Civil Law and Aviation Training Simulator Failure Injury Claims in Europe

1. Introduction

Aviation training simulators are sophisticated flight simulation training devices (FSTDs) used for:

pilot training;

type-rating training;

instrument training;

recurrent training;

testing and checking;

emergency-procedure training;

multi-crew training; and

competency assessment.

European aviation law expressly recognises FSTDs, including full flight simulators (FFS), flight training devices (FTD), flight and navigation procedures trainers (FNPT), and basic instrument training devices (BITD). (Eur-Lex)

An injury can occur when a simulator:

makes an unexpected motion;

moves beyond its programmed limits;

suffers hydraulic or electrical failure;

has a defective motion platform;

has a faulty visual system;

produces an incorrect flight-control response;

experiences software failure;

fails during an emergency exercise;

has defective emergency-stop equipment;

is improperly maintained; or

is operated with inadequate safety procedures.

There is very limited European case law specifically concerning physical injury caused by a flight simulator. Therefore, the principal authorities are analogous cases concerning defective products, defective equipment, workplace safety, medical devices and causation. This distinction is important: the cases below should not be presented as direct FSTD-injury precedents.

2. European Regulatory Framework

A. Regulation (EU) No. 1178/2011

Regulation 1178/2011 is central to European pilot training.

It defines an FSTD and establishes requirements for:

qualification;

training use;

maintenance;

modifications;

safety;

continuing qualification;

approved training organisations.

The current regulatory framework also continues to recognise FSTDs as devices used for pilot training, testing and checking. (Eur-Lex)

3. 2026 Changes to FSTD Regulation

This topic has an important current-law development.

Commission Implementing Regulation (EU) 2026/781, adopted on 8 April 2026, amended Regulations 1178/2011 and 965/2012 concerning FSTD requirements and their use for pilot training, testing and checking. (Eur-Lex)

The amended framework updates concepts including:

FSTD qualification;

qualification test guides;

FSTD capability signatures;

certification specifications;

simulator qualification and continuing validity.

Therefore, an injury occurring in 2026 or later should be analysed against the version of the FSTD regulatory framework applicable on the date of the accident.

4. Safety Obligations of FSTD Operators

The European rules contain unusually detailed requirements concerning simulator safety.

For example, the FSTD operator must maintain a system controlling the continued integrity of the simulator's:

hardware;

software;

performance;

functions; and

other qualification characteristics. (Eur-Lex)

This is important because a simulator is not merely a computer.

It may contain:

hydraulic systems;

electric actuators;

motion platforms;

visual projection systems;

cockpit controls;

force-feedback mechanisms;

emergency-stop systems.

A failure of any of these can create a physical injury risk.

5. Simulator Modification

European FSTD rules specifically address modifications.

Where hardware or software changes affect:

handling;

performance;

aircraft systems operation;

motion systems; or

visual systems,

the modification must be evaluated for its effect on the applicable qualification criteria.

Testing must be undertaken where necessary before the simulator returns to training. (Eur-Lex)

Civil-liability importance

Suppose an operator installs a software update and immediately afterwards the simulator produces an uncontrolled six-degree motion.

The investigation should examine:

who authorised the modification;

whether the modification was safety-significant;

whether testing was conducted;

whether the competent authority had to be informed;

whether the simulator was returned to service correctly;

whether the operator knew about the problem.

6. Simulator Installation Safety

The FSTD rules require the simulator installation to support safe and reliable operation.

Occupants and maintenance personnel must be briefed on:

safety equipment;

emergency procedures;

simulator emergency arrangements.

The simulator and installation must also comply with applicable local health-and-safety requirements. Safety features such as emergency stops and emergency lighting must be checked periodically and recorded. (Eur-Lex)

This creates potentially important evidence in an injury claim.

7. Who May Be Liable?

Several defendants may potentially be involved.

7.1 FSTD operator

The operator may be responsible for:

unsafe operation;

inadequate maintenance;

failure to inspect;

failure to respond to known defects;

inadequate emergency procedures;

returning an unsafe simulator to service.

7.2 Approved Training Organisation

An ATO may face liability where injury results from:

inadequate supervision;

improper training procedures;

failure to follow its operations manual;

use of an unserviceable simulator;

inadequate emergency procedures.

