During the 13th session of GRVA China presented the informal document GRVA-13-32 with the request to discuss a harmonized common guidance of data security and data protection. The chair of GRVA recognized the proposal and requested the informal working group on Cyber Security and Over-the-Air Software Updates to discuss and report the findings to next GRVA in January 2022.
| Status of China's vehicle data security standard and proposals for GRVA consideration |
| Reference Number: GRVA-25-39 |
| Submitted by: NTCAS and CATARC |
| Meeting Sessions: 25th GRVA session (18-22 May) |
| Document date: 20 May 26 |
| Relevant to: UN Regulation No. 155 | Cyber Security and Cyber Security Management, UN Regulation No. 156 | Software Update Processes and Management Systems, WP.29 Regulatory Project | Data Storage Systems for Automated Driving, and WP.29 Discussion Topic | Vehicle data access and protection |
| View full document file for more information |
| Click here to view the full document file |
| On-Board Authentication/Authorisation |
| Reference Number: GRVA-25-12 |
|
The document addresses on-board authentication and authorization in connected vehicles, a complex area involving multiple stakeholders, use cases, implementations, and standards. The core challenge is distinguishing legitimate remote interactions from misuse, manipulation, and integrity loss. Discussions have occurred since 2023 across GRVA, CS/OTA, and WP.29. FIA seeks feedback on establishing the topic and will develop a scoping document and demonstrator based on select use cases including accident investigation, law enforcement, emergency response, energy monitoring, battery tracking, parts replacement, and ITS-related safety. Contracting parties are invited to submit comments and use cases by 15 June 2026 for consideration at the November WP.29 session. |
| Submitted by: FIA Foundation |
| Meeting Sessions: 25th GRVA session (18-22 May) |
| Document date: 13 May 26 |
| Relevant to: WP.29 Discussion Topic | Vehicle data access and protection |
| Click here to view the full document file |
| Periodical Technical Inspections: Minutes of the 42nd (January 2026) session |
| Reference Number: PTI-42-05 |
|
CITA presented PTI-42-02 to link the PTI informal group’s work to the approval of the EU Roadworthiness Package. FSD proposed work to introduce PTI provisions into UN Regulations under the 1958 Agreement. Japan, Russia, and FSD provided brief updates on the use of diagnostic devices to access to in-vehicle data. CITA updated the group on its views concerning PTI for ADS vehicles. CITA explained GRVA/2025/43, GRVA/2025/44, GRVA/2025/34, and GRVA-23-18/Rev.1 on Electromechanical Braking and Parking Lock Devices which will be considered by WP.29 in March. |
| Meeting Sessions: 42nd PTI session (28 Jan) |
| Document date: 20 Apr 26 |
| Relevant to: UN Rule No. 2 | Vehicle Inspections: Roadworthiness, WP.29 Discussion Topic | Periodical Technical Inspections: Remote Access to Vehicle Data, WP.29 Discussion Topic | Vehicle data access and protection, and WP.29 Discussion Topic | Electronic Technical Inspections |
| View full document file for more information |
| Click here to view the full document file |
| On- / Off-Board Authorisation Systems |
| Reference Number: WP.29-198-16 |
| Submitted by: FIA Foundation |
| Meeting Sessions: 198th WP.29 session (9-13 Mar) |
| Document date: 07 Mar 26 |
| Document status: Informal WP.29 review |
| Relevant to: WP.29 Discussion Topic | Vehicle data access and protection |
| View full document file for more information |
| Click here to view the full document file |
| Periodical Technical Inspections: Agenda for the 42nd (January 2026) session |
