Europe’s Car Industry Faces a Software Rule Shift

Brussels launches industry alliance and expands cybersecurity and compliance rules as carmakers adjust to a software-centred regulatory regime

7 Feb 2026

The European Union is tightening its regulatory framework for software-defined vehicles, combining new industry coordination with stricter cybersecurity and compliance rules that are reshaping how cars are designed and updated.

At the centre of the effort is the European Connected and Autonomous Vehicle Alliance, launched by European Commission president Ursula von der Leyen in September 2025 as part of the bloc’s Industrial Action Plan for the automotive sector. The alliance held its first working group meetings in Brussels on February 5 and 6, 2026, focusing on four areas: software-defined vehicles, automotive hardware, artificial intelligence and data, and autonomous driving deployment.

Officials see the initiative as a way to coordinate industry and regulators as Europe seeks to narrow a technology gap with competitors in the US and Asia.

Alongside institutional changes, the compliance environment for software-enabled vehicles is becoming more demanding. UN regulations R155 and R156, mandatory for all new vehicle type approvals in the EU since July 2024, require manufacturers to maintain certified Cybersecurity Management Systems and Software Update Management Systems throughout a vehicle lifecycle, including post-sale updates delivered over the air.

Further requirements will arrive with the Euro 7 emissions and safety framework, due to phase in from November 2026. The rules introduce additional obligations covering anti-tampering safeguards, cybersecurity documentation and on-board monitoring systems. These measures affect the underlying software architecture of modern vehicles.

The Commission is also attempting to address long-standing fragmentation in the testing of automated driving systems and advanced driver assistance technologies. At present, companies must secure separate permits from individual member states before conducting trials.

Under the Automotive Action Plan, the Commission plans to propose a harmonised EU-wide admission process in early 2026. The initiative also calls for at least three cross-border test beds for autonomous vehicles to begin operating the same year.

For carmakers, the changes represent both regulatory pressure and a shift in competitive dynamics. Companies that rely on modular, software-centred vehicle platforms may find it easier to adapt, while manufacturers built around traditional hardware systems face higher costs to meet the new standards. In the EU’s regulatory approach, software is becoming a central and continuously regulated component of the modern car.