Issue 7 · Meaning loss
Recall Workflow Is Not Product Liability Coverage
A product incident creates regulatory reporting, recall, tender, defence, and long-tail liability work that happens in parallel. A case system that calls all of it a liability claim will either pay the wrong cost or lose the required operational clock.
One system
product liability
The other
general liability
The product-safety case system and the CGL claims system meet at a single incident, where regulatory reporting, recall costs, and third-party liability must exchange evidence without becoming one case.
The recall is often the loudest part of a product incident, which is precisely why people mistake it for the insured part.
The recall is the most visible thing in a product incident. The public advisory. The call centre. The freight. The corrective-action plan. The units that never come back. It has an executive committee before lunch. The liability file we open is quieter. A notice to an insurer. A statement of claim, eventually. A policy from an old year. A question about what happened to something other than the product. That difference in volume creates a durable systems error.
One incident arrives. We open one incident number.
Then every expense and document becomes a product liability claim.
The recall is the loudest part of a product incident, which is exactly why we mistake it for the insured part.
It is not.
A defective product can create a reporting duty, a recall, a tender to a supplier, a CGL defence, a bodily injury claim, and a recovery file. Sharing a serial number does not make those one obligation. Flatten them and we will eventually pay a recall cost from a liability reserve. Or wait for a coverage opinion while a statutory clock runs.
So here is the boundary I keep.
Keep one incident record if it helps people find things.
Don’t make it one case.
A product incident is a small network of cases needing shared evidence and separate ownership.
The first clock is not an insurance clock
Take an imported product that has caused a fire. Under the Canada Consumer Product Safety Act, manufacturer, importer, and retailer each owe an independent duty to notify within two days.
A fuller written report follows within ten.
A near miss, a foreign recall, or a defect that could cause serious harm can start it.
Nobody waits for the root-cause meeting to finish.
That is a product-safety case.
Its owner needs the facts, the product identity, traceability, the report version, and the clock we are running. The Act wants records of where a product came from and went, because traceability is how we find the population. The case also holds the corrective-action plan, notice wording, advisory, and progress on recovered units.
None of it wraps compliance around litigation.
Compliance is a floor, not a tort defence.
A report can become discoverable in a civil action.
So counsel belongs in the drafting workflow.
Legal review must not become a queue that turns two days into three.
Other products take other routes.
Drugs and devices go through the Food and Drugs Act. Food goes through the CFIA and its own Act. A vehicle defect follows the Motor Vehicle Safety Act.
The case boundary survives the product category.
The regulatory clock is not a coverage clock.
Preserve the object before anybody explains it
The second clock starts before the first report ends. The failed unit, its charger, stock from the lot, the build records: evidence.
They may explain the safety response.
They may also decide whether a claim alleges a manufacturing defect, a design defect, a failure to warn, or all three.
What we should do is banal.
We preserve an exemplar. We stop destructive testing.
A joint teardown gives interested parties notice and a right to attend. Consume the unit in unilateral testing and the other side gets spoliation instead of a fair test. No repository restores a cell that went into the bin with the debris. The exemplar belongs to the incident record, and to none of us alone.
Our product-safety people need it.
Our defence counsel needs it.
A property insurer who paid may need it for subrogation.
The importer may need it to tender upstream.
The system carries a chain of custody and a testing hold across the files.
Without making the recall team decide coverage.
The CGL asks a much narrower question
The CGL does not insure that a product works.
It addresses injury and damage the product causes to other people, or other property. In a Canadian placement, the reference point is IBC 2100. The answer is the issued policy and its endorsements. Commercial liability wordings are not pre-approved the way automobile forms are, so the class of insurance will not substitute for the contract.
We follow an order.
Agreement, definitions, exclusions, exceptions, limits, conditions.
The insured shows the grant. We show an exclusion. The insured shows the exception that puts coverage back.
That sequence is not claims ceremony.
It assigns question and burden at each point.
For a relinquished product that starts a fire in a customer’s garage, the products-completed operations hazard is in view. It covers injury and damage away from premises the insured owns, after possession is relinquished.
It carries its own aggregate.
The burned garage and the customer’s burns are a different analysis from the failed product.
The exclusions make this less intuitive still.
The your-product exclusion removes the failed product.
The impaired-property exclusion removes property that works again once the defective component comes out. And the sistership exclusion removes withdrawal, inspection, repair, replacement, or loss of use, where the withdrawal follows a known or suspected defect.
