The EU Product Liability Directive will take effect Dec 2026. Software, firmware, applications, AI systems, and will now be subject to the same strict liability regime as traditional physical goods. Cybersecurity vulnerabilities will be considered product defects. Analysis by Reed Smith LLP: 
Lexology
The new EU Product Liability Directive: Implications for software, digital products, and cybersecurity
The EU has adopted Directive 2024/2853 (the “Product Liability Directive” or “PLD”), which will take effect on December 9, 2026. This new D...