Chinese car spying fears are real, but bans alone won't fix them

Is a car a vehicle or a sensor with seats? The question used to sound like a conference keynote. Now it decides who can drive through the gate of a US air base, and it may soon decide what you can buy in an American showroom.

The trigger is a fresh wave of coverage built on an article in The National Interest. As IANS reports, Kadena Air Base on Okinawa has barred BYD cars since October 26, including private cars, taxis, vans and contractor vehicles. A base spokesperson called them an "unacceptable and unmitigable risk to our personnel and our mission." The same piece says at least 190 Chinese connected cars are registered to enter South Korean military sites. In Norway, soldiers who tapped the touchscreen of a Changan-made Deepal rental reportedly found stored camera footage, routes and gate codes.

At the same time, the industry is lobbying. As ANI reports, the Alliance for Automotive Innovation, whose members include General Motors, Toyota and Volkswagen, urged Congress to enact a permanent ban on Chinese vehicles, software and hardware before the current session concludes on January 3, 2027.

The security argument is strong where the data actually flows

Start with what deserves to be taken seriously. A military base is the easy case. Nobody wants a camera-equipped, always-connected vehicle idling near an F-35 flight line, whatever its badge says. The Norwegian official's admission, "We don't know for sure where the information is sent or what it's used for," is the most honest sentence in the whole debate. It describes an absence of transparency, not proof of spying.

The privacy policies cited are also telling. MG tells British customers that personal data "may also be processed in China" by its parent, and Xpeng's UK policy allows transfers to affiliates such as its headquarters in China. We think that is a legitimate concern for any buyer, and for any employer with sensitive sites. But notice the shape of the problem: it is about where data goes and who can access it. That is a rules question, and rules can be written.

A ban is a blunt tool for a problem that needs a scalpel

The US already has a scalpel of sorts. The Commerce Department rule restricts Chinese connected-vehicle software from model year 2027 and hardware from 2030, and, per the sources, it also blocks Chinese-controlled automakers from selling connected cars at all from model year 2027. Polestar, a Swedish brand owned by Geely, was reportedly denied authorization in June even though one model is assembled in South Carolina. Meanwhile the Senate Commerce Committee advanced the Connected Vehicle Security Act of 2026 unanimously, to write that approach into law.

Here is where we part ways with the momentum. Look at how the lobbying case is built, as ANI describes it. It mixes national security with unfair trade practices, subsidies, intellectual property theft and the threat to manufacturers with long-standing investments in American communities. Those are different arguments with different remedies. Subsidies are a trade matter; a camera log is a security matter. Bundling them lets the protectionist case borrow the credibility of the espionage one. When the group asking for a permanent ban represents the incumbents, who in our view stand to benefit, skepticism is healthy, not naive.

There is also a technical inconsistency worth stating. If the risk is software that phones home, then the nationality of the badge is a proxy, and a crude one. The sources give us no evidence about how connected cars from other makers handle stored footage or data transfers, and that gap is exactly the point: nobody is asking everyone the same questions.

What drivers and bases actually need: audits, disclosure and defaults

Our proposal is simple. Publish a common standard for any connected car sold in the US: what is recorded, where it is stored, who can access it, whether the owner can switch it off, and independent audits of the answer. Make base access policy rest on the same checklist, plus hard rules such as disabling cameras and telematics on sensitive sites. South Korea's defense ministry says it will restrict connected cars at sensitive sites by year's end, which suggests allies are heading toward capability-based rules anyway.

Would such a regime keep out some Chinese brands? Possibly, and if they fail an audit, fair enough. That outcome is far more defensible than a nationality-based wall, because it applies equally to everyone and tells drivers something useful. A ban tells you nothing about the car in your own driveway.

The verdict: take the base bans at face value, because the exposure on a military site is real. Treat the call for a permanent national ban with caution until it is separated from the subsidy fight. Congress, where Democrats have won control of both houses, The Guardian reports, should resist the temptation to rush a package through before the session ends. Write the data rules first, and let the trade argument stand on its own merits.