#productliabilitydirective — Public Fediverse posts

True, and the #ProductLiabilityDirective has been revised to make explicit that it covers software, whether or not it's embedded in such products.

#podcast @nolimitsecu
Episode #494 Panorama Réglementaire

#NIS2 #CyberResilienceAct #DORA #CyberSecurityAct #ProductLiabilityDirective etc etc

Avec Rayna Stamboliyska et Marc-Antoine Ledieu

https://www.nolimitsecu.fr/panorama-reglementaire/

#podcast @nolimitsecu
Episode #494 Panorama Réglementaire

#NIS2 #CyberResilienceAct #DORA #CyberSecurityAct #ProductLiabilityDirective etc etc

Avec Rayna Stamboliyska et Marc-Antoine Ledieu

https://www.nolimitsecu.fr/panorama-reglementaire/

Updated #ProductLiabilityDirective published in the Official Journal of the EU: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=OJ:L_202402853 to be transposed into national law by member states by Dec 9, 2026.
See recital 13 and 14 for the #opensource bits shaping the scope.

Updated #ProductLiabilityDirective published in the Official Journal of the EU: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=OJ:L_202402853 to be transposed into national law by member states by Dec 9, 2026.
See recital 13 and 14 for the #opensource bits shaping the scope.

Coming to FOSDEM 2025; the second edition of the EU-Policy DevRoom has been approved, and once again in collaboration with EU policy officials. Call for Papers is open! please share the news, see the CFP for details. #opensource #floss #techpolicy #CyberResilienceAct #AIAct #ProductLiabilityDirective #DataAct #InteroperableEurope #DigitalMarkets #Chips #OSPOs #PublicProjects https://softwarefreedom.net/fosdem-25-cfp

Coming to FOSDEM 2025; the second edition of the EU-Policy DevRoom has been approved, and once again in collaboration with EU policy officials. Call for Papers is open! please share the news, see the CFP for details. #opensource #floss #techpolicy #CyberResilienceAct #AIAct #ProductLiabilityDirective #DataAct #InteroperableEurope #DigitalMarkets #Chips #OSPOs #PublicProjects https://softwarefreedom.net/fosdem-25-cfp

@bsdphk @bert_hubert

For people new to the topic, I recommend watching https://archive.fosdem.org/2024/schedule/event/fosdem-2024-3683-the-regulators-are-coming-one-year-on/ from 25:20 onwards and https://archive.fosdem.org/2024/schedule/event/fosdem-2024-3697-pld-when-software-causes-harm-who-pays-and-why-/

I know you understand strict liability, but I’ve seen many who do not (myself included). #FOSS #ProductLiabilityDirective

@bsdphk @bert_hubert

For people new to the topic, I recommend watching https://archive.fosdem.org/2024/schedule/event/fosdem-2024-3683-the-regulators-are-coming-one-year-on/ from 25:20 onwards and https://archive.fosdem.org/2024/schedule/event/fosdem-2024-3697-pld-when-software-causes-harm-who-pays-and-why-/

I know you understand strict liability, but I’ve seen many who do not (myself included). #FOSS #ProductLiabilityDirective

And Council of the EU adoption of the #ProductLiabilityDirective is here too:
https://www.consilium.europa.eu/en/press/press-releases/2024/10/10/eu-brings-product-liability-rules-in-line-with-digital-age-and-circular-economy/
Different timeline though, because this is a directive, which needs to be turned into national law by member states. They have two years to do that.

And Council of the EU adoption of the #ProductLiabilityDirective is here too:
https://www.consilium.europa.eu/en/press/press-releases/2024/10/10/eu-brings-product-liability-rules-in-line-with-digital-age-and-circular-economy/
Different timeline though, because this is a directive, which needs to be turned into national law by member states. They have two years to do that.

