If you have seen a new car recently, you may have noticed features like using a mobile app to control the car, GPS navigation, internet services and software updates. Cars today are not only about the engine, wheels and other physical parts. Many of them also use computers and internet-based features. This makes digital safety important because these features can also face problems such as hacking or unwanted access.
To make connected cars safer, India is working on rules for the computer and internet features used in vehicles. In 2026, the Ministry of Road Transport and Highways (MoRTH) also published draft rules related to car security and software updates. But what are these proposed rules, which cars could they apply to, and what could they mean for car owners? Let’s understand it in simple terms.
What Is a Smart Car?
If you can lock or unlock your car using a mobile app, check its location, control some functions from a distance, or receive software updates through the internet, the car has connected features. Internet and software can make many things easier, but they also create new security risks. As cars become more connected, protecting their software and user data becomes just as important as protecting the physical parts of the car.
Why Are Cyber Security Rules Needed?
Earlier, most cars mainly depended on physical and mechanical parts. So when people talked about car safety, they usually focused on the engine, brakes, airbags and body. Today, connected cars use navigation, mobile apps, internet services, remote access and software-based features. This means protecting the car from hacking, cyber attacks and unwanted access has also become important.
Because of this change, countries around the world are working on cyber security rules for connected vehicles. India is also moving in this direction to make connected vehicles safer from digital threats.
When Will These Rules Apply?
India has AIS-189 for vehicle cyber security and AIS-190 for software updates. On 17 June 2026, the Ministry of Road Transport and Highways published draft rules through G.S.R. 503(E) to add cyber security and software update requirements to the Central Motor Vehicles Rules. These are still draft rules, so they should not be described as final requirements for every car. The proposed rules plan a phased rollout based on the type of vehicle and its software or internet-connected features. The proposed dates start with new Level 3 and above automated vehicles from October 2026, move to certain internet-connected vehicles in 2028, and reach other software-update-capable vehicles by 2029. These dates can change if the draft is changed before final notification.
What Could Change Under the New Rules?
The proposed rules focus on making vehicle software and connected systems safer. AIS-189 deals with vehicle cyber security and the Cyber Security Management System (CSMS), while AIS-190 deals with software updates and the Software Update Management System (SUMS). The aim is to make sure security risks are identified and managed and that software updates are delivered safely without creating new risks for the vehicle.
How Could Car Owners Benefit?
These rules are mainly meant for vehicle manufacturers, but car owners could also benefit from them. Better protection for car software and connected systems can reduce the risk of unwanted access through mobile apps, remote features and other online services. Better control over software updates can also help manufacturers fix security problems more safely. However, the full benefit for car owners will become clearer as the requirements are introduced in new vehicles.
Could Car Prices Increase?
Meeting new security requirements can add some cost for car companies because they may need more software development, testing and security work. However, this does not mean every car will become more expensive by the same amount. The actual effect will depend on the company, the car model and how many connected features it has. The impact on the price of a particular car will become clearer as companies update their products and pricing.
What Challenges Could Come With It?
Connected cars can offer many useful features, but keeping them secure can be challenging. Companies will need to provide software updates, fix security problems and protect user data over time. Car owners also have a role to play. Ignoring software updates, connecting unknown devices or not paying attention to security settings can increase digital risks. So, owning a smart car is not only about using new features; basic digital safety also matters.
What Is the Car Company’s Responsibility?
A car company’s responsibility is not limited to adding internet and smart features. It also needs to consider security when designing the vehicle’s software and connected systems. Under the proposed framework, manufacturers would need processes such as a Cyber Security Management System (CSMS) and a Software Update Management System (SUMS). These processes are meant to help companies identify security risks, reduce them and respond when a problem is found. Software updates also need to be delivered safely so that the update process itself does not create a security problem.
What Cyber Risks Can a Connected Car Face?
A connected car may use internet services, mobile apps, GPS, wireless connections and different software systems, so these can also create possible security risks. For example, a weakness in a connected system could allow unwanted access or misuse of data. Mobile apps and remote features can be targeted if their security is weak. Other possible risks can involve the car’s internet-connected systems, wireless connections, third-party apps and external ports such as USB or diagnostic ports. India’s AIS-189 draft specifically considers risks involving remote functions, telematics, wireless systems, third-party software, USB and diagnostic ports, as well as personal and location data.
Software updates are another important area. If the update system is not properly protected, an attacker could try to misuse it. This is why AIS-190 includes requirements for protecting software updates and making sure that only valid updates are installed. For connected cars, security is therefore not only about stopping hacking. It also includes protecting the software, connected services, data and communication systems used by the vehicle.
What Should You Check Before Buying a Smart Car?
If you are planning to buy a connected car, do not look only at the design, price and features. Check the company’s official information about connected features and software updates as well. It can be useful to know how long the car is expected to receive software updates and how those updates are provided. You should also compare the car’s safety rating, after-sales service and service network. Before making a final decision, checking real owner reviews can also give you a better idea of the car’s long-term support and everyday use.
Conclusion
Smart and connected cars are becoming more common, and their digital features can make driving more convenient. But as cars become more connected, cyber security also becomes more important. India’s proposed rules for vehicle cyber security and software updates are a step towards making connected vehicles safer.
If you are planning to buy a smart car, do not look only at its features and technology. Also consider software updates, cyber security, after-sales service and long-term support. A little research before buying can help you choose a car that is not only useful but also better prepared for the future.
- Related Articles
- E20 Petrol Bharwana Chahiye Ya Nahi?
- Mahindra Scorpio N Facelift 2026: Price, Features, Engine Aur Puri Jaankari
Agar aap connected vehicles se jude notifications aur motor vehicle rules ke baare me adhik jaankari chahte hain, to Ministry of Road Transport and Highways (MoRTH) ki official website dekh sakte hain.
Frequently Asked Questions
1. What Are Cyber Security Rules for Smart Cars?
These are rules and standards being developed to protect connected cars from hacking and other online threats. They mainly focus on keeping the car’s computer systems, software and internet-based features safe.
2. Do These Rules Matter to Normal Car Owners?
Yes. If car companies follow these safety requirements, future car owners may get better protection for connected features and software updates. However, the actual benefits will depend on how the rules are implemented.
3. Will These Rules Apply Only to New Smart Cars?
The proposed rules are mainly focused on specified vehicles and their connected or software-based features. The effect on existing cars can depend on the type of vehicle and the final rules.
4. What Should I Check Before Buying a Smart Car?
Do not look only at the car’s design and features. Also check how the company handles software updates, connected features and digital safety. This can help you understand how well the car may be supported in the future.
5. Are These Cyber Security Rules Already in Force in India?
Not as a final nationwide requirement in the form of the June 2026 draft. On 17 June 2026, MoRTH published draft rules covering cyber security and software update requirements for specified vehicle categories. Since these were draft rules, the final requirements and implementation should be checked in the latest official MoRTH notification.
About the Author
WorldInfo Editorial Team
This article was prepared by the WorldInfo Editorial Team after checking trusted sources and official references.
