Skip to content
Back to policy library
China (Mainland)In forceRelevance to Chinese AI firms: HighSector-specificCybersecurity

China pilot for market access and road operation of intelligent connected vehicles

Notice of MIIT, MPS, MOHURD and MOT on Launching Pilot Work for Market Access and Road Operation of Intelligent Connected Vehicles

MIIT, Ministry of Public Security, MOHURD and Ministry of Transport · 工信部联通装〔2023〕217 号

This pilot is China institutional route taking L3/L4 automated driving from road testing and demonstration to product access plus road operation, in two stages. In the product access stage the pilot manufacturer refines the access testing and safety assessment scheme, which MIIT and the Ministry of Public Security confirm before it is executed under the supervision of provincial authorities and the city government where the vehicles operate, with MIIT commissioning technical service institutions to assess the scheme, its execution and its results; only after passing may the manufacturer file the product access application, which MIIT decides after acceptance, examination and public notice, announcing the validity period and the restrictions such as the area of operation. In the road operation stage the approved product operates within a defined area, and the pilot user entity must insure the vehicles, register them and monitor their operating status, and must hold the corresponding transport business qualification where the vehicles are used commercially. The notice also sets out suspension and exit mechanisms.

Verified against official sources · 2026-09-12Partly secondary sources — verify before relying

Does this apply to me?

A Chinese company is caught when it intends to mass-produce and sell vehicles with L3/L4 automated driving in China, which requires entering the pilot to obtain product access rather than following the ordinary type access route; when it forms a consortium with a vehicle manufacturer as the user entity for robotaxi, driverless shuttle or trunk logistics operations, thereby taking primary responsibility for road traffic safety, cybersecurity and data security; and when, as an automated driving system supplier, its software updates and functional changes fall under the manufacturer duty not to change automated driving functions without authorisation and to comply strictly with software update management and filing commitments. For companies going abroad this is the natural starting point for dual-tracking domestic safety assessment evidence with UN R155/R156/R157 or EU ADS evidence packages.

Key industries: Autonomous driving, Computer vision

Application timeline

  1. 2023-11-17

    The four ministries issue the pilot notice

    The pilot covers production-ready intelligent connected vehicle products carrying level 3 (conditional automation) and level 4 (high automation) functions as defined in GB/T 40429-2021.

  2. 2023-12-20

    First consolidated round: deadline for provincial MIIT departments to submit application schemes

    Provincial industry and information technology departments, together with traffic management and cybersecurity police, housing, transport and communications administrations, review the schemes and submit them to MIIT by that date; supplementary submissions remain possible after the consolidated round.

Obligations (5)

Each states its trigger, the evidence to retain and the clause it comes from

Complete access testing and safety assessment and connect vehicles to the MIIT pilot management system

Severity Critical三、组织实施(二)1.产品准入试点

The pilot manufacturer must refine the access testing and safety assessment scheme for the ICV product; after MIIT and the Ministry of Public Security confirm it, testing and safety assessment are carried out under the supervision of the provincial authorities and the city government where the vehicles operate, while MIIT commissions technical service institutions to assess the scheme, its execution and its results. The manufacturer must connect the vehicles to the MIIT pilot management system in accordance with the monitoring requirements. Only after passing may the product access application be filed with MIIT, which decides after acceptance, examination and public notice and then announces the approved product together with the validity period, area of operation and other restrictions.

Applies when
Pilot vehicle manufacturers and their automated driving system suppliers.
Evidence to retain
  • · Access testing and safety assessment scheme with the confirmation record from the two ministries
  • · Execution records of the testing and safety assessment, with proving-ground and road test reports
  • · Technical service institution assessment report and issue closure records
  • · Integration plan and data submission records for connecting vehicles to the MIIT pilot management system
  • · Product access application dossier and the access announcement stating validity period and area of operation

Estimated first-time effort: 60–180 person-days (estimate, not a commitment)

Road operation: insurance, registration, operating status monitoring and transport qualifications

Severity High三、组织实施(二)2.上路通行试点

Approved ICV products operate on the road within a defined area. The pilot user entity must insure the vehicles as required, apply for registration, monitor their operating status and strengthen operational safety; where a change of pilot user entity is requested before registration, supplementary materials must be submitted. Where the vehicles are used for commercial transport, the user entity must also hold the corresponding transport business qualification and meet operational management requirements.

