The National Highway Transportation Safety Administration (NHTSA) created Automated Driving Systems 2.0: Vision for Safety is an updated version of the Federal Automated Vehicle Policy (FAVP; SciPol Brief available) issued in 2016. Compared to its predecessor, A Vision for Safety is more concise, emphasizes the voluntary nature of the guidelines, and modifies the list of ADS Safety Elements, which manufacturers are encouraged to consider for system assessment, testing and validation. The guidance also clarifies the differences in federal and state authority and their roles in establishing safety practices.
The material provided in the guidance is entirely voluntary. The intent is to employ a non-regulatory approach to the development of automated vehicle technology that supports industry innovation by limiting regulations that may not be able to keep up with the pace of rapidly evolving automated vehicle technology.
The guidance applies to the design, construction and performance of automated driving systems (ADS) within NHTSA’s jurisdiction. This includes motor vehicles (i.e., low-speed vehicles, motorcycles, passenger vehicles, medium duty and heavy-duty CMVs) and motor vehicle equipment. ADS includes highly automated vehicles falling under SAE levels of automation 3 through 5 (further explained in the Background section), referred to as Conditional, High, and Full Automated Systems.
The guidance is divided into two main parts:
- Section 1: Voluntary Guidance for Automated Driving Systems (Voluntary Guidance), summarizing 12 safety elements to help automotive industry stakeholders (i.e., entities engaged in in ADS testing and deployment) identify and resolve safety issues prior to deployment; and
- Section 2: Technical Assistance to States: Best Practices for Legislatures Regarding Automated Driving Systems (Best Practices), to differentiate between federal and state roles in ADS regulation.
Section 1: Voluntary Guidance
While in the design stages, entities are encouraged to document the methods (e.g., industry standards, best practices, company policy) employed to address each of the 12 safety elements for equipment assessment, testing and validation. These elements include:
- System Safety: Entities are encouraged to implement a systems engineering approach to ensure ADSs are devoid of unreasonable safety risks. this may include following standards set by accredited standards-developing industry organizations such as International Standards Organization and SAE International where applicable.
- Operational Design Domain (ODD): Entities are encouraged to document the vehicle’s ODD, which describes the specific conditions under which a given ADS or feature is intended to function. This includes ADSs limits and boundaries for the following:
- Roadway types
- Geographic area
- Speed range
- Environmental conditions
- Object and Event Detection Response (OEDR): Entities are encouraged to consider the driver’s or ADS’ ability to notice and respond to relevant features of the driving environment, including normal driving and pre-crash scenarios.
- Fallback (Minimal Risk Condition): Entities are encouraged to develop “fallback” processes for when the ADS cannot operate safely (e.g., due to a malfunction or damage), such as stopping the vehicle or changing speed. The ADS should be able to detect malfunctions or determine when it is operating outside of the ODD. In some cases, the fallback may direct the system to assume a “minimal risk condition“, or having the vehicle respond in the safest manner given the driving conditions.
- Validation Methods: Entities should be able to validate how the ADS mitigates risk under normal conditions, crash avoidance situations, and fallback strategy scenarios. Methods of evaluation may include simulation, test track and on road safety.
- Human Machine Interface (HMI): Entities should consider the way that the ADS will pass on information or requests to the driver (e.g. to assist with a driving task) and vice versa. This is mainly pertinent to cases where drivers could be involved, such as in Level 3.
- Vehicle Cybersecurity: Entities should attempt to minimize cybersecurity threats and vulnerabilities. Entities should also disclose threatening incidents, exploits and vulnerabilities to the from internal testing, consumer reporting, or external security to the Auto-Information Sharing and Analysis Center (Auto-ISAC). The Auto-ISAC is an industry-operated platform that promotes cyber-security awareness and encourages open communication among the automotive industry.
- Crashworthiness: Entities should determine the best way to protect vehicle occupants in a crash scenario. Vehicles without occupants should provide geometric and energy absorption crash compatibility with existing vehicles on the road.
- Post-Crash ADS Behaviour: Entities should take into account methods of returning ADSs to a safe state post-crash, and what maintenance and repair procedures are needed to return a damaged vehicle into service.
- Data Recording: Entities should document processes (for testing, validation, and data collection) related to malfunctions, degradations or failures that can be used to establish the cause of any crash.
