NHTSA issues a consent order against Cruise over crash reporting

Background

US safety regulators learn about crashes involving automated driving systems largely from the companies that operate them. NHTSA's Standing General Order requires companies to file reports on crashes involving automated driving systems, and the consent order announced in 2024 addressed several of those reports that the agency considered incomplete.^[1]

The incident at the centre of the case is a crash on 2 October 2023, in which the vehicle dragged a pedestrian about 20 feet. Two of the reports Cruise filed did not disclose the post-crash details of that crash.^[1]

Why those details matter is not hard to see. A crash report that stops at the moment of first impact leaves out exactly the part of the sequence in which an automated driving system's behaviour — whether it stopped, reversed, or kept moving — is judged. When the missing section is the one that determines how serious the event was, the regulator's record of the incident is wrong in the place where accuracy counts most.

What the order requires

NHTSA announced the consent order with Cruise on 30 September 2024.^[2] Cruise agreed to pay a total monetary penalty of 1.5 million dollars.^[1] The base term of the order is two years, and NHTSA can extend it for a third year.^[1] Cruise must also submit a corrective action plan setting out how it will improve compliance with the Standing General Order.^[1] In effect, the company has to describe what went wrong in its own reporting process and what it will change.

The ongoing reporting duties are written out item by item. Cruise must report vehicle miles travelled, the number of vehicles operating, and whether they operate without a driver.^[1] Those figures give the regulator a denominator: a count of incidents means little without a sense of how much driving produced them, and the distinction between vehicles with a person aboard and vehicles operating driverless separates two quite different kinds of exposure. Cruise must also report software updates expected to affect automated driving system operations, and citations and observed traffic-law violations.^[1] Tracking software changes lets the agency connect shifts in on-road behaviour to specific versions of the system, while citations capture conduct that never becomes a crash report at all.

The order sets a schedule as well. Cruise and NHTSA will meet quarterly, and Cruise must file a final report 90 days before the end of the base term.^[1] Quarterly meetings turn the agreement into a continuing relationship rather than a one-off filing, and the closing report creates a fixed point at which the agency can assess whether the obligations were met.

What it leaves open

The order does not affect NHTSA Preliminary Evaluation 23-018, which remained open.^[1] A preliminary evaluation is an earlier-stage inquiry rather than a final finding, so keeping it open means the underlying questions about the crashes are not closed by the settlement. Separately, Cruise had also amended four other Standing General Order reports to add detail on other crashes.^[1] Those amendments show the problem was not confined to a single filing.

Why it matters

A consent order is a negotiated agreement that binds a company to specified obligations, distinct from a fine alone or from a public statement of concern. Its weight lies in the continuing duties: reports on mileage, fleet size, driverless operation, software changes and citations, reviewed in quarterly meetings, give the regulator a running picture instead of a single snapshot. For a company whose vehicles are tested and deployed in public streets, that converts a compliance failure into a period of structured scrutiny.

The case also illustrates a structural feature of automated-vehicle oversight. Because the regulator depends on company filings for its evidence, the accuracy of those filings is itself a safety issue; an incomplete report is not a paperwork slip but a gap in the record on which later judgments rest. The order responds to that gap with a plan, a schedule and a penalty — and leaves the separate evaluation into the crashes still open.^[1]