The European framework recognises ATOs as organisations entitled to provide pilot training under the applicable approval system. (Eur-Lex)

7.3 FSTD manufacturer

The manufacturer may face product liability if the injury resulted from:

defective design;

manufacturing defect;

inadequate safety system;

defective motion-control mechanism;

defective software;

inadequate warnings.

7.4 Software developer

Modern simulators depend heavily upon software.

Potential defects include:

incorrect motion commands;

incorrect aircraft-system simulation;

failure of safety interlocks;

incorrect emergency-state logic;

software causing excessive motion;

failure of software to stop the simulator.

7.5 Maintenance contractor

Liability may arise from:

negligent maintenance;

incorrect calibration;

improper replacement;

failure to identify defects;

incorrect software installation;

failure to document maintenance.

7.6 Instructor

An instructor may potentially be liable under applicable national law for:

ignoring a known malfunction;

continuing an unsafe exercise;

failing to use an emergency stop;

failing to follow safety procedures.

8. Product Liability

The simulator itself can raise defective-product questions.

Under the older EU Product Liability Directive 85/374/EEC, a defective product could create no-fault liability where the statutory conditions were satisfied.

The new Directive (EU) 2024/2853 modernises the regime and expressly treats software, including AI systems, as products.

That is particularly relevant to advanced simulators because the simulator is effectively a combination of:

hardware + software + sensors + motion technology + visual systems.

Therefore, a future simulator injury claim may involve both physical and digital defects.

9. Contractual Liability

A trainee may have a contract with:

an airline;

an aviation academy;

an ATO;

a simulator provider.

The contract may contain obligations concerning:

safe training;

qualified instructors;

properly functioning equipment;

training standards.

A contractual claim can therefore exist alongside a tort/product-liability claim, depending on national law.

10. Tort/Delict Liability

National civil law may impose a general duty to avoid causing foreseeable injury.

A claimant may need to establish:

duty of care;

breach;

causation;

injury;

legally recoverable damage.

The precise formulation varies between European legal systems.

11. Occupational Safety

If the injured person is:

an airline employee;

a commercial pilot;

an instructor;

an engineer;

a simulator technician,

European workplace-safety law becomes particularly relevant.

Directive 89/391/EEC establishes the broader EU framework for protecting workers' health and safety.

The employer's obligations can operate independently of a product-liability claim.

12. Case Law

Case 1 — Boston Scientific Medizintechnik, Joined Cases C-503/13 and C-504/13

CJEU, 5 March 2015

This case concerned pacemakers and implantable cardioverter-defibrillators.

The manufacturer identified a possible defect affecting a group of products.

The CJEU held, in substance, that where products belonging to the same group or production series present an abnormal potential for failure, they can be regarded as defective because they do not provide the safety that persons are entitled to expect. (Infocuria)

Application to flight simulators

Imagine an FSTD manufacturer discovers that:

150 simulators contain a motion-control component capable of unexpectedly accelerating.

Even if only one simulator has injured somebody, evidence of a systemic defect affecting the same model may become highly relevant.

Legal principle

Systemic safety risk can be legally significant even without proving that every individual unit has actually failed.

Case 2 — Veedfald v Århus Amtskommune, C-203/99

CJEU, 10 May 2001

Veedfald concerned a defective product used during the provision of medical treatment.

The CJEU considered the circumstances in which product liability can apply even though the product is used as part of a service.

The Court also considered the categories of personal injury and property damage covered by the Product Liability Directive. (Infocuria)

Application to simulators

Flight training is fundamentally a service, but the service uses a sophisticated physical device.

Therefore:

The fact that a simulator is used as part of pilot-training services does not automatically eliminate product-liability questions.

If the simulator's hardware is defective and causes injury, both service liability and product liability may need to be considered.

Case 3 — Dutrueux, C-495/10

CJEU, 21 December 2011

Dutrueux concerned injury caused by malfunction of equipment used during medical treatment.

The question was whether a national no-fault liability regime applicable to a service provider could coexist with EU product liability.

The CJEU recognised that national liability rules concerning the service provider can operate alongside the EU product-liability framework, within the applicable legal boundaries. (Infocuria)

Application

Suppose:

the simulator manufacturer supplied defective equipment; and

the ATO negligently operated or maintained it.

The injured trainee may potentially have separate claims against:

manufacturer + training organisation.

Principle

Product liability does not necessarily eliminate separate national liability of the service provider.

