Suvitha
Suvitha
Suvitha is a Regulatory Compliance Expert and Content Strategist with a deep understanding of UK and EU regulatory frameworks. At Euverify, she transforms complex legal and technical updates into clear, actionable guidance for businesses. Her work bridges regulation and communication, helping brands stay compliant, credible, and competitive in regulated markets.
February 10, 2026

EU Product Liability Directive Explained: What Changes in 2026 and Why It Matters

If you sell consumer products into the EU, 2026 is not just another future date to keep an eye on. It is when the EU’s updated product liability rules start applying to new products placed on the market. These rules are built for how products actually work today, with software, connectivity, AI features, and supply chains that stretch across borders.

This article explains what has changed, what has not, and what businesses should realistically be doing now to reduce liability risk before the new rules start applying.

EU Product Liability Directive 2026: What Is Changing and What Stays the Same

The key date

The new EU Product Liability Directive is Directive (EU) 2024/2853. It was published in the Official Journal on 18 November 2024 and entered into force 20 days later. EU Member States must transpose it into national law by 9 December 2026.

When Does the New EU Product Liability Directive Apply? Key Dates Explained

This part is important and often misunderstood.

The Directive only applies to products that are placed on the EU market or put into service after 9 December 2026. Products placed on the market before that date remain covered by the old 1985 Product Liability Directive, even after the old law is formally repealed.

So while you will often see references to “implementation in late 2026,” the precise legal position is:

  • Member States must implement the Directive by 9 December 2026

  • The new rules apply only to products placed on the market after that date

This distinction matters for long lifecycle products and for businesses that keep older models on sale alongside new ones.

Why the EU Updated Its Product Liability Rules

Why the EU updated product liability in the first place

The original Product Liability Directive was written for a world of physical, standalone products. It struggled to deal with modern realities such as:

  • Products whose safety depends on software, updates, or connected services

  • Products that change behaviour after sale through updates or configuration changes

  • Situations where critical evidence sits inside technical files, logs, or engineering systems that consumers cannot access

The updated Directive directly addresses these issues. It brings software and digital manufacturing files into scope as products, and it introduces legal tools that make it easier for injured parties to prove defect and causation when technical complexity would otherwise block a claim.

Key Changes Under the New EU Product Liability Directive

1. Expanded Definition of a Product: Software and Digital Manufacturing Files

Under the new Directive, the definition of a product now includes:

  • Software
  • Digital manufacturing files
  • Electricity
  • Physical movable products

This aligns liability law with how harm can actually occur today.

For example, a defective digital manufacturing file such as a paid CAD file used for 3D printing can itself be treated as a product if it causes a printed component to fail and injure someone.

Similarly, software that controls safety functions is now clearly within scope. If a bug or unsafe update affects braking, temperature control, charging behaviour, or similar functions, liability rules apply to that software.

The Directive does draw limits. Not all information is automatically a product. But paid digital manufacturing files and software that influence safety are clearly covered.

2. What Counts as Damage Under EU Product Liability Law?

The Directive is explicit about what counts as damage. It includes:

  • Death or personal injury, including medically recognised psychological harm
  • Property damage, with certain exclusions
  • Destruction or corruption of data that is not used for professional purposes

For connected consumer products, this is a meaningful expansion. Losing personal data due to a product defect is now clearly recognised as a form of damage under product liability law.

3. Court Ordered Disclosure of Evidence: What Businesses Need to Know

One of the most significant changes is the introduction of a structured right to request disclosure of relevant evidence from the opposing party.

Courts can order businesses to disclose technical documentation where this is proportionate and subject to protections for confidential information and trade secrets.

This is designed for situations where a claimant can plausibly argue a defect but cannot access the technical evidence without court support.

For businesses, this makes documentation discipline critical. Incomplete test reports, missing risk assessments, unclear design decisions, poor software update records, or fragmented supplier documentation can quickly become a serious problem once disclosure is ordered.

4. Burden of Proof and Legal Presumptions Under the New Rules

The basic rule does not change. The claimant must still prove that the product was defective, that damage occurred, and that the defect caused the damage.

However, the Directive introduces rebuttable presumptions in certain situations, including:

  • When a business fails to disclose evidence ordered by a court

  • When the claimant shows non-compliance with mandatory safety requirements intended to prevent the damage

  • When damage results from an obvious malfunction under normal, foreseeable use

  • When scientific or technical complexity makes proof excessively difficult, provided the claimant shows that defect or causation is likely

These presumptions do not mean automatic liability, but they do shift how disputes play out in practice. Clear compliance evidence, traceability, and credible safety documentation become much more important.

5. EU Product Liability Time Limits: Limitation Periods and Long Stop Rules

The Directive requires:

  • A three year limitation period from when the injured person knew or should reasonably have known about the damage, the defect, and the identity of the responsible operator

  • A long stop period of ten years from when the product was placed on the market or put into service, or from the date of substantial modification

  • An extension up to 25 years in cases of latent personal injury

For many businesses, this makes record retention and documentation strategy a board level issue, especially for products with long expected lifetimes.

