Volvo's autonomous XC90 SUVs experienced sensor failure in Sweden due to ice and snow accumulation on radar sensors. The incident highlights the challenge of 'snow blindness' for autonomous vehicles, where environmental conditions obscure sensors and render automated driving systems non-functional. Volvo engineers subsequently developed a solution by relocating sensors behind the windshield to be cleared by wipers.
Volvo autonomous driving XC90 SUV's experienced issues in Jokkmokk, Sweden when sensors used for automated driving iced over during the winter, rendering them useless.
Risk classification
- Primary risk domain: 7 AI system safety, failures, & limitations
- Primary risk subdomain: 7.3 Lack of capability or robustness
The incident describes autonomous vehicle sensors failing to perform reliably under winter weather conditions, rendering the system blind.
Causal factors
- Entity: Other
- Intent: Unintentional
- Timing: Pre-deployment
The failure was caused by environmental factors (snow and ice accumulation) affecting the vehicle's sensors during pre-deployment testing.
EU AI Act risk tier
High Risk: The AI systems are used in safety-critical transport infrastructure (autonomous vehicles), which has significant implications for public safety and is subject to strict regulatory oversight.
AI system and alleged parties
- AI system: IntelliSafe Autopilot (Volvo)
- AI purpose: Autonomous Driving; Navigation Assistant
- Behaviour type: Autonomous
- Alleged developer: Volvo
- Alleged deployer: Volvo
- Alleged harmed parties: Volvo, drivers in Sweden, drivers in Jokkmokk
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Negligible. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Negligible, indirect Negligible
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Negligible, indirect Negligible
- Financial: direct Negligible, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Negligible, indirect Negligible
- Differential treatment: direct Negligible, indirect Negligible
- Civil rights: direct Negligible, indirect Negligible
- Democracy: direct Negligible, indirect Negligible
- Privacy: direct Negligible, indirect Negligible
- Psychological: direct Negligible, indirect Negligible
- Epistemic: direct Negligible, indirect Negligible
- Child sexual exploitation and abuse: direct Negligible, indirect Negligible
People affected
- Occurrences reported: 1
- People reportedly exposed: 1
Potential causes
Management
- Premature Public Deployment: Deploying AVs with real customers before solving key weather limitations.
Technology
- Radar Sensor Ice Accumulation: Ice and snow build up on external radar sensors, blinding the vehicle.
- Lidar Interference from Snow: Laser pulses reflect off snowflakes, mistaking falling snow for obstacles.
- Camera Obscuration: Snow and dirt cover camera lenses, preventing lane line detection.
Data Inputs
- Obscured Lane Markings: Snow-covered roads prevent cameras from reading essential lane lines.
- Snow Smoke Reflection: Snow kicked up by preceding cars creates visual noise and blocks sensors.
- Unforeseen Road Obstacles: Sudden unexpected events like swerving cyclists challenge AV algorithms.
Human Factors
- Overreliance due to Media Hype: Public hype creates false safety expectations of all-weather capabilities.
- Overly Timid AV Driving: Timid automated driving behavior causes human drivers to crash into them.
Process and Methods
- Inadequate Sensor Placement: Placing sensors where they cannot be cleared by wipers leads to blockages.
- Lack of All-Weather Testing: Testing mostly in sunny climates leaves systems unprepared for winter.
Regulatory Environment
- Unresolved Ethical Frameworks: Lack of clear rules on how AVs should handle unavoidable crash choices.
Information quality
- Classification confidence: High
- Reason for confidence: The reports provide clear, consistent, and detailed accounts of the technical challenges and sensor failures experienced by Volvo's autonomous vehicles during winter testing, with no conflicting information or major ambiguities.
Volvo's autonomous SUV experienced sensor failure due to snow and ice accumulation during pre-deployment testing in Sweden. This represents a routine engineering challenge for autonomous vehicle development under adverse weather conditions, carrying negligible national security implications.
- Overall national security impact: Negligible
- Scope: Single nation
- Primary target: No clear primary
- Alleged perpetrator: Unknown
Threat characteristics
- Imminence: Long-term. The incident represents an ongoing engineering and robustness challenge rather than an active crisis.
- Autonomy: Human-supervised. The vehicle was operating autonomously but within a controlled testing environment with human oversight.
- Novelty: Established threat. Sensor occlusion by environmental factors like snow and ice is a well-known physical limitation of autonomous systems.
Impact by dimension
- Physical security: Negligible. The incident occurred during controlled pre-deployment testing with no accidents, injuries, or infrastructure damage reported.
- Information security: Negligible. No elements of intelligence compromise, classified data theft, or information operations were present.
- Sovereignty: Negligible. The event was a standard commercial vehicle test and did not impact state authority or government operations.
- Economic security: Negligible. This was a routine testing failure and subsequent redesign, posing no threat to strategic economic or technological security.
- Societal stability: Negligible. The incident did not involve mass surveillance, algorithmic bias, or threats to civil liberties.
.avif){kind=small}