| Reference Number: PTI-42-01 |
| Meeting Sessions: 42nd PTI session (28 Jan) |
| Document date: 27 Jan 26 |
| Relevant to: WP.29 Discussion Topic | PTI-Automated Vehicles, WP.29 Discussion Topic | PTI Tampering Detection, WP.29 Discussion Topic | Periodical Technical Inspections: Remote Access to Vehicle Data, WP.29 Regulatory Project | Resolution on a Particle Number Emission Test for Periodic Technical Inspections , WP.29 Discussion Topic | Vehicle data access and protection, WP.29 Discussion Topic | Periodical Technical Inspections for Advanced Driver Assistance Systems, WP.29 Discussion Topic | Electronic Technical Inspections, and WP.29 Discussion Topic | Periodical Technical Inspections for Heavy-duty Braking Systems |
| Click here to view the full document file |
| Report: Stocktaking of offboard and onboard authorisation systems |
| Reference Number: WP.29-197-16 |
| Submitted by: FIA Foundation |
| Meeting Sessions: 197th WP.29 session (10-14 Nov 2025) |
| Document date: 06 Nov 25 |
| Relevant to: UN Regulation No. 160 | Event Data Recorders, WP.29 Regulatory Project | Data Storage Systems for Automated Driving, WP.29 Discussion Topic | Vehicular Communications and Connectivity, UN Regulation No. 169 | Event Data Recorders (EDR) for heavy vehicles, WP.29 Discussion Topic | Periodical Technical Inspections: Remote Access to Vehicle Data, WP.29 Discussion Topic | Vehicle data access and protection, WP.29 Discussion Topic | Electronic Technical Inspections, and UN Regulation No. 180 | On-Board Monitoring Systems |
| View full document file for more information |
| Click here to view the full document file |
| Stocktaking of offboard and onboard authorisation systems |
| Reference Number: WP.29-197-17 |
| Submitted by: FIA Foundation |
| Meeting Sessions: 197th WP.29 session (10-14 Nov 2025) |
| Document date: 06 Nov 25 |
| Relevant to: UN Regulation No. 160 | Event Data Recorders, WP.29 Regulatory Project | Data Storage Systems for Automated Driving, WP.29 Discussion Topic | Vehicular Communications and Connectivity, UN Regulation No. 169 | Event Data Recorders (EDR) for heavy vehicles, WP.29 Discussion Topic | Periodical Technical Inspections: Remote Access to Vehicle Data, WP.29 Discussion Topic | Vehicle data access and protection, and UN Regulation No. 180 | On-Board Monitoring Systems |
| View full document file for more information |
| Click here to view the full document file |
| Vehicle data: On-Board Authorisation Concept “OBAC” |
| Reference Number: WP.29-196-14 |
| Submitted by: FIA Foundation |
| Meeting Sessions: 196th WP.29 session (23-27 Jun 2025) |
| Document date: 20 Jun 25 |
| Relevant to: WP.29 Discussion Topic | Vehicle data access and protection |
| Click here to view the full document file |
| Secure Access to Vehicle Data and Functions |
| Reference Number: GRVA-22-14 |
| Submitted by: CATARC |
| Meeting Sessions: 22nd GRVA session (2-6 Jun 2025) |
| Document date: 30 May 25 |
| Relevant to: WP.29 Discussion Topic | Vehicular Communications and Connectivity, WP.29 Discussion Topic | Vehicle data access and protection, and WP.29 Discussion Topic | Periodical Technical Inspections: Remote Access to Vehicle Data |
| View full document file for more information |
| Click here to view the full document file |
| On-Board Authorisation Concept “OBAC” |
| Reference Number: WP.29-195-12 |
| Submitted by: FIA Foundation |
| Meeting Sessions: 195th WP.29 session (3-7 Mar 2025) |
| Document date: 28 Feb 25 |
| Relevant to: WP.29 Discussion Topic | Vehicular Communications and Connectivity, WP.29 Discussion Topic | Vehicle data access and protection, and WP.29 Discussion Topic | Periodical Technical Inspections: Remote Access to Vehicle Data |
