; and (B) any owner, lessee, driver, or passenger of a vehicle. (3) Entry point The term entry point includes a means by which— (A) driving data may be accessed, directly or indirectly; or (B) a control signal may be sent or received either wirelessly or through wired connections. (4) Hacking The term hacking means the unauthorized access to electronic controls, critical software systems, or driving data, either wirelessly or through wired connections. (b) Cybersecurity standards (1) Requirement All motor vehicles manufactured for sale in the United States on or after the date that is 2 years after the date on which regulations are promulgated pursuant to section 2(c)(2) of the SPY Car Act of 2019 shall comply with the cybersecurity standards under paragraphs (2) through (4). (2) Protection against hacking (A) In general All entry points to the electronic systems of each motor vehicle manufactured for sale in the United States shall be equipped with reasonable measures to protect against hacking attacks. (B) Isolation measures The measures referred to in subparagraph (A) shall incorporate isolation measures to separate critical software systems from noncritical software systems. (C) Evaluation The measures referred to in subparagraph (A) shall be evaluated for security vulnerabilities following best security practices, including appropriate applications of techniques such as penetration testing. (D) Adjustment The measures referred to in subparagraph (A) shall be adjusted and updated based on the results of the evaluation under subparagraph (C). (3) Security of collected information All driving data collected by the electronic systems that are built into motor vehicles shall be reasonably secured to prevent unauthorized access— (A) while the data is stored onboard the vehicle; (B) while the data is in transit from the vehicle to another location