Circular of the Ministry of Industry and Information Technology on Strengthening the Network Security and Data Security of the Internet of Vehicles

Circular of the Ministry of Industry and Information Technology on Strengthening the Network Security and Data Security of the Internet of Vehicles
Circular of the Ministry of Industry and Information Technology on Strengthening the Network Security and Data Security of the Internet of Vehicles

Gong Xin Bu Wang An [2021] No.134

September 15, 2021

Competent departments of industry and information technology of all provinces, autonomous regions, municipalities directly under the Central Government, and the Xinjiang Production and Construction Corps, communications administrations of all provinces, autonomous regions, and municipalities directly under the Central Government, China Telecommunications Corporation, China Mobile Communications Group Co., Ltd., China United Network Communications Group Co., Ltd., the relevant intelligent connected vehicle manufacturers, internet of vehicles service platform operators, and the relevant standardization technical organizations,

The internet of vehicles (IoV) is an emerging industrial form in which the new generation of network communication technology is deeply integrated with automobile, electronics, road transportation, and other fields. Intelligent connected vehicles refer to the new generation of automobiles that are equipped with advanced appliances, such as vehicle sensors, controllers, and actuators, integrate modern communications and network technologies, achieve functions of intelligently exchanging and sharing information between vehicles and between vehicles and roads, individuals, clouds, etc., and are capable of sensing complex environments, making decisions intelligently, and exercising concerted control, making it possible to offer a "safe, efficient, comfortable, and energy-saving" driving experience. With the rapid development of the industry, the IoV security risks are becoming increasingly prominent, and there is an urgent need for improvement of the IoV security guarantee system. To promote the implementation of the Development Plan for the New-energy Vehicle Industry (2021-2035) and strengthen the management of the network security and data security of IoV, the relevant matters are hereby notified as follows:

I. Basic Requirements for Network Security and Data Security
1. Performing the primary security responsibilities. All relevant enterprises are required to establish network security and data security management systems, define the responsible persons and management bodies, and perform network security and data security protection responsibilities. They shall strengthen internal supervision and management, intensify resource guarantees, and discover and solve security hazards in a timely manner. They shall also strengthen publicity, education, and training on network security and data security.
2. Strengthening security protection in all respects. All relevant enterprises are required to adopt management and technical measures to strengthen the security protection of automobiles, networks, platforms, data, etc., in compliance with the relevant standards and requirements for the network security and data security of the Internet of Vehicles (IoV), and to monitor, prevent, and promptly dispose of network security risks and threats to ensure that data remain in an effectively protected and legally used state so that the safe and stable operation of the IoV can be ensured.

II.
  ......
请先同意《服务条款》和《隐私政策》