| Click here to view the full document file |
| 6th Meeting of the Group on Vehicle On-Board Authorization Concept |
| Reference Number: GRVA-21-40/Rev.1 |
| Submitted by: FIA Foundation |
| Meeting Sessions: 21st GRVA session (20-24 Jan 2025) |
| Document date: 24 Jan 25 |
| Relevant to: WP.29 Discussion Topic | Vehicle data access and protection |
| View full document file for more information |
| Click here to view the full document file |
| Proposal for a new expert group on On-board Authorisation Concept (OBAC) |
| Reference Number: GRVA-21-39 |
| Submitted by: FIA Foundation |
| Meeting Sessions: 21st GRVA session (20-24 Jan 2025) |
| Document date: 21 Jan 25 |
| Relevant to: WP.29 Discussion Topic | Vehicle data access and protection |
| View full document file for more information |
| Click here to view the full document file |
| CS/OTA informal group: Proposal to update the terms of reference |
| Reference Number: GRVA-21-05 |
| Meeting Sessions: 21st GRVA session (20-24 Jan 2025) |
| Document date: 16 Jan 25 |
| Relevant to: UN Regulation No. 0 | International Whole Vehicle Type Approval System (IWVTA), United Nations Agreement | RE3 Construction of Vehicles, WP.29 Regulatory Project | Automated Driving Systems, UN Regulation No. 155 | Cyber Security and Cyber Security Management, UN Regulation No. 156 | Software Update Processes and Management Systems, WP.29 Regulatory Project | Data Storage Systems for Automated Driving, WP.29 Discussion Topic | Vehicle data access and protection, and WP.29 Regulatory Project | Automated vehicle categorisation |
| Click here to view the full document file |
| Vehicle On-Board Authorisation Concept |
| Reference Number: TFCS-32-03 |
| Submitted by: FIA Foundation |
| Meeting Sessions: 32nd TFCS session (22 Oct 2024) |
| Document date: 22 Oct 24 |
| Relevant to: UN Regulation No. 155 | Cyber Security and Cyber Security Management, UN Regulation No. 156 | Software Update Processes and Management Systems, WP.29 Discussion Topic | Vehicular Communications and Connectivity, and WP.29 Discussion Topic | Vehicle data access and protection |
| Click here to view the full document file |
| Agenda for the 30th CS/OTA (TFCA) task force session |
| Reference Number: TFCS-30-01/Rev.3 |
| Meeting Sessions: 30th TFCS session (8 May 2024) |
| Document date: 08 May 24 |
| Relevant to: UN Regulation No. 155 | Cyber Security and Cyber Security Management, UN Regulation No. 156 | Software Update Processes and Management Systems, and WP.29 Discussion Topic | Vehicle data access and protection |
| Click here to view the full document file |
| Data protection: On-Board Authorisation Concept |
| Reference Number: TFCS-30-04/Rev.1 |
| Submitted by: FIA Foundation |
| Meeting Sessions: 30th TFCS session (8 May 2024) |
| Document date: 08 May 24 |
| Relevant to: WP.29 Discussion Topic | Vehicle data access and protection |
| Click here to view the full document file |
| Minutes of the 5th ITS VCTF task force session |
| Reference Number: VCTF-06-02 |
| Meeting Sessions: 6th VCTF session (26 and 28 Mar 2024) |
| Document date: 26 Mar 24 |
| Relevant to: WP.29 Discussion Topic | Vehicular Communications and Connectivity and WP.29 Discussion Topic | Vehicle data access and protection |
| Click here to view the full document file |
| Agenda for the 6th VCTF task force session |
| Reference Number: VCTF-06-01/Rev.1 |
| Meeting Sessions: 6th VCTF session (26 and 28 Mar 2024) |
| Document date: 26 Mar 24 |
| Relevant to: WP.29 Discussion Topic | Vehicular Communications and Connectivity and WP.29 Discussion Topic | Vehicle data access and protection |
