A harmonised EU-wide approach to mandatory security updates for tachographs is needed, with legal certainty, equal treatment of operators, and consistent implementation across the bloc.
The tachograph and its security architecture are a cornerstone of the EU road transport enforcement framework. Their reliability, integrity and security are essential for the effective enforcement of social and other relevant transport rules, as well as for maintaining trust among all stakeholders involved in the system.
This trust is particularly important given that the European tachograph market is effectively supplied by only two manufacturers: Stoneridge Electronics and Continental (Aumovio). In such a market structure, legal certainty, consistency of treatment and confidence in the functioning of the type-approval framework are critical for transport operators, enforcement authorities and manufacturers alike.
The latest generation of the smart tachograph (G2V2) represents a significant technological advancement and provides operators with a more modern and user-friendly tool. Following its deployment, however, certain security vulnerabilities were identified in type-approved equipment.
IRU welcomes the efforts made by manufacturers to address technical- and security-related issues. At the same time, the different approaches adopted to remedy these security vulnerabilities have created uncertainty among transport operators and other stakeholders. While Stoneridge Electronics decided to bear the costs associated with the required security updates, Continental (Aumovio) introduced a system under which operators ultimately bear those costs through the purchase of security update vouchers. (....)