Who Can Be Liable for a Defective Product?

EU Directive-level explanationUpdated 16 October 2026By ProductLiability.help editorial desk

Begin with roles, then establish liability

A defective product can involve several potentially responsible businesses, including its manufacturer, a component manufacturer and specified businesses bringing a product from outside the EU into the Union market. Distributors and certain online platforms have conditional identification duties. Their names in a supply chain do not, by themselves, establish liability. Each route has its own factual conditions, and a compensation claim still requires the relevant product, defect, covered damage and causal connection.

Directive (EU) 2024/2853 provides the EU framework discussed here. Its corrected scope concerns products placed on the market or put into service after 8 December 2026. The national transposition deadline is 9 December 2026. Those dates concern different questions, and national implementing legislation and procedure require separate examination. An accident occurring after the deadline does not automatically bring an older product within the new framework. Record the product's market history before choosing the responsibility rules.

Identify the product manufacturer

The manufacturer is central to Article 8. Article 4 includes businesses that develop, manufacture or produce a product, arrange its design or manufacture, present themselves as its manufacturer through their branding, or produce it for their own use. The legal manufacturer therefore need not be the factory physically assembling an item. A software developer and a business commissioning a branded appliance may each require investigation for the product they supply.

Start with the exact legal entities behind packaging, manuals, software releases and invoices. A trading name may cover several companies with different functions. Match each entity to the affected model, version and relevant period. The explanation of manufacturer liability develops these definitions and their evidential consequences. A role should be recorded as confirmed, plausible or unresolved, with the document supporting that assessment. Group membership or a common website is not a substitute for the legal identity of the relevant business.

Separate the component chain

Article 8(1)(b) addresses a manufacturer of a defective component where it was integrated into or interconnected with a product within manufacturer control and caused that product to be defective. The finished product manufacturer also has responsibility for damage caused by a defective component integrated or interconnected within its control. These rules make the integration relationship important. Simply finding a component inside the damaged item does not establish the component manufacturer's liability.

Components may include hardware, software, raw materials and related services. Retain the component specification, supplied version, integration instructions and evidence of authorisation or consent. A device can fail because its component is defective, because an otherwise adequate component was incorporated into an unsafe design, or for another reason. Those explanations should remain separate until technical evidence supports a conclusion. The comparison of component and final-product manufacturer roles distinguishes the two liability routes. The manufacturer-control definition also reaches retained ability to supply software updates or upgrades, so the original sale is not always the end of the relevant relationship.

Check the route from outside the EU

Where the product or component manufacturer is established outside the Union, Article 8(1)(c) identifies the importer and the manufacturer's authorised representative without removing the manufacturer's own potential liability. Where there is no importer established within the Union or authorised representative, it identifies the fulfilment service provider. The fulfilment route is conditional rather than an equal first option in every international sale.

An importer places a product from a third country on the Union market. A delivery company does not become an importer merely because it crosses a border. The importer analysis therefore starts with market placement and the actual commercial chain. An authorised representative requires Union establishment and a written manufacturer mandate for specified tasks. Identify the product covered and the mandate dates. A warehouse or dispatch address does not prove either role. Keep separate records for the product manufacturer and any relevant component manufacturer.

Understand the fulfilment fallback

Article 4 defines a fulfilment service provider through commercial provision of at least two specified services: warehousing, packaging, addressing and dispatching, without owning the product. Defined postal and parcel delivery services and other postal or freight transport services are excluded. The description on a logistics company's website is less important than the actual arrangement for the product under investigation.

The fulfilment service provider route requires both the statutory service definition and the Article 8 conditions concerning the outside-EU manufacturer and absence of the relevant EU actors. Store custody records, the services performed and ownership terms. One company may perform different functions for different clients. A finding about one consignment should not silently become a finding about all products handled at the same premises. Equally, an uncertain importer identity should be recorded as a research gap rather than confidently treated as proof that no importer exists.

Distributors and marketplace presentation

A distributor is a supply-chain business making a product available on the market other than its manufacturer or importer. Under Article 8(3), the distributor route arises where an EU-established operator from Article 8(1) cannot be identified, the injured person requests identification of such an operator or the distributor's own supplying distributor, and the distributor fails to identify either within one month of receiving that request. Proof of receipt and the actual response matter.

Article 8(4) extends that mechanism to certain platforms allowing consumers to conclude distance contracts with traders, where the platform is not itself an economic operator and the Digital Services Act Article 6(3) presentation conditions are fulfilled. Hosting a listing alone is insufficient. Preserve the specific transaction and its presentation, including seller identity and checkout wording. The distributor identification mechanism explains the request route; a platform acting as manufacturer or importer must first be assessed in that separate role.

Allow for later substantial modification

A person who substantially modifies a product outside manufacturer control and then makes it available on the market or puts it into service is treated as a manufacturer under Article 8(2). Ordinary maintenance and every software configuration change do not automatically meet the substantial-modification definition. Article 4 first refers to relevant product-safety rules and supplies a fallback test where those rules set no threshold.

Map who changed the product, what was changed, whether the change was within manufacturer control and how the changed product returned to use or supply. Preserve the original and modified configurations rather than overwriting the earlier record. A later modifier can be relevant alongside an original manufacturer, but the particular defect and affected part still matter. Article 11 includes a specific exemption concerning damage related to a part unaffected by the modification. Modification evidence should therefore identify boundaries as well as changes.

Several liable businesses and internal allocation

Article 12 provides joint and several liability where two or more economic operators are liable for the same damage under the Directive. It does not make every mapped supplier jointly liable. Establish each business's legal route and the same-damage relationship before considering the effect of that rule. Avoid adding unrelated losses together merely because they arose during the same incident.

After one operator compensates the injured person, Article 14 concerns remedies against other operators liable under Article 8, in accordance with national law. Supplier agreements and insurance may matter to internal allocation, but Article 15 prevents contractual exclusion or limitation of Directive liability in relation to the injured person. Article 12(2) contains a narrow software recourse exception requiring both qualifying enterprise size and a contractual waiver. The joint and several liability explanation distinguishes compensation rights from internal allocation.

Build an evidence-led map

Use one record per legal entity, attaching product identifiers, establishment evidence, role documents and relevant dates. Add links between entities for supply, manufacturing, appointment and authorised integration. A map that marks uncertainty is more useful than a polished diagram that guesses missing relationships. Preserve dated copies of records because websites, marketplace listings and representatives can change after an incident.

Keep technical causation work alongside the role map. Article 11 exemptions, Article 13 rules on third-party conduct and injured-person fault, and national procedure may change the assessment. No identification method proves a safety defect merely by finding a business name. The practical objective is a traceable explanation of why each entity might be relevant, what remains unresolved and which evidence would answer that question.

Records that help the review

Use the following as a practical starting point. Select and preserve records appropriate to the product, incident and applicable procedure.

Legal entity, establishment and statutory role for each participant
Product and component identifiers with integration relationships
Importer, mandate and fulfilment evidence where relevant
Defect, damage and causal evidence linked to each potential actor

A role map is a research aid, not a declaration that the mapped businesses are jointly liable.

Primary sources and legal scope

This page explains the EU Directive framework. Check national implementing law, the corrected temporal scope and relevant procedure before applying it to a case.

Source register: corrected scope verified 16 October 2026. Article references identify the legal basis. No qualified legal review or national implementation status is claimed.