Bill Text: NJ A4045 | 2026-2027 | Regular Session | Introduced
Bill Title: Requires NJT to remove certain remote access features from buses and trains.
Sponsorship: Partisan Bill (Republican 1)
Status: (Introduced) 2026-02-12 - Introduced, Referred to Assembly Transportation and Independent Authorities Committee [A4045 Detail]
Download: New_Jersey-2026-A4045-Introduced.html
Sponsored by:
Assemblyman ALEX SAUICKIE
District 12 (Burlington, Middlesex, Monmouth and Ocean)
SYNOPSIS
Requires NJT to remove certain remote access features from buses and trains.
CURRENT VERSION OF TEXT
As introduced.
An Act concerning remote access features in buses and trains.
Be It Enacted by the Senate and General Assembly of the State of New Jersey:
1. a. As used in this section:
"Corporation" means the New Jersey Transit Corporation.
"Kill switch" means any hardware, software, firmware, or embedded feature that allows the remote disabling, degradation, or control of the operation or essential functions of a bus or train without the authorization of the corporation or an entity providing motorbus regular route service or passenger rail service, including light rail service, under contract with the corporation.
"Motorbus regular route service" means the same as that term is defined in section 3 of P.L.1979, c.150 (C.27:25-3).
"Rail passenger service" means the same as that term is defined in section 3 of P.L.1979, c.150 (C.27:25-3).
b. The corporation, in consultation with the New Jersey Office of Homeland Security and Preparedness, shall review each bus and train owned or operated by the corporation or by an entity providing motorbus regular route service or passenger rail service, including light rail service, under contract with the corporation to determine whether a kill switch or other remote access feature that may pose a cybersecurity or operational risk is present on the bus or train. The review shall include an assessment of the ability of manufacturers, vendors, or third parties to remotely access, disable, or control each bus or train.
c. If it is determined by the corporation that a kill switch or similar remote access feature presents a cybersecurity or operational risk and is not necessary for public safety or regulatory compliance, the corporation shall require the removal, permanent disabling, or other appropriate mitigation of the kill switch or feature, to the extent practicable. Nothing in this subsection shall require the removal or disabling of a kill switch or feature determined by the corporation to be essential for emergency safety functions, provided that reasonable safeguards and access controls are implemented.
2. This act shall take effect immediately.
STATEMENT
This bill requires the New Jersey Transit Corporation (corporation), in consultation with the New Jersey Office of Homeland Security and Preparedness, to review each bus and train to determine whether a kill switch or other remote access feature that may pose a cybersecurity or operational risk is present on the bus or train. If the corporation determines that a kill switch or similar remote access feature presents a cybersecurity or operational risk, the corporation is required to remove, permanently disable, or take other appropriate steps to mitigate the kill switch or feature.
The bill defines "kill switch" to mean any hardware, software, firmware, or embedded feature that allows the remote disabling, degradation, or control of the operation or essential functions of a bus or train without the authorization of the corporation or an entity providing motorbus regular route service or passenger rail service, including light rail service, under contract with the corporation.
According to news articles, an investigation conducted in Norway by Oslo's public transport service found that one of the bus manufacturers could potentially access a "kill switch" that could be activated mid-transit.
