The U.S. Commerce Department barred Polestar from selling 2027-model-year vehicles in the United States on Thursday, invoking a national security regulation that targets connected vehicles with links to Chinese or Russian ownership — a ruling that applies regardless of where the car is physically built. The Bureau of Industry and Security denied Polestar the authorization it needed to continue U.S. sales, delivering the first high-profile case in which a non-Chinese brand assembled partly on American soil has been pushed out of the market by the Connected Vehicle Rule. The decision is consequential not only for Polestar but for every automaker operating with Chinese capital, Chinese-sourced software, or Chinese-connected supply chain components. Ford is seeking authorization for its China-built Lincoln Nautilus. General Motors is restructuring production of the Buick Envision to move it out of China by 2028. Neither company has received a ruling yet. What the Connected Vehicle Rule Actually Prohibits — and Why Assembly Address Does Not Matter The Connected Vehicle Rule, finalized in January 2025 and effective since March 17, 2025, bans two categories of Chinese- or Russian-linked vehicle technology from the U.S. market. Software prohibitions begin with model year 2027. Hardware prohibitions follow in model year 2030. The regulated technology centers on the Vehicle Connectivity System, or VCS — the set of components that allow a modern vehicle to communicate with the outside world. That system includes the telematics control unit, or TCU, which is the most significant regulated component. A TCU is a cellular-connected computer that acts as the gateway between the vehicle's internal data networks — its Controller Area Network bus, GPS receivers, accelerometers, Bluetooth and Wi-Fi modules — and external servers, apps, and services. It is the system that enables remote start, over-the-air software updates, real-time location tracking, and advanced driver assistance functions. Every