Apologies: it seems that the actual vote is this afternoon, between 12:30-13:30 Strasbourg time.
I also see the New #ProductLiabilityDirective on the list!

https://www.europarl.europa.eu/news/en/agenda/weekly-agenda

#CyberResilienceAct

Apologies: it seems that the actual vote is this afternoon, between 12:30-13:30 Strasbourg time.
I also see the New #ProductLiabilityDirective on the list!

https://www.europarl.europa.eu/news/en/agenda/weekly-agenda

#CyberResilienceAct

One takeaway: If a vendor uses your #foss and the product damages people, FOSS developers are not liable, but the vendor, as far as I understand it. Also, contracts are null if they want to limit liability #fosdem2024 #productliabilitydirective

Next topic: product liability directive. What happens if your "product" is not safe and secure? This directive is supposed to cover liabilities if software products produce damage. What is the #scope, what is a #product what is meant by #damage and how long is liability? Slides.
#productliabilitydirective #fosdem2024

The consolidated text on the #ProductLiabilityDirective is now publicly available:

https://data.consilium.europa.eu/doc/document/ST-5809-2024-INIT/en/pdf

The consolidated text on the #ProductLiabilityDirective is now publicly available:

https://data.consilium.europa.eu/doc/document/ST-5809-2024-INIT/en/pdf

Come experiment with us at #FOSDEM: we’re bringing policy makers and developers together in an EU policy devroom to discuss impending legislation with relevance to #foss. There are four two-hour blocks you can attend, on Sunday Feb 4th.

First in the morning: discuss #CyberResilienceAct and #ProductLiabilityDirective implementation with their authors and join a workshop. Some lightning talks will get us started.

And there’s more! Schedule available at:
https://fosdem.org/2024/schedule/track/eu-policy/

Come experiment with us at #FOSDEM: we’re bringing policy makers and developers together in an EU policy devroom to discuss impending legislation with relevance to #foss. There are four two-hour blocks you can attend, on Sunday Feb 4th.

First in the morning: discuss #CyberResilienceAct and #ProductLiabilityDirective implementation with their authors and join a workshop. Some lightning talks will get us started.

And there’s more! Schedule available at:
https://fosdem.org/2024/schedule/track/eu-policy/

And there is now a deal on an updated #ProductLiabilityDirective too. On #OpenSource press releases say: “Not applicable to free-of-charge open-source software” (parliament) and “Free and open-source software that is developed or supplied outside the course of a commercial activity is excluded from the scope of the directive.” (council)

https://www.europarl.europa.eu/news/en/press-room/20231205IPR15690/deal-to-better-protect-consumers-from-damages-caused-by-defective-products

https://www.consilium.europa.eu/en/press/press-releases/2023/12/14/agreement-between-the-council-and-the-european-parliament-makes-eu-liability-rules-fit-for-the-digital-age-and-circular-economy/

And there is now a deal on an updated #ProductLiabilityDirective too. On #OpenSource press releases say: “Not applicable to free-of-charge open-source software” (parliament) and “Free and open-source software that is developed or supplied outside the course of a commercial activity is excluded from the scope of the directive.” (council)

https://www.europarl.europa.eu/news/en/press-room/20231205IPR15690/deal-to-better-protect-consumers-from-damages-caused-by-defective-products

https://www.consilium.europa.eu/en/press/press-releases/2023/12/14/agreement-between-the-council-and-the-european-parliament-makes-eu-liability-rules-fit-for-the-digital-age-and-circular-economy/

EU updates product liability regime to include software, Artificial Intelligence https://www.euractiv.com/section/digital/news/eu-updates-product-liability-regime-to-include-software-artificial-intelligence/?utm_source=dlvr.it&utm_medium=mastodon #artificialintelligence #burdenofproof #ProductLiabilityDirective

EU updates product liability regime to include software, Artificial Intelligence https://www.euractiv.com/section/digital/news/eu-updates-product-liability-regime-to-include-software-artificial-intelligence/?utm_source=dlvr.it&utm_medium=mastodon #artificialintelligence #burdenofproof #ProductLiabilityDirective

Should we get The Gamers (tm) mad about the #CyberResilienceAct #CRA or the #ProductLiabilityDirective #PLD?

Should we get The Gamers (tm) mad about the #CyberResilienceAct #CRA or the #ProductLiabilityDirective #PLD?

What I haven't seen yet are discussions about possible effects of the #CyberResilienceAct #CRA and the #ProductLiabilityDirective #PLD for the availability of historical software, abandonware or even still distributed older software whose distribution might not longer be profitable if the CRA or PLD take effect. I'm thinking about video games, for example. Will the Internet Archive still offer their software collection to EU visitors? Will game publishers still offer older games on Steam & Co?