6. Manufacturer Control and Post Market Software Updates

The Directive pays close attention to products whose safety depends on updates, configuration changes, or connected services.

It discusses manufacturer control in a way that includes situations where the manufacturer supplies updates, authorises third party updates, or retains the ability to influence safety through software.

The message is clear. If you operate a product ecosystem where safety can change after sale, that ongoing control forms part of your liability exposure.

Real World Examples of Product Liability Risk Under the New Directive

These examples are illustrative but closely reflect how the Directive is written.

Example 1: Smart home appliance with a connected service

A smart fridge relies on a connected temperature control service. After a software update, the fridge runs warmer than displayed, leading to food spoilage and potentially illness.

The Directive treats certain integrated or interconnected digital services as components where they fall within the manufacturer’s control. Software updates are directly linked to the question of control and liability.

Example 2: Consumer device that corrupts personal data

A home security camera firmware bug corrupts locally stored footage and user settings.

Destruction or corruption of personal data used for non professional purposes can fall within the definition of damage under the Directive.

Example 3: 3D printed part produced from a paid design file

A paid digital manufacturing file produces a part with incorrect tolerances, causing it to fail during normal use.

Digital manufacturing files are expressly treated as products under the Directive.

How the EU Product Liability Directive Links to Product Safety Compliance and GPSR

Product liability law and product safety law are distinct legal regimes, but in practice they are closely connected. Under the new Directive, a product may be presumed defective if a claimant can demonstrate non-compliance with mandatory safety requirements designed to prevent the relevant risk.

One of the key frameworks for those requirements is the EU General Product Safety Regulation (GPSR), which has been in force since 13 December 2024 and establishes horizontal safety obligations for consumer non-food products across the EU.

For businesses, the combined message is clear. Failures in safety compliance already expose companies to market surveillance action and enforcement risk. From late 2026 onward, those same failures may also lower the threshold for product liability claims, depending on the facts and national implementation.

EU vs UK Product Liability Rules: What Exporting Businesses Should Know

EU vs UK- what UK businesses should understand (especially if exporting)

Selling into the EU

If you place products on the EU market, you need to plan for the new liability rules applying to products placed on the market after 9 December 2026. How individual Member States transpose the Directive will also matter in practice.

Selling from the UK into the EU

The UK’s strict product liability regime currently sits in Part I of the Consumer Protection Act 1987. The EU’s new Directive does not automatically become UK law.

However, UK businesses still need to pay close attention because:

  • EU liability exposure applies regardless of where your business is based

  • Documentation, technical files, and compliance positioning often need to work across both EU and UK distribution

It is also worth noting that the UK Law Commission has been reviewing product liability law, which suggests future reform discussions on the UK side as well.

How to Prepare for the EU Product Liability Directive: 2026 Readiness Checklist

1. Identify software influenced products

Map products where safety depends on:

  • Firmware or software behaviour
  • Charging and power management logic
  • Connected services
  • App control or over the air updates

Software change management should sit firmly within product safety governance, not just engineering workflows.

2. Build an evidence first mindset

Courts can order disclosure of relevant evidence. Businesses should assume this is a real possibility in complex cases.

That means maintaining:

  • Technical documentation and design history
  • Risk assessments and safety rationales
  • Supplier specifications and controlled change records
  • Software update logs and release notes
  • Complaint handling, incident reports, and corrective action records

3. Understand who could be pulled into liability

You do not need to be the factory to face liability exposure. Own branding, placing products on the market, or exercising control over design or updates can all be relevant.

The Directive contains detailed definitions of manufacturers and economic operators, and national implementation will shape how these apply in practice.

4. Plan for long term record retention

The combination of three year limitation periods, ten year long stops, and possible 25 year exposure for latent injury should directly inform document retention policies and supplier contracts.

How Euverify can Help

Most product liability problems do not start in court. They start much earlier with missing technical files, unclear product classification, incomplete risk assessments, and inconsistent change records.

Euverify supports businesses selling into the EU by helping them organise and maintain technical documentation, risk assessments, and compliance evidence in a structured and defensible way. This is especially valuable for software influenced products, connected devices, and businesses scaling across multiple markets where consistency matters.

Preparing now makes the 2026 shift far less disruptive and puts you in a stronger position if questions arise later.

Digital Products
February 10, 2026

Share this article

Related Resources

Appoint Your Cosmetics Responsible Person Today

Ensure your cosmetic products remain fully compliant in the EU/UK market.

Fill in your details below and our compliance team will contact you with your personalised next steps.

Appoint Your GDPR Representative Today

Plans start from £33/month

🎟️ Exclusive 25% OFF for Websummit Visitors

Fill in your details below to receive your special coupon code: