Why Federal Regulators Are Investigating a $999 Self-Driving Gadget After 3 Deaths

• Federal regulators have opened a formal investigation into comma.ai, whose $999 aftermarket device lets drivers turn any of 350-plus supported car models into a hands-free highway cruiser.
• The probe covers roughly 30,000 devices after five crashes into stopped or slow vehicles killed three people and injured 11 others.
• Comma’s own crash reports to regulators dispute whether the company is even required to answer, pointing instead at the automakers whose adaptive cruise systems its device takes over.

A $999 Gadget Under Federal Scrutiny After Three Deaths

The National Highway Traffic Safety Administration opened Preliminary Evaluation PE26007 on September 21, targeting comma.ai and its openpilot driving software after five separate crashes in which vehicles running the system plowed into stopped or slow-moving vehicles directly in their own lane. Two of those crashes killed a combined three people. Four of the five injured a total of 11 others, some seriously. The investigation names comma’s last three generations of hardware, the comma three, comma 3X and comma four, along with the open-source openpilot software that runs on all of them.

NHTSA’s Office of Defects Investigation learned about the crashes through a mix of mandatory crash reports filed under the agency’s Standing General Order, a direct consumer complaint, and outreach to police departments. The agency has confirmed the comma system was powered on or actively engaged in multiple of the crashes, and its early review found that openpilot “may not have adequately detected or responded to” vehicles stopped in the same lane ahead.

How a $999 Windshield Mount Takes Over Driving

Comma.ai sells hardware, currently the $999 comma four, that mounts to a windshield and plugs into a car’s existing systems through a vehicle-specific wiring harness. The device runs openpilot, open-source software that performs adaptive cruise control and automated lane centering, meaning it can accelerate, brake and steer to keep a car centered in its lane without the driver’s hands or feet. Installation takes about 15 minutes and requires no dealership visit or manufacturer authorization. Comma says its devices support more than 350 car models, have logged over 400 million combined miles, and now run in an estimated 30,000 vehicles, a customer base the company says trails only Tesla in hands-free highway miles driven.

Unlike Tesla Autopilot or GM Super Cruise, which automakers build, test and certify as part of a complete vehicle, openpilot is a retrofit that any owner can buy and install on their own. That distinction sits at the center of NHTSA’s inquiry: a factory-installed driver assistance system goes through a manufacturer’s own safety validation before it reaches a customer, while an aftermarket device reaches the road once its maker decides it is ready, without the same layer of pre-market review.

The Five Crashes NHTSA Is Examining

Public Standing General Order data covers four of the five crash reports named in the investigation. The fatal crash happened in February 2026 in Ascension Parish, Louisiana, when a 2022 Toyota RAV4 running a comma device struck a stopped first responder vehicle on a highway. Comma’s own filing on that crash notes the device “appears to have been running 3rd party non-comma software,” meaning a modified fork of openpilot rather than the company’s official release.

In September 2025, a 2020 Honda Accord running openpilot, which comma’s report describes as “verified engaged,” rear-ended a stopped car on a Missouri highway at 82 mph, sending a person to the hospital with serious injuries. Honda filed its own separate report on the same crash, stating that the driver, according to a police report and a subsequent lawsuit, had set cruise control to 80 mph and fallen asleep. In July 2026, a 2021 Toyota Corolla running openpilot hit a stopped passenger car at 56 mph on a highway near Mona, Utah. Every incident NHTSA has data on follows the identical pattern: highway speed, a vehicle stopped directly ahead, and a driver-assistance system that did not brake in time.

Marketing Says Hands-Free. The Fine Print Says Stay Alert.

NHTSA’s filing leans on comma’s own marketing language, quoting the company’s promise of “hands free driving for the car you already have,” a 15-minute self-install, and software that “can drive for hours without intervention.” Comma’s terms of use tell a different story, requiring the driver to stay alert and ready to take control at all times, and the comma four includes a driver-facing camera meant to confirm the driver is watching the road.

That gap between the pitch and the fine print is not new to driver-assistance technology. NHTSA investigated Tesla Autopilot in 2021 over a nearly identical crash pattern, vehicles striking stopped first responder vehicles, a probe that eventually led to a recall of roughly 2 million Teslas to add more driver alerts. Consumer Reports rated openpilot the best driver assistance system it tested back in 2020, largely on the strength of its driver-monitoring camera, but a camera that confirms a driver is watching does not by itself guarantee the driver brakes in time when the software fails to.

Comma’s Answer: Ask the Automaker, Not Us

Every crash report comma has filed with NHTSA opens with the same disclaimer: the company provides the information “without agreeing with NHTSA’s interpretations or conceding that comma is obligated to respond to the General Order.” On whether a crash fell within the system’s intended operating conditions, comma has answered “Unknown,” arguing that it does not manufacture the vehicle or its stock driver-assistance components. In the Honda Accord crash, comma noted in its filing that the adaptive cruise control function was “performed by Honda system,” shifting responsibility toward the automaker’s own hardware even though openpilot was actively steering.

NHTSA appears to be anticipating a related defense: that a crash involved a modified, community-built version of openpilot rather than comma’s official release, as in the Louisiana crash. The agency says it will still evaluate any modified fork and weigh the components it shares with comma’s own code base. Popular community forks like sunnypilot and FrogPilot run on the same underlying driving model as official openpilot, which complicates any argument that responsibility stops at comma’s front door.

The Regulatory Gap Aftermarket Devices Fall Into

Factory-installed driver-assistance systems answer to Federal Motor Vehicle Safety Standards enforced through a vehicle’s overall certification, and an automaker faces liability tied directly to its own engineering choices. A windshield-mounted aftermarket device occupies murkier ground. Comma’s business model, treating its hardware as open-source “dev kits” rather than a certified safety system, traces back to 2016, when NHTSA sent founder George Hotz a special order over an earlier product, comma one, and he canceled it rather than answer the agency’s questions. Comma then open-sourced its code and rebuilt its business around selling hardware, a structure that has let it grow to 30,000 users while operating outside the kind of pre-market certification an automaker must clear before a driver-assistance feature ships from the factory.

That gap has real consequences for accountability after a crash. When a factory system fails, the automaker that built, tested and certified it is the clear point of responsibility. When an aftermarket device fails, or when a driver has modified that device’s open-source code, establishing who bears responsibility becomes far harder, and this investigation is the first serious federal attempt to draw that line for a product used by tens of thousands of American drivers.

What Owners of a Comma Device Should Know Now

NHTSA emphasizes that a preliminary evaluation is not a finding that comma.ai caused any of the five crashes or that a legal defect exists. The process can run for months and can close quietly, or escalate into a full engineering analysis that can lead to a recall. What a recall of open-source software installed by tens of thousands of individual owners, some running modified code from GitHub, would even look like remains an open question regulators have not had to answer before.

Drivers using a comma device, or any aftermarket or factory driver-assistance system, should treat “hands free” marketing claims with real caution around stopped traffic and highway merges, the exact scenario behind all five crashes under review. Keeping hands on the wheel and eyes on the road, regardless of what a system promises, remains the only protection against the specific failure mode NHTSA is now investigating. Owners running a modified fork of openpilot should know that doing so does not place them outside the scope of a federal safety review, whatever comma’s own filings argue.

Sources:

• Electrek: NHTSA Investigates comma.ai’s openpilot Over 5 Crashes That Killed 3
• TechCrunch: Comma’s Hands-Off Driving Tech Under Investigation After 2 Fatal Crashes
• CarBuzz: Aftermarket Hands-Free Driving Tech Is Out There. And the Feds Are Investigating It