Applies when
Pilot user entities operating robotaxis, driverless shuttles, delivery vehicles and trunk logistics fleets.
Evidence to retain
  • · Vehicle insurance policies and an adequacy justification
  • · Registration certificates and documentation of the permitted operating area
  • · Design and duty records of the vehicle operating status monitoring platform
  • · Transport business licences and operational management rules
  • · Supplementary materials and approval for any change of pilot user entity

Estimated first-time effort: 15–45 person-days (estimate, not a commitment)

Emergency response and escalated reporting for traffic accidents and cyber or data security incidents

Severity Critical三、组织实施(二)3.应急处置

During the pilot, for traffic accidents, cyber and data security incidents, or emergencies caused by failure of the vehicle automated driving system, the pilot user entity, the pilot manufacturer and the city government department must respond in accordance with the relevant emergency plans and report the response process and results to the provincial authority in good time, which in turn reports to MIIT, the Ministry of Public Security, MOHURD and the Ministry of Transport.

Applies when
Both the pilot user entity and the pilot vehicle manufacturer, each bearing the reporting duty.
Evidence to retain
  • · Dedicated emergency plans for traffic accidents and for cyber and data security incidents
  • · Emergency drill records and improvement items
  • · Incident response ledger with timeline, measures and outcome
  • · Submission records and acknowledgements of reports to the provincial authority

Estimated first-time effort: 10–30 person-days (estimate, not a commitment)

No unauthorised change of automated driving functions; comply with software update management and filing commitments

Severity High四、保障措施(二)强化责任落实

The pilot manufacturer bears primary responsibility for product quality and production consistency, must not change automated driving functions without authorisation, and must strictly comply with software update management and filing commitments. The pilot user entity must discharge primary responsibility for road traffic safety, cybersecurity and data security and establish sound safety management rules to ensure safe operation. In practice the OTA release process must be tied to a documented test of whether a change alters the automated driving function and to the filing triggers.

Applies when
Pilot manufacturers and their automated driving software suppliers, with the pilot user entity responsible for the corresponding safety management rules.
Evidence to retain
  • · Criteria for determining a change to the automated driving function and the per-release determination records
  • · Software update management rules and records evidencing compliance with the filing commitments
  • · Production consistency control plan and inspection records
  • · Road traffic safety, cybersecurity and data security management rules of the user entity

Estimated first-time effort: 10–30 person-days (estimate, not a commitment)

Penalties

The notice sets pilot management consequences rather than fines: the pilot must be suspended and rectified where vehicles commit road traffic violations or are involved in accidents suggesting safety hazards, or where the pilot manufacturer or user entity fails to discharge safety responsibilities or cybersecurity, data security and radio security protection duties; the pilot must be exited where the automated driving system has serious safety hazards that cannot be eliminated, or where material changes to the pilot parties prevent the pilot from being safely carried out. Legal liability is still pursued under the Road Traffic Safety Law, Cybersecurity Law, Data Security Law and other superior legislation.

Known uncertainty

The annexed trial Implementation Guide and the application scheme template are PDF attachments that were not verified clause by clause in this review, so no specific test items, assessment metrics or document checklists from the Guide are stated here. Supplementary submissions are possible after the 2023 consolidated round, but no first-party confirmation of later batches, their timing or revisions to the Guide was obtained; the four ministries expressly reserve the right to adjust the Guide as industry and technology develop.

Sources (1)

Content as of 2026-09-12 · corpus 2026.09|Compiled from public official sources with links and review dates for compliance decision support. Rules change; have licensed professionals review before external disclosure, regulatory filing or contractual commitments.

Related regulations

GDPR · PIPL · CCPA control mapping
Traceable AI · cited when sourced
ISO 27001 alignment in progress
WCAG 2.1 AA accessibility target
China pilot for market access and road operation of intelligent connected vehicles · Obligations & official sources | HaiWen HQ