Product Liability Directive (Revised)
The revised PLD modernises liability rules for defective products, extending coverage to software, AI systems, and digital services. Shifts some burden of proof to manufacturers for complex cases.
What does PLD require and when does it apply?
PLD applies to Software Publishers and AI System Providers organisations across all EU member states. The key deadline is December 2026 (transposition). Non-compliance carries a maximum penalty of No cap — civil liability for all damage caused. Core obligations include ensure products are free from safety defects and disclose evidence in litigation (new duty).
- Ensure products are free from safety defects
- Disclose evidence in litigation (new duty)
- Adapt documentation for digital products
- Apply to software updates and AI decisions
- Provide adequate product instructions
| Deadline | December 2026 (transposition) |
| Max fine | No cap — civil liability for all damage caused |
| Primary sectors | Software Publishers, AI System Providers, IoT Manufacturers |
PLD: No cap — civil liability for all damage caused max fine
PLD applies to Software Publishers and AI System Providers organisations in all EU member states. Key deadline: December 2026 (transposition).
Source: Official Journal of the European Union — Product Liability Directive (Revised)
December 2026 (transposition)
No cap — civil liability for all damage caused
Software Publishers, AI System Providers, IoT Manufacturers
The highest penalty for non-compliance with PLD in the EU.
EU Official Journal
How do I comply with PLD?
- Ensure products are free from safety defects
- Disclose evidence in litigation (new duty)
- Adapt documentation for digital products
- Apply to software updates and AI decisions
- Provide adequate product instructions
Does PLD apply to your business?
Find out in 2 minutes with our free regulation checker.
Check now — freePLD by Country
Related Regulations
AI Act
The EU AI Act classifies AI systems by risk level and imposes obligations on providers and deployers. High-risk systems face mandatory conformity assessments, documentation, and human oversight requirements.
GDPR
GDPR governs the processing of personal data of EU residents. It requires lawful basis for processing, data subject rights, breach notification, and accountability measures.
NIS2
NIS2 expands cybersecurity obligations to essential and important entities across critical sectors. It mandates risk management, incident reporting, and supply chain security.
Next step — classify
Classify your AI systems
Use the free regulation checker to find out exactly which PLD obligations apply to your business in 2 minutes.
For informational purposes only. This is not legal advice — consult qualified legal counsel.
Last updated: · Editorial policy