Cars Are Covered by a Security Rule. Buses Are Not. Why?
A rule that covers one product and not a similar one can look uneven, and it can also reflect which rule was ready first.
Picture a man named Carl, 60, who rides a city bus to work. He read that the United States now limits Chinese-made connected cars on security grounds. Then he saw a new electric bus that was built by a Chinese company. "If it is a risk in a car," he asked, "why not in a bus?"
It is a fair question, and the answer shows how rules get made one piece at a time.
What the rule covers
The Commerce Department's connected vehicle rule was published on 16 January 2025 and took effect on 17 March 2025. It covers vehicles up to 10,000 pounds. The Federal Register text says buses are outside it: "commercial vehicles such as buses are not in the scope of this final rule." The same text says the department intends to propose a separate rule for commercial vehicles. As of 8 October 2026, no such proposal appears in the sources.
Buses face a different, older rule. A 2019 law bars federal transit money from some bus and rail contracts with certain China-linked manufacturers. The Federal Transit Administration says local money is not restricted for buses. A transit agency paying with its own funds is not barred by that law.
Other countries
The idea that no one else is concerned does not match the sources.
| Place | What happened | Reliability |
|---|---|---|
| Norway | Ruter, the Oslo transit agency, tested buses from Chinese maker Yutong and reported in October 2025 that the manufacturer has remote access for updates and diagnostics, which could in theory stop a bus | Agency's own page |
| Denmark | A transit executive said buses can be stopped remotely by the maker or by a hacker, and that this applies to connected vehicles in general | News report |
| United Kingdom | The transport department said it works with the intelligence community on the matter | News report |
| Israel | The army reportedly bars Chinese-made cars from its bases | News report |
| Australia | A city transport agency is investigating Yutong buses | News report |
| Canada | Put a 100% tariff on Chinese electric cars in 2024, citing cybersecurity, then agreed a quota in January 2026 | News report |
The European Union's duties on Chinese electric cars were based on subsidies, and its decision does not mention security.
What the companies say
Yutong told a German newspaper that remote control from China is technically impossible, and that updates need operator approval. Ruter said the buses cannot be driven remotely and that its concern is the connected technology, not the country of origin. No confirmed case of anyone disabling a bus appears in the sources.
The pattern
Different governments weigh the same concern differently. Some act on cars, some on buses, some on tariffs, and some wait. A rule that covers one product and not a similar one can look uneven, and it can also reflect which rule was ready first. Both could be true.
You could…
-
Read the scope section of any rule that affects what you can buy.
-
Ask what a rule covers, and what it leaves out.
-
Notice whether the stated reason is applied the same way across similar products.
Which rule have you seen apply to one product and not another? Tell us here. Another reader may have a clearer example.
Sources: Federal Register (90 FR 5360, 16 Jan 2025); 15 CFR 791.301; FTA guidance on the 2019 defense authorization act; Ruter (28 Oct 2025); reports by The Register, NBC, Reuters, JNS and Global News; European Commission (30 Oct 2024). Figures are estimates for planning, based on public data.
Tell us in the comments