| Click here to view the full document file |
| Minutes of the 28th CS/OTA informal group session |
| Reference Number: TFCS-28-10/Rev.1 |
| Meeting Sessions: 28th TFCS session (16 Jan 2024) |
| Document date: 12 Mar 24 |
| Relevant to: United Nations Agreement | RE3 Construction of Vehicles, UN Regulation No. 155 | Cyber Security and Cyber Security Management, UN Regulation No. 156 | Software Update Processes and Management Systems, WP.29 Discussion Topic | Vehicular Communications and Connectivity, and WP.29 Discussion Topic | Vehicle data access and protection |
| Click here to view the full document file |
| Agenda for the 29th CS/OTA informal group session |
| Reference Number: TFCS-29-01/Rev.3 |
| Meeting Sessions: 29th TFCS session (12-13 Mar 2024) |
| Document date: 12 Mar 24 |
| Relevant to: United Nations Agreement | RE3 Construction of Vehicles, UN Regulation No. 156 | Software Update Processes and Management Systems, WP.29 Discussion Topic | Vehicular Communications and Connectivity, and WP.29 Discussion Topic | Vehicle data access and protection |
| Click here to view the full document file |
| Security and accessibility over lifetime of the vehicle |
| Reference Number: TFCS-29-03 |
|
Proposals harmonising vehicle onboard authorisation concept and data privacy. |
| Submitted by: FIA Foundation |
| Meeting Sessions: 29th TFCS session (12-13 Mar 2024) |
| Document date: 08 Mar 24 |
| Relevant to: UN Regulation No. 155 | Cyber Security and Cyber Security Management, UN Regulation No. 156 | Software Update Processes and Management Systems, WP.29 Discussion Topic | Guidelines of Software Update Technical Requirements, WP.29 Discussion Topic | Guidelines on Cyber Security Technical Requirements, WP.29 Discussion Topic | Periodical Technical Inspections: Remote Access to Vehicle Data, WP.29 Discussion Topic | Vehicle data access and protection, and WP.29 Discussion Topic | Electronic Technical Inspections |
| Click here to view the full document file |
| Data Privacy By Design |
| Reference Number: TFCS-29-02/Rev.1 |
| Submitted by: FIA Foundation |
| Meeting Sessions: 29th TFCS session (12-13 Mar 2024) |
| Document date: 08 Mar 24 |
| Relevant to: WP.29 Discussion Topic | Guidelines on Cyber Security Technical Requirements and WP.29 Discussion Topic | Vehicle data access and protection |
| Click here to view the full document file |
| Vehicular Communications: Definition and Overview |
| Reference Number: WP.29-192-13 |
| Meeting Sessions: 192nd WP.29 session (4-8 Mar 2024) |
| Document date: 04 Mar 24 |
| Relevant to: WP.29 Discussion Topic | Vehicular Communications and Connectivity and WP.29 Discussion Topic | Vehicle data access and protection |
| View full document file for more information |
| Click here to view the full document file |
| CS/OTA informal group status report to GRVA |
| Reference Number: GRVA-18-43 |
| Meeting Sessions: 18th GRVA session (22-26 Jan 2024) |
| Document date: 23 Jan 24 |
| Relevant to: UN Regulation No. 155 | Cyber Security and Cyber Security Management, UN Regulation No. 156 | Software Update Processes and Management Systems, WP.29 Discussion Topic | Guidelines of Software Update Technical Requirements, WP.29 Discussion Topic | Guidelines on Cyber Security Technical Requirements, and WP.29 Discussion Topic | Vehicle data access and protection |
| Click here to view the full document file |
| Minutes of the 27th CS/OTA informal group session |
| Reference Number: TFCS-27-06 |
| Meeting Sessions: 27th TFCS session (27-28 Nov 2023) |
| Document date: 21 Dec 23 |
