,federal ,communications ,commission and other relevant ,federal agencies to ensure alignment with respect to the scope1 timeline1 and implementation of any prohibitions or restrictions issued under this ,act1 including to avoid duplicative1 inconsistent1 or conflicting regulatory requirements4 #f4 ,reports ,not later than one year after the date of the enactment of this ,act1 and annually thereafter1 the ,secretary shall submit to ,congress a report1 which may contain a classified annex-- 7#a7 describing activities carried out to enforce the prohibitions under section #d1 including enforcement actions taken and resources utilized2 7#b7 providing a detailed accounting of connected vehicles1 covered software1 and vehicle connectivity system hardware covered by such prohibitions during the one-year period preceding submission of the report2 7#c7 explaining any exclusions1 exemptions1 or authorizations made by the ,secretary1 including the rationale and criteria applied2 7#d7 assessing the effectiveness of such prohibitions in decreasing the threats to the national security of the ,united ,states posed by connected vehicles2 7#e7 including metrics on enforcement1 compliance rates1 violations identified1 penalties assessed1 and any identified gaps or challenges2 and 7#f7 making recommendations with respect to further decreasing such threats4 #g4 ,report on automotive supply chain resiliency and security 7a7 ,in general ,not later than #ah months after the date of the enactment of this ,act1 the ,secretary shall submit to ,congress a report assessing the resilience and security of supply chains critical to the ,united ,states automotive sector4 7b7 ,elements ,the report required by subsection 7a7 may-- 7#a7 identify the segments1 materials1 components1 and technologies within the automotive supply chain that are most dependent on a covered country2 7#b7 assess the extent to which the dependencies identified under paragraph 7#a7 pose significant risk to the economic or national security of the ,united ,states2 and 7#c7 recommend specific policies and measures to support the development and expansion of supply chains outside of covered countries for the dependencies identified under paragraph 7#b7 that pose the most significant risk to the economic or national security of the ,united ,states4 7c7 ,considerations ,in identifying segments1 materials1 components1 and technologies within the automotive supply chain under subsection 7b77#a71 the ,secretary may consider-- 7#a7 safety equipment2 7#b7 hardware or software that enables the transmission1 receipt1 conversion1 or processing of automotive sensing 7such as ,li,d,a,r1 radar1 video1 or ultrawideband72 7#c7 electric vehicle batteries2 7#d7 smart glass1 antenna glass1 and other electronically controlled automotive glass that directly enables the transmission1 receipt1 conversion1 or processing of radio frequency communications2 and 7#e7 any other segments1 materials1 components1 technologies1 hardware1 or software identified by the ,department of ,commerce for consideration during the process of promulgating subpart ,d of part #gia of title #ae1 ,code of ,federal ,regulations4 7d7 ,use of existing information ,in preparing the report required by subsection 7a71 the ,secretary shall1 to the maximum extent practicable1 utilize existing analyses1 assessments1 reports1 data1 and other relevant information available to the ,department of ,commerce or another ,federal department or agency to avoid unnecessary duplication of effort4 #h4 ,report on consumer education of defective ,chinese air bags and air bag components 7a7 ,definitions ,in this section3 7#a7 ,auction company ,the term auction company means a person taking possession of a motor vehicle owned by another to sell at an auction4 7#b7 ,dealer ,the term dealer means a person that sold at least #e motor vehicles during the prior #ab months to buyers that in good faith bought the vehicles other than for resale4 7#c7 ,distributor ,the term distributor means a person that sold at least #e motor vehicles during the prior #ab months for resale4 7#d7 ,passenger car ,the term passenger car means a motor vehicle with motive power1 except a low-speed vehicle1 multipurpose passenger vehicle1 motorcycle1 or trailer1 designed for carrying #aj persons or less4 7#e7 ,title ,the term title means the certificate of title or other document issued by the ,state indicating ownership4 7b7 ,in general ,not later than one year after the date of the enactment of this ,act1 the ,secretary of ,transportation shall submit to ,congress a report identifying opportunities to inform buyers of passenger cars if the original air bag on the passenger car has been replaced1 and could have been replaced with a defective ,chinese air bag or defective ,chinese air bag component4 7c7 ,elements ,the report required under subsection 7b7 shall-- 7#a7 identify sources of available information on a passenger car's air bag deployment and replacement1 such as a title1 a vehicle history report1 or other sources2 7#b7 determine which sellers of passenger cars1 such as dealers1 distributors1 and auction companies1 have access to available information identified under paragraph 7#a71 and identify opportunities for passenger car sellers to inform potential buyers of information on the passenger car's air bag deployment and replacement2 7#c7 identify options to encourage dealers1 distributors1 auction companies1 and buyers to have passenger cars inspected to determine if an air bag was replaced with a defective air bag as identified by the ,national ,highway ,traffic ,safety ,administration2 and 7#d7 recommend specific actions that could be taken to notify potential buyers of passenger cars if the car's air bag was replaced1 and could have air bag components identified as defective by the ,national ,highway ,traffic ,safety ,administration4 7d7 ,coordination with other relevant agencies ,in