Vehicle Use May Be Restricted Under South Korea’s New Cybersecurity Rules

On June 27, 2025, South Korea’s Ministry of Land, Infrastructure and Transport (MOLIT) announced updated vehicle cybersecurity regulations under the revised Automobile Management Act. The changes introduce mandatory cybersecurity management system certification and tighter control over software updates. Manufacturers must meet these new requirements or face administrative penalties. The revised Enforcement Decree of the Automobile Management Act clarifies these key changes: Vehicle Operation Restrictions: Use of a vehicle may be suspended if a cybersecurity threat compromises operational safety. Fines for Update Violations: Non-compliance with update procedures may result in fines. Penalties for Data Issues: Inaccurate or missing data submissions before updates may incur penalties. Organizations, groups, or individuals can submit opinions on this proposed amendment until July 16, 2025. The new decree takes effect on August 14, 2025, with some provisions enforceable up...