Locked Out or Plugged In? Car Cybersecurity and the Right-to-Repair Battle in 2026

If your car were a phone, your mechanic would be the person with the tiny screwdriver and the calm voice. But today’s cars are more like smartphones on wheels. Under the hood is not just an engine. It’s a stack of computers, software locks, passwords, and a live internet connection. That’s where the Right-to-Repair fight lives: you paid for the hardware, but someone else controls the code. So who really owns the fix?

The Big Shift: From Wrenches to Passwords

Why “repair” now means “software”

A few years ago, a tune-up meant plugs, filters, and maybe a timing light. Now it can mean logging into the car, authenticating with a manufacturer server, and sending encrypted commands. Automakers have added secure gateways that block write access unless your tool proves it’s legit. Stellantis models use a Secure Gateway Module that only opens up when a scan tool authenticates through AutoAuth. Volkswagen Group introduced SFD, a “vehicle diagnostic protection” system that requires tokens to change certain settings. BMW and Mercedes gate higher-level coding and retrofits behind factory servers and paid accounts. It’s not a conspiracy; it’s cybersecurity. But it changes who can fix what and how much it costs. That’s why the Right to Repair movement keeps pushing for fair access.

OBD-II is still there, but the party moved

Yes, every modern car still has an OBD-II port. But more diagnostics are moving from simple CAN messages to Ethernet and Diagnostics over IP (DoIP), the ISO 13400 standard. That means your old handheld scanner may read codes but choke on coding, programming, or module replacements. Independent workshops in Australia can still do a lot with SAE J2534 pass-thru tools and OEM subscriptions, but the learning curve (and the bill) keeps climbing. As more systems shift, OEM diagnostics access is no longer optional – it’s central to how you service vehicles. Choosing tools that enable seamless OEM diagnostics has become a key decision point for forward-thinking repairers. More independent workshops are finding that pairing remote diagnostics with direct OEM diagnostics access is the best way to avoid bottlenecks and ensure vehicle safety.

Telematics: The Invisible Tug-of-War

Your car talks. Who gets to listen?

Modern cars stream data to the cloud through telematics control units. That lets apps lock the doors, update software over the air, and alert emergency services. It also lets automakers collect and monetise driving data. In 2024, some global brands were found to be sharing behavioural data with insurance databases, raising concerns locally. Right-to-Repair advocates argue that owners and independent workshops should have equal access to repair and maintenance data, even when it travels wirelessly. That’s why secure, transparent remote diagnostics are becoming more important than ever – especially for independents that don’t have factory login credentials. Remote diagnostics platforms have become essential tools to keep up with encrypted data flows and secure telematics gateways. As a trusted name in this space, Repairify continues to support Australian workshops with scalable, remote diagnostics options tailored to modern vehicles. More shops are choosing Repairify to strengthen their remote diagnostics workflows and reduce reliance on dealership-level tools.

Australia’s Law: A good start, but still gaps

Australia’s mandatory motor vehicle service and repair information sharing law came into effect on 1 July 2022. It gives independent workshops access to OEM-level repair and maintenance data for passenger and light commercial vehicles. That includes service manuals, technical service bulletins and wiring diagrams. But the law stops short of mandating access to real-time telematics data and doesn’t apply to heavy vehicles. The ACCC is currently reviewing the scheme, with stakeholders pushing for expanded access to digital platforms and more clarity on costs. This review is critical, especially as remote diagnostics, software-based calibrations and secure gateways become standard across new models. For many in the trade, the fight for full Right to Repair access in Australia is only just beginning.

The Legal Puzzle: You own it, but can you fix it?

Warranties and aftermarket parts

Here’s the good news: under Australian Consumer Law, manufacturers can’t void your warranty just because you used a third-party part or went to an independent workshop – provided the repairer follows proper procedures and uses suitable parts. That’s one of the foundational points behind the Right to Repair: consumers and independents deserve a fair go. It’s no longer just about parts – it’s about digital access and ensuring OEM diagnostics aren’t limited to dealerships. As vehicle systems grow more integrated, OEM diagnostics will remain the baseline for both repair quality and safety compliance.

