The United States has taken a significant step to tighten regulations on connected vehicles by imposing a ban on the sale of Polestar electric vehicles, citing concerns over data security and national security risks. The move highlights the growing scrutiny of smart vehicle technology as governments become increasingly cautious about how connected cars collect, process, and transmit sensitive user data.
Electric vehicles have transformed the global automotive industry by offering cleaner transportation and lower emissions. Modern EVs are also equipped with advanced connected technologies that provide real-time navigation, over-the-air software updates, remote diagnostics, and enhanced safety features. While these innovations improve the driving experience, they also generate vast amounts of data, raising concerns about privacy and cybersecurity.
Swedish EV manufacturer Polestar, known for its premium electric cars featuring Scandinavian-inspired design and Google-powered infotainment systems, has built a strong customer base in the United States. However, the company’s future in one of the world’s largest EV markets is now under threat following new US regulations targeting connected vehicles with potential links to foreign adversaries.
Under the newly introduced Connected Vehicle Rule, the sale of new Polestar vehicles in the United States will be prohibited starting in 2027. According to the US Department of Commerce’s Bureau of Industry and Security (BIS), the decision was driven by concerns that data generated by connected vehicles could be transmitted to servers associated with China or Russia. Officials believe such access could create potential national security vulnerabilities, particularly if sensitive vehicle or location data falls into the wrong hands.
One of the most intriguing aspects of the decision is that Volvo has not been included in the ban. Both Volvo and Polestar are owned by China’s Geely Holding Group and share several technologies, including Google-based infotainment systems, electrical architecture, and engineering platforms. Despite these similarities, Volvo has been allowed to continue selling its vehicles in the US market without restrictions.
The differing treatment of the two brands has sparked debate across the automotive industry. While regulators have not publicly disclosed every technical factor behind the decision, the outcome suggests that compliance with data handling, software architecture, and cybersecurity requirements may differ between the two manufacturers despite their shared ownership.
The move reflects a broader global trend in which connected car security is becoming just as important as vehicle performance, emissions, and innovation. Governments worldwide are introducing stricter regulations to ensure that data collected by modern vehicles remains protected from unauthorized access and foreign influence.
As the automotive industry continues its shift toward software-defined and connected vehicles, manufacturers will face increasing pressure to demonstrate strong cybersecurity measures and transparent data governance. The US decision on Polestar serves as a reminder that in the digital era of mobility, data security has become a key factor shaping the future of the global EV market.
Join our LinkedIn group Information Security Community!
