UK Offence Report

Recording equipment system elements: security vulnerabilities

regulation 97ZC(1) of The Drivers' Hours and Tachographs (Amendment etc.) (EU Exit) Regulations 2019

This offence was read from the text as made, and no revised version was available, so a later revocation could not be ruled out. Check the current text at legislation.gov.uk.

What the provision says

1 A person commits an offence if—

a the person is

a manufacturer of

a vehicle unit, motion sensor or tachograph card for which

a type-approval certificate has been issued under the Motor Vehicles (Type Approval) Regulations 1980 and the EU Tachographs Regulation,

b the person knows that security vulnerabilities have been detected for elements already on the market, as mentioned in Article 20(3) of the EU Tachographs Regulation, and

c the person fails to inform the Secretary of State that the security vulnerabilities have been detected.

Text as made, from legislation.gov.uk. © Crown copyright, reused under the Open Government Licence v3.0. This is the text as originally made; later amendments are not shown here.

Who it binds, and what has to be proved

Binds
a person
Conduct
failing to notify or register
Fault element
Requires proof of a state of mind
Burden of proof
No statutory defence — prosecution proves everything

The prosecution must prove both that the conduct happened and that it was done with the state of mind the provision names (knows that).

The provision states no defence, so the prosecution bears the burden on every element of the offence.

Classifier’s reasoning: mens rea word in the offence-creating words: knows that.

What would breach regulation 97ZC(1)?

These are illustrations, not law. They are generated from the provision’s own words to show the shape of the offence. Whether any particular conduct is caught depends on the full text, on any amendment since, and on the facts.

  1. Not telling the authority about an event the instrument makes notifiable under the Drivers' Hours and Tachographs (Amendment etc.) (EU Exit) Regulations 2019, or telling them after the period allowed has run out.
  2. Assuming a notification made for another purpose, or by somebody else, satisfies this requirement.

Penalty

Mode of trial
Summary only — tried in a magistrates’ court
Maximum fine
£2,500
Standard scale
Level 4
Maximum prison (summary)
Not determined

Sentencing

Offences of this kind are usually sentenced under the guidelines below. This is a mapping by subject, not a finding about this provision, and the links go to a search of the Sentencing Council’s own site.

Prosecution figures

No published per-offence figure was found for this provision, and it could not be matched to a Ministry of Justice offence code. Offences created by statutory instrument very largely do not have one. Absence of a figure is not evidence that the offence is unused.

Status and lifecycle

Current status
Status not determined
Made
4 March 2019
In force from
Not determined
Extent
E+W+S

How this was established: read from the text as made; no revised version available, so later revocation could not be ruled out.

What the instrument is for

(This note is not part of the Regulations) — the explanatory note published with the instrument, © Crown copyright.

These Regulations make provision under section 2(2) of the European Communities Act 1972 implementing the EU Drivers’ Hours Regulation (Regulation (EC) No 561/2006) and the EU Tachographs Regulation (Regulation (EU) No 165/2014). Article 2(3) of the EU Drivers’ Hours Regulation applies the European Agreement concerning the Work of Crews of Vehicles engaged in International Road Transport of 1st July 1970 (known as the “AETR”) in EU member States, requiring the implementation of the AETR in those States. The provision under section 2(2) includes provision implementing the AETR. The Regulations also make provision in exercise of the powers in section 8(1) of, and Schedule 7, paragraph 21(b) to, the European Union (Withdrawal) Act 2018 (c.16) (“the 2018 Act”) in order to address failures of retained EU law relating to drivers’ hours and tachographs to operate effectively and other deficiencies (in particular under section 8(2)(a), (b), (c) and (g), (3)(a), (5) and (6)) arising from the withdrawal of the United Kingdom from the European Union. Part 1 of the Regulations contains introductory provision. Part 2 contains the amendments made under section 2(2) of the European Communities Act 1972, which update pre-existing references to the two EU Regulations and the AETR, and include references to the EU Tachographs Regulation as amended from time to time and the AETR. The amendments in this Part also implement penalties relating to requirements on testing for security vulnerabilities and penalties relating to the prohibition of the supply of recording equipment without a type approval certificate; and provide for offences and penalties for failure to comply with requirements under AETR, in particular failing to properly install and use recording equipment; supplying recording equipment without a valid type approval certificate; and failing to notify authorities of security vulnerabilities. Chapter 1 of Part 2 amends primary legislation and Chapter 2 of Part 2 amends secondary legislation. Part 3 contains amendments under the 2018 Act to correct deficiencies in existing domestic legislation and EU retained law resulting from the withdrawal of the United Kingdom from the European Union. Chapter 1 of Part 3 amends primary legislation. Chapter 2 of Part 3 amends secondary legislation and Chapter 3 of Part 3 amends retained direct EU legislation. An impact assessment has not been produced for this instrument as no, or no significant, impact on the private or voluntary sector is foreseen. An Explanatory Memorandum is published alongside this instrument on www.legislation.gov.uk.

Read the full note and every offence in this instrument

What Parliament said

Mentions of this instrument in Hansard. Parliamentary material is reused under the Open Parliament Licence v3.0.

Other offences in the same instrument

How this was identified as an offence

Everything above rests on the judgement that this provision creates a criminal offence, rather than mentioning one. That judgement is made by rule, from the words of the provision, and this is the rule that made it — with a confidence of 0.92.

Basis
the provision says a person “commits an offence”
Confidence
0.92 of 1.00

A provision that states a penalty for an offence created elsewhere can read very like one that creates an offence, and the rules can mistake the one for the other. If the text quoted above sets a penalty for something made an offence by another provision, treat the classification on this page with that in mind, and read the instrument.

Check the source