Case 4 — W and Others v Sanofi Pasteur, C-621/15

CJEU, 21 June 2017

The CJEU considered how a claimant can prove product defect and causation where scientific certainty is difficult.

The Court recognised that, subject to the requirements of EU product-liability law, courts may consider serious, specific and consistent evidence where there is no scientific consensus. (curia)

Application to simulator accidents

Simulator accidents can involve technically difficult questions:

Was the motion system defective?

Did the software command the movement?

Did a sensor malfunction?

Was the emergency-stop system functioning?

Did maintenance cause the failure?

Expert evidence may therefore be crucial.

Principle

Complex technical causation can be proved through appropriate evidence; the claimant is not necessarily required to produce a simple physical demonstration of the defect.

The exact evidential rules, however, remain subject to the applicable national procedural law and EU product-liability requirements.

Case 5 — O'Byrne v Sanofi Pasteur, C-127/04

CJEU, 9 February 2006

O'Byrne concerned the meaning of “putting into circulation” under the Product Liability Directive and the relationship between a manufacturer and its wholly owned subsidiary. (Infocuria)

Application to FSTDs

A simulator supply chain may look like:

manufacturer → European subsidiary → distributor → simulator operator → ATO.

If an injury occurs, the claimant may need to determine:

who manufactured the FSTD;

who placed it into circulation;

which company supplied it;

whether an importer/distributor is legally relevant;

when the product entered the market.

Principle

Identifying the legally responsible producer is fundamental to a product-liability claim.

Case 6 — Skov and Bilka, C-402/03

CJEU, 10 January 2006

Skov concerned the relationship between producers and suppliers under the EU Product Liability Directive. The CJEU addressed the limits of national rules that would impose product liability on a supplier beyond the harmonised EU framework. (Infocuria)

Application

An FSTD could involve:

original manufacturer;

local distributor;

maintenance company;

training organisation.

The claimant must distinguish:

manufacturer liability

from

operator/service-provider liability.

Principle

The legal identity and role of each participant in the supply chain matter.

Case 7 — Società Italiana Petroli (IP) v Borsana, C-2/97

CJEU, 17 December 1998

This case concerned workplace health and safety and the use of work equipment.

The Court considered EU requirements concerning worker protection and accepted the compatibility of stronger national safety measures with the relevant EU framework. (curia)

Application to simulators

An FSTD is workplace equipment when used by professional pilots and instructors.

If an airline knows that:

the motion platform is malfunctioning;

emergency stops are defective;

safety interlocks do not work;

workplace-safety obligations may become important independently of product liability.

Principle

Work-equipment safety obligations can impose an additional layer of protection beyond the product-liability regime.

Case 8 — Commission v United Kingdom, C-127/05

CJEU, 14 June 2007

The case concerned Article 5 of Directive 89/391/EEC and the employer's duty concerning worker safety and health.

The CJEU examined the scope of the employer's obligations under the EU occupational-safety framework. (Infocuria)

Application to aviation training

If a professional pilot or instructor is injured during simulator training, the employer may have responsibilities concerning:

risk assessment;

safe equipment;

training procedures;

maintenance;

supervision;

emergency procedures.

Important limitation

This was a Member-State infringement case, not a private simulator-injury damages case. It is therefore an analogy for the scope of EU workplace-safety duties rather than direct authority awarding compensation to an injured simulator user.

13. Case-Law Summary

14. Types of Simulator Failure

A. Motion-platform failure

The simulator suddenly:

accelerates;

rotates;

tilts;

drops;

stops abruptly.

Possible injuries:

spinal injury;

neck injury;

concussion;

fractures;

musculoskeletal injury.

B. Control-system failure

The cockpit controls may suddenly:

move;

lock;

resist;

release unexpectedly.

Potential defendants include:

manufacturer;

software provider;

maintenance contractor;

operator.

C. Visual-system failure

The visual system could unexpectedly:

become extremely bright;

display incorrect information;

fail suddenly;

produce abnormal visual movement.

Possible consequences include:

falls;

disorientation;

medical injury;

collision with cockpit equipment.

D. Software failure

Software may cause:

incorrect aircraft simulation;

unexpected motion;

false warnings;

emergency-system failure;

incorrect system responses.

E. Emergency-stop failure

This is particularly significant.

