EMET NEWS PRESS

Situation Assessment I

The core of the report is documented: RTS published its account on 29 July 2026 as "Espionnage: le DDPS limite l'accès des voitures connectées," and SRF translated it into German on 31 July 2026 under the headline "Vernetzte Autos aus China – Armee ergreift Schutzmassnahmen gegen ‹Smartphones auf Rädern›". Vehicles that are continuously connected to the internet are no longer permitted to approach certain VBS facilities classified as particularly sensitive. The report cites the Center for Electronic Warfare in Zimmerwald near Bern as an example. The VBS did not comment on the measure's scope – such as the number of affected facilities or the nature of controls – beyond a single documented statement from a spokesperson that implementation would depend on each facility's security arrangements. This reticence is itself documented, but its rationale is not; it can only be understood analytically, not verified empirically.

Also confirmed is the connection to the "Sicherheit Schweiz 2026" report, published by the VBS on 25 June 2026. The report states that it is "realistic" that Chinese services receive data produced by modern Chinese vehicles during operation – via manufacturers or interfaces – and that this applies in particular to persons and organizations counted among Switzerland's primary intelligence targets. At a press conference, documented in the 25 June 2026 report from the newspaper "Bote der Urschweiz" at 17:30, Bavaud elaborated: "Data from modern Chinese vehicles – location, driving behaviour, connected mobile phones – can flow to Chinese intelligence services via manufacturers." He called the vehicles "smartphones on wheels" and noted that China itself denies vehicles of the newest generation access to its own critical infrastructure – "that is no accident," according to Bavaud.

RTS illustrated how deeply embedded this connectivity already is by visiting a BYD showroom in Geneva. Sales representative Charles Petit described a standard "ultra-connected" vehicle: cameras are permanently installed front, rear, and on the sides. There are also microphones throughout the cabin, which serve functions such as voice control of the sunroof. When approached by RTS, BYD stated that it transmits no data to China and strictly complies with European and Swiss data protection standards; this claim could not be independently verified. Other Chinese manufacturers did not respond to inquiries, though some refer on their websites to compliance with European regulations.

Situation Assessment II

The measure remains narrowly documented in terms of scope: it is confirmed for a single named facility, while it remains unclear how many VBS installations with elevated security requirements are affected. On the day of the NDB publication itself, "Bote der Urschweiz" pointed out that there are no corresponding restrictions on civilian traffic and that registration numbers for Chinese brands in Switzerland have recently actually increased. This underscores how narrowly the VBS measure, reported some five weeks later, appears to be drawn: as far as is documented, it affects access to individual facilities, not the vehicle market or the private use of such vehicles generally. The VBS's refusal to provide a list of affected facilities likely follows the same logic as the general non-disclosure of security details at military installations. This is an analytical inference, not a confirmed statement from the department.

Legally, this represents continuity rather than a departure. The VBS has possessed the authority, since the Federal Act of 23 June 1950 on the Protection of Military Installations and the related Protection of Military Installations Ordinance of 1990, to regulate access to military installations and to control traffic on roads leading to them. What is new is not the legal basis but its application to a device category that did not exist in 1990: the permanently internet-connected vehicle as a mobile sensor. Whether the current measure is actually based on this ordinance or on a separate, unpublished directive from the Chief of the Armed Forces has not been confirmed by the VBS; caution is warranted here.

Analytically noteworthy is an asymmetry between the NDB's warning and the VBS's measure: while the intelligence service grounds its concerns primarily in Chinese origin, the VBS sets the standard in a technology-neutral manner based on permanent internet connectivity. This measure would in principle also capture European or American models of the latest generation – an interpretation supported by the Polish case, where, according to Polish media, a Tesla driver was reportedly denied access to a military facility despite Tesla not being a Chinese company. This individual case comes from Polish press reporting and has not been independently confirmed.

Regarding source reliability, a distinction must be drawn: the core claim about the Swiss measure can be traced back to the original RTS report of 29 July 2026, which SRF translated into German on 31 July 2026; no independent VBS statement specifically addressing the access restriction exists. Tamedia publications such as Tages-Anzeiger carried the same headline; the article text could not be accessed behind the paywall, so here only the existence of the report, not its content, serves as evidence. The NDB report and Bavaud's statements at the 25 June 2026 press conference, by contrast, are documented word-for-word across multiple independent, bylined, and dated press reports and thus count as verified. The connection between the two events – the warning in June, the measure in late July – comes from RTS and has not been confirmed by any third independent source.

