Choose a role and what you supply, then click Check my position.
Result
What it does, and what it leaves to you
- Covers: Directive (EU) 2024/2853 for manufacturers, component makers, modifiers, importers, authorised representatives, fulfilment providers, distributors and platforms; hardware, software, AI and digital manufacturing files.
- Gives: scope, liability position in the supply chain, harm covered, time limits, update duties and a preparation list.
- Not decided: whether a particular product is actually defective, national transposition details, the Cyber Resilience Act and GPSR duties themselves, insurance terms, and anything that changed after this page was written.
Related regimes: the GPSR product safety checker and the Cyber Resilience Act evidence desk.
Common questions
Does the new EU Product Liability Directive cover software and AI?
Yes. Directive (EU) 2024/2853 expressly treats software, including apps, firmware and AI systems, and digital manufacturing files as products, whether installed, embedded or delivered through the cloud. It applies to products placed on the market from 9 December 2026.
Who is liable if my product is defective?
The manufacturer first. Then, in turn, a component maker (jointly), an importer, an authorised representative, a fulfilment provider, and a distributor or online platform in the cases the Directive lists, so that an injured person always has an EU business to claim against.
Is open-source software covered?
Free and open-source software developed or supplied outside the course of a commercial activity is excluded. If it is supplied commercially, or built into a product someone sells, the business that does so carries the liability.
What damage can be claimed and is there a cap?
Death, personal injury including recognised psychological harm, damage to property not used exclusively for professional purposes, and destruction or corruption of data not used for professional purposes. The old EUR 500 threshold and the overall cap are gone.
How long can claims be brought?
Three years from when the claimant knew or should have known, with a 10-year long-stop from placing the product on the market, extended to 25 years for latent personal injury.
Is my data uploaded anywhere?
No. Everything is calculated in your browser and nothing is sent; a test in the code asserts there are no network calls.