Revised Product Liability Directive

The Revised Product Liability Directive (EU) expands the definition of 'defective product' to include digital products and services, including AI systems and software. According to Article 6, a product is defective if it does not provide the safety or functionality a consumer can reasonably expect. This directive works in tandem with the EU AI Act and GDPR to create a comprehensive digital safety framework. In the context of enterprise risk management (ERM), it shifts cybersecurity from a technical issue to a legal liability issue, requiring companies to be able to prove that their AI or digital products were not defective at the time of circulation. This is a critical consideration for any company exporting digital products to the EU market.

Implementation typically follows three stages: First, the 'Design Stage' involves AI risk assessment based on ISO 42001 and the EU AI Act to identify potential digital defects. Second, 'Supply Chain Management' requires companies to vet third-party AI components or software libraries for compliance, as per Article 10. Third, 'Incident Response' must be integrated with GDPR Article 33 notification requirements to manage liability in case of a breach. For example, a Taiwan-based company implementing these steps can reduce product liability claims by up to 40% through documented risk-adjusted design processes. The use of ISO 42001 as a foundational framework allows companies to be closely aligned with the EU's expectations for AI governance and risk-adjusted development.

Taiwan enterprises face three primary challenges: lack of AI risk assessment expertise, difficulty in managing global digital supply chains, and the need to reconcile Taiwan's Privacy Act with the EU's GDPR. To overcome these, companies should: 1) Invest in ISO 42001 certification to standardize AI risk management; 2) Include AI safety and liability clauses in all software and component procurement contracts; 3) Establish a cross-functional compliance team comprising legal, technical, and risk management experts. The priority should be to complete a digital product risk-adjusted inventory within the first 60 days of implementation, followed by the establishment of a continuous monitoring system to track AI performance and security updates, ensuring ongoing compliance as the EU regulatory landscape evolves.

Winners Consulting Services Co., Ltd. specializes in Revised Product Liability Directive for Taiwan enterprises, delivering compliant management systems within 90 days. Free consultation: https://winners.com.tw/contact