How Does China Regulate Autonomous Driving for EVs?

China has one of the most ambitious and comprehensive regulatory frameworks for autonomous driving (自动驾驶) in the world. As of 2026, the country has deployed Level 3 (conditional automation) and Level 4 (high automation) autonomous driving on public roads in over 50 cities, enabled more than 100 robotaxi licenses for commercial operation, and established a three-tier regulatory system spanning national laws, ministry-level guidelines, and local implementation rules. For foreign companies developing autonomous driving technologies or deploying autonomous EVs in China — whether as automakers, Tier-1 suppliers, software developers, or fleet operators — understanding this regulatory ecosystem is essential for compliance, testing approval, and commercial deployment. This FAQ provides a detailed overview of China’s autonomous driving regulations as they stand in 2026, covering the legal hierarchy, testing requirements, liability frameworks, data security rules, and the specific pathways available to foreign entities.

National Legal Framework and Classification System

Q1: What is the legal basis for autonomous driving on public roads in China?

China does not yet have a standalone national autonomous driving law. Instead, the regulatory framework is built on a tiered system: (1) the Road Traffic Safety Law (道路交通安全法) as the foundational statute, which was amended in 2023 to include provisions for “intelligent connected vehicles” (ICVs, 智能网联汽车) and to authorize lower-level regulations for autonomous driving; (2) the Inter-ministerial “Interim Measures for the Administration of Intelligent Connected Vehicles” (智能网联汽车管理暂行规定), jointly issued in 2024 by MIIT, MPS (Ministry of Public Security), MOC (Ministry of Transport), and SAMR (State Administration for Market Regulation), which establishes the national framework for Level 3 and Level 4 vehicle type approval, testing, and commercial operation; (3) sectoral guidelines from individual ministries — including MIIT’s “Guidelines for the Access and Road Traffic Management of Intelligent Connected Vehicles” and MPS’s “Measures for ICV Road Testing and Demonstration Application”; and (4) local implementation rules issued by municipal governments under delegated authority. The National People’s Congress is reportedly working on a comprehensive “Intelligent Connected Vehicle Law” (智能网联汽车法), with a draft expected for first reading in late 2026 or early 2027. Until then, the 2024 Interim Measures serve as the de facto national regulatory framework.

Q2: How does China classify autonomous driving levels for regulatory purposes?

China’s autonomous driving classification system — “Standards for Classification of Driving Automation for Vehicles” (GB/T 40429–2021) — mirrors the SAE J3016 taxonomy with minor adaptations. The key regulatory distinction is between Level 0–2 (driver support features) and Level 3–5 (automated driving features). Level 3 (conditional automation) requires that the human driver is available to take over when requested, while Level 4 (high automation) allows the vehicle to operate without human intervention within defined Operational Design Domains (ODDs, 运行设计域). Level 5 (full automation) is not yet addressed in any regulatory framework. The regulatory classification specifically recognizes two types of operation: “testing” (测试, for pre-commercial R&D validation on public roads, with a safety driver required) and “demonstration application” (示范应用, for limited commercial services such as robotaxi fleets, typically with an operator monitoring remotely). As of 2026, Level 3 conditional automation has received type approval for specific vehicle models — including the Mercedes-Benz EQS (approved in 2024 for highway L3 at up to 60 km/h) and the BMW 7 Series (approved 2025 for highway L3 at up to 80 km/h). Level 4 commercial robotaxi operations are permitted under local permits in Beijing Yizhuang, Shanghai Jiading, Wuhan, Guangzhou, Shenzhen, and Suzhou, among others.

Q3: What are the type approval requirements for L3 and L4 vehicles?

MIIT’s 2024 “Guidelines for ICV Product Access and Road Traffic Management” establish the type approval (homologation) process for vehicles with Level 3 and Level 4 features. The manufacturer must: (1) submit a detailed ODD description specifying the geographic area, weather conditions, time of day, speed range, and road types in which the autonomous feature is designed to operate; (2) demonstrate compliance with 28 safety evaluation requirements covering perception system reliability, decision-making algorithm validation, fail-safe maneuvers (最小风险策略), cybersecurity, and over-the-air (OTA) update management; (3) pass a physical inspection and homologation test at an MIIT-designated testing facility (including CATARC or CAERI); (4) implement a data recording system — often called an “autonomous driving Data Recorder” (AD-DR or “EDR 2.0”) — that captures at least 90 seconds of pre- and post-incident sensor data; (5) obtain cybersecurity certification under GB/T 40856 (EV cybersecurity technical requirements) and GB/T 41586 (software update management); and (6) register the OTA update system with MIIT, as all software updates affecting autonomous driving functions require pre-approval. The approval process takes 6–12 months. As of early 2026, 14 vehicle models from 9 manufacturers (including 2 foreign brands — Mercedes-Benz and BMW) have received L3 type approval in China.

