US rules prohibiting Chinese-developed and Chinese-maintained software in vehicles sold domestically took effect in March 2026 for the 2027 model year. The compliance picture is now fracturing along brand lines in ways that expose how the regulation lands differently depending on where a vehicle is designed, built, and software is integrated.

The Commerce Department finalized these rules in January 2025, imposing a sweeping prohibition on connected-vehicle software and hardware with Chinese or Russian supply-chain provenance. The software restrictions apply from the 2027 model year; a parallel hardware ban follows on the same schedule. The rationale is national security: vehicle telematics, cameras, and sensor systems continuously transmit location, occupancy, and behavioral data. Unlike consumer smartphones, fleet-level data from millions of vehicles is harder to anonymize and harder to contain once aggregated.

Who Gets a Carve-Out and Who Does Not

Volvo Cars secured US approval in late May 2026 to continue importing vehicles with connected-car technology that would otherwise fall under the ban, according to Reuters. The approval signals that the licensing mechanism built into the framework is functional — at least for manufacturers whose parent-company structure, engineering workflows, and software provenance can be documented to the regulator's satisfaction. Volvo's Geely parentage makes that audit non-trivial, which makes the approval significant.

Ford and other automakers landed in a different position. Because US-developed software is physically installed into their vehicles at Chinese manufacturing facilities, those vehicles require licenses under the connected-car rule even though the software itself originates in the United States, per a June 2026 Reuters report. This reveals a wrinkle in how the rule is interpreted: the ban targets where software is developed or maintained, but the licensing trigger activates on where integration occurs. For Ford, which builds vehicles in China for sale elsewhere, navigating that distinction is now a compliance cost.

Polestar's situation is the most constrained. The brand signaled in October 2024 that the proposed rules would effectively prohibit the sale of its cars in the United States — and the finalized rules did not change that outcome. Polestar vehicles are manufactured in China, and the software stack is deeply integrated with Chinese-developed systems. There is no practical surgical substitution available on the timescale the rules demand.

The Regulatory Position Holds

US Trade Representative Jamieson Greer stated in April 2026 that he sees no changes coming to the data rules that bar Chinese vehicles from US roads. That position closes off the industry lobbying path that some manufacturers had been quietly pursuing. The rules are not under active review. Companies are in implementation mode whether they are ready or not.

The underlying architecture here deserves clarity. This is not a tariff — tariffs adjust price and can be absorbed or passed through. A software and hardware ban sets a binary condition: the product either complies or it cannot legally be sold. That makes the enforcement mechanism fundamentally different from trade tools the US has historically used against Chinese auto imports, and it means companies cannot simply price their way through it.

What this does structurally for the industry is worth considering. The compliance divergence now emerging — Volvo approved, Ford licensing, Polestar effectively locked out — will likely accelerate a de-facto unbundling of global vehicle supply chains around software provenance. Automakers building next-generation platforms will face strong pressure to separate their China-market software stacks from those destined for US-bound vehicles at the architecture level, not just at the integration level. That is a meaningful engineering and cost commitment, and one that takes multiple model cycles to execute cleanly.

The US connected-car framework is at its core a data-governance instrument expressed through product regulation. It is early in enforcement. How the Commerce Department handles edge cases — vehicles where Chinese and non-Chinese software components are deeply interleaved, or where cloud-based maintenance pipelines cross jurisdictions — will determine whether the licensing pathway becomes a workable compliance route or a bottleneck that further narrows the field of vehicles Americans can buy.