China Makes ISO 26262 Mandatory for L2 Vehicles: A New Era for Automotive Safety and Cybersecurity

The most notable aspect of the new Chinese regulation is the mandatory application of functional safety and cybersecurity standards. Compliance with ISO 26262, implemented in China as GB/T 34590, is now required for L2 systems. In addition, ISO/SAE 21434, adopted as GB/T 43267, becomes a mandatory cybersecurity requirement.

This represents a significant shift for the industry. While ISO 26262 has long been considered best practice for automotive functional safety, its regulatory status has differed between markets.

In Europe, compliance with ISO 26262 is effectively expected for highly automated driving systems such as those covered by UNECE Regulation No. 157 (Automated Lane Keeping Systems, Level 3). For many conventional L2 systems, market approval has traditionally been possible without a formal ISO 26262 compliance program.

China’s new approach changes this landscape. Companies that have successfully developed and homologated L2 systems without implementing a full ISO 26262 lifecycle will now need to establish the corresponding processes, safety analyses, work products, and evidence if they want to access the Chinese market. The same applies to cybersecurity engineering practices required by ISO/SAE 21434.

From a safety and quality perspective, this development is not surprising. As driver assistance systems become increasingly sophisticated and software-intensive, regulators worldwide are placing greater emphasis on systematic engineering processes to manage safety and cybersecurity risks throughout the product lifecycle.

For many European OEMs and suppliers, particularly those that have already invested heavily in ISO 26262 programs, the new Chinese requirements are unlikely to introduce major challenges. Organizations that have adopted a robust safety culture and established compliant development processes are well-positioned to meet these expectations.

At Validas, we see this development as further confirmation that a “Quality First” strategy continues to be the right long-term investment. Companies that have proactively integrated functional safety and cybersecurity into their development processes will be able to adapt more easily to evolving regulatory requirements, while those that delayed these investments may now face significant catch-up efforts.

As automotive regulations around the world continue to converge toward higher levels of safety assurance, organizations with mature ISO 26262 and ISO/SAE 21434 capabilities will be best positioned to compete in global markets. The new Chinese standard is another clear indication that functional safety is no longer merely a competitive advantage. It is increasingly becoming a prerequisite for market access.

• UN Regulation No. 157 - Automated Lane Keeping Systems (ALKS)

• New UN regulation paves way for deployment of driving assistance systems worldwide