Automotive Software Updates Must Now Be Reported in South Korea
On
July 9, 2025, South Korea’s Ministry of Land, Infrastructure and Transport
(MOLIT) announced a proposed regulation requiring automakers to submit
documentation verifying compliance with safety and cybersecurity standards when
performing software updates. This reflects the ongoing shift toward
software-driven vehicle technologies and the increasing integration of
communication-based connectivity between vehicles and external systems,
alongside the growing need to address cybersecurity risks.
Under
the amended Automobile Management Act, effective August 14, 2025, vehicle
manufacturers and related entities must provide evidence that their software
updates meet applicable requirements. The regulation outlines five key
categories of documentation:
- Inter-System Impact and
Update Verification: Documentation of interactions with other systems
and assessment of functional changes
- Compliance with Safety
Standards:
Confirmation of software and hardware configurations, and evaluation of
safety-related modifications
- Cybersecurity Measures: Description of updated
protection protocols and relevant security procedures
- User Information Provision: Explanation of
update instructions and conditions as communicated to users
- Update Management and Recordkeeping: Procedures for vehicle identification, documentation, and retention of related records
MOLIT will review the validity of this regulation every three years starting January 1, 2025, and make revisions as necessary. The regulation takes effect upon its issuance on July 9, 2025.
For inquiries regarding Korea’s vehicle cybersecurity regulations, please contact GCA KOREA. As your trusted partner in navigating KC certification and cybersecurity compliance requirements, we are committed to supporting your market access efforts. To stay informed about the latest updates related to the Cyber Security Management System (CSMS) certification, please visit our official website.
Comments
Post a Comment