Journal is indexed in following databases:
- SCOPUS
- Web of Science Core Collection - Journal Citation Reports
- EBSCOhost
- Directory of Open Access Journals
- TRID Database - Transportation Research Board
- Index Copernicus Journals Master List
- BazTech
- Google Scholar
2024 Journal Impact Factor - 0.6
2024 CiteScore - 1.9
ISSN 2083-6473
ISSN 2083-6481 (electronic version)
Editor-in-Chief
Associate Editor
Prof. Tomasz Neumann
Published by
TransNav, Faculty of Navigation
Gdynia Maritime University
3, John Paul II Avenue
81-345 Gdynia, POLAND
e-mail transnav@umg.edu.pl
Cybersecurity Breaches in Connected and Autonomous Vehicles: Rethinking Liability and Insurance Frameworks
1 King Abdul-Aziz University, Jeddah, Kingdom of Saudi Arabia
ABSTRACT: As connected and autonomous vehicles (CAVs) become integrated into modern transport systems, cybersecurity vulnerabilities pose significant legal and regulatory challenges. This paper examines the consequences of large-scale hacking incidents involving CAVs, where software compromise may lead to accidents, injury, or loss. Current insurance and liability regimes are ill-equipped to address the complexities of mass-risk events triggered by cyberattacks. Drawing from the United Kingdom’s Automated and Electric Vehicles Act 2018 and broader European frameworks, we identify critical gaps in existing legislation. We propose a reformed insurance model that includes a national compensatory body or reinsurance pool to ensure equitable redress for third-party victims. Our findings offer broader insights for regulatory design in the maritime sector, where cybersecurity threats to safety-critical systems demand proactive legal responses.
KEYWORDS:
REFERENCES
S. Parkinson, P. Ward, K. Wilson, and J. Miller, “Cyber Threats Facing Autonomous and Connected Vehicles: Future Challenges,” IEEE Transactions on Intelligent Transportation Systems, vol. 18, no. 11, pp. 2898–2915, Nov. 2017, doi: 10.1109/tits.2017.2665968.
C. Lee, “Grabbing the Wheel Early: Moving Forward on Cybersecurity and Privacy Protections for Driverless Cars,” Federal Communications Law Journal, vol. 69, 2017.
C. Kennedy, “New Threats to Vehicle Safety: How Cyber Security Policy Will Shape the Future of Autonomous Vehicles,” Michigan Telecom and Technology Law Review, vol. 23, no. 2, pp. 343–360, 2017.
M. Channon, L. McCormick, and K. Noussia, The Law and Autonomous Vehicles. Informa Law from Routledge, 2019. doi: 10.4324/9781315268187.
D. Dominic, S. Chhawri, R. M. Eustice, D. Ma, and A. Weimerskirch, “Risk Assessment for Cooperative Automated Driving,” Proceedings of the 2nd ACM Workshop on Cyber-Physical Systems Security and Privacy, pp. 47–58, Oct. 2016, doi: 10.1145/2994487.2994499.
C. Ducuing, “Towards an Obligation to Secure Connected and Automated Vehicles ‘by Design’?,” Security and Law, pp. 183–214, Oct. 2019, doi: 10.1017/9781780688909.008.
B. Walker-Smith, “Automated Driving and Product Liability,” Michigan State Law Review, vol. 1, 2017.
Z. Winkelman, M. Buenaventura, J. Anderson, N. Beyene, P. Katkar, and G. Baumann, “When Autonomous Vehicles Are Hacked, Who Is Liable?,” 2019, doi: 10.7249/rr2654.
Motor Insurers’ Bureau, “Uninsured Drivers’ Agreement,” 2015.
UK Parliament, Road Traffic Act 1988.
MIB, “Articles of Association,” 2019.
UK Parliament, Automated and Electric Vehicles Act 2018.
UK House of Commons, Public Bill Committee Debates on AEVA 2018.
