EU PLD
EU Product Liability Directive 2024/2853
Modernized product liability framework explicitly covering AI systems and software as products. Shifts burden of proof in complex AI cases, allows disclosure orders for technical documentation, and addresses liability for AI-caused harm including through software updates.
Jurisdiction
European Union
Enacted
Oct 23, 2024
Effective
Dec 9, 2026
Enforcement
National courts in EU member states
Signed October 23, 2024; published in Official Journal November 18, 2024; entered into force December 8, 2024. Member states must transpose by December 9, 2026.
EUR-Lex Official JournalWhy It Matters
Creates clear civil liability pathway for AI-caused harm in EU. Companies can be held liable for AI defects including failure to update. Important for AI product risk management.
Recent Developments
Entered into force December 2024. Member states working on transposition. Complements EU AI Act by addressing civil liability for AI-caused harm.
Who Must Comply
- Manufacturers of AI systems
- Software developers
- Importers of AI products into EU
- Authorized representatives of non-EU manufacturers
Obligations fall on:
Safety Provisions
- AI systems explicitly covered as products
- Defects include failure to provide updates affecting safety
- Presumption of defectiveness when defendant fails to disclose evidence
- Presumption of causation in technically complex cases
- Disclosure orders for technical documentation
Exemptions
Development Risk Defense
No liability if defect could not have been discovered given state of scientific and technical knowledge at time of placing on market
- • Defect not discoverable with state of art at time of release
Compliance & Enforcement
Key Dates
Dec 8, 2024
Directive enters into force
Dec 9, 2026
Member state transposition deadline
National laws applying the directive take effect
Penalties
Civil liability for damages caused by defective AI products. No maximum limit on damages.
Private Right of Action
Individuals can sue directly without waiting for regulatory action.
View on map
European Union
Focus Areas
Cite This
APA
European Union. (2024). EU Product Liability Directive 2024/2853.
Related Regulations
EU CRA
Mandatory cybersecurity requirements for all products with digital elements placed on the EU market, including AI software. Requires security by design, vulnerability handling, incident reporting to ENISA, software bills of materials, and CE marking for market access.
EU AI Content Transparency Code
Voluntary code of practice under the EU AI Act that sets out how providers of generative AI systems can meet the Article 50(2) duty to mark AI-generated or manipulated content in a machine-readable, detectable way, and how deployers can meet the Article 50(4) duty to label deepfakes and AI-generated text published on matters of public interest. The Commission and the AI Board have assessed it as an adequate means of demonstrating compliance.
HI Deepfake Civil Remedy Act
Creates a civil cause of action allowing individuals to sue over realistic digital imitations (deepfakes) depicting them without consent, with statutory damages available.
NO FAKES Act
Creates federal intellectual property protection for individuals' voice and visual likeness against unauthorized AI-generated digital replicas. Holds companies liable for producing, hosting, or sharing non-consensual digital replicas.
Italy D.Lgs. 160/2026
First of two legislative decrees implementing Italy's AI law (Law 132/2025) and adapting national law to the EU AI Act. Title I sets the first organic rules for police use of AI systems on a human-oversight basis, including exceptional, time-limited and judicially authorised real-time biometric identification and a ban on biometric databases built by untargeted mass scraping of the web. Title II introduces Penal Code Article 437-bis, punishing failure to adopt security measures in high-risk AI systems and their unlawful alteration, and gives claimants procedural tools for damages caused by AI systems: access to the system's technical documentation, a presumption of causal link, an alternative forum near the claimant's residence and direct action against the insurer.
DE Digital Violence Bill (GgdG)
German government bill creating a standalone Digital Violence Act (GgdG) that gives victims court-ordered disclosure of anonymous offenders' identities, data preservation, content removal and temporary account suspension against platforms, and adding Criminal Code offences for sexualised deepfakes, reputation-damaging deepfakes, identity misuse and covert tracking.
Last updated January 22, 2026. Verify against primary sources before relying on this information.