The US has no vehicle cyber type approval. NHTSA now says it is reevaluating its voluntary best practices. But the teeth are defect recalls, used twice on cyber: FCA Uconnect in 2015, an aftermarket ELD in 2024.
https://www.nhtsa.gov/speeches-and-presentations/Auto-ISAC-Cybersecurity-Summit-2026