Australia is moving to adopt UN R155 and R156 as draft ADR 115 and ADR 116. Neither says where the back end that operates a connected fleet runs, who administers it, or under whose law it can be compelled. Fortify Labs: the drafts "still don't address where the back-end infrastructure is located, who has access to it, or who maintains it." Copying a UN regulation gets you type approval, not an answer to which jurisdiction holds your telemetry.

https://hvia.asn.au/call-for-impact-analysis-on-proposed-cyber-regs/

#infosec #UNR155 #AutomotiveSecurity #TypeApproval