UN R155 and UN R156: Cybersecurity and software updates in the vehicle
As of: September 11, 2026
The UN Regulation R155 obliges vehicle manufacturers to have a certified cybersecurity management system. The UN Regulation R156 obliges a management system for software updates, including over-the-air updates. Both regulations are a prerequisite for type approval in the European Union.
Deadlines
Since July 2022, R155 and R156 have applied to new type approvals in the EU. Since July 2024, they have applied to all new vehicles, including models whose type approval was granted before 2022 and which continue to be produced.
What the regulations specifically require
R155 requires a documented system for identifying, assessing, and treating cyber risks throughout the entire vehicle life cycle, including the supply chain. R156 requires a traceable release process for software updates, securing the update transmission, and documentation of which software versions are running on which vehicles. An over-the-air update without this system is not permitted.
Why this concerns bodybuilders
Interference with the onboard electrical system and vehicle communication by bodies can affect the type approval. A body manufacturer who connects sensors, control units, or telematics to the vehicle network requires approved interfaces and coordination with the vehicle manufacturer.
Relation to HEERO Motors
The new generation of the HEERO brand is designed with cybersecurity and software update management in accordance with UN R155 and UN R156. Bodybuilder telematics are connected via a defined gateway.
Questions and Answers
What is UN R155?
A UN regulation requiring a certified cybersecurity management system as a prerequisite for vehicle type approval.
What is UN R156?
A UN regulation on software update management, including over-the-air updates.
Does R155 also affect my bodywork?
Interventions in the onboard power supply and vehicle communication can affect the type approval and must be coordinated with the vehicle manufacturer.
Further details
Sources and status
UNECE WP.29, Regulations R155 and R156. Created 09/11/2026. Updated 09/11/2026. Verified 09/11/2026.