On March 1, 2019, a Tesla Model 3 operating with Autopilot engaged collided with a tractor-trailer in Delray Beach, Florida, resulting in the death of the driver. The NTSB investigation concluded that the crash was caused by the truck driver's failure to yield and the Tesla driver's inattention due to overreliance on the automation system. The report further noted that the Autopilot system failed to detect the truck, did not warn the driver to take control, and operated outside its intended design conditions.
A Tesla Model 3 driver switched on Autopilot seconds before the crash into the underbelly of a tractor-trailer on a highway in Florida, killing the Tesla driver.
Risk classification
- Primary risk domain: 5 Human-Computer Interaction
- Primary risk subdomain: 5.1 Overreliance and unsafe use
The driver suffered from inattention and disengagement due to overreliance on the Level 2 Autopilot system, which was operated outside its intended design conditions.
Additional risk subdomains
- 7.3 Lack of capability or robustness: The Autopilot system failed to detect the crossing truck and did not initiate automatic emergency braking due to design limitations.
Causal factors
- Entity: AI
- Intent: Unintentional
- Timing: Post-deployment
The incident was caused by the Autopilot system failing to detect the crossing truck and apply brakes during real-world operation after deployment.
EU AI Act risk tier
High Risk: The system is an AI safety component used in road traffic control and vehicle automation, which has significant implications for physical safety and public interest.
AI system and alleged parties
- AI system: Autopilot (Tesla)
- AI purpose: Autonomous Driving; Navigation Assistant
- Behaviour type: Autonomous
- Alleged developer: Tesla
- Alleged deployer: Tesla
- Alleged harmed parties: Jeremy Banner's family, Jeremy Banner
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Substantial, indirect Negligible
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Minor, indirect Negligible
- Financial: direct Negligible, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Negligible, indirect Negligible
- Differential treatment: direct Negligible, indirect Negligible
- Civil rights: direct Negligible, indirect Negligible
- Democracy: direct Negligible, indirect Negligible
- Privacy: direct Negligible, indirect Negligible
- Psychological: direct Negligible, indirect Minor
- Epistemic: direct Negligible, indirect Negligible
- Child sexual exploitation and abuse: direct Negligible, indirect Negligible
Physical
Reported: The report explicitly describes a fatality resulting from the collision.
Directly caused: The Tesla driver, Jeremy Banner, was killed when the roof of his vehicle was sheared off during the crash.
Property
Reported: The report describes severe damage to the vehicles involved.
Directly caused: The Tesla Model 3 was completely destroyed, with its roof sheared off. The semi-trailer sustained minor side damage and scuff marks.
Psychological
Reported: The report describes emotional distress experienced by the truck driver and implies severe grief for the victim's family.
Indirectly caused: The truck driver, Wood, experienced significant emotional distress, breaking down during interviews. The victim's wife and three children suffered severe psychological trauma and grief from his wrongful death.
People affected
- Occurrences reported: 1
- People reportedly harmed: 1
- People reportedly exposed: 2
Potential causes
Management
- Prioritizing Sales Over Safety: Company pushed advanced marketing while ignoring known safety limitations.
- Ignoring Safety Feedback: Management rejected NTSB recommendations to improve driver monitoring.
Technology
- System Design Limitations: The collision avoidance system did not warn or initiate AEB for the truck.
- Inadequate Driver Monitoring: System failed to send visual or audible warnings to put hands on the wheel.
- Lack of ODD Restrictions: Autopilot was not restricted from operating outside its design environment.
Data Inputs
- Sensor Detection Failure: Tesla sensors failed to detect the crossing semitrailer in time to brake.
- Inaccurate Hands-on Sensing: Torque sensors failed to accurately detect driver hand presence on the wheel.
Human Factors
- Driver Overreliance on Automation: Driver was disengaged, expecting the system to handle all hazards.
- Driver Inattention: The driver did not apply brakes or take evasive actions to avoid the truck.
- False Sense of Security: Marketing names like 'Autopilot' led to unrealistic safety expectations.
Process and Methods
- Unsafe System Safeguards: Tesla did not incorporate safeguards to limit Autopilot to its ODD.
- Failure to Adopt Recommendations: Tesla failed to implement NTSB recommendations on driver engagement.
Regulatory Environment
- Lack of NHTSA Verification Method: Regulators lacked methods to verify safety safeguards for Level 2 systems.
- Inadequate Oversight on ODD: No regulatory rules prevented automation use outside design conditions.
Information quality
- Classification confidence: High
- Reason for confidence: The incident is thoroughly documented by official NTSB investigation reports and court proceedings. The technical details of the Autopilot engagement, vehicle speed, and driver actions are based on physical telemetry and are highly reliable.
- Ambiguities identified: There is a minor dispute regarding whether the driver's hands were physically on the wheel, as the family's attorney claims the sensors are prone to false negatives, but this does not impact the overall classification.
- Alternative interpretations: The incident could be viewed purely as a human driver error (both the truck driver and Tesla driver), but the documented failure of the Autopilot's sensors and the systemic issue of overreliance make it a clear AI safety failure.
A fatal traffic accident involving a Tesla Model 3 on Autopilot. The incident is a consumer safety and regulatory issue with negligible national security implications, as it does not target critical infrastructure, government functions, or strategic national assets.
- Overall national security impact: Negligible
- Scope: Single nation
- Primary target: No clear primary
- Alleged perpetrator: Unknown
Threat characteristics
- Imminence: Long-term. The incident represents a consumer safety and regulatory concern rather than an active national security crisis requiring urgent response.
- Autonomy: Human-supervised. The Tesla Autopilot system operates as a Level 2 semi-autonomous driver assist system, requiring active human supervision and intervention capability.
- Novelty: Established threat. Similar sensor detection failures and driver overreliance issues in semi-autonomous vehicles have occurred in previous years.
Impact by dimension
- Physical security: Negligible. The incident was a localized traffic accident involving a single consumer vehicle. While it resulted in a tragic fatality, it poses no threat to critical infrastructure, military systems, or national physical security.
- Information security: Negligible. There was no compromise of intelligence, classified data, or information operations associated with this traffic accident.
- Sovereignty: Negligible. The accident does not impact government decision-making, state authority, electoral systems, or any core sovereign functions.
- Economic security: Negligible. While there was individual property damage and legal costs, the incident has negligible impact on national economic stability or strategic technological competitiveness.
- Societal stability: Negligible. This was an isolated transportation safety failure with no implications for mass surveillance, civil liberties, or broader societal stability.