Q4: What are the road testing requirements for autonomous vehicles?

Road testing in China requires a multi-step approval process under the tri-ministerial ICV Road Test Management Rules (2021, revised 2024). Applicants must: (1) register a legal entity in China — foreign companies must establish a WFOE, JV, or branch with a physical presence in China, and cannot simply apply through a foreign entity; (2) obtain a closed-track test certificate from an MIIT-designated testing ground (e.g., the National Intelligent Connected Vehicle (Shanghai) Pilot Zone or the Beijing-Tianjin-Hebei ICV Testing Ground in Cangzhou); (3) pass at least 5,000 km of closed-track testing with zero safety-critical incidents; (4) submit a safety assessment report covering the autonomous driving system’s functionality, redundancy, and edge-case handling; (5) purchase at least RMB 5 million (USD 685,000) in third-party liability insurance per test vehicle; (6) designate a qualified safety driver with at least 3 years of driving experience and 100 hours of AD system training; and (7) obtain the local road test permit from the municipal ICV management committee. The road test permit is valid for 12 months, renewable upon demonstration of continued safe operation. Data from road testing — including all disengagement events and near-misses — must be reported monthly to the local ICV committee. In 2024–2025, 263 companies obtained road test permits across 50+ cities, with a cumulative road test mileage exceeding 120 million kilometers.

Commercial Deployment and Liability Framework

Q5: Can autonomous driving services operate commercially in China?

Yes — commercial operation of Level 4 robotaxi and robobus services is permitted under local “demonstration application” (示范应用) permits. To transition from road testing to commercial operation, the operator must: (1) complete at least 20,000 km of road testing without any at-fault safety incidents; (2) pass a safety evaluation by the local ICV expert committee; (3) implement a remote monitoring and emergency intervention system; (4) establish a cybersecurity incident response plan; and (5) obtain a demonstration application permit from the municipal ICV management committee. Commercial operation is currently permitted in a defined ODD — typically a designated geographic zone (e.g., Beijing Yizhuang’s 160 km² ICV demonstration zone, or Shanghai Jiading’s 270 km² zone) under favorable weather conditions (no heavy rain, no snow, daytime hours). As of early 2026, over 8,000 robotaxi vehicles are operating commercially across 12 Chinese cities. Baidu Apollo’s “Luobo Kuaipao” (萝卜快跑) is the largest operator with approximately 3,000 vehicles deployed. Other operators include Pony.ai (1,200+ vehicles), WeRide (800+), AutoX (600+), and Didi Autonomous Driving (500+). Commercial robotaxi fares in China are typically RMB 3–8 per trip (subsidized to compete with human-driven ride-hailing), with operator revenue supplemented by municipal subsidies for autonomous driving demonstration zones.

Q6: Who bears liability in an autonomous vehicle accident in China?

The liability framework for autonomous driving accidents is still evolving. Under the 2024 Interim Measures, liability is allocated based on the autonomous driving level at the time of the incident. For Level 3 vehicles operating in autonomous mode: the vehicle owner or operator bears primary liability (similar to standard traffic accident liability under Chinese tort law), but may seek recourse from the manufacturer if the autonomous driving system is proven to have acted outside its ODD or failed to handle a situation it was designed to handle. The mandatory AD-DR (data recorder) provides critical evidence — its data is admissible in court and must be preserved for at least 3 years. For Level 4 vehicles operating without a human driver: the vehicle operator (the robotaxi company) bears primary liability for accidents, while the manufacturer may be jointly liable for system defects. Insurance requirements are significantly higher for L4 operations: minimum third-party liability coverage of RMB 20 million per vehicle (vs RMB 1 million for conventional vehicles), and operator-filed insurance pools totaling RMB 100 million for fleets exceeding 100 vehicles. As of early 2026, reported autonomous vehicle accident rates in China remain low — approximately 0.3 accidents per 10,000 km for L4 robotaxis, compared to 0.8 per 10,000 km for human-driven vehicles in the same operating zones. However, the legal framework for full liability allocation has not been tested in a major court case.