| Relevant to: UN Regulation No. 155 | Cyber Security and Cyber Security Management, UN Regulation No. 156 | Software Update Processes and Management Systems, WP.29 Discussion Topic | Guidelines of Software Update Technical Requirements, WP.29 Discussion Topic | Guidelines on Cyber Security Technical Requirements, WP.29 Discussion Topic | Periodical Technical Inspections: Remote Access to Vehicle Data, and WP.29 Discussion Topic | Vehicle data access and protection |
| Click here to view the full document file |
| Data Privacy by Design |
| Reference Number: TFCS-28-03 |
| Submitted by: FIA Foundation |
| Meeting Sessions: 28th TFCS session (16 Jan 2024) |
| Document date: 13 Dec 23 |
| Relevant to: WP.29 Discussion Topic | Vehicle data access and protection, WP.29 Discussion Topic | Periodical Technical Inspections: Remote Access to Vehicle Data, and UN Regulation No. 155 | Cyber Security and Cyber Security Management |
| Click here to view the full document file |
| Authorization Concept for Secure Access to Diagnostic Data |
| Reference Number: TFCS-28-02 |
| Submitted by: FIA Foundation |
| Meeting Sessions: 28th TFCS session (16 Jan 2024) |
| Document date: 13 Dec 23 |
| Relevant to: WP.29 Discussion Topic | Vehicle data access and protection and WP.29 Discussion Topic | Periodical Technical Inspections: Remote Access to Vehicle Data |
| Click here to view the full document file |
| Vehicular Communications task force status report to GRVA |
| Reference Number: GRVA-17-36 |
| Meeting Sessions: 17th GRVA session (25-29 Sep 2023) |
| Document date: 26 Sep 23 |
| Relevant to: WP.29 Discussion Topic | Vehicular Communications and Connectivity and WP.29 Discussion Topic | Vehicle data access and protection |
| View full document file for more information |
| Click here to view the full document file |
| IT Security vs Access to Data: Data Privacy in Connected Vehicles |
| Reference Number: GRVA-17-20 |
| Submitted by: FIA Foundation |
| Meeting Sessions: 17th GRVA session (25-29 Sep 2023) |
| Document date: 22 Sep 23 |
| Relevant to: UN Regulation No. 155 | Cyber Security and Cyber Security Management, UN Regulation No. 156 | Software Update Processes and Management Systems, WP.29 Discussion Topic | Vehicular Communications and Connectivity, and WP.29 Discussion Topic | Vehicle data access and protection |
| View full document file for more information |
| Click here to view the full document file |
| Minutes from the 23rd Cyber Security/Software Updates task force session |
| Reference Number: TFCS-23-06 |
| Meeting Sessions: 23rd TFCS session (19 Oct 2022) |
| Document date: 04 Nov 22 |
| Relevant to: UN Regulation No. 155 | Cyber Security and Cyber Security Management, UN Regulation No. 156 | Software Update Processes and Management Systems, and WP.29 Discussion Topic | Vehicle data access and protection |
| Click here to view the full document file |
| Agenda for the 23rd CS/OTA informal group session |
| Reference Number: TFCS-23-01/Rev.2 |
| Meeting Sessions: 23rd TFCS session (19 Oct 2022) |
| Document date: 18 Oct 22 |
| Relevant to: UN Regulation No. 155 | Cyber Security and Cyber Security Management, UN Regulation No. 156 | Software Update Processes and Management Systems, and WP.29 Discussion Topic | Vehicle data access and protection |
| Click here to view the full document file |
| Proposal for Data Security of Intelligent and Connected Vehicles |
| Reference Number: GRVA-13-32 |
| Submitted by: China |
| Meeting Sessions: 13th GRVA session (23-27 May 2022) |
| Document date: 20 May 22 |
| Relevant to: WP.29 Discussion Topic | Vehicular Communications and Connectivity and WP.29 Discussion Topic | Vehicle data access and protection |
| View full document file for more information |
| Click here to view the full document file |