H2 2025 Automotive Cybersecurity Regulations and Privacy Updates
As vehicle connectivity accelerates, global automotive cybersecurity and privacy requirements continue to evolve.Β Β Β
This report from PlaxidityX summarizes the most significant legislative and standards developments from July to December 2025, helping OEMs and Tier 1s navigate a landscape of mandatory enforcement and heightened liability.Β Β Β
Key updates include:
- The EU Radio Equipment Directive (RED) making cybersecurity mandatory for all wireless vehicle components.
- The publication of ISO/TS 5083:2025, linking cybersecurity directly to the safety of Level 3 and 4 automated driving.
- EU CRA Reporting Obligations requiring formal reporting of exploited vulnerabilities and severe incidents for digital elements.Β
- The U.S. DOJ Final Rule restricting the transfer of sensitive bulk vehicle data to countries of concern.
- The EU Digital Omnibus proposal for streamlining GDPR, AI Act, and CRA compliance.
The report offers a concise analysis of these changes, their expected timelines, and their implications for the automotive ecosystem – equipping cybersecurity, compliance, and engineering teams with the insights needed to plan confidently in a shifting regulatory landscape. Fill out the form to download the free report.