- Consumer Education and Training: Entities should develop, document and maintain employee dealer, distributor and consumer education and training programs to address anticipated differences in use and operation of ADSs from conventional vehicles. This may include its functions, operational parameters, system structure, HMI, as well as ODD framework.
- Federal, State and Local Laws: Entities are encouraged to document how they intend to account for all applicable federal, state and local laws in the design of their vehicles and ADSs.
NHTSA recommends that entities publish a Voluntary Safety Self-Assessment, which covers the 12 safety components. The intent of the report is to demonstrate to the public that the various entities are considering safety in their designs in cooperation with the Department of Transportation (DOT). As the name suggests, the entities are not required to submit a report. NHTSA has provided an illustrative template as a guide.
Section 2: Technical Assistance to States
As vehicles are regulated under both federal and state jurisdictions, this section seeks to clarify federal and state regulatory roles regarding testing and deployment of ADSs and recommend best practices for state legislatures on developing their own regulatory frameworks. The roles of each are made explicit to foster consistency between the two bodies and guide them in creating compatible laws. This section is divided into three parts, including (1) a clarification of federal and state regulatory roles, (2) best practices for legislatures, and (3) best practices for state highway safety officials.
1. Federal and State Regulatory Roles:
NHTSA would continue to oversee safety design and performance of motor vehicles and equipment; while the states would be responsible for the human driver and vehicle operations. The states should also follow the Manual on Uniform Traffic Control Devices (MUTCD) for designing traffic control equipment (e.g., road signs, signals) to maintain infrastructure that supports autonomous vehicle navigation. Roles for NHTSA and the states would include:
- Licensing for human drivers and registration for motor vehicles
- Traffic laws and regulations
- Safety inspections
- Motor vehicle insurance and liability
2. Best Practices for State Legislatures:
NHTSA recommends the following practices, based on common components of existing state regulations:
- A “technology-neutral” environment that allows all entities meeting federal and state law prerequisites for testing and deployment of ADS to operate in the state (independent of previous experience);
- Licensing and registration procedures that include ADS in the legal definition of “motor vehicle;” licensing ADS entities and the staff who perform field tests; and registering vehicles with ADSs.
- Reporting and communications methods for Public Safety Officials for reporting vehicle incidents and crashes to public safety agencies, such as first responders and law enforcement.
- A review of traffic laws and regulations that may serve as barriers to testing and deployment of ADS
3. Best Practices for State Highway Safety Officials:
The last part of the Technical Assistance for States provides a framework to states for developing procedures and conditions for ADSs’ introduction onto public roadways. It includes recommendations intended to address the concerns of state stakeholders and clarify their roles, dividing the recommendations into seven categories, based on the Model State Policy:
- Administrative: States may want to consider new administrative oversight support for states’ roles and activities as they pertain to ADSs. For example, states could incorporate:
- A lead agency that oversees testing and assembles a committee that includes representatives from a variety of government stakeholders. The lead agency could act as a communication liaison between states and entities regarding requests and statuses. ‘
- An internal process to provide permits to entities interested in testing ADS technology.
- Application for Entities to Test ADSs on Public Roadways: The guidance recommends that the application for testing stays at the state level and provides recommendations for the information provided by the entities during the application process, such as insurance, training procedures, and safety plan.
- Permission for Entities to Test ADSs on Public Roadways: The guidance recommends that permission to test stays at the state level, that state law enforcement be involved in the application process and that permission can be suspended if entities don’t adhere to requirements
- Specific Considerations for ADS Test Drivers and Operators: States should require licensing for test drivers of vehicles of SAE automation levels of 3 and lower and request summaries of additional training provided to operators of all automation levels.
- Considerations for Registration and Titling: Identification that highlights ADS capabilities on vehicle registration records.
- Working with Public Safety Officials: Ensuring that public safety officials work with ADS deployments to understand vehicles and their needs.
- Training public safety officials to prepare for encounters with ADSs
- Coordination among states to review human operator behavior
- Liability and insurance: States should consider how to allocate liability when a car crash occurs, determine who must carry motor vehicle insurance and consider tort liability and other laws.
The guidance includes a repository of relevant references to this and other NHTSA ADS resources.