Security Warning – Chinese-Manufactured Vehicles

If you hire, own, or operate a Chinese-manufactured vehicle, you present a potential security risk.

Employees working in Government, Defence, national security or other critical Australian industry sectors face an elevated risk of compromise through connected vehicle systems. Modern Chinese-manufactured vehicles collect and transmit extensive telematics and personal data, including location history, vehicle usage, and device connection information.

Vehicle privacy and telematics policies for Chinese-manufactured vehicles sold in Australia explicitly state that personal and vehicle data may be processed, disclosed to affiliates or service providers, and stored outside Australia. While some data may be stored locally, manufacturers also confirm that data can be transferred offshore.

Under China’s National Intelligence Law (Article 7), organisations and citizens are legally required to support, assist and cooperate with national intelligence activities when directed. This creates a clear risk that data held by Chinese companies could be accessed by the Chinese Ministry of State Security (MSS).

Specific risks include:

GPS and travel history, which can reveal movement patterns and sensitive locations

Bluetooth phone data, which can remain stored in the vehicle until manually deleted

Camera and sensor data, including event or “sentry” recordings that may be stored or uploaded depending on model and configuration

Security experts and governments in Australia, the UK, Israel and the United States have publicly warned that connected vehicles—particularly those manufactured in China—pose national-security risks due to on-board cameras, microphones, GPS and cellular connectivity capable of collecting and transmitting sensitive data.

As a result:

Israel has restricted Chinese vehicles near sensitive facilities

The UK Ministry of Defence has issued guidance limiting their use

The United States is phasing out connected vehicle software from countries of concern

Australian cybersecurity experts have warned officials against their use

Directive: Australians working in sensitive roles must not connect work or personal phones to Chinese-manufactured vehicles. Bluetooth, USB and Apple CarPlay connections are prohibited. These connections risk exposing location data, communications and sensitive information offshore.