What Happened

Volvo Cars announced Tuesday, May 26, 2026, that the U.S. Department of Commerce granted the company specific authorization to continue importing and selling vehicles equipped with Chinese connected car technology in the United States.

The decision raises significant questions about how the Trump administration is applying national security rules it pledged to enforce.

The Rules That Were Already in Place

In January 2025, the Biden administration finalized a rule called Securing the Information and Communications Technology and Services Supply Chain: Connected Vehicles. The rule banned most Chinese-developed and maintained software from vehicles sold in the U.S., starting with 2027 model-year vehicles. A hardware ban kicks in for 2030 model-year vehicles.

The rule reflected a legitimate national security concern: Chinese-owned companies could collect location data, behavioral data, and communications data through connected car software embedded in millions of American vehicles.

Lawmakers from both parties have pushed to make the rules even tougher, according to Reuters.

So Why Did Volvo Get a Pass?

Volvo is, on paper, a Swedish company. Its cars are primarily manufactured in Sweden and imported to the U.S.

But Volvo is majority owned by China's Geely Holding, a Chinese conglomerate. That ownership structure is exactly what the connected vehicle rules were written to address.

Volvo sold 121,600 vehicles in the United States in 2025, down 2.9% from 2024, according to Reuters. The company says the authorization followed "constructive discussions" with the Commerce Department regarding Volvo's "governance, technology and data security." The Commerce Department did not respond to requests for comment from Reuters or CNBC.

Neither outlet disclosed what Volvo agreed to or what oversight mechanisms are in place. The public has no visibility into the terms.

What Mainstream Coverage Is Missing

Every outlet reporting this story — TechCrunch, CNBC, Reuters — treats the exemption as straightforward business news. None of them seriously examined the national security logic.

If the entire point of the connected vehicle rules was to prevent Geely-tied companies from embedding Chinese software into cars driven by Americans, how does granting Geely-tied Volvo a special carve-out serve that goal?

There's also a consistency problem. The same rules ban Chinese autonomous vehicle companies — including Baidu's Apollo Autonomous Driving LLC, Pony.ai, and WeRide — from testing driverless tech in the U.S., according to TechCrunch. Those companies haven't received exemptions. Volvo did. What distinguishes Volvo's Geely ownership from Baidu's Chinese government ties?

The Expansion Angle

Volvo isn't just getting to stay in the U.S. market — it's actively expanding here.

Volvo CEO Hakan Samuelsson announced in April 2025 that the company would increase U.S. production. In July 2025, Volvo said it plans to start producing the XC60 mid-size SUV at its South Carolina plant in late 2026. In September 2025, it announced a new hybrid model for the U.S. market. And in March 2026, Volvo said it would bring Polestar 3 production — currently split between South Carolina and Chengdu, China — fully to the U.S., according to TechCrunch.

The South Carolina manufacturing expansion is significant for American workers.

Volvo halted imports of China-manufactured vehicles after tariffs made them uncompetitive, according to CNBC. The tariff wall succeeded in shaping where the cars are built. The connected vehicle rules address what's inside the cars — the software, the data pipelines, the hardware. The exemption creates a gap in that second layer of protection.

The Bigger Picture

China is identified by the U.S. intelligence community, the Defense Department, and lawmakers from both parties as the primary geopolitical threat facing the United States.

Connected vehicles are a legitimate vector for data collection and potential infrastructure disruption. The Biden rules acknowledged this. The Trump administration kept the rules on the books.

"Keeping rules on the books while granting exemptions" allows the administration to claim it's tough on China while quietly permitting a Geely-owned company to operate under terms the public cannot evaluate.

The Commerce Department has not disclosed what data security commitments Volvo made, what audit processes exist, or how compliance will be enforced.

What Comes Next

Volvo gets to keep selling cars. American consumers get to keep buying them. The South Carolina plant continues operating.

What requires attention is a national security exemption granted to a Chinese-owned company with zero public disclosure of the terms or enforcement mechanisms.

If the negotiated terms are defensible, the Commerce Department should publish them. If they're not, Americans driving a Volvo deserve to know what data flows where — and who owns the company collecting it.