Image: Bundeswehr/Panzerbataillon 104. The official photograph shows the controlled entrance to the Oberpfalz barracks in Pfreimd. It illustrates site access and does not show a vehicle rejected under the connected-car rules.

Germany's Bundeswehr may stop particular connected cars from entering military property or sensitive zones when their sensors and communications create a data-security risk. The Defence Ministry has rejected the broader claim that Germany has imposed a blanket military-site ban on Chinese cars or on named Chinese manufacturers. Its stated test is the vehicle's capability and the location, not its national origin.

The clarification came at the federal government's press conference on 11 November 2026, after German reports said lists circulating within the armed forces included models associated with BYD, Geely and NIO. Defence Ministry spokesman Colonel Mitko Müller said the risk exists independently of country, manufacturer and origin. When a reporter asked whether the same approach included Tesla vehicles connected to US infrastructure, Müller answered that the assessment is manufacturer-independent.

A local restriction, not a road or sales ban

The measure does not prevent a Chinese-brand car from being sold, registered or driven on German public roads. Security officers responsible for a Bundeswehr property can restrict a type of vehicle at a particular base or within one classified part of it. Their assessment considers what the sensors may capture and whether the connected systems could allow data to leave the vehicle.

The ministry has not published a definitive national model list or a technical threshold that applies identically at every gate. Müller described a site-level process: examine the equipment, identify potential exposure and mitigate it with an appropriate restriction. A car allowed into an ordinary staff parking area may therefore be unsuitable near weapons, communications equipment, exercises or buildings where photography and mapping are controlled.

German media reports say some service members with affected cars must leave them outside the protected perimeter and continue on foot. BYD, Geely and NIO can accurately be described as brands named in those reports, but not as a complete official blacklist confirmed by the ministry. The official statement deliberately broadened the principle to any vehicle with relevant capability.

Why a car can be treated as a mobile collection platform

A current connected car may carry external cameras, radar and sometimes lidar, as well as microphones, satellite positioning, a mobile-data modem and local storage. These components support automatic emergency braking, lane assistance, parking, navigation, voice control, remote apps and over-the-air updates. In normal use they provide safety and convenience; near a sensitive installation they can also capture position, imagery and details about the surroundings.

The presence of sensors is not evidence that a manufacturer is conducting espionage. The Bundeswehr's argument is preventive. Its questions concern what is collected, whether it is uploaded, who can access it, where it is processed and whether a user can genuinely disable transmission. Müller said the security guidance rests on potential risk. Asked whether such systems had already been used for hostile collection, he said that would concern the Military Counterintelligence Service and did not provide public details.

This distinction matters because the debate is not technically confined to electric cars or Chinese badges. A European combustion car with surround-view cameras and continuous cloud connectivity can present the same category of concern at a classified site. The ministry says the response must follow the product and its functions.

EU type approval does not guarantee entry to a military site

Cars sold in the European Union are subject to type-approval and cybersecurity requirements. UN Regulation No. 155 requires manufacturers to operate a Cyber Security Management System, assess risks across the supply chain, apply mitigations and support the detection and analysis of attacks. An authority can refuse approval where a manufacturer has not demonstrated the required risk assessment and protection.

Those rules address the security of the vehicle and its electronic functions. They do not require a defence establishment to admit every road-legal car. A military site can impose stricter controls on photography, positioning and wireless communication. Roadworthiness and suitability for a classified location answer different questions.

In March 2026, the European Commission said a European risk assessment of connected and automated vehicles had demonstrated espionage and physical-security risks and included mitigation recommendations. It also pointed to the GDPR, ePrivacy rules and type-approval obligations. These frameworks create legal and technical safeguards, but the Commission did not claim that they eliminate every risk in critical infrastructure.

Cameras and connectivity are now normal equipment

The EU's General Safety Regulation makes several advanced systems mandatory. For all newly registered cars from 7 July 2024, the package includes intelligent speed assistance, reversing detection using a camera or sensors, driver-attention warnings and event data recorders. Automatic braking and lane-keeping add further environmental sensing.

This is why a country-only rule would be a blunt instrument. Most new vehicles observe some part of their surroundings. The meaningful differences are what they record, whether data leaves the car, where it travels, how long it is retained and what control the owner has. Those details can vary by model, software version, market and enabled service.

An owner cannot assume that switching off one infotainment option disables every camera or communication channel. Equally, a visible camera does not prove continuous cloud upload. A sound assessment needs technical documentation and the risk requirements of the particular location, rather than a conclusion drawn from the badge alone.

Chinese drones are a separate and firmer decision

The same press conference confirmed a distinct policy for drones. The Bundeswehr will no longer procure Chinese drone models, and existing commercial systems with lower security standards will be phased out. Local commanders had been permitted to buy off-the-shelf drones for limited training tasks after a risk assessment, at a time when suitable European supply was more restricted.

Müller said German and European drone capability has expanded, allowing the temporary commercial equipment to be replaced. This procurement decision should not be copied directly into the car headline. The ministry separated the files and specifically denied that the vehicle policy is a blanket country or manufacturer ban.

What drivers need to know

Service members, civilian staff and suppliers visiting a Bundeswehr facility need to check that site's access instructions. Entry can depend on vehicle equipment and on which internal zone the driver needs to reach. If a car is refused, the practical outcome may be parking outside the secure perimeter and using an approved alternative for the final distance.

The policy does not change a car's EU approval, registration, insurance or public-road legality. It also does not establish that all Chinese cars transfer sensitive material to China. The narrower confirmed point is that the Bundeswehr treats some connected vehicles as potential recording and communications devices and can exclude them from sensitive locations, including vehicles made outside China.

Sources