If a simulator has a dangerous movement and the emergency stop fails, liability may potentially involve:

operator;

maintenance contractor;

manufacturer;

software/control-system supplier.

European FSTD rules specifically require safety features such as emergency stops to be checked periodically and recorded. (Eur-Lex)

15. Qualification Does Not Automatically Eliminate Civil Liability

A simulator may have an FSTD qualification certificate.

That does not necessarily mean:

“No civil liability can exist.”

Qualification primarily establishes compliance with aviation regulatory standards.

A claimant may still allege:

subsequent defect;

negligent maintenance;

unsafe modification;

inadequate installation;

failure to follow operating procedures;

failure to respond to a known defect.

Similarly, failure to maintain qualification may be powerful evidence of regulatory non-compliance, but the civil consequences depend on the applicable national law.

16. Post-Qualification Defect

This is especially important.

A simulator may have been perfectly safe when initially qualified.

Later:

software is changed;

hardware is replaced;

hydraulic components deteriorate;

sensors become inaccurate;

emergency systems fail.

The relevant question becomes:

Was the simulator still safe and properly qualified at the time of the accident?

European FSTD rules specifically contemplate continuing integrity and assessment of significant hardware and software modifications. (Eur-Lex)

17. Software Update Liability

Consider this example:

A simulator receives a new aircraft-model software package.

The update changes the relationship between:

flight-control commands;

motion platform;

visual system.

During the first training session after the update, the simulator unexpectedly pitches forward.

The investigation should examine:

software version;

update authorisation;

validation;

testing;

qualification impact;

change-management records;

maintenance documentation;

safety warnings.

The 2026 amendments to the EU FSTD framework make the continued regulatory treatment of modern FSTDs particularly relevant. (Eur-Lex)

18. Causation

The claimant must connect:

Simulator failure → injury.

This can become difficult where the trainee already suffers from:

a pre-existing injury;

medical condition;

dizziness;

cardiovascular problems.

The court may require medical and engineering expert evidence.

The W and Others principle concerning technically difficult proof is useful by analogy, although that case involved a vaccine rather than an FSTD. (curia)

19. Contributory Negligence

The defendant may argue that the trainee:

ignored safety instructions;

remained in the simulator after a warning;

failed to use restraints;

deliberately continued an exercise;

ignored the instructor.

But the precise effect of such conduct depends upon national law.

An instructor's warning does not automatically eliminate liability if the simulator itself was dangerously defective.

20. Employer Liability

Where the injured person is an employee, the airline or training organisation may have additional responsibilities.

Possible failures include:

inadequate risk assessment;

insufficient equipment inspection;

inadequate instructor training;

inadequate emergency procedures;

failure to investigate previous incidents;

allowing use of defective equipment.

EU workplace-safety law provides a framework for these obligations. Commission v UK confirms the importance of the employer's safety duty, although the case itself was not a private damages claim. (Infocuria)

21. Contractual Training Claims

A trainee paying for pilot training may potentially bring a contractual claim where the provider fails to provide the contracted service safely.

Possible contractual breaches:

simulator not fit for intended training;

training cancelled because simulator is defective;

unsafe training environment;

failure to provide qualified instruction.

Depending on the jurisdiction, consumer-protection law may also become relevant where the trainee is a consumer.

22. Damages

Potential damages can include:

Personal injury

medical treatment;

rehabilitation;

lost earnings;

disability;

pain and suffering where recognised;

future care.

Training-related loss

cost of repeating training;

additional simulator sessions;

licence delays;

examination costs.

Employment loss

If the injury prevents the pilot from working:

lost salary;

career-related losses;

retraining expenses.

Property damage

Damage to:

clothing;

personal equipment;

cockpit equipment;

simulator components.

The recoverability of specific economic and non-economic losses depends on national civil law.

23. Evidence

A strong simulator-injury investigation should preserve:

Simulator records

motion data;

control inputs;

system logs;

fault codes;

emergency-stop logs;

software version;

maintenance history.

Qualification records

FSTD qualification certificate;

qualification test guide;

recurrent evaluation;

validation tests;

modification records.

Safety records

emergency-stop inspections;

maintenance reports;

previous incidents;

safety briefings;

risk assessments.

Human evidence

instructor testimony;

trainee testimony;

maintenance engineer evidence;

operator instructions.

