Waymo Faces Security Scrutiny Over 5,000 Chinese-Built Ojai Vans

Waymo is on pace to import approximately 5,000 Ojai robotaxis into the United States this year, a volume that exceeds its current fleet of Jaguar SUVs. Research firm MoffettNathanson provided the estimate, which has intensified debate over the national security implications of vehicles manufactured in China.

Missy Cummings, an autonomous vehicle researcher at George Mason University and a former senior safety adviser at the National Highway Traffic Safety Administration, warned that the new boxy, blue vans could serve as inherent spying devices. She stated that the vehicles are built by Chinese automaker Zeekr, unlike Waymo’s previous fleet which was manufactured in Austria.

Cummings called for an independent investigation to determine if the vehicles contain hidden surveillance technology or security vulnerabilities exploitable by foreign adversaries. She argued that assurances from Waymo regarding security testing are insufficient without third-party verification.

“I think that we need an independent third party, probably a government agency, to go in and take a look and see if that is indeed true,” Cummings said. She noted that robotaxis continuously collect data through cameras and sensors, which could reveal sensitive details about passengers or secure locations such as military bases.

Waymo maintains that the Ojai vans arrive in the U.S. without connected-car technology. The company states it installs its own cameras, sensors, and self-driving systems at a facility in Mesa. It also asserts that it does not share personally identifiable rider information, vehicle telemetry, or autonomous driving data with vehicle manufacturers.

Cummings countered that installing American technology may not eliminate vulnerabilities inherent in the vehicle's shell. “Even if the shell of the car is Chinese, different technologies can be layered in,” she said. She referenced the 2024 discovery of cellular modems hidden inside Chinese-built cranes at American ports, which the Coast Guard warned could potentially disrupt operations remotely.

The security debate has reached Congress, where Sens. Bernie Moreno, R-Ohio, and Elissa Slotkin, D-Mich., introduced the Connected Vehicle Security Act of 2026. The bipartisan bill would ban vehicles built in China, even when the self-driving systems are American. The legislation cleared the Senate Commerce Committee unanimously in July.

Cummings expressed reservations about an outright ban, noting that it could throw the baby out with the bathwater. She acknowledged that economic interests also drive the legislative push, as analysts estimate a completed Ojai costs Waymo approximately $100,000 compared with roughly $200,000 for its Jaguar vehicles despite steep tariffs on Chinese exports.

She advocated for stronger technical oversight rather than a blanket prohibition, suggesting that federally funded research and development centers like MIT Lincoln Laboratory could conduct inspections. These centers possess the security expertise and independence from both industry and government that she believes current regulators lack.

Cummings also highlighted the broader privacy implications of robotaxis, advising passengers to be concerned about data handling regardless of the manufacturer. “You should never talk about anything that you wouldn’t be willing to see on the Internet,” she said.