There is the hinge.
The CGL can be alive for the garage and the burns and refuse to fund retrieval of the lot. Call the whole event a liability claim and we get a false denial, or a false promise.
One date is not enough for any of this
The product may have been made in 2019, imported in 2020, sold in 2021, and caused injury in 2026. On an occurrence CGL, the policy in force when damage happens answers.
Not the policy in force when the product was made, sold, discovered, or sued over.
Old policies therefore stay operational assets, and why a product loss develops across years nobody calls current.
Product recall cover runs on different mechanics.
A standalone recall policy has its own limit, retention, and waiting period.
Recall coverage is usually claims-made, with a sublimited crisis-consultant benefit.
Notification, call centre, freight, retrieval, destruction, staff hours, consultant fees: first-party expense analysis.
Not CGL indemnity analysis.
The three cases store different dates.
The CGL case needs the date of damage and the policy period.
The recall case needs the insured event, notice, retention, waiting period.
The regulatory case needs when each supplier knew.
One generic loss date has already decided the distinctions do not matter.
Tender is a route, not a result
The retailer served with the same pleading may tender to the importer’s CGL insurer under a vendors endorsement.
That endorsement adds the retailer as an additional insured for liability from the importer’s product, in its ordinary distribution role.
Primary and non-contributory, the retailer’s own CGL sits excess until the importer’s limit goes.
But an endorsement is not a blanket apology for the retail counter.
Repackaging. Alteration. Demonstration. Servicing. Relabelling. Independent negligence.
Any of those puts the retailer outside the grant.
A private-label retailer is a manufacturer here.
A scheduled endorsement fails because nobody added the distributor.
The certificate of insurance fixes none of it.
It confers no coverage.
The importer may tender the other way, under the supply agreement and an additional-insured arrangement overseas.
A separate recovery case, with its own contract, endorsement, and jurisdiction problems.
An upstream policy may carry a low limit and no duty to fund a Canadian defence.
We raise the tender early and track it.
Don’t mark it successful because somebody emailed.
The defence case has its own conditional state.
The duty to defend turns on the pleadings, read for substance.
A mere possibility of a covered allegation requires a defence.
An insurer reserving rights is defending while preserving named arguments against indemnity.
That is the normal state of a contested CGL file.
Not a denial in bureaucratic dress.
Defence costs under Canadian CGL wordings usually sit outside the limit.
That changes the reserve and settlement discussion.
It does not convert recall spend into defence spend.
Separate cost codes are not our accounting preference.
They are how the policy keeps its economic meaning.
Prove all three started on time and stayed owned
The board sees the advisory and asks whether the recall is controlled.
We need a better operational question ready.
Can we prove safety reporting, coverage analysis, and tendering each started on time and stayed owned?
That gives the technology team something concrete.
One incident record links our product, lot, parties, evidence.
From it, separate cases carry their own owner, clock, statute, evidence hold, decision, next action.
The reporting case cannot close because an adjuster reserved rights.
The recall case cannot be paid from a products aggregate.
The tender case cannot become a note on the defence file.
There is a temptation to call this duplication.
It is not.
Duplication is retyping one fact our systems can’t share.
Distinction is keeping the different consequences of one fact, because we can’t afford to lose them.
Keep the incident connected. Keep the obligations separate.
One defect can create several cases.
The system fails when it calls them one claim.
What the issue establishes
- Products-completed operations coverage responds to bodily injury or property damage after possession of the product is relinquished and carries its own aggregate limit.
- An occurrence CGL responds to the policy in force when injury or property damage occurs, while product recall insurance is usually claims-made.
- The sistership exclusion removes recall, withdrawal, inspection, repair, replacement, and related loss-of-use costs from the CGL even where third-party injury or damage is covered.
- A vendors endorsement and supply-contract indemnity create separate tender paths, and a certificate of insurance does not itself grant coverage.
- A preserved exemplar, joint teardown protocol, and timely regulatory notice protect both the safety response and later coverage and recovery work.
- Canada's common-law product cases are negligence-based, while Quebec applies a fault-free safety-defect regime under the Civil Code.
The unfashionable recommendation
Keep recall, safety reporting, tender, defence, and CGL coverage as linked but distinct cases; one incident number should not flatten their different obligations.