Connected Vehicles as Intelligence Collection Platform

What Bavaud describes as "smartphones on wheels" can be technically specified: latest-generation vehicles possess permanent mobile network connections and numerous sensors – from GPS tracking to cameras and microphones – whose data flows to the manufacturer via cloud connections. The security concern focuses less on any individual recording than on the combination of location, movement, and audio data in the immediate vicinity of military installations. Western intelligence services assume that Chinese companies can be compelled to cooperate with their home security authorities – an assessment the NDB shares, though the present report cites no specific Chinese legislation by name.

The Geneva BYD showroom illustrates how commonplace this technology already is. Petit's description of the vehicle aligns with what the NDB describes generally but concretizes it in a single purchasable model. Customers in the same showroom appeared unimpressed when speaking with RTS; convenience outweighs concern for them. This contrast between security-policy assessment and civilian purchasing decisions is itself part of the situation, not merely its background.

Facility Protection Rather Than Data Protection Law

Noteworthy is the chosen legal instrument. Switzerland possesses, in its revised Data Protection Act, a tool that regulates the processing of personal data by private enterprises, but not the physical movement of a vehicle. To keep networked cars away from a facility, the VBS – assuming the measure is based on existing law – resorted to an older instrument: the 1990 Protection of Military Installations Ordinance, based on the 1950 Federal Act on the Protection of Military Installations. This ordinance divides installations into protection zones and explicitly permits the VBS's administering federal offices to regulate traffic on roads leading to military installations. This traffic-regulation authority, originally conceived for pedestrians, cameras, and surveying equipment, could be applied without legislative amendment to a new medium: the internet-connected vehicle itself as a potential recording device.

At the EU level, cybersecurity regulations from UNECE already apply to the type approval of connected vehicles, namely Regulations No. 155 and No. 156 on cybersecurity and software update management systems; according to reports on Polish measures, the EU is additionally working on tightening these standards. For Bavaud's recommendation to persons of intelligence interest to avoid Chinese networked vehicles, only an appeal remains available; no legal mechanism to prohibit private acquisition of such vehicles exists according to the sources evaluated here.

A Pattern with National Variations: Poland, Germany, USA

Switzerland is responding within a pattern that has extended across several countries since early 2026. According to the Polish news agency PAP, as reported by the trade publication auto motor und sport, Poland's General Staff stated it is working on restrictions for Chinese vehicle brands' access to protected military facilities and their immediate vicinity; affected would be access roads, parking areas, and logistics zones, but not civilian traffic. Several Chinese brands were mentioned, including BYD and Nio. China's Foreign Ministry rejected this and stated that the concept of national security was being misused. In Germany, according to media reports, intelligence services tested several Chinese brands, while Bavaria opened its own investigation.

The U.S. regulation goes furthest thus far. The Bureau of Industry and Security (BIS) of the U.S. Department of Commerce issued a rule on 14 January 2025 against vehicle software and hardware with sufficient nexus to China or Russia; it took effect, as BIS states on its website, on 17 March 2025. From model year 2027, manufacturers under Chinese or Russian control may no longer sell connected vehicles with affected software in the United States; from model year 2030, or for non-model-year-bound components from 1 January 2029, an import ban applies to corresponding hardware. Unlike the Swiss measure, the American rule affects the entire market, not just access to individual facilities – a difference stemming both from the size of the American automotive market and its different trade policy position.

Intelligence Assessment

Switzerland is joining a growing group of states that increasingly regard civilian networked vehicles as an intelligence collection vector against their own sensitive facilities; unlike the more market-wide U.S. regulations, the Swiss approach remains limited to physical access control at individual installations. For the NDB and VBS, the interest lies in disrupting an inexpensive and difficult-to-attribute collection method in the immediate vicinity of highly sensitive infrastructure such as Zimmerwald, without relying on diplomatically more costly measures against individual manufacturers. For BYD, European market access is at stake, which explains its rapid denial to RTS; for China's government, by contrast, sovereignty over the definition of "national security" is in play – a concept it itself decried as misused in the Polish case, while according to Bavaud's account practicing comparable access restrictions in its own territory.

