To amend chapter 301 of subtitle VI of title 49, United States Code, to require a cybersecurity plan for highly automated vehicles, and for other purposes. This bill prohibits a manufacturer from selling, introducing into commerce, or importing into the United States any highly automated vehicle (i.e., equipped with an automated driving system that can perform the entire dynamic driving task on a sustained basis), unless the manufacturer has developed a cybersecurity plan for the vehicle.