Design Defect Analysis and Safer Alternative Designs

The engineering methodology for identifying and evaluating a safer alternative design in a product liability matter, with the Ford Pinto fuel system as a detailed risk-utility case study.

Last updated: 10 Jun 2026

Calling a product defectively designed is easy. Proving it in a way that survives cross-examination by a competent opposing engineer is another matter. The legal standard in most jurisdictions now demands something specific: a safer alternative design (SAD). Not 'it could have been better' in the abstract, but a concrete engineering proposition: here is the modified design, here is what it costs, here is the performance it sacrifices, and here is the reduction in risk.

This requirement turns the design defect analysis into a structured engineering exercise. The analyst must understand what standards governed the product, what competitor solutions existed, what modifications were technically feasible at the time of manufacture, and how to quantify the benefit of changing the design. Get this right and the analysis holds up under cross-examination. Omit the SAD or make it vague and the opinion collapses under the first serious challenge.

The Ford Pinto fuel system litigation from the 1970s is the best-documented example of what happens when a company conducts exactly this kind of analysis internally, and then chooses the wrong answer. The internal documents that surfaced during discovery became a defining moment in product liability law and a permanent case study in how risk-utility analysis can be corrupted by economic reasoning that discounts human life too crudely.

Key terms

Safer alternative design (SAD): A specific, concrete modification to a product that would have reduced the hazard in question while preserving the product's essential utility, and that was technically and commercially feasible at the time of manufacture.
Technical feasibility: The capacity to implement a design change with materials, processes, and knowledge available at the date the product was manufactured and sold.
Commercial feasibility: Whether the cost of the safer design, spread across expected production volumes, would have made the product unaffordable or unmarketable.
Design standard: A document produced by a recognised body (ISO, ASTM, UL, EN, national authority) specifying minimum technical requirements for a product category. Meeting a standard is persuasive evidence of non-defectiveness but not a conclusive defence.
Custom versus mandatory standard: Voluntary industry standards represent custom in the industry; regulatory standards (mandatory by law) set the legal floor. A product can violate custom without violating regulation, or meet both and still be found defective under Risk-Utility analysis.
Risk-Utility calculus: The balancing of expected harm (probability of injury multiplied by severity) against the burden of prevention (cost of the SAD plus any loss of utility). A design is defective when risk outweighs utility and a feasible SAD exists.

The SAD requirement: why vague criticism is not enough

Saying 'it could have been safer' without a specific proposal gives a court nothing to evaluate.

The Restatement Third of Torts: Products Liability § 2(b) states that a product has a design defect if the foreseeable risks of harm could have been reduced or avoided by a reasonable alternative design and the omission of that design renders the product not reasonably safe. The phrase 'reasonable alternative design' is doing a great deal of work in that sentence.

Courts interpret this to require that the plaintiff's engineering expert identify a design that: (1) actually existed or was technically achievable with knowledge available at the time; (2) would have materially reduced the risk; (3) would not have made the product too expensive or fundamentally less useful; and (4) was not already present in the product (ruling out arguments that the manufacturer should have used their own optional safety feature as standard).

From the engineer's perspective, identifying a SAD begins with a survey of the state of the art at the date of manufacture: patents in force, competitor product lines, trade publications, and the minutes of standards committee meetings. Competitor products are particularly useful because they demonstrate not just that a different design existed but that it was manufacturable and commercially viable.

Evaluating the SAD: feasibility, cost, and utility change

A SAD that is too expensive, too heavy, or too impractical fails the test.

Once a candidate SAD is identified, the engineer must evaluate it along four dimensions. Skipping or glossing any one of them gives opposing counsel a clean line of attack.