D. Rowland, “Liability for Defective Software,” Cambrian Law Review, vol. 22, pp. 78, 1991.
UK and Scottish Law Commissions, “Automated Vehicles: Summary of Responses to Consultation Paper 3,” 2021.
S. Saxby, Encyclopaedia of Information Technology Law, Sweet & Maxwell.
Society of Motor Manufacturers and Traders, “Connected and Autonomous Vehicles: Position Paper,” Feb. 2017.
European Commission, “Liability for Artificial Intelligence and Other Emerging Digital Technologies,” 2019.
J. Marson, M. White, and K. Ferris, “The Investigatory Powers Act 2016 and Connected Vehicles: A New Form of Panspectric Veillance Looming?,” Statute Law Review, vol. 44, no. 1, Apr. 2022, doi: 10.1093/slr/hmac004.
M. Channon, “Automated and Electric Vehicles Act: An Evaluation in Light of Proactive Law and Regulatory Disconnect,” European Journal of Law and Technology, vol. 10, no. 2, 2019.
F. Wang, “The Warranty of Seaworthiness and Cyber Risk of Unmanned Ships,” Journal of Business Law, no. 4, pp. 311, 2020.
R. Veal and H. Ringbom, “Unmanned Ships and the International Regulatory Framework,” Journal of International Maritime Law, vol. 23, no. 2, pp. 100–113, 2017.
M. Schellekens, “No-fault compensation schemes for self-driving vehicles,” Law, Innovation and Technology, vol. 10, no. 2, pp. 314–333, Jul. 2018, doi: 10.1080/17579961.2018.1527477.
M. Schellekens, “Car hacking: Navigating the regulatory landscape,” Computer Law & Security Review, vol. 32, no. 2, pp. 307–315, Apr. 2016, doi: 10.1016/j.clsr.2015.12.019.
UN Task Force on Cyber Security and Over-the-Air Issues, “Draft Recommendation,” UNECE WP.29 GRVA, 2018. [Online]. Available: https://www.unece.org/fileadmin/DAM/trans/doc/2018/wp29grva/GRVA-01-17.pdf
European Parliamentary Research Service, “A Common EU Approach to Liability Rules and Insurance for Connected and Autonomous Vehicles,” 2018.
Centre for Connected and Autonomous Vehicles, “Key Principles of Vehicle Cyber Security for Connected and Autonomous Vehicles,” 2017. [Online]. Available: https://www.gov.uk/government/publications/principles-of-cyber-security-for-connected-and-automated-vehicles
J. Prior, “Connected and Autonomous Vehicles, Cyber Threats and the UK Motor Insurance Framework,” Exeter Law Review, vol. 46, pp. 126, 2021.
Centre for Connected and Autonomous Vehicles, “Safe Use of Automated Lane Keeping System (ALKS): Call for Evidence,” Aug. 2020. [Online]. Available: https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/911016/safe-use-of-automated-lane-keeping-system-alks-call-for-evidence.pdf
Venturer Project, “Driverless Cars: Liability Frameworks and Safety by Design,” Insurance and Legal Report, 2018. [Online]. Available: https://www.venturer-cars.com/wp-content/uploads/2018/06/Year-3-Legal-and-Insurance-Report.pdf
Hardy v Motor Insurers’ Bureau [1964] 2 QB 745.
Bristol Alliance Ltd v Williams [2012] EWCA Civ 1267.
European Parliament and Council, “Regulation (EU) 2019/2144 on the Type-Approval Requirements for Motor Vehicles,” 2019.
M. Jones, A. Dugdale, and M. Simpson, Clerk and Lindsell on Torts, 22nd ed., Sweet & Maxwell, 2017.
Department for Transport, “Pathway to Driverless Cars: Government Response,” 2017.
Citation note:
Abuelenin A.H.M.: Cybersecurity Breaches in Connected and Autonomous Vehicles: Rethinking Liability and Insurance Frameworks. TransNav, the International Journal on Marine Navigation and Safety of Sea Transportation, Vol. 19, No. 4, doi:10.12716/1001.19.04.19, pp. 1211-1219, 2025