The European Commission has published the list of smart tachographs for which a software update must be mandatory, following the identification of specific security vulnerabilities.
Legal basis for the obligation: art. 20 § 4, Reg. EU 165/2014
The obligation is based on Article 20, paragraph 4, of Regulation (EU) No. 165/2014, according to which, when the authority that issued the approval determines the need to take measures to remove vulnerabilities concerning the on-board units, motion sensors, or tachograph cards, it must inform the European Commission. The latter then publishes the list of affected equipment, indicating the vulnerable software versions, those to be installed, the date of commencement of the obligation, and the deadline by which the update must be carried out.
The communication published by the Joint Research Centre of the European Commission concerns certain Continental and Stoneridge tachographs.
Affected Continental tachographs (DTCO 1381 v. 4.1 — from 07/15/2026)
For the Continental DTCO 1381 version 4.1, with approval e1-84-08, the vulnerable software version 04.01.26 must be replaced with version 04.01.41. Following the update, the equipment becomes DTCO 1381 version 4.1b, with approval e1-84-10. The update is mandatory starting from July 15, 2026.
Affected Stoneridge tachographs (SE5000-8.1 rev. B/C/D/E — from 09/01/2026)
For Stoneridge SE5000-8.1 tachographs, the obligation concerns revisions B, C, D, and E. Revisions B and C, equipped with software version 1214, must be updated to versions 2424 and 2425, respectively. Revisions D and E, equipped with version 1619, must be updated to versions 2424 or 2525 and to version 2626, respectively. The obligation will take effect from September 1, 2026.
The Commission specifies that, for tachographs already installed on vehicles, the update must be carried out no later than during the next periodic inspection. For equipment not yet installed, however, the update must be performed at the time of the first installation.
Obligations for authorized workshops
Authorized workshops must therefore verify, during installation or periodic inspection, the model, revision, approval number, and software version of the equipment. If the tachograph falls among those indicated by the Commission, the workshop must install the specific software version required for that model and ensure the correct functioning of the device after the intervention.
Obligations for transport companies
Transport companies are also called to take action. Although the update is materially carried out by the workshop, the company must ensure the proper functioning and regularity of the tachograph installed on its vehicles. It is therefore advisable to verify which equipment is present in the fleet, identify those affected by the update, and schedule the intervention in conjunction with the first periodic check following the date of the obligation's commencement.
Nature and consequences of non-compliance
Compliance is not a mere recommendation from the manufacturer, but a safety measure made mandatory under the European Regulation. Once the stipulated deadline has passed, maintaining a software version explicitly declared vulnerable may affect the regularity of the periodic check and the compliance of the equipment, with possible liabilities for both the workshop and the company that continues to use the vehicle without having carried out the update.