I'm amazed that there has been zero coverage of this:
EU's new Product Liability Directive got voted through last thursday.
No later than two years from now, software, stand-alone, cloud or embedded are subject to "no-fault liability" (ie: doesn't matter how or why, only that it is defective.)
Here's the directive:
https://data.consilium.europa.eu/doc/document/PE-7-2024-INIT/en/pdf
Gentlemen, start your panic…
PS: Yes, there is a FOSS exemption, but only "outside commercial activity". (Ie: The guy in Nebraska but not RedHat)
And yes, I'm they guy who has been calling for product liability on software for more than a decade, so even though EU didn't adopt my suggestion, I'm cutting notch in my keyboard for winning this one.
@bsdphk do you think it will have the impact you've been hoping for?
Time will tell.
It cannot possibly make things and worse, and it will end the "We're $BigCorp, we don't care" reign of terror, which is the root cause of the ransomware epidemic.
@bsdphk fingers crossed.
@bsdphk good article for the most part, though I have a quibble with the comment on hot coffee. If it is a reference to the case where McDonald's was sued for its coffee being too hot, that suit has better grounding than the common portrayal implies. The plaintiff in the case suffered third degree burns and needed surgery due to the temperature of the coffee. She wanted McDonald's to cover her medical costs, but they wouldn't settle so the case went to court. https://en.m.wikipedia.org/wiki/Liebeck_v._McDonald%27s_Restaurants