Q7: How does China regulate remote monitoring and safety operator requirements?

All Level 4 autonomous driving commercial operations in China must maintain a remote monitoring and intervention system (远程监控与介入系统) with a qualified safety operator (安全员) monitoring the vehicle fleet in real-time, typically at ratios of 1 operator per 10–20 vehicles (depending on the local permit terms). The operator must be able to: (1) view live video feeds from each vehicle’s interior and exterior cameras; (2) monitor vehicle status including speed, trajectory, planned path, and system health; (3) issue voice commands to passengers through the in-vehicle intercom system; and (4) remotely command the vehicle to perform a minimum risk maneuver (MRM — 最小风险策略) — either a controlled pull-over to the roadside or a return-to-depot path — within 5 seconds of detecting a system anomaly. The remote monitoring center must be physically located within China and the system must be registered with the local public security bureau. Data from remote monitoring — including all MRM interventions and their triggers — must be logged and retained for at least 2 years. Foreign robotaxi operators must establish their monitoring center within China and ensure real-time data processing does not involve cross-border data transmission.

Q8: What are the data security requirements specific to autonomous vehicles?

Autonomous vehicles generate enormous volumes of sensitive data — high-definition maps, real-time video from multiple cameras, LiDAR point clouds, radar data, vehicle trajectories, and passenger biometric data — which trigger multiple Chinese data regulations simultaneously. Under the Data Security Law and the 2025 updated “Provisions on Data Security for Intelligent Connected Vehicles,” autonomous vehicle operators must: (1) classify in-vehicle data into three tiers — general data (vehicle status, non-sensitive OTA data), important data (traffic flow statistics, HD map updates beyond public versions), and core data (raw sensor feeds, video footage of public spaces, biometric data); (2) store important and core data on servers physically located within China, with cross-border transfer requiring a security assessment under the Data Security Law; (3) implement data desensitization for video and camera data that may capture faces or license plates — raw video must be blurred or masked before any use beyond immediate driving safety; (4) maintain a data security officer position and a data security management system audited at least annually; (5) submit annual data security reports to the CAC (Cyberspace Administration of China); and (6) comply with the map data management rules under the Surveying and Mapping Law, which require that HD maps used for autonomous driving be produced by a Chinese company with a surveying and mapping qualification (测绘资质). Foreign companies operating robotaxis in China commonly use domestic map providers such as Baidu Maps, AutoNavi (Amap), or NavInfo, and store autonomous driving data with Chinese cloud providers (Alibaba Cloud, Huawei Cloud, or Tencent Cloud).

Foreign Company Participation and Future Developments

Q9: Can foreign companies develop and deploy autonomous driving technology in China?

Yes — but with structural restrictions. Foreign companies can develop and test autonomous driving technology in China through a legally registered local entity (WFOE or JV). Several global technology companies have successfully done so: Waymo was cleared for testing in Beijing Yizhuang in 2025 under a partnership arrangement, and Bosch has established a dedicated autonomous driving R&D center in Suzhou. However, three restrictions specifically affect foreign participation. First, HD map production is restricted to Chinese companies with surveying and mapping qualifications — foreign companies cannot directly produce or own the underlying HD map data; they must license it from a domestic qualified provider. Second, autonomous driving data export restrictions effectively require that all R&D data — including training data for autonomous driving algorithms — remain within China. This means foreign companies must establish China-specific AI training pipelines, which increases R&D cost by an estimated 30–50% compared to using global data pools. Third, certain geographic zones designated as “sensitive areas” (军事管理区, 重点单位) are off-limits for L4 operation, and foreign-owned operators face additional scrutiny in obtaining permits for areas near these zones. Despite these restrictions, several global automakers — including Mercedes-Benz, BMW, Volkswagen (through its Cariad China subsidiary), and Toyota — have active Level 3 and Level 4 development programs in China, recognizing that China’s regulatory framework is more commercially enabling for autonomous driving than the EU’s (which lacks a harmonized L3/L4 approval framework) and in some respects more permissive than the US (where NHTSA has limited federal-level AV regulation).

