Waymo faces push for independent audit of Chinese-built Ojai robotaxis

Missy Cummings, a former senior safety adviser at the National Highway Traffic Safety Administration, called for an independent federal investigation into Waymo’s new Ojai robotaxis. She stated that the vehicles, which are built in China, possess inherent capabilities that allow them to function as spying devices.

Cummings, who is an autonomous vehicle researcher at George Mason University, made the remarks on the latest episode of Generation AI. She argued that an independent third party, likely a government agency, needs to inspect the vehicles to verify if they contain hidden surveillance technology or security vulnerabilities that foreign adversaries could exploit.

The new Ojai vans differ from Waymo’s standard fleet of Jaguar SUVs, which are manufactured in Austria. The Ojai models are produced by Chinese automaker Zeekr. Waymo stated that the vehicles arrive in the United States without connected-car technology. The company then installs its own cameras, sensors, and self-driving systems at a facility in Mesa, Arizona.

Waymo maintains that its vehicles undergo rigorous security testing to protect trade secrets. The company also said it does not share personally identifiable rider information, vehicle telemetry, or autonomous driving data with vehicle manufacturers. Cummings argued that these assurances are insufficient without external verification.

MoffettNathanson estimates that Waymo will import approximately 5,000 Ojai vehicles this year. That number exceeds the size of Waymo’s existing fleet. Lawmakers in Congress have introduced legislation to ban these vehicles from operating in the United States.

Cummings explained that robotaxis continuously collect data through cameras and sensors. She noted that this data could reveal sensitive details about passengers or secure government sites, such as military bases. She said vehicles traveling near military installations might collect information about traffic patterns or personnel movement.

She acknowledged the theoretical risk that someone could remotely compromise an autonomous vehicle to take control of it. She considered that risk smaller than the dangers of foreign surveillance or privacy intrusions. She questioned whether installing Waymo’s own technology is enough to eliminate potential vulnerabilities built into the vehicle shell.

Cummings cited a 2024 discovery by U.S. investigators of cellular modems hidden inside Chinese-built cranes at American ports. The Coast Guard warned those devices could disrupt operations remotely, though investigators did not establish that espionage occurred. She said different technologies can be layered into a car even if the shell is foreign-made.

A bipartisan bill from Sens. Bernie Moreno, R-Ohio, and Elissa Slotkin, D-Mich., would ban vehicles built in China, even when the self-driving systems are American. The Connected Vehicle Security Act of 2026 cleared the Senate Commerce Committee unanimously in July. Cummings said she is not generally a big fan of bans because they can throw the baby out with the bathwater.

Cummings noted that support for the ban is partly motivated by economic interests. She said a strong lobby in America wants to keep Chinese vehicles out to promote the American automotive sector. Analysts estimate a completed Ojai costs Waymo approximately $100,000, compared with roughly $200,000 for its Jaguar vehicles, even with steep tariffs on Chinese exports.

Cummings favors stronger technical oversight to determine which components present unacceptable risks. She said U.S. regulators lack the technical capacity to inspect advanced AI systems and that federal agencies are understaffed and underfunded. She proposed handing the inspection job to federally funded research and development centers, such as MIT Lincoln Laboratory, which have security expertise and independence from industry and government.

Cummings said the privacy issue extends beyond Chinese manufacturing to data collection in general. She advised robotaxi passengers to never talk about anything they would not be willing to see on the Internet.