Sri Lanka’s leap toward Chinese EV buses mirrors Europe’s deepening security fears—and the warnings are hard to ignore

Sri Lanka’s renewed engagement with China on a proposed fleet of electric buses arrives at a moment of both promise and peril.
Beijing, eager to expand its development footprint on the island, has pitched the initiative as a natural extension of its revived role in Colombo’s stalled infrastructure agenda.
Chinese Ambassador Qi Zhenhong has described the EV bus proposal as a “new starting point,” the next chapter in a relationship shaped by high-level visits and revived project pipelines.
Yet, as Sri Lanka weighs this offer, a striking parallel is unfolding thousands of miles away in Europe—one that should serve as a cautionary tale.
Across Scandinavia, governments are scrambling to understand how deeply their public transport systems may have exposed themselves to Chinese technology, and whether their buses—quiet, modern, environmentally friendly—could, in a time of geopolitical tension, be remotely shut down.
The alarm reverberating across European capitals underscores a truth Sri Lanka cannot afford to ignore: electrification of public transport is not just a financial or environmental decision. It is also a national security gamble.
Sri Lanka’s EV bus ambition and an unprepared system
At face value, the proposal looks enticing. Sri Lanka’s public transport system—particularly the chronically loss-making Sri Lanka Transport Board (SLTB)—is crying out for modernisation.
Overcrowded buses, breakdowns, delays, and unsafe conditions have become everyday realities for commuters. Electrification could help slash fuel imports, cut pollution, and raise service standards in one move.
But the underlying structure of the system remains deeply fragile. The SLTB suffers from mismanagement, lack of technological capacity, inefficient maintenance practices, and a funding model that barely sustains existing operations.
Integrating a sophisticated electric bus fleet into this ecosystem would require not just new vehicles but new systems, new training, new regulatory oversight, and new operational discipline—elements that Sri Lanka has repeatedly struggled to secure.
Even under ideal conditions, modernisation would be a daunting challenge. But when China is the supplier, another question comes to the surface—one Europe is currently wrestling with: who controls the technology?
Europe’s wake-up call: When buses become security vulnerabilities
Security concerns surrounding Chinese-built electric buses exploded in Scandinavia this year.
Authorities in Denmark and Norway launched urgent investigations after discovering that Yutong buses—Chinese-made and widely used in European fleets—contained software systems with remote digital access capabilities.
In Norway, transport operator Ruter revealed test results showing that Yutong buses had “direct digital access” enabling remote software updates and diagnostics.
Their Dutch-built counterparts, from VDL, had no such capability. For some European officials, the implication was unsettling: if a vehicle can receive remote updates, it could also be remotely disabled—by the manufacturer, by a hostile actor, or by anyone capable of breaching the system.
Denmark is facing the same fear. Movia, which operates more than 260 Yutong buses in Copenhagen and eastern Denmark, has openly acknowledged the vulnerability.
Its chief operating officer, Jeppe Gaard, summed up the issue starkly:
“If a vehicle can be updated remotely, it can be shut down remotely.”
Yutong has denied any wrongdoing and insists it adheres to international standards. But reassurance does not erase the capability itself. And capabilities, in geopolitics, matter more than intent.
Europe’s alarm is not emerging in isolation. It follows years of concerns over Chinese involvement in telecommunications, surveillance systems, and energy grids.
Several European states have already removed Huawei and ZTE equipment from their 5G networks. The suspicion now spreading across transport ministries is that electric vehicles—essentially software-driven machines—may pose similar vulnerabilities.
What Scandinavia is realising late, Sri Lanka must consider early.
Sri Lanka’s risks: A system already vulnerable, a supplier already dominant
Sri Lanka’s transport sector is not Scandinavia. It lacks the redundancy, resilience, and rapid response infrastructure that allow European systems to absorb shocks.
If European governments fear their buses could be disabled in a geopolitical crisis, Sri Lanka—a nation far more dependent on Chinese financing and technology—faces an even starker risk.
Sri Lanka’s vulnerabilities are threefold.
If China supplies the buses, the software, the maintenance systems, and possibly the data architecture, Sri Lanka’s ability to independently manage its transport backbone could erode quickly.
Unlike Europe, Sri Lanka does not have diversified suppliers or the political clout to negotiate from strength. China is already one of the island’s dominant creditors.
A new dependency—this time embedded in day-to-day public mobility—could deepen leverage in ways that are hard to unwind.
Sri Lanka lacks a robust cybersecurity framework for public infrastructure.
In a scenario where software-driven buses are connected to servers abroad, Colombo may have limited visibility—and even less control—over what data leaves the country or how the system can be manipulated.
If European governments—wealthy, technologically advanced, and relatively insulated—are alarmed, the implications for Sri Lanka are far more severe.
Europe’s experience is not a footnote—It’s a warning
The overarching lesson from Europe is simple: modern electric buses are no longer mechanical machines. They are connected devices. Connected devices can be used as tools of influence, pressure, or coercion.
Norway’s findings, Denmark’s concerns, and the broader European re-evaluation of Chinese technology all point to one conclusion: public infrastructure built on foreign-controlled software is a strategic vulnerability.
Sri Lanka, still climbing out of an economic crisis and dependent on external financing, is in no position to absorb such risks lightly.
Accepting Chinese buses without a full understanding of long-term implications—technological, operational, financial, and geopolitical—could lock the island into a dependency that reaches far beyond transport.
China’s electric bus offer may be framed as a “new starting point,” but for Sri Lanka, the starting point must be caution—not blind acceptance.
Europe is learning its lesson under pressure. Sri Lanka still has the advantage of learning it in advance. And the cost of ignoring it may not be limited to buses alone.