Skip to content
Germany Strengthens Cybersecurity Liability for Businesses

Germany Strengthens Cybersecurity Liability for Businesses

First seen 15 Oct 2026, 13:33 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 15, 2026 at 14:38 UTC
  • •New product liability law in Germany emphasizes cybersecurity as a defect factor.
  • •Law takes effect on December 9, 2026, impacting products launched thereafter.
  • •80% of ransomware attacks target SMEs, which often overestimate their cybersecurity.

Germany's Bundestag has adopted a new product liability law that incorporates cybersecurity as a key factor in determining product defects. This law, set to take effect on December 9, 2026, aligns with the EU's product liability directive, which emphasizes the importance of cybersecurity throughout the product lifecycle. Manufacturers, particularly in the technology sector, will need to ensure robust cybersecurity measures are in place to avoid liability claims. The law is expected to impact all products launched after the effective date, compelling organizations to reassess their cybersecurity practices. Additionally, the German Insurance Association warns that 80% of ransomware attacks target small and medium-sized enterprises (SMEs), highlighting the urgent need for improved cybersecurity awareness and measures among these businesses. SMEs often overestimate their cybersecurity capabilities, which puts them at greater risk of cyberattacks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2024-12-09
EU product liability directive enacted
The EU product liability directive comes into force, requiring member states to adopt similar laws.
Pinsent Masons
2026-10-12
Germany adopts new product liability law
The Bundestag passes a law linking cybersecurity to product liability, effective December 9, 2026.
Pinsent Masons
2026-10-15
GDV warns about SME cybersecurity risks
The German Insurance Association reports that 80% of ransomware attacks target SMEs, urging stronger preventive measures.
GDV

More articles in this cluster (2)

Extracted Entities (8)

1 / 2

Common questions

What does the new law entail?
The law establishes that cybersecurity will be considered when assessing product defects, impacting liability for manufacturers.
When does the new law take effect?
The new product liability law will come into force on December 9, 2026.
How are SMEs affected by cyberattacks?
SMEs are particularly vulnerable, with 80% of ransomware attacks targeting them, often due to overestimating their cybersecurity measures.