What I haven't seen yet are discussions about possible effects of the #CyberResilienceAct #CRA and the #ProductLiabilityDirective #PLD for the availability of historical software, abandonware or even still distributed older software whose distribution might not longer be profitable if the CRA or PLD take effect. I'm thinking about video games, for example. Will the Internet Archive still offer their software collection to EU visitors? Will game publishers still offer older games on Steam & Co?

There is some discussion about what the impact of the #CyberResilienceAct #CRA and the #ProductLiabilityDirective #PLD might be on the open source software ecosystem. I found this presentation about the CRA by @mmilinkov as interesting as startling: https://www.youtube.com/watch?v=AmsM5_5QO5A&t=4s

There is some discussion about what the impact of the #CyberResilienceAct #CRA and the #ProductLiabilityDirective #PLD might be on the open source software ecosystem. I found this presentation about the CRA by @mmilinkov as interesting as startling: https://www.youtube.com/watch?v=AmsM5_5QO5A&t=4s

🚨🫤

"The EU’s Product Liability Directive could kill open source

Ambiguous EU policy language risks doing more harm than good"

#Europe #EU #OpenSource #FLOSS #FOSS #ProductLiabilityDirective #PLD

https://www.techradar.com/pro/the-eus-product-liability-directive-could-kill-open-source

🚨🫤

"The EU’s Product Liability Directive could kill open source

Ambiguous EU policy language risks doing more harm than good"

#Europe #EU #OpenSource #FLOSS #FOSS #ProductLiabilityDirective #PLD

https://www.techradar.com/pro/the-eus-product-liability-directive-could-kill-open-source

#AIAct vote: #FreeSoftware is given safeguards, these rules must now be defended in the trilogue and transferred to the #CyberResilienceAct and the #ProductLiabilityDirective.

https://fsfe.org/news/2023/news-20230614-01.html

#AIAct vote: #FreeSoftware is given safeguards, these rules must now be defended in the trilogue and transferred to the #CyberResilienceAct and the #ProductLiabilityDirective.

https://fsfe.org/news/2023/news-20230614-01.html

Here's why #ProductLiabilityDirective and #CyberResilienceAct are closely related:

"According to the text, a product is considered defective “when it does not provide the safety an average person is entitled to expect, which is also required under Union or national law.”"

"[..] a product’s defect is to be evaluated against mandatory product safety requirements, including cybersecurity standards for connected devices as set out in national legislation or EU law like the Cyber Resilience Act."

Here's why #ProductLiabilityDirective and #CyberResilienceAct are closely related:

"According to the text, a product is considered defective “when it does not provide the safety an average person is entitled to expect, which is also required under Union or national law.”"

"[..] a product’s defect is to be evaluated against mandatory product safety requirements, including cybersecurity standards for connected devices as set out in national legislation or EU law like the Cyber Resilience Act."

The #OpenSource community spoke, and we heard! Our amendments to the #CyberResilienceAct (and soon, the #ProductLiabilityDirective)
⬇️
---
RT @karmel80
Dear #opensource community: You spoke, and we heard you: protecting open-source developers in the Product Liability Directive and Cyber Resilience Act https://karenmelchior.eu/en/you-spoke-and-we-heard-you-protecting-open-source-developers-in-the-cra-and-pld/
https://twitter.com/karmel80/status/1651454826767630337

The #OpenSource community spoke, and we heard! Our amendments to the #CyberResilienceAct (and soon, the #ProductLiabilityDirective)
⬇️
---
RT @karmel80
Dear #opensource community: You spoke, and we heard you: protecting open-source developers in the Product Liability Directive and Cyber Resilience Act https://karenmelchior.eu/en/you-spoke-and-we-heard-you-protecting-open-source-developers-in-the-cra-and-pld/
https://twitter.com/karmel80/status/1651454826767630337

Key MEPs propose narrowing down EU’s new product liability regime https://www.euractiv.com/section/digital/news/key-meps-propose-narrowing-down-eus-new-product-liability-regime/?utm_source=dlvr.it&utm_medium=mastodon #ProductLiabilityDirective #software

