The product liability directive holds all producers jointly liable for any harm caused by unsafe or defective products - including software. So, people who supply 'software as component' or software service may be held responsible for the safety of the products that incorporate or use the software.
But people can also claim for the loss, corruption or destruction of 'personal data' caused by product defects.