Product liability and safety recalls: who pays when a product hurts someone

The EU equivalent structure runs through the General Product Safety Regulation (GPSR), which took full effect in December 2024, and sector-specific frameworks like the Medical Device Regulation (MDR). The EU also runs a rapid alert system called Safety Gate for dangerous non-food products across member states. See the European Commission's Safety Gate portal for live recall data.

These regulators do not typically pre-approve products before sale (medical devices and drugs are the major exception). Most manufacturing operates on a post-market surveillance model: sell first, monitor for harm, recall if needed. That model is exactly what creates the speed-versus-exposure trade-off in this lesson's hook.

Mandatory reporting: the clock starts before the public knows

Here is the detail that trips up many operators: manufacturers do not get to decide quietly whether a defect is "serious enough" to report.

Under the CPSA, manufacturers, importers, distributors, and retailers must report to the CPSC within 24 hours of obtaining information that reasonably supports the conclusion that a product contains a defect that could create a substantial risk of injury, or that it violates a safety standard. This is Section 15(b) of the Act. Failing to report in time is itself a legal violation, separate from the underlying defect.

NHTSA has a parallel rule for vehicles: manufacturers must report defects and open investigations, and have historically been required to notify NHTSA within 5 business days of determining a safety defect exists under the TREAD Act (2000), passed after the Ford/Firestone tire failures.

This is where Takata went wrong twice. Internal testing had shown inflator ruptures years before the company disclosed the problem publicly. Delayed reporting turned a product defect into a separate legal and criminal matter: Takata pleaded guilty to wire fraud in 2017 and paid a $1 billion criminal penalty, on top of recall costs.

Practical implication: legal and quality teams inside a manufacturer are on a countdown the moment a defect signal appears internally, whether from field complaints, warranty claims, or lab testing. Speed to disclosure is now a compliance obligation, not a PR choice.

Tort liability: the parallel track courts run

Even when a regulator says a product is fine, a manufacturer can still be sued and lose. This is the civil liability track, governed mostly by state law in the US (there is no single federal product liability statute).

Three legal theories dominate:

1. Design defect: the product's design itself is unreasonably dangerous, even if manufactured perfectly (the Takata ammonium nitrate propellant was ultimately treated as a design defect).

2. Manufacturing defect: a specific unit deviated from its intended design, e.g., a contaminated batch.

3. Failure to warn: the product is inherently risky in some use case and the manufacturer did not adequately disclose that risk.

Most US states apply strict liability: a plaintiff does not need to prove the manufacturer was negligent, only that the product was defective and caused harm. This is a materially different (and easier for plaintiffs) standard than ordinary negligence law, and it is a key reason US product liability exposure is larger than in many other jurisdictions.

The EU runs a comparable strict liability framework under the Product Liability Directive, recently updated (the new directive entered into force in 2024, with member states transposing it into national law through 2026), which extends liability explicitly to software and AI-enabled products, an important shift for manufacturers embeddingembeddingAn embedding is a numerical vector that represents data (text, images, or items) in a way that captures meaning, so similar items sit close together in space.Voir la définition complète → connected components.

Civil suits can proceed as class actions, aggregating thousands of harmed customers into one case, which is what happened with Takata and with GMGMGross margin is the share of revenue left after subtracting the direct cost of producing goods or services, expressed as a percentage of revenue.Voir la définition complète →'s ignition switch defect (2014, at least 124 deaths linked, over $2.5 billion in combined recall, settlement, and penalty costs across criminal and civil resolutions).

Where the three systems meet, and where they clash

The regulator, the reporting clock, and the courts do not always move together, and that gap is where most of the business risk sits.

| System | Who runs it | Main sanction | Timing |

|---|---|---|---|

| CPSC / NHTSA / FDA | Federal agency | Mandatory recall, fines | Can act fast once notified |

| Mandatory reporting | Statute (CPSA, TREAD Act) | Separate penalty for late disclosure | Starts the moment internal knowledge exists |

| Tort liability | State courts | Damages, punitive damages | Can run for years after a recall closes |

A company can complete a recall, satisfy the regulator, and still face a decade of individual and class action lawsuits. Takata's bankruptcy did not end Honda's or other automakers' litigation exposure; it shifted the financial burden onto the automakers that installed the defective part, because product liability can attach anywhere in the supply chain, not just at the original manufacturer.

This is the central trade-off framed in the hook: launching faster (or delaying disclosure of a known issue) reduces short-term cost and preserves market position, but it compounds downstream exposure across three independent penalty systems that don't forgive each other's mistakes.

🎬 [VIDEO: "How the Takata Airbag Recall Became the Largest in US History" - youtube.com - search for NHTSA or major news retrospectives explaining the defect mechanism and recall scale]

What compliance actually looks like on the ground

For a manufacturing professional, this isn't abstract law, it shows up as operating procedure:

• Field data monitoring: warranty claims, dealer complaints, and customer service logs must be systematically reviewed for defect signals, because "we didn't know" is a weak defense once a pattern existed in the data.
• Document retention: internal test results and engineering emails become discoverable evidence in litigation; Takata's own internal test data was central to prosecutors' case.
• Recall execution: once a recall is announced, tracking remedy completion rates matters. Airbag recalls have historically had completion rates well below 100% for years after issuance, since owners don't always respond to notices, a persistent regulatory concern documented in NHTSA's recall completion data.
• Supply chain contracts: indemnification clauses determine who ultimately pays when a defective component (like an inflator) causes harm to an end product (a car); this is a live negotiation point in every tier-1 supplier contract.

Key Takeaways

• Manufacturing safety runs on three separate, overlapping systems: a regulator (CPSC, NHTSA, FDA, or EU equivalents like GPSR/Safety Gate), a mandatory reporting clock (24 hours under CPSA Section 15(b)), and civil tort liability decided in courts under strict liability standards.
• Delayed internal disclosure of a known defect is a separate legal violation from the defect itself, as Takata's $1 billion criminal penalty demonstrated.
• Passing a recall does not end liability exposure; class action litigation can run for years after regulatory closure, and costs can shift down the supply chain to whoever installed the defective component.
• The EU's updated Product Liability Directive (in force 2024, transposing through 2026) now explicitly extends strict liability to software and AI-enabled product features, a critical point for manufacturers adding connected or smart components.
• Practical compliance means continuous field-data monitoring, disciplined document retention, and clear indemnification terms in supplier contracts, not just a one-time regulatory filing.