Connected Vehicle National Security Review Act

The Connected Vehicle National Security Review Act creates a new Office within the Department of Commerce to review information and communications technology transactions in connected vehicles that might pose national security risks. It specifically targets transactions involving "persons or jurisdictions of concern" like Russia, China, Iran, North Korea, Cuba, and Venezuela's Maduro. The Secretary of Commerce can require companies to provide information, impose cybersecurity standards, exclude certain components, or prohibit transactions posing "undue or unacceptable risk" to critical infrastructure. The bill also mandates annual risk assessments from the Director of National Intelligence on threats to the supply chain of covered ICTS transactions. This law applies to any person or entity subject to U.S. jurisdiction engaging in covered ICTS transactions for connected vehicles.