The Department of Infrastructure, Transport, Regional Development, Communications, Sports and the Arts has announced targeted consultation on the development of cyber security and software update requirements.
This has fast become a priority, according to the Department, as “cyber incidents are a growing issue with modern vehicles due to increased dependency on complex electronics and software systems”.
According to global data management company Upstream, the incidence of automotive hacks increased by 225 per cent between 2018 and 2021, with remote attacks making up about 85 per cent of all intrusions.
The Department plans to adopt UN Regulations UN R155 and UN R156 for cybersecurity and software updates respectively, which would form two new Australian Design Rules (ADRs), along with a Road Vehicle Standards (RVS) rule change to implement the management system requirements contained in both UN regulations.
The initial consultation has now kicked off with responses to be provided via Vehicle Standards Consultative Forum (VSCF) in May 2026.
The Department is particularly keen to understand what timeframe industry needs to implement these requirements in new products and systems, and what is the cost impact of implementation. It also wants to understand how vulnerable businesses are to cyber-attacks with their current systems and how many adverse cyber incidents the road transport industry is experiencing in this space.
In response to this announcement, HVIA will stand up the Data Protection & Cyber Security working group. For HVIA members wishing to join this consultation group, have input on and/or be kept up to date with legislation in this space, please email r.michaud@hvia.asn.au
HVIA is keen to hear from members in this space and understand any concerns, queries or suggestions on smooth implementation of the new ADRs.