Emissions and security limitations

Tampering with emissions systems is still illegal under national environmental laws, and some modules (like immobilisers and ADAS) require extra credentials to access. That’s one reason Europe’s SERMI model has caught local interest. It grants vetted workshops access to security-related repair info. Australia doesn’t yet have a formal equivalent, though some OEMs have begun piloting verified access models. In the meantime, Right to Repair in practice means using secure channels like remote diagnostics to avoid hitting a wall mid-repair.

Proprietary TCUs and Tuning Locks

The TCU is the new carburetor

In performance circles, the ECU used to be the hero. Now the TCU (transmission control unit) often runs the show for shift logic, torque limits, and even launch control. Many modern cars pack encrypted firmware and secure bootloaders that block unsigned calibrations. Tuners can still work, but the business has shifted toward official licensing, bench unlock procedures, or model-specific workarounds. One over-the-air update can relock the fun.

Why automakers lock things down

Automakers say locks prevent hacking, odometer fraud, and unsafe modifications. They also need a secure path for over-the-air updates and recalls. For enthusiasts, that means you might need special hardware, subscriptions, or online authorisation to do things that used to take a few clicks. The paradox is simple: you own the car, but someone else owns the keys to the code. That’s why advocates for the Right to Repair are still fighting for a clearer path to legal, safe, and affordable access. This includes advocating for OEM diagnostics and calibration tooling that isn’t locked behind excessive fees or red tape. It also highlights the value of remote diagnostics as a way to level the playing field for independent techs. When combined with tools and platforms offered by Repairify, remote diagnostics help bring OEM-level access to workshops that would otherwise be locked out.

ADAS: Why a windscreen now needs a computer science degree

Calibration is the new alignment

Replace a windscreen on a car with forward cameras and you may need to calibrate lane-keeping and AEB systems with factory targets and procedures. Change ride height? You may need to recalibrate radar. This is repair in 2026: follow OEM steps, use the right targets, and verify results, or safety systems can misbehave. That’s not a scare tactic; it’s the new normal, and it’s one reason more repairs require access to OEM data portals and specialised tooling. Remote diagnostics are also playing a key role here, with platforms like Repairify enabling shops to get secure, real-time access to OEM procedures. Repairify’s tools are often the bridge between a workshop’s physical capabilities and the digital locks that come with modern vehicles. Repairify’s network also supports Australian technicians navigating ADAS challenges and evolving security models.

So, who really owns the fix?

The practical answer in 2026

If you’re a car enthusiast, the path is clear but not always cheap. You can keep independent shops in the game by choosing garages that invest in OEM subscriptions, secure gateway access, and modern calibration gear. You can still mod, but do it within the lines: don’t mess with emissions, and understand that some modules are locked for real safety reasons. If you’re a DIYer, a solid laptop-based J2534 setup plus per-use OEM access can take you far, but be ready for learning and fees. Platforms like asTech, backed by Repairify, also help independent workshops get access to remote diagnostics when they’re locked out of a module or need OEM diagnostics for secure tasks. Repairify’s remote diagnostics network gives technicians backup and confidence in an evolving repair environment. More importantly, Repairify is helping set the benchmark for combining OEM diagnostics, secure calibration, and remote diagnostics in one integrated workflow.

The policy answer

Right-to-Repair isn’t about forcing automakers to publish source code. It’s about fair, secure access to the information and tools needed to fix what you own. Australia’s data sharing law was a major first step, but gaps remain. The ACCC review could expand coverage to telematics, security credentialing, and real-time data access. For Australian workshops, the next few years will be crucial. The more that Right to Repair, OEM diagnostics and remote diagnostics are embedded into day-to-day workflow, the more resilient and future-ready the trade becomes. With Repairify continuing to invest in open access tools and training, the industry is watching closely to see how the landscape shifts.