preparing the report required under subsection 7b71 the ,secretary of ,transportation shall1 to the maximum extent practicable1 coordinate with the ,federal ,trade ,commission1 the ,department of ,homeland ,security1 and any other ,federal department or agency involved in identifying passenger cars with defective air bags or1 more generally1 informing buyers of passenger car components and condition4 #i4 ,regulations ,not later than ,december #ca1 #bjbh1 the ,secretary shall issue or amend final regulations1 pursuant to section #eec of title #e1 ,united ,states ,code1 including by amending regulations issued under subpart ,d of part #gia of title #ae1 ,code of ,federal ,regulations1 or successor regulations1 to establish prohibitions and requirements applicable to connected vehicles with a gross vehicle weight rating greater than #d1ecf kilograms 7#aj1jjj pounds71 consistent with the authorities and requirements under this ,act4 ,such prohibitions and requirements shall take effect not later than ,december #ca1 #bjcb4 #aj4 ,severability2 regulatory continuity 7a7 ,severability ,if any provision of this ,act1 or the application of any such provision to any person or circumstance1 is held to be invalid1 the remainder of this ,act1 and the application of the remaining provisions to any person or circumstance1 shall not be affected4 7b7 ,restoration of prior regulations 7#a7 ,in general ,if a court of competent jurisdiction enters a final judgment holding invalid or unenforceable a provision of this ,act or any regulations prescribed to carry out section #d1 the ,secretary may1 notwithstanding any other provision of this ,act1 reissue or reinstate1 in whole or in part1 any similar regulations that were in effect on the day before the date of the enactment of this ,act4 7#b7 ,application of certain laws ,reinstatement of regulations under paragraph 7#a7 shall not be subject to sections #eea1 #eec through #eei1 and #gja through #gjf of title #e1 ,united ,states ,code4 #aa4 ,interaction with regulations 7a7 ,rule of construction ,nothing in this ,act shall be construed to prohibit1 limit1 or otherwise affect the authority of the ,secretary of ,commerce-- 7#a7 to implement or administer subpart ,d of part #gia of title #ae1 ,code of ,federal ,regulations1 as added by the final rule of the ,bureau of ,industry and ,security entitled ,securing the ,information and ,communications ,technology and ,services ,supply ,chain3 ,connected ,vehicles 7#ij ,fed4 ,reg4 #ecfj72 7#b7 under ,executive ,order #achgc 7#ej ,u4,s4,c4 #agja note2 relating to securing the information and communications technology and services supply chain72 or 7#c7 under ,executive ,order #adjcd 7#ej ,u4,s4,c4 #agja note2 relating to protecting ,americans' sensitive data from foreign adversaries74 7b7 ,delayed implementation for software not covered by regulations ,in the case of covered software that is subject to a prohibition under section #d7;a77#b7 and is not subject to subpart ,d of part #gia of title #ae1 ,code of ,federal ,regulations1 as in effect on the day before the date of the enactment of this ,act1 the ,secretary shall not implement the prohibition with respect to such software incorporated into connected vehicles before model year #bjbi4 7c7 ,delayed implementation for hardware not covered by regulations ,in the case of vehicle connectivity system hardware that is subject to a prohibition under section #d7;a77#c7 and is not subject to subpart ,d of part #gia of title #ae1 ,code of ,federal ,regulations1 as in effect on the day before the date of the enactment of this ,act1 the ,secretary shall not implement the prohibition with respect to such hardware incorporated into connected vehicles before model year #bjcb4 7d7 ,delayed implementation for connected vehicles by existing ,united ,states manufacturers and operators 7#a7 ,in general ,subject to paragraph 7#b71 the prohibition under section #d7;a77#a7 shall not apply with respect to a connected vehicle of a model year before model year #bjcj that is manufactured1 purchased pursuant to a master services agreement or other similar contract executed before the date of the enactment of this ,act1 or operated in a commercial fleet1 by an entity that-- 7,a7 is selling passenger vehicles or operating a commercial fleet of passenger vehicles in the ,united ,states as of the date of the enactment of this ,act2 and 7,b7 has been manufacturing passenger vehicles or operating a commercial fleet of passenger vehicles in the ,united ,states for not less than five years before such date of enactment4 7#b7 ,compliance reporting ,any entity benefitting from the delayed implementation of section #d7;a77#a7 pursuant to this subsection shall submit to the ,secretary1 not less frequently than annually until the entity is in compliance with that section1 a report outlining the plan of the entity to come into compliance by #bjcj4 ,the ,secretary shall protect any report submitted under this paragraph as confidential business information1 except as otherwise required by law4 7e7 ,treatment of prior exclusions 7#a7 ,in general ,subject to paragraph 7#b71 any exclusion or exception to a prohibition or definition under subpart ,d of part #gia of title #ae1 ,code of ,federal ,regulations1 as in effect on the day before the date of the enactment of this ,act1 shall remain valid and shall apply to the prohibitions under section #d7;a74 7#b7 ,rulemaking ,beginning ,january #a1 #bjcj1 the ,secretary shall conduct a rulemaking to determine whether exclusions or exceptions described in paragraph 7#a7 should be continued1 modified1 or terminated for the purposes of this ,act4 7f7 ,administrative procedure ,except as otherwise provided in this ,act1 the functions exercised under this ,act shall not be subject to sections #eea1 #eec through #eei1 and #gja through #gjf of title #e1 ,united ,states ,code4 ,september #bb1 #bjbf,reported with an amendment