Q10: How does China regulate over-the-air (OTA) updates for autonomous driving software?

OTA updates affecting autonomous driving functions are tightly regulated under MIIT’s “Measures for the Administration of OTA Updates for Intelligent Connected Vehicles” (2023). All OTA updates that modify the autonomous driving system’s perception, decision-making, or control functions require MIIT pre-approval. The manufacturer must submit: (1) a detailed description of the update content and the version change log; (2) a safety impact analysis demonstrating that the update does not degrade safety performance below the homologated baseline; (3) test results from at least 2,000 km of closed-track testing of the updated system; (4) a cybersecurity assessment confirming that the update mechanism itself is secure against tampering; and (5) a deployment plan including rollout schedule, vehicle compatibility list, and fallback procedures in case of update failure. MIIT has 30 business days to process each OTA pre-approval application. Typically, 2–4 OTA updates per vehicle per year are approved. Unapproved updates can result in fines of RMB 500,000–2,000,000 and suspension of the manufacturer’s type approval for new models. As of 2026, MIIT has approved 1,263 OTA updates across 47 manufacturers, with an approval rate of 89%. Rejections are most commonly due to insufficient safety validation data or unaddressed edge cases in the safety impact analysis.

Q11: What are the specific regulations for autonomous driving in different city ODDs?

Each city with autonomous driving permits defines its own Operational Design Domain (ODD) requirements, which creates regulatory fragmentation that foreign operators must navigate. Beijing’s Yizhuang zone allows L4 robotaxi operation on 1,200 km of roads within a 160 km² area — including urban arterial roads, secondary roads, and residential access roads — but prohibits operation on elevated expressways and in tunnels. Shanghai’s Jiading zone covers 270 km² with 1,800 km of roads and additionally permits night operation (down to 5 lux ambient light) and light rain (up to 2.5 mm/hour). Wuhan’s Optical Valley zone permits L4 operation on 500 km of roads including bridges and underpasses. Guangzhou’s Nansha zone permits cross-borough L4 robotaxi services connecting Nansha to the city center via highways and expressways. Each city requires separate permit applications and compliance with different safety operator ratios, insurance minimums, and reporting frequencies. The cumulative compliance burden for a robotaxi operator operating in 5 cities simultaneously is significant: 5 separate permit applications, 5 operational teams, 5 monitoring centers, and 5 sets of reporting obligations. MIIT has proposed a “national recognition” (互认) system for testing permits, but as of early 2026, this applies only to road testing (not commercial operation) and only between cities with bilateral agreements.

Q12: How do China’s autonomous driving regulations address cybersecurity and software safety?

Cybersecurity for autonomous vehicles is governed by a layered framework. GB/T 40856–2022 (EV cybersecurity technical requirements) mandates: (1) secure boot and code signing for all autonomous driving-related ECUs; (2) intrusion detection systems for in-vehicle networks (CAN bus, Automotive Ethernet); (3) encrypted communication between vehicle and cloud (TLS 1.3 minimum) and between vehicle and infrastructure (V2X); (4) secure OTA update mechanism with digital signature verification; and (5) a cybersecurity operations center (CSOC) with 24/7 monitoring. Software safety is addressed through GB/T 34590 (functional safety, aligned with ISO 26262) and the newer GB/T 40428 (Safety of the Intended Functionality — SOTIF, aligned with ISO 21448), which requires manufacturers to demonstrate that the autonomous driving system handles edge cases and sensor limitations safely, even when the system is operating within its ODD. The 2024 Interim Measures additionally require manufacturers to conduct annual cybersecurity audits and submit results to MIIT. Foreign software suppliers must ensure their code complies with GB/T 34590 ASIL (Automotive Safety Integrity Level) requirements. Several international software companies — including BlackBerry QNX, Wind River, and Vector — maintain GB/T 34590-certified versions of their RTOS and middleware products for the Chinese market.

Q13: What are the insurance requirements for autonomous driving operations?

