18. The expert from Japan, Co-Chair of the Task Force on Cyber Security and Over-the-Air Software Updates presented GRVA-02-03, containing a status report of the group’s activities since the previous GRVA session and introducing ECE/TRANS/WP.29/GRVA/2019/2. He mentioned that the group responded in writing to all the questions and comments received on the proposal.

19. The expert from FIA welcomed the proposal produced by the group but mentioned that it did not reflect their position regarding life time requirements.

20. The expert from OICA wondered whether such aspect raised by FIA would belong to the scope of the 1958 Agreement. The secretariat answered that some precedents could help answering this question e.g. UN Regulation No. 49 (including conformity of in-service vehicles/engines provisions), UN Regulation No. 59 (Replacement (retrofit) silencing systems), UN Regulation No. 83 (including durability requirements and “in use” requirements), UN Regulation No. 90 (Replacement braking parts) and UN Regulation No. 133 (Recyclability of motor vehicles). He stated that he was not aware of any provision of the Agreement that would limit the activities under this Agreement only to the performance of new vehicles. The expert from OICA, Secretary of the Task Force agreed to submit in written an informal document highlighting the difficulty faced by the group with this aspect. He presented, on the last day of the second GRVA session, GRVA-02-46 that described the issue of post-production, understood as the product lifetime starting after the production is definitely discontinued.

21. The expert from Germany and the Netherlands stated that the document should address the three following phases: system/vehicle development, production and post-production.

22. The expert from Japan supported the proposal ECE/TRANS/WP.29/GRVA/2019/2 and stated the need to adopt this document during this session, since the new UN Regulation proposed in the document was one of the important and needed Regulations for the improvement of vehicle safety.

23. The expert from EC provided comments on the proposal (GRVA-02-37).

24. The expert from IMMA presented GRVA-02-18, proposing to exclude vehicles of category L from the scope of the document.

25. The expert from Japan, Co-Chair of the Task Force, responding to the advice received from the previous session of GRVA, reported on its proposal for a test phase to assure the draft produced. He presented the aim and the desired output of this activity.

26. GRVA agreed to keep the documents under this agenda item for continued review at next GRVA session. GRVA invited the Task Force to address the comments received and to proceed with the test phase. GRVA noted the need to make further progress on this item and requested the secretariat to explore the possibility to organize a special session of GRVA in May or June 2019.

25. The expert from Japan, Co-Chair of the Task Force on Cyber Security and Over-the-Air issues (TF CS/OTA) presented GRVA-01-19 introducing GRVA-01-17 and GRVA-01-18 with recommendations on software updates and on cyber security. He invited the experts to send comments on the recommendations until 28 October 2018. The expert from France congratulated the Task Force for the work done. The expert from the United States of America confirmed that they had participated in the last meeting of the group and explained that both recommendations would require amendments to make them compatible with the 1998 Agreement (especially in the self-certification context) and offered to provide comments.

26. The expert from Japan also mentioned that the recommendations contained proposals for a draft UN Regulation for cyber security and a draft generic Annex that could be added to relevant UN Regulations with regards to software number management. He added that the innovative approaches proposed would probably require some verification before adoption and that these activities would require an extension of the group’s mandate or the creation of a new group.

27. GRVA invited the Task Force to use the remaining time on their current mandate to develop a verification programme that could be considered at the second session of GRVA. GRVA also requested the Chair to report on these activities at WP.29.