5 minute read | June.16.2025
The EU Commission has adopted Directive (EU) 2024/2853, which implements a comprehensive overhaul of the 1985 Directive 85/374/EEC on defective product liability (“New PLD”). The new framework, which complements Regulation (EU) 2023/988 (General Product Safety), seeks to modernize the European product liability regime to address the emergence of new digital technologies. The directive’s overarching aim is to enhance consumer protection and simplify access to compensation for victims of defective products.
Depending on the circumstances, the manufacturer, importer, fulfillment service provider or online platform can be held liable for a defective product.
The New PLD will apply to products placed on the market or put into service in the EU after 9 December 2026, regardless of whether the relevant economic operator commercializing the product is established in the EU.
The New PLD updates Europe’s existing product liability regime to adapt it to digital products and “related” services. In particular:
The New PLD significantly expands the scope of what constitutes a “product.” The new definition covers all movables, even if integrated into, or interconnected with, another movable or an immovable; it includes electricity, digital manufacturing files, raw materials and software.
The inclusion of software is a significant change from the previous product liability regime, and Recital 13 that addresses software expressly refers to firmware and artificial intelligence (AI) systems. Digital services that are integrated into, or interconnected with, a product are also covered as product components.
While AI systems are not expressly included in the definition of product in the New PLD, the recitals of the New PLD and its context of adoption suggest that the New PLD will apply to AI systems. The New PLD was part of a broader legislative package proposed alongside the AI Act and a proposal for an AI Liability New PLD—which has since been withdrawn—aimed at harmonizing rules applicable to AI technologies.
The New PLD adds additional factors that will be taken into account when assessing whether a product is defective. For example, the product’s ability to learn or evolve post-sale (which is especially relevant in relation to AI systems), the foreseeable interaction with other connected products and compliance with cybersecurity standards. Here again, the objective is to adapt the law to new technologies; the entire product life cycle and the product’s evolution are taken into account.
The previous product liability regime provided for an objective assessment of the defectiveness, taking into account the level of safety that a person is entitled to expect. In the New PLD, the level of safety that a person is entitled to expect is taken into consideration, but it can now also be assessed in the context of other EU product safety laws. For instance, in relation to AI systems, compliance with the AI Act may be taken into account when assessing whether an AI system is defective.
Under the New PLD, when a substantial modification is made outside the original manufacturer’s control, the person responsible for the modification will be considered a manufacturer of the altered product and held liable as a manufacturer of the modified product. However, the person responsible for the modification may be exempted from liability if they can prove that the damage is related to a part of the product not affected by the modification. This is particularly relevant for software since modifications are frequently carried out by economic operators that integrate software in their products and/or services.
The concept of “substantial modification” covers modifications of a product after it has been placed on the market or put into service that are considered substantial under EU or national rules on product safety or—in the absence of threshold—any modification that changes the product’s original performance, purpose or type, without the change having been foreseen in the manufacturer’s initial risk assessment, and that changes the hazard, creates new hazard or increase the level of risk.
Recital 40 of the New PLD specifies that where a substantial modification is made through a software update or upgrade or due to the continuous learning of an AI system, the substantially modified product should be considered to be made available on the market or put into service at the time that modification is actually made.
The New PLD adds the destruction or corruption of digital data, which is not used for professional purposes, as a new category of compensable harm. This might include compensation for the destruction or corruption of digital files deleted from a hard drive caused by a defective product, including the cost of recovering or restoring this data.
The New PLD introduces two reforms meant to address the information asymmetry between consumers and manufacturers and to ensure a fair allocation of risk, particularly in cases involving technically complex products. Specifically, the New PLD:
The New PLD retains a 3-year prescription period from the moment the victim becomes aware or should have become aware of the damage, the defect and the potentially liable party. It also keeps the 10-year long-stop deadline but adds a 25-year limit for latent injuries and specifies that the 10-year period restarts at the time the modified product or service is placed on the market or, for substantially modified products, when they are put into service.
EU Member States must implement the New PLD in their respective national laws by 9 December 2026. The new rules will only apply to products placed on the market after this date. The New PLD imposes maximum harmonization, which means that national laws cannot be stricter or more lenient in principle.
If you have questions, please reach out to Julia Apostle and Rami Kawkabani.