Introduction
With China's mandatory national standard GB 44495 now in force and UN R155 mandatory in the EU, more and more OEMs and suppliers face the practical need for dual compliance — domestic and export. This article clarifies how the two relate and how to approach them.
1. How do GB 44495 and UN R155 relate to each other?
GB 44495, Technical requirements for vehicle cybersecurity, is China's own mandatory national standard, developed with reference to UN R155. The two are closely aligned in their core requirements, but differ in certification process and documentation.
2. They are not interchangeable
- Domestic sales only: GB 44495 alone applies.
- Exporting to the EU as well: both UN R155 and GB 44495 apply.
- Neither substitutes for the other — both must be met.
3. GB 44495 implementation timeline
| Timeline | Requirement |
|---|---|
| January 2026 | Standard takes effect, impacting vehicles in production |
| July 2026 | Mandatory for newly type-approved vehicle models |
| January 2028 | Mandatory for all vehicle models |
4. Recommendations for dual compliance
- Build one integrated compliance process that satisfies both domestic and export requirements, avoiding duplicated documentation.
- Complete CSMS certification first (organization level), then move on to VTA (vehicle type level).
- Establish a cybersecurity management system covering the full lifecycle.
- Manage supply chain compliance, requiring suppliers to implement ISO 21434 in step.
Conclusion
Dual compliance is not simply stacking two standards — it requires integrated system design. Choosing a consulting partner with experience in both regulatory regimes can substantially reduce compliance cost and shorten certification timelines.
Need Compliance Support?
Does your company need to meet both GB 44495 and UN R155? QinGuard offers an integrated dual-compliance solution to get you there in one step.