Close X
Attorney Spotlight

How does Jordana Nelson's prior experience as a general counsel inform her work with firm clients? Read more>


Close X


Search our Experience

Experience Spotlight

The M&A Advisor Winner 2017The M&A Advisor announced the winners of the 16th Annual M&A Advisor Awards on Monday, November 13 at the 2017 M&A Advisor Awards. Bass, Berry & Sims was named a winner in the two categories related to the following deals:

M&A Deal of the Year (from $1B-$5B) – Acquisition of CLARCOR Inc. by Parker Hannifin Corporation

Corporate/Strategic Deal of the Year (over $1B) – Acquisition of BNC Bancorp by Pinnacle Financial Partners

Close X

Thought Leadership

Enter your search terms in the relevant box(es) below to search for specific Thought Leadership.
To see a recent listing of Thought Leadership, click the blue Search button below.

Thought Leadership Spotlight

Regulation A+

It seems that lately there has been a noticeable uptick in Regulation A+ activity, including several recent Reg A+ securities offerings where the stock now successfully trades on national exchanges. In light of this activity, we have published a set of FAQs about Regulation A+ securities offerings to help companies better understand this "mini-IPO" offering process, as well as pros and cons compared to a traditional underwritten IPO.

Read now

Privacy Perils: Driverless Cars Are the Future, But Are There Privacy Potholes Ahead?

Firm Publication


November 10, 2017

Driverless cars are no longer a far-off pipe dream. Look for Hyundai and Toyota to showcase their driverless models at the upcoming 2018 and 2020 Olympics (in South Korea and Japan, respectively). Many predict that within 10 years, driverless cars will be the norm. Forbes has estimated that there will be approximately 10 million self-driving cars on the road by 2020. Others have been more conservative in their forecast.

There is no doubt that driverless technologies are poised to drastically impact society, with many touting the decrease in human error leading to fewer traffic fatalities and increased time for work and leisure. What about the potential implications for personal privacy?

The data that driverless vehicles could collect and the potential uses of that data could be quite intrusive. Driverless cars could provide both historic and real-time, continuous geolocation data. Companies could utilize this data to determine not only your current location and destination but also every place that you have been and when you were there. Advertisers may be able to discern the purchasing patterns of individuals by tracking what stores they frequent. Insurers may be able to determine what the lifestyle of individuals is like by following their daily activities (e.g., constant trips to the gym) and dining habits (e.g., frequent trips to fast food restaurants).

There are currently no federal statutes governing driverless cars, although the Department of Transportation released its Federal Automated Vehicles Policy in 2016, which provides guidelines to manufacturers regarding safety regulation compliance. Earlier this month, however, Secretary of Transportation Elaine Chao discussed an update to the federal guidance, which no longer includes a suggestion that automakers consider ethical and privacy issues. Only eight states (i.e., California, Florida, Louisiana, Michigan, Nevada, North Dakota, Tennessee, and Utah) and the District of Columbia have enacted laws addressing driverless cars. These state statutes typically address manufacturer liability, owner insurance and safety standards. Only the California statute addresses the data generated and collected by the driverless car, requiring that the manufacturer provide a written disclosure describing what information is collected by the "autonomous technology" equipped in the vehicle to the purchaser. 

The Alliance of Auto Manufacturers, Inc., a major automakers trade group, adopted a list of non-binding privacy principles for vehicle technologies and services in 2014. These principles include commitments to transparency; increased consumer choice; reasonable and responsible use of information; data minimization, de-identification, and retention; data security; and accountability. They also recommend that consumers must affirmatively consent to having geolocation, biometric, and driver behavior data and other identifiable information used for marketing or by third parties. Unfortunately, these principles are nonbinding and subject to the interpretation of the specific auto manufacturer. State laws and regulations have neither incorporated nor even endorsed them. Therefore, for the present, the auto industry remains self-regulating in determining data collection, ownership, retention, and usage policies relating to self-driving cars.

So if you are one of the anticipated millions of adopters of driverless vehicles in the next several years, consider investigating or inquiring into what types of data the manufacturer, dealer or service (such as Uber or Lyft) collects in the course of your use of the vehicle or service and whether you can turn off or opt out of any types of data collection or data sharing. However, keep in mind that information about the vehicle's data collection and sharing practices likely won't be readily available and you may not have a meaningful choice of whether and how your information is used or shared if you want to participate in the driverless technology revolution – that is, unless manufacturers and service providers are required by new laws or regulations at the state or federal level to allow users such choices.

Privacy Perils imageCheck out our series, Privacy Perils, to learn what steps you can take to guard your personal and company data. For more information about this topic and other cyber security concerns, please contact Bob Brewer, Tony McFarland, Elizabeth Warren or a member of our Privacy & Data Security team.

Related Services


Visiting, or interacting with, this website does not constitute an attorney-client relationship. Although we are always interested in hearing from visitors to our website, we cannot accept representation on a new matter from either existing clients or new clients until we know that we do not have a conflict of interest that would prevent us from doing so. Therefore, please do not send us any information about any new matter that may involve a potential legal representation until we have confirmed that a conflict of interest does not exist and we have expressly agreed in writing to the representation. Until there is such an agreement, we will not be deemed to have given you any advice, any information you send may not be deemed privileged and confidential, and we may be able to represent adverse parties.