U.S. lawmaker raises security concerns over autonomous vehicles, potential data theft

A U.S. lawmaker recently penned a letter to the U.S. National Highway Traffic Safety Administration expressing concerns over threats posed by autonomous vehicles that could potentially transfer critical data to foreign nations. 

U.S. Rep. August Pfluger (D-Texas) wrote that AV technology has the potential to improve mobility for people living with disabilities, reduce preventable accidents and make roads safer. 

But he remains concerns that a lack of U.S. oversight in AV technology, “has opened the door for a foreign nation to spy on American soil, as Chinese companies potentially transfer critical data to the People’s Republic of China.”

The California Department of Motor Vehicles has already permitted Chinese companies to test Avs on California roads, but Pfluger said there remains “a serious lack of oversight” when it comes to data governance. He said Republican leaders on the Energy & Commerce Committee have repeatedly flagged considerable concerns regarding Chinese-owned companies transferring Americans’ data back to China, and such AV companies with Chinese relationships pose a similar national security risk. 

“These aspirations from Chinese companies make clear that, absent American leadership, the CCP views autonomous and connected vehicles as a pathway to incorporate their systems and technology into our country’s infrastructure,” Pfluger wrote in the Nov. 17 letter to NHTSA Acting Administrator Ann Carlson, which was originally shared with WIRED.

He noted the CCP successfully infiltrated American infrastructure through Huawei Technologies, “which we are still working to recover from years later.”

Pfluger asked NHTSA to explain NHTSA’s work with the Department of Defense, FBI or other law enforcement and defense agencies to vet foreign companies who request permits to test autonomous vehicles in America for security risks. He asked whether there are any mandates by NHTSA that companies testing autonomous vehicles keep data collected in the U.S. in the country.

Pfluger demanded to know whether the NHTSA has procedures in place “to protect American personal data and data which may pose a national security risk from collection and sharing to foreign adversaries that may exploit such information.”

He additionally asked if NHTSA had worked with cities or other local governments to:

• Limit or prevent Chinese owned companies from collecting sensitive information from American infrastructure;
• Prevent Chinese owned companies from collecting information from Americans and sharing such information abroad;
• Set parameters for what foreign-based companies, or foreign-owned companies can collect and share abroad while testing autonomous vehicles on American roads.

Pfluger gave Carlson a deadline of Dec. 15 to answer the questions.