Operationally, gradual expansion of the measure to additional VBS facilities should be expected if the approach proves successful; transfer to other areas requiring elevated protection is also conceivable. Frictions with the automotive trade and with employees who require access to such facilities for work but privately own connected vehicles are likewise probable.

Remaining open are the measure's scope beyond the confirmed individual case, the precise legal basis, technical implementation at control points, and whether the standard is truly applied technology-neutrally or in fact origin-based. Verifiable early indicators would include amendments to or supplements of the Protection of Military Installations Ordinance in the Federal Gazette, parliamentary motions in the federal chambers, mention of additional affected facilities in future reporting, and any procurement specifications from armasuisse oriented to the aforementioned UNECE Regulations R155 and R156.

Glossary

VBS
Federal Department of Defence, Civil Protection and Sport (Eidgenössisches Departement für Verteidigung, Bevölkerungsschutz und Sport); in French DDPS; the federal department responsible for the affected military installations.

DDPS
Département fédéral de la défense, de la protection de la population et des sports; French designation of the VBS, used in the RTS original headline.

NDB
Swiss Federal Intelligence Service (Nachrichtendienst des Bundes); Switzerland's civilian and military intelligence service, author of the "Sicherheit Schweiz" report.

RTS
Radio Télévision Suisse; French-language public broadcaster, source of the initial report on the VBS measure.

BIS
Bureau of Industry and Security; U.S. Department of Commerce agency, issuer of the import rule against Chinese and Russian vehicle technology.

Protection of Military Installations Ordinance
Federal Council ordinance of 1990 on the protection of military installations, based on the 1950 Federal Act; regulates protection zones and traffic measures.

armasuisse
Procurement and real estate organization of the VBS.

UN R155 / UN R156
UNECE regulations on cybersecurity and software update management systems for vehicle type approval.

PAP
Polska Agencja Prasowa; Polish state news agency.

Personnel Register

Serge Bavaud
Director of the Swiss Federal Intelligence Service; made public statements on the security assessment of networked vehicles.

Charles Petit
Sales representative at BYD showroom in Geneva; described current BYD model connectivity to RTS.

References

RTS
Espionnage: le DDPS limite l'accès des voitures connectées
29 July 2026
rts.ch/info/suisse/2026/article/espionnage-le-ddps-limite-l-acces-des-voitures-connectees-29315725.html

SRF
Vernetzte Autos aus China – Armee ergreift Schutzmassnahmen gegen «Smartphones auf Rädern»

31 July 2026
srf.ch/news/dialog/vernetzte-autos-aus-china-armee-ergreift-schutzmassnahmen-gegen-smartphones-auf-raedern

Tages-Anzeiger
Vernetzte Autos: VBS schränkt Zufahrt zu sensiblen Standorten ein
Retrieved: 31 July 2026
tagesanzeiger.ch/vernetzte-autos-vbs-schraenkt-zufahrt-zu-sensiblen-standorten-ein-145823415489

Bote der Urschweiz
Schweizer Geheimdienst warnt: Der chinesische Spion fährt im Auto mit
25 June 2026
bote.ch/nachrichten/schweizundwelt/geheimdienst-warnt-vor-chinesischen-autos-in-der-schweiz-art-1709929

VBS
«Sicherheit Schweiz 2026»: Keine Entwarnung für die Schweiz
25 June 2026
vbs.admin.ch/de/newnsb/jyRmuld1hBVy

Swiss Federal Intelligence Service
Sicherheit Schweiz 2026 – Lagebericht des Nachrichtendienstes des Bundes
25 June 2026
vbs.admin.ch/dam/de/sd-web/tfhqKbM8ZL5k/VBS-DDPS-NDB-Sicherheit-Schweiz-2026-de.pdf

Federal Council
Ordinance on the Protection of Military Installations (Protection of Military Installations Ordinance, SR 510.518.1)
2 May 1990
lexfind.ch/tolv/197950/de

auto motor und sport
Vernetzte Autos als Spione: Polen schränkt China-Autos ein
30 January 2026
auto-motor-und-sport.de/verkehr/vernetzte-autos-als-spione-polen-schraenkt-china-autos-ein

Bureau of Industry and Security
Connected Vehicles (CV)
Retrieved: 31 July 2026
bis.gov/connected-vehicles