Korea Issues Legislative Notice on Automotive Cybersecurity & Software Updates
In accordance with the amended Automobile
Management Act (Act No. 20298, promulgated on February 13, 2024, effective
August 14, 2025), a legislative notice for the partial amendment of the
Enforcement Rule of the Automobile Management Act was issued on February 21,
2025. The amendment aims to establish detailed regulations concerning automotive
cybersecurity and software updates.
📌 Key
Contents
Automotive Cybersecurity Management
System Certification
- Regulations on the scope and procedures for Automotive Cybersecurity Management System (CSMS) certification.
- Requirement for automobile manufacturers to attach the Automotive Cybersecurity Management System (CSMS) certification number when notifying vehicle specifications for sale.
- Regulations on the scope of delegation for Automotive Cybersecurity Management System (CSMS) certification tasks.
- Establishment of reporting procedures for automotive cyberattacks and threats, along with standards for administrative actions.
Automotive Software Update
- Regulations on the scope of software updates for safe vehicle operation and verification procedures.
- Regulations on data submission and assessment procedures for software update suitability.
- Regulations on vehicle exemptions from software update compliance requirements.
- Regulations on corrective action plans and reporting timelines for software update compliance.
📌 Opinion
Submission
Opinions can be submitted until April 2,
2025.
Quickly review Korea's automotive cybersecurity regulations on the GCA KOREA website!
※ Unauthorized reproduction, citation, or use of this content is prohibited. The source and link must be clearly stated.
Comments
Post a Comment