MoRTH cyber rules may add ₹10,000–15,000 to connected vehicle prices from Oct 2026
Draft MoRTH cybersecurity rules (AIS-189/190, Rules 125-T and 125-U) become mandatory from October 1, 2026, phased through 2029. Connected vehicles including the Tata Harrier EV, Mahindra XEV 9e and Hyundai Creta Electric could see costs rise ₹10,000–15,000, with 18–30 months of development needed.
What happened
Tata Motors · Draft MoRTH cyber rules (AIS-189/190) mandatory from Oct 2026 may add ₹10,000-15,000 to connected vehicles like Tata Harrier EV, Mahindra XEV 9e
Key facts
- ₹10,000-15,000 added cost
- October 1, 2026 start
- phased through October 2029
- Rules 125-T and 125-U
- 18-30 months development
Why this matters
The mandatory cybersecurity stack (Rules 125-T/125-U) creates demand for automotive cyber-compliance partners and IP, making early supplier tie-ups or acquisitions a way to convert a regulatory cost into a differentiated capability.
What to watch
- Final MoRTH notification confirming Oct 1 2026 mandatory date vs deferral
- OEM price announcements explicitly citing cyber-compliance line items
- AIS-189/190 phasing schedule through 2029 details
- SIAM/industry lobbying outcomes and any timeline relaxation
- Tier-1 supplier capex or India-localization announcements
- OEMs (Tata, Mahindra, Hyundai) begin embedded-security RFQs with Tier-1 suppliers for MY2026-27 platforms
- SIAM submits comments seeking phased/extended compliance windows
- Cybersecurity & semiconductor vendors position UNECE WP.29-aligned solutions for the Indian market
- Retail desks model price elasticity on connected EV variants vs ICE trims