On 8 October 2026 the German Bundestag adopted its implementation law for the revised EU Product Liability Directive. Clifford Chance's 14 October analysis confirms the vote and says the legislative process was still continuing. This article does not address the Bundesrat step or the date the law enters into force, because neither is confirmed in the sources reviewed. What is confirmed is that the law widens the range of potential defendants to "software manufacturers, importers, suppliers, fulfilment service providers and online platform operators (Sections 10 to 13 PLA)".
The strongest case for the reform
The case for the law is strong. A shopper who is injured by a defective charger or a faulty connected device rarely deals with the manufacturer. The manufacturer may be a shell company outside the EU, and the buyer may have no practical way to find it. If the injured person can reach someone inside the Union, compensation becomes realistic. Digital products are also a real gap. The old 1989 regime was written for physical goods, and the Directive's definition of "product" now expressly "includes electricity, digital manufacturing files, raw materials and software". Consumers should not lose protection because a defect arrives through a software update rather than a screw.
What the Directive actually does to platforms
The liability route for platforms is narrower than the headline suggests. Under Article 8 of Directive (EU) 2024/2853, a fulfilment service provider is liable where there is no importer established within the Union or authorised representative. Distributors are liable only where an economic operator cannot be identified and the injured person's request goes unanswered for a month. Article 8(4) extends that fallback to a provider of an online platform that allows consumers to conclude distance contracts with traders and is not itself an economic operator. It does so only where the conditions in Article 6(3) of the Digital Services Act are met. Those conditions describe a platform that presents an item so that an average consumer would believe the platform itself, or someone under its authority, supplies it.
That is the key design choice. Brussels did not simply make every marketplace a guarantor of everything sold on it. The platform fallback is tied to the DSA's existing consumer-law carve-out from the hosting exemption. Software gets one explicit limit as well. Under Article 2(2), free and open-source software developed or supplied outside the course of a commercial activity is excluded.
Where the risk lies
The liability is strict, and it works through a separate legal route. A marketplace that has complied with its DSA notice-and-action duties and kept its hosting safe harbour can still face a product-liability claim if it fits one of the defendant categories. That is why the German list matters. The Clifford Chance summary groups importers, suppliers, fulfilment service providers and platform operators in a single range of sections. Whether the German text tracks the Directive's narrow conditions, or reads more broadly in practice, will decide how much exposure marketplaces actually carry. The Bundestag's printed paper on the bill is the place to check, and courts will ultimately decide.
Two uncertainties deserve attention.
- The "presents as its own" test is fact-heavy. Whether an average consumer believes the platform is the supplier depends on interface design, branding and fulfilment labels. Courts will be drawing that line case by case, and predictable outcomes are what small marketplaces need most.
- The fallback ladder creates compliance incentives. A platform that can name the economic operator, and respond inside a month, stays outside the claim. That favours transparent trader onboarding, which is a proportionate and workable duty. It also raises costs for marketplaces that host many small overseas sellers, who may be pushed off the platform instead of being vetted.
Evidence-based concerns about over-correction
Product liability is meant to put losses on the party best placed to prevent defects. A hosting platform rarely designs, tests or assembles a product, so strict liability aimed at it works mainly as an insurance mechanism. That can be legitimate when the actual producer is unreachable. It becomes distortive if it is applied to platforms that are really neutral venues. The result would be over-removal of lawful listings, reduced access for small sellers, and higher consumer prices. Those are the same chilling effects that critics of broad intermediary liability have long documented, and they sit alongside the open-internet commitments in the DSA.
The software provisions raise a separate innovation question. Treating software as a product is defensible. But the exclusion for non-commercial open-source work is only as good as its boundaries, and Germany's implementation should keep those boundaries clear. Open-source maintainers, hobbyist developers and early-stage firms cannot absorb litigation-style uncertainty the way large manufacturers can.
The committee amendments Clifford Chance describes also shape the practical risk. Courts may now require third parties, not only defendants, to disclose evidence under Section 19(1), and Section 19(4) adds a confidentiality procedure to protect sensitive information. Disclosure rules lower the claimant's burden. They also create real compliance work for any company, including platforms, that holds relevant data.
What policymakers and platforms should do
- Keep the platform route tied to the DSA test. Any administrative guidance or court practice should preserve the Article 6(3) conditions rather than treat all marketplaces as presumptive defendants.
- Publish clear guidance on the "economic operator" request process. A one-month response window is workable if platforms know what a valid request looks like.
- Protect non-commercial open source in practice. Legal certainty on the commercial-activity line is cheaper than litigation over it.
- Watch the evidence. If marketplace seller counts, listing removals or prices shift after the law applies, lawmakers should review the scope and not assume the design was right.
The Directive applies to products placed on the market after 8 December 2026. The German law's real effect will depend on how closely it follows the Directive's narrow platform fallback. A faithful implementation protects injured consumers and leaves the DSA's balance intact. A looser one would turn a sensible safety net into a general liability for hosting.