The European Union’s overhauled liability regime for software could leave shipowners footing massive bills while shielding the very vendors who wrote the faulty code. Starting December 9, the revised Product Liability Directive reclassifies software as a product, meaning manufacturers of navigation, engine-control, or autonomy systems face strict liability for defects. No proof of negligence required.
Yet the law’s protections target people, not companies. Crew members and passengers can pursue claims for death, injury, psychological harm, and damage to personal property. A trading vessel, however, counts as business property, so its owner cannot recover hull damage, lost hire, or salvage costs under the directive.
Consider a scenario: a defective software update grounds a ship. The owner’s financial losses remain uncovered by the EU rule, while injured seafarers need no contract with the software vendor to demand compensation. Courts can compel manufacturers to hand over evidence. When technical complexity makes proving fault difficult, judges may presume defect and causation once claimants show both are plausible.
The old 1985 directive let member states cap a producer’s total liability for identical defective items. The new version eliminates that ceiling entirely. Article 15 bars any contractual or national law limit on compensation owed to an injured person. Meanwhile, shipowners can still invoke the 1976 Limitation Convention or Athens regime for passenger claims, but software vendors enjoy no such protection. After a major casualty, the company farthest from the ship may face the greatest exposure.
Timing matters. The directive only covers products placed on the market or put into service after December 9, 2026. Most existing onboard software falls outside its scope. But software rarely stays frozen. Anyone who substantially modifies a product outside the manufacturer’s control and then releases it becomes the manufacturer. Vendors also remain liable for defects in updates they control or safety patches they fail to supply. Cybersecurity flaws can render a product defective too. The ten-year claim limit, extended to 25 years for latent injuries, restarts after substantial modification.
As a result, the date and content of the last major update will eventually matter more than when the system first came aboard.
Owners and managers should scrutinize vendor contracts now. Suppliers facing uncapped liability will push indemnity and recourse clauses back onto owners. P&I clubs typically cover crew injury claims first, and whoever inherits an injured person’s rights, including insurers, can bring the claim against the vendor. That recovery route could bypass contracts entirely, opening doors no commercial agreement would have allowed.
Vendors outside the EU face liability through importers or authorized representatives. Product liability insurance, update governance, and version records will outweigh limitation clauses in owner contracts, which cannot bind injured parties. The contracts deciding who ultimately bears these losses are being negotiated right now.
