China Makes ISO 26262 Mandatory for L2 Vehicles: A New Era for Automotive Safety and Cybersecurity

The most notable aspect of the new Chinese regulation is the mandatory application of functional safety and cybersecurity standards. Compliance with ISO 26262, implemented in China as GB/T 34590, is now required for L2 systems. In addition, ISO/SAE 21434, adopted as GB/T 43267, becomes a mandatory cybersecurity requirement.

This represents a significant shift for the industry. While ISO 26262 has long been considered best practice for automotive functional safety, its regulatory status has differed between markets.

In Europe, compliance with ISO 26262 is generally expected for highly automated driving systems, including those covered by UNECE Regulation No. 157 (Automated Lane Keeping Systems, Level 3). In contrast, many conventional Level 2 (L2) systems have historically been approved without a formal ISO 26262 compliance program, provided they comply with UNECE Regulation No. 171 for Driver Control Assistance Systems (DCAS), which does not explicitly reference ISO 26262.

China’s new approach changes this landscape. Companies that have successfully developed and homologated L2 systems without implementing a full ISO 26262 lifecycle will now need to establish the corresponding processes, safety analyses, work products, and evidence if they want to access the Chinese market. The same applies to cybersecurity engineering practices required by ISO/SAE 21434.

From a safety and quality perspective, this development is not surprising. As driver assistance systems become increasingly sophisticated and software-intensive, regulators worldwide are placing greater emphasis on systematic engineering processes to manage safety and cybersecurity risks throughout the product lifecycle.

For many European OEMs and suppliers, particularly those that have already invested heavily in ISO 26262 programs, the new Chinese requirements are unlikely to introduce major challenges. Organizations that have adopted a robust safety culture and established compliant development processes are well-positioned to meet these expectations.

At Validas, we see this development as further confirmation that a “Quality First” strategy continues to be the right long-term investment. Companies that have proactively integrated functional safety and cybersecurity into their development processes will be able to adapt more easily to evolving regulatory requirements, while those that delayed these investments may now face significant catch-up efforts.

As automotive regulations around the world continue to converge toward higher levels of safety assurance, organizations with mature ISO 26262 and ISO/SAE 21434 capabilities will be best positioned to compete in global markets. The new Chinese standard is another clear indication that functional safety is no longer merely a competitive advantage. It is increasingly becoming a prerequisite for market access.

• UN Regulation No. 157 - Automated Lane Keeping Systems (ALKS)

• UNECE press release: New UN regulation paves way for deployment of driving assistance systems worldwide

• United Nations Economic and Social Council: Proposal for a new UN Regulation on uniform provisions concerning the approval of vehicles with regard to Driver Control Assistance Systems (DCAS)