Report: TuSimple sent sensitive self-driving data to China after US national security agreement

TuSimple (now CreateAI) allegedly transferred sensitive autonomous vehicle data to Beijing-owned Foton after agreeing with U.S. regulators to cease such transfers, according to the Wall Street Journal, raising concerns about national security safeguards. The data sharing, which included technical instructions and source code, occurred around February 2022 and continued until TuSimple's compliance deadline, despite a U.S. government order to separate its business from China-based entities. This revelation, coupled with previous attempts to transfer $450 million to a Chinese subsidiary, highlights the challenges in balancing foreign investment with national security and has prompted stricter U.S. policies on Chinese-linked tech deals.

Analysis

TuSimple, now rebranded as CreateAI, reportedly transferred sensitive autonomous vehicle system data, including technical specifications for server dimensions, brake designs, sensors, steering, power supply, chips, and autonomy source code, to the Beijing-owned truck manufacturer Foton around February 2022. This alleged transfer occurred just a week after TuSimple signed a national security agreement with U.S. regulators, committing to separate its U.S. business and technology from China-based entities, with the data sharing purportedly continuing for six months until the compliance deadline. While a subsequent Committee on Foreign Investment in the U.S. (CFIUS) investigation concluded these specific transfers did not technically violate the agreement, TuSimple was fined $6 million for other infractions, settling without admitting fault. This episode, reflecting an extremely negative sentiment (-0.85), underscores the inherent difficulties in U.S. efforts to balance foreign investment with national security, particularly concerning dual-use technologies. TuSimple's history since its 2021 IPO has been tumultuous, marked by internal power struggles, federal investigations into its connections with China, a contentious attempt to move approximately $450 million to its Chinese subsidiary, and an ongoing legal dispute initiated by a co-founder seeking company liquidation. These issues culminated in TuSimple's decision to cease U.S. operations and voluntarily delist from the stock market in January 2024, aiming to refocus on self-driving operations in China—a plan complicated by CFIUS restrictions and court orders barring asset transfers. The company's previous involvement with Hydron, including shared employees and confidential data, further illustrates the complex web of its Chinese connections and has contributed to a broader shift in U.S. policy towards stricter oversight of Chinese-linked technology transactions.

Key Decisions for Investors

• Investors should intensify due diligence on companies with significant operational or financial ties to entities in China, particularly within strategic technology sectors like autonomous driving and artificial intelligence, recognizing the elevated risk of regulatory scrutiny and national security interventions.
• The TuSimple case underscores the material risks associated with companies under CFIUS review or operating under national security agreements, which can result in substantial operational limitations, restrictions on asset and data transfers, and severe impacts on shareholder value, including delisting.
• Portfolio companies involved in cross-border technology development and sharing, especially with entities in jurisdictions raising national security concerns, warrant close examination of their data governance, intellectual property protection protocols, and compliance with international trade regulations.
• Be prepared for abrupt strategic pivots or market exits in companies exposed to significant geopolitical tensions, as demonstrated by TuSimple's shift from U.S. operations and its rebranding, which can fundamentally alter the investment outlook and recovery prospects.