Asked in the meeting
- Does a CGL policy pay for a product recall?
- Generally, no. The CGL sistership exclusion removes the cost of withdrawing, inspecting, repairing, replacing, or losing the use of a product or property incorporating it when the withdrawal follows a known or suspected defect. The CGL can still respond to bodily injury or property damage the product causes to others. Recall expenses are ordinarily addressed under a separate product recall or contaminated-products policy.
- When does a product incident have to be reported to Health Canada?
- Under the Canada Consumer Product Safety Act, a manufacturer, importer, and retailer each has an independent duty to notify the Minister within two days of becoming aware of an incident and to provide a fuller written report within ten days. The duty can begin with a near miss, foreign recall, or suspected serious risk; it does not wait for agreement that the product is defective.
- Which policy year responds when a product injures someone years after it was sold?
- An occurrence-based CGL responds to the policy in force when bodily injury or property damage occurs, not when the product was manufactured, imported, sold, or sued over. A unit made in an earlier year can therefore create a claim under the policy in force at the later injury date. Product recall policies are usually claims-made and must be assessed under their own reporting mechanics.
- What is products-completed operations coverage for a defective product?
- Products-completed operations is the CGL hazard for bodily injury or property damage arising from a product after possession has been relinquished and away from premises the insured owns or rents. It has an aggregate limit separate from the general aggregate. It addresses injury or damage caused by the product, not the cost of the product itself or the cost of recalling the remaining stock.
- Why should the failed product not be opened or discarded straight away?
- The failed unit, charger, remaining lot stock, and production records can be evidence for the regulator, the coverage analysis, the civil defence, and recovery against suppliers. A preserved exemplar supports testing. A joint teardown protocol gives interested parties notice and an opportunity to attend before destructive testing. Unilateral testing that consumes the specimen creates a spoliation dispute and weakens later evidence.
- Does a certificate of insurance make a retailer an additional insured?
- No. A certificate is evidence that coverage is believed to exist; it does not confer rights or amend the policy. A retailer receives additional-insured status only through the applicable vendors or other additional-insured endorsement. The endorsement controls the scope of the grant, its exclusions, and whether the supplier's policy is primary and non-contributory to the retailer's own CGL.
- What can make a vendors endorsement stop protecting a retailer?
- A vendors endorsement commonly protects a retailer only for liability arising from the supplier's product in the retailer's passive distribution role. Coverage can be removed when the retailer repackages or physically alters the product, demonstrates or services it, labels it under the retailer's own name, or commits independent negligence. A private-label retailer is treated as a manufacturer for this purpose.
- What does a reservation of rights mean in a product liability claim?
- A reservation of rights means the insurer provides a defence while preserving identified arguments that some allegations or damages may not be indemnified. It is not a denial. In Canadian CGL claims, the duty to defend is determined from the pleadings, and a mere possibility of covered allegations can require a defence of the action even while exclusions and coverage limits remain disputed.
- Is Canadian product liability based on strict liability?
- In the common-law provinces, product liability is negligence-based: the claimant must establish a breach of the applicable standard of care and causation. Manufacturing defect, design defect, and failure to warn are the usual theories, and the duty to warn continues after sale when new danger information emerges. Quebec differs because the Civil Code imposes fault-free liability for safety defects, subject to defined defences.
- Why does the regulatory report need legal and claims attention?
- A product-safety report is part of the regulatory response, but it can later be discoverable in civil litigation and used as an exhibit. Counsel therefore helps ensure that the required two-day notice and ten-day written report are accurate and supported by preserved evidence. The case record must keep the reporting obligation moving without allowing coverage analysis to delay it.
- What is the difference between the defective product and impaired property?
- The CGL does not pay for damage to the insured's own product. It also excludes impaired property: third-party property that is unusable only because the insured's defective component is present and can be restored by removing or replacing that component. Physical injury to other property and bodily injury can be covered, so a claim system must distinguish remediation of the product from damage it caused.
- What should be tendered to an upstream supplier after a product incident?
- The importer or manufacturer tenders under the supply agreement's indemnity and any additional-insured arrangement. The tender identifies the incident, the claim or pleading, the contractual indemnity, and the relevant endorsement rather than relying on a certificate of insurance. The upstream insurer may still have different limits, defence obligations, jurisdiction, or policy terms, so the tender is a recovery path, not proof that funding will arrive.