24. Defences

Potential defences include:

1. No defect

The simulator complied with applicable technical requirements.

2. No causation

The injury was caused by another factor.

3. User fault

The claimant failed to follow safety instructions.

4. Proper maintenance

Maintenance records demonstrate appropriate inspection and servicing.

5. Independent intervening event

An unexpected external event caused the accident.

6. Contractual limitation

A contractual limitation may be relevant, although its enforceability depends on applicable law and mandatory protections.

25. Hypothetical Example

A European airline operates a Level-D full-flight simulator.

During an emergency training exercise:

the simulator receives an updated software package;

the update affects the motion-control system;

the modification is not adequately validated;

the simulator unexpectedly pitches forward;

the trainee's restraint system fails;

the trainee suffers spinal injuries.

Possible claims

Against manufacturer:
Potential design/software defect.

Against software provider:
Potential defective software or update.

Against simulator operator:
Failure to maintain or safely operate the FSTD.

Against maintenance contractor:
Failure to inspect or correctly install the update.

Against training organisation:
Failure to follow appropriate safety procedures.

Against employer:
Potential workplace-safety liability.

26. Liability Matrix

The actual legal responsibility depends upon the applicable national law and evidence.

27. Important Distinction: Regulatory and Civil Liability

A finding that:

“The FSTD did not comply with Regulation 1178/2011”

is highly relevant but does not automatically determine every element of a damages claim.

Conversely:

“The simulator possessed a qualification certificate”

does not necessarily establish that no civil liability exists.

The court must separately consider:

Regulatory breach → contractual breach → negligence/delict → product defect → causation → damage.

28. European Civil-Law Model

A simulator injury can therefore involve five overlapping legal layers:

Layer 1 — Aviation regulation

FSTD qualification and operational requirements.

Layer 2 — Product liability

Defective hardware/software.

Layer 3 — Workplace safety

Protection of pilots, instructors and technicians.

Layer 4 — Contract

Training-provider obligations.

Layer 5 — Tort/delict

General civil responsibility for injury.

29. Practical Legal Test

Use the following F-S-A-C-D-R test:

F — FSTD

What simulator and component failed?

S — Safety standard

What aviation, technical and workplace requirements applied?

A — Actor

Who manufactured, operated, maintained or modified the simulator?

C — Causation

Did the failure cause the injury?

D — Damage

What physical and financial damage occurred?

R — Remedy

Which contractual, product-liability, tort or employment remedy applies?

30. Final Case Summary

The most useful authorities are:

Boston Scientific, C-503/13 & C-504/13 — systemic product defect.

Veedfald, C-203/99 — defective product used within a service.

Dutrueux, C-495/10 — coexistence of product and service-provider liability.

W and Others, C-621/15 — proof of defect and causation in technically difficult circumstances.

O'Byrne, C-127/04 — identifying the producer and putting the product into circulation.

Skov and Bilka, C-402/03 — producer/supplier responsibility.

IP v Borsana, C-2/97 — workplace equipment and safety.

Commission v UK, C-127/05 — employer's occupational-safety obligations.

None of these cases is a direct European judgment concerning an injured pilot inside a malfunctioning flight simulator. They are the closest relevant European authorities for constructing the legal analysis. The actual civil claim would ultimately depend upon the national law applicable to the accident, contract, employment relationship and product-liability claim.

31. Exam-Ready Conclusion

Aviation training simulator failure injury claims in Europe arise from the interaction of FSTD aviation regulation, product liability, workplace safety, contract law and national tort/delict principles. Regulation 1178/2011 establishes detailed requirements for FSTDs, including qualification, continuing integrity, modification control and safety arrangements. The 2026 amendments further modernise the regulatory framework for FSTDs. (Eur-Lex)

Where a simulator causes injury, liability may potentially attach to the manufacturer, software developer, FSTD operator, approved training organisation, maintenance contractor, instructor or employer. Product-liability cases such as Boston Scientific, Veedfald, Dutrueux, O'Byrne and Skov provide the principal European analogies, while IP v Borsana and Commission v UK support the separate workplace-safety analysis.

The central principle is that qualification of a flight simulator does not by itself eliminate civil liability. The court must determine whether the simulator was defective or improperly maintained, whether the operator or training organisation breached an applicable safety or contractual duty, whether the failure caused the injury, and which category of damages is recoverable under the applicable national law.