Key MEPs propose narrowing down EU’s new product liability regime https://www.euractiv.com/section/digital/news/key-meps-propose-narrowing-down-eus-new-product-liability-regime/?utm_source=dlvr.it&utm_medium=mastodon #ProductLiabilityDirective #software

Key MEPs propose narrowing down EU’s new product liability regime https://www.euractiv.com/section/digital/news/key-meps-propose-narrowing-down-eus-new-product-liability-regime/?utm_source=dlvr.it&utm_medium=mastodon #ProductLiabilityDirective #software

Key MEPs propose narrowing down EU’s new product liability regime https://www.euractiv.com/section/digital/news/key-meps-propose-narrowing-down-eus-new-product-liability-regime/?utm_source=dlvr.it&utm_medium=mastodon #ProductLiabilityDirective #software

At #FOSDEM23, @maarten and @romdalf organised a session about how regulating software for the European market could impact #FOSS. A series of lightning talks is followed by a panel discussion covering the #CyberResilienceAct, the #ProductLiabilityDirective and the possible effects of them. You can now watch the recording of this session. #OpenSource #FOSDEM
https://fosdem.org/2023/schedule/event/cyber_resilience/

I randomly asked #FOSDEM people about the #ProductLiabilityDirective revision.* You'll be surprised to learn that nobody knows about it. (I was around the embedded and IoT booths in AW.) #EU

(*) https://www.europarl.europa.eu/legislative-train/theme-a-europe-fit-for-the-digital-age/file-new-product-liability-directive

I randomly asked #FOSDEM people about the #ProductLiabilityDirective revision.* You'll be surprised to learn that nobody knows about it. (I was around the embedded and IoT booths in AW.) #EU

(*) https://www.europarl.europa.eu/legislative-train/theme-a-europe-fit-for-the-digital-age/file-new-product-liability-directive

Weithin unbeachtet hält der Entwurf zur Reform der #EU-Richtlinie für Produkthaftung „#ProductLiabilityDirective“ (#PLD) möglicherweise üble Überraschungen für #OpenSource-Entwickler.innen bereit. Dort sind keinerlei Haftungsausnahmen für Open Source Software vorgesehen. Die entsprechenden Paragraphen in der #GPL (und so ziemlich jeder anderen Open Source-Lizenz) wären in Europa nichtig, Entwickler.innen haftbar für Schäden, auch ohne kommerziellen Background.

https://www.europarl.europa.eu/legislative-train/theme-a-europe-fit-for-the-digital-age/file-new-product-liability-directive

Weithin unbeachtet hält der Entwurf zur Reform der #EU-Richtlinie für Produkthaftung „#ProductLiabilityDirective“ (#PLD) möglicherweise üble Überraschungen für #OpenSource-Entwickler.innen bereit. Dort sind keinerlei Haftungsausnahmen für Open Source Software vorgesehen. Die entsprechenden Paragraphen in der #GPL (und so ziemlich jeder anderen Open Source-Lizenz) wären in Europa nichtig, Entwickler.innen haftbar für Schäden, auch ohne kommerziellen Background.

https://www.europarl.europa.eu/legislative-train/theme-a-europe-fit-for-the-digital-age/file-new-product-liability-directive

I was also involved in bringing the #CyberResilienceAct to #FOSDEM this year:

https://fosdem.org/2023/schedule/event/cyber_resilience/

First, introductory lightning talks by the @EU_Commission introducing the audience to the proposals for a CRA and new #ProductLiabilityDirective. I'll share a @nlnetlabs perspective on the CRA.

This introduction is then followed by a panel led by Red Hat's @romdalf
(w/ @gijs and other great panelists) to hear different perspectives on the proposals.

Looking forward to it!

I was also involved in bringing the #CyberResilienceAct to #FOSDEM this year:

https://fosdem.org/2023/schedule/event/cyber_resilience/

First, introductory lightning talks by the @EU_Commission introducing the audience to the proposals for a CRA and new #ProductLiabilityDirective. I'll share a @nlnetlabs perspective on the CRA.

This introduction is then followed by a panel led by Red Hat's @romdalf
(w/ @gijs and other great panelists) to hear different perspectives on the proposals.

Looking forward to it!