Product Liability Directive
EU directive setting producer liability for defective products, revised to cover software.
The Product Liability Directive is the European Union's revised compensation regime for defective products. It treats software as a product, including software supplied through cloud services.
Last refreshed: 22 October 2026 · Appears in 1 active topic
Who pays when unsupported software leaves a physical product unsafe?
Timeline for Product Liability Directive
Revised EU liability law
Cybersecurity: Threats and Defences: Mentioned in: Fridge hack spoils food across EuropeBackground
The Product Liability Directive is Directive (EU) 2024/2853, which replaces the 1985 product-liability regime. It sets common rules for compensation when defective products cause death, personal injury, property damage or certain data loss.
The directive treats software as a product, including software supplied through cloud services. Member states must transpose it by 9 December 2026. The rules bring digital components within a liability framework that previously centred on physical goods.
Following a May 2026 corrigendum, the directive applies to products placed on the market or put into service after 8 December 2026. It therefore does not cover the older refrigeration controllers involved in the October attack.
What is the revised Product Liability Directive?
Does the Product Liability Directive cover software?
When does the revised Product Liability Directive apply?
Does the directive cover the hacked supermarket fridge controllers?
Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Updated 22 October 2026. Editorial standards.