Requires NJT to remove certain remote access features from buses and trains.

A4045

ASSEMBLY, No. 4045

STATE OF NEW JERSEY

222nd LEGISLATURE

�

INTRODUCED FEBRUARY 12, 2026

Sponsored by:

Assemblyman� ALEX SAUICKIE

District 12 (Burlington, Middlesex, Monmouth and Ocean)

SYNOPSIS

���� Requires NJT to remove certain remote access features
from buses and trains.

CURRENT VERSION OF TEXT

���� As introduced.

��

An Act
concerning remote access features in buses and trains.

����
Be It
Enacted
by the Senate and General Assembly of
the State of New Jersey:

���� 1.��� a.� As used in this
section:�

���� �Corporation� means the New
Jersey Transit Corporation.

���� �Kill switch� means any
hardware, software, firmware, or embedded feature that allows the remote
disabling, degradation, or control of the operation or essential functions of a
bus or train without the authorization of the corporation or an entity providing
motorbus regular route service or passenger rail service, including light rail
service, under contract with the corporation.�

���� �Motorbus regular route
service� means the same as that term is defined in section 3 of P.L.1979, c.150
(C.27:25-3).

���� �Rail passenger service� means
the same as that term is defined in section 3 of P.L.1979, c.150 (C.27:25-3).

���� b.��� The corporation, in
consultation with the
New Jersey Office of Homeland
Security and Preparedness, shall review each bus and train owned or operated by
the corporation or by an entity providing motorbus regular route service or
passenger rail service, including light rail service, under contract with the
corporation to determine whether a kill switch or other remote access feature
that may pose a cybersecurity or operational risk is present on the bus or
train.
� The review shall include an assessment of the ability of
manufacturers, vendors, or third parties to remotely access, disable, or
control each bus or train.�

���� c.���� If it is determined by
the corporation that a kill switch or similar remote access feature presents a
cybersecurity or operational risk and is not necessary for public safety or
regulatory compliance, the corporation shall require the removal, permanent disabling,
or other appropriate mitigation of the kill switch or feature, to the extent
practicable.� Nothing in this subsection shall require the removal or disabling
of a kill switch or feature determined by the corporation to be essential for
emergency safety functions, provided that reasonable safeguards and access
controls are implemented.�

���� 2. This act shall take effect
immediately.

STATEMENT

���� This bill requires the New
Jersey Transit Corporation (corporation), in consultation with the New Jersey
Office of Homeland Security and Preparedness, to review each bus and train to
determine whether a kill switch or other remote access feature that may pose a
cybersecurity or operational risk is present on the bus or train.� If the
corporation determines that a kill switch or similar remote access feature
presents a cybersecurity or operational risk, the corporation is required to
remove, permanently disable, or take other appropriate steps to mitigate the
kill switch or feature.�

���� The bill defines �kill switch�
to mean any hardware, software, firmware, or embedded feature that allows the
remote disabling, degradation, or control of the operation or essential
functions of a bus or train without the authorization of the corporation or an
entity providing motorbus regular route service or passenger rail service,
including light rail service, under contract with the corporation.

���� According to news articles, an
investigation conducted in Norway by Oslo�s public transport service found that
one of the bus manufacturers could potentially access a �kill switch� that
could be activated mid-transit.