Insurance requirements vary by operating level and city. For Level 3 vehicles: the existing compulsory traffic accident liability insurance (交强险) applies, with additional third-party liability coverage of at least RMB 5 million recommended by MIIT guidelines — though not yet mandatory. For Level 4 commercial robotaxi operations: compulsory requirements are more substantial. Every robotaxi in commercial operation must carry: (1) third-party liability insurance with a minimum coverage of RMB 10–20 million per vehicle (varies by city permit terms); (2) passenger accident insurance of at least RMB 1 million per seat; (3) data breach liability insurance (recommended by the CAC, not yet mandatory); and (4) fleet-level aggregated coverage of RMB 100 million for fleets exceeding 100 vehicles. Insurance premiums for L4 robotaxis are 5–8× higher than those of conventional ride-hailing vehicles, reflecting the higher liability exposure and limited actuarial data. However, premium rates have declined by approximately 15% annually since 2023 as autonomous driving safety data accumulates. China’s major insurers — PICC, Ping An, and CPIC — have all launched dedicated autonomous vehicle insurance products, and international insurers (including AXA and Zurich) are entering this market through their China operations. Foreign robotaxi operators are advised to work with a licensed Chinese insurance broker to structure their coverage, as direct foreign insurance policies are not recognized for on-road operations in China.

Q14: How are autonomous driving patents and IP protected for foreign companies operating in China?

Autonomous driving intellectual property protection in China operates under the same patent and trade secret legal framework as other technologies, with some sector-specific considerations. China’s Patent Law (as amended 2020) provides patent protection for autonomous driving algorithms and systems — including perception methods, path planning algorithms, and control systems — as either invention patents (实用新型) or utility model patents (发明专利). The China National Intellectual Property Administration (CNIPA) granted over 4,500 autonomous driving-related patents in 2025, with foreign companies accounting for approximately 22% of filings. Trade secret protection is governed by the Anti-Unfair Competition Law (as amended 2019), which provides penalties of up to RMB 5 million for trade secret misappropriation. Autonomous driving companies operating in China should: (1) file patent applications in China for all significant autonomous driving innovations — CNIPA recognizes first-to-file priority, and filing only in the US or Europe leaves the technology unprotected in China; (2) implement robust trade secret protections including access control, confidential employment agreements with non-compete clauses, and data segregation between Chinese and international R&D teams; (3) carefully structure technology licensing agreements to avoid triggering China’s technology export control regulations, which may classify certain autonomous driving technologies as restricted exports under the updated “Catalogue of Technologies Prohibited or Restricted from Export” (2023 revision); and (4) register all cross-border technology transfer contracts with MIIT if the technology falls under the restricted category.

Q15: What regulatory changes are anticipated for autonomous driving in 2027–2030?

The regulatory roadmap for China’s autonomous driving sector points toward several significant developments. In 2027: the expected publication of the comprehensive “Intelligent Connected Vehicle Law” will likely establish the first statutory framework for autonomous driving liability, insurance, data governance, and cybersecurity at the national legal level — superseding the current inter-ministerial measures; a mandatory Data Recorder (AD-DR) standard expected to require 2 hours of pre-incident sensor data storage; and expansion of the national road test mutual recognition system to cover commercial operation permits. In 2028–2029: regulations for fully driverless (Level 4, no remote operator) operations are expected to be published, allowing robotaxi operations without any human intervention or remote monitoring; cross-city highway Level 4 operation (linking major city clusters like Beijing–Tianjin–Hebei, Yangtze River Delta, and Greater Bay Area) will likely be permitted under national guidelines; and a specialized framework for autonomous freight and logistics vehicles (Level 4 trucks on designated highway corridors) is expected. By 2030: China targets nationwide deployment of Level 4 robotaxis in 100+ cities, the establishment of a national V2X (vehicle-to-everything) communication standard with 5G-V2X infrastructure coverage on 50,000 km of highways, and full integration of autonomous vehicles into China’s carbon trading and traffic management frameworks. Foreign companies should maintain active regulatory monitoring through their China legal presence and industry association memberships to track these developments.

Where to Go From Here

Based on what you just read:

• Ready to act? Read [guide: SLUG-TO-BE-FILLED]
• Still comparing? See [comparison: SLUG-TO-BE-FILLED]
• Need numbers? Try [tool: SLUG-TO-BE-FILLED]

— China Gateway 360 —
Remote China market entry support, built around execution.

Official Sources

• Cyberspace Administration of China: Personal Information Protection Law
• Cyberspace Administration of China: official policy and regulatory portal
• National Information Security Standardization Technical Committee