Technical feasibility: could the modified design have been manufactured, assembled, and quality-controlled with the processes available when the product was made? This requires examining whether the materials and tooling existed, not just whether the concept is sound.
Commercial feasibility: what does the modification add to unit cost at production scale? An extra bracket that adds $0.40 to a $200 product is a different analysis from one that doubles the manufacturing cost. The comparison is to production-volume cost, not prototype cost.
Change in utility: does the SAD reduce the product's performance, increase its weight, make it harder to use, or limit its application? A power tool with a mandatory guard that prevents certain cuts has lower utility for some tasks. This cost must be weighed.
Magnitude of risk reduction: by how much does the SAD reduce the probability or severity of the injury mode? A modification that reduces injury frequency by 80% is a stronger foundation than one that reduces it by 10%. This is often established through failure mode and effects analysis (FMEA) or comparative field incident data.

SAD evaluation framework: four dimensions an engineer must address.

Design standards: custom versus mandatory, and why they are not a safe harbour

A standard is a floor, not a ceiling, and courts know it.

Industry standards play a dual role in design defect litigation. They can be used by the plaintiff to show the defendant fell below the accepted minimum, or by the defendant to show the product met the recognised benchmark. Neither use is fully conclusive, and an engineer must understand the difference between voluntary standards and mandatory regulations before advising on their evidential weight.

Category	How it arises	Evidential weight in design defect claim
Voluntary consensus standard (ISO, ASTM, UL, EN)	Developed by industry bodies; compliance is optional unless adopted by regulation	Strong evidence of industry custom; not a safe harbour; courts may find it below the risk-utility threshold
Mandatory product safety regulation	Enacted by a government body (CPSC, CE marking directives, TGA)	Sets the legal floor; non-compliance creates near-automatic liability; compliance is necessary but not sufficient
Internal company specification	Set by the manufacturer's own engineering department	Used in manufacturing defect analysis; deviation from it establishes the defect
Post-incident standard revision	Standard tightened after the injury	Admissible to show the standard was inadequate, though courts restrict its use to establish the prior standard was deficient

The leading principle, established in US case law and reflected in the EU Product Liability Directive's interpretation, is that regulatory compliance shifts but does not eliminate the burden on the plaintiff. A product that met every applicable standard at the time of manufacture and still caused harm may still be found defective under risk-utility analysis if a feasible SAD was available and the manufacturer chose not to incorporate it.

The Ford Pinto fuel system

When a company runs a risk-utility analysis correctly but weighs the inputs badly.

The Ford Pinto is the most cited design defect case in product liability teaching, not because the engineering analysis was novel but because the internal documents that surfaced during discovery made the risk-utility calculus startlingly visible. The Pinto, introduced in 1970, had a fuel tank positioned between the rear bumper and the rear axle. In moderate rear-end collisions, the tank could be punctured by a bolt from the differential or crushed between the bumper and axle, causing fuel spillage and fire.

Ford's engineers had identified the hazard during pre-production testing. A design modification, a plastic shield between the fuel tank and the differential bolts, or a repositioned tank, was available and had been costed. The modification would have added approximately $11 per vehicle at production scale. Ford's internal analysis, which became known as the 'Pinto memo' after it was obtained during discovery in Grimshaw v. Ford Motor Co. (California, 1978), estimated that the total cost of the modification across the production run would be approximately $137 million, versus an estimated liability payout of approximately $49.5 million calculated using an economic value for each anticipated death and serious injury.

The jury awarded $125 million in punitive damages (later reduced to $3.5 million on appeal). The case was a pivotal moment in the discipline for two reasons. First, it established that a manufacturer's internal cost-benefit analysis, if it expressly values human life against the cost of safety modifications, can be devastating evidence of conscious disregard. Second, it illustrated that the risk-utility calculus can be run correctly in form but produce the wrong answer when the value assigned to human injury is set too low.

Presenting the SAD analysis in an expert report

The analysis is only as useful as the report that carries it into court.

An expert report presenting a SAD analysis must do several things simultaneously. It must show the court what the SAD looks like (drawings, photographs of a prototype or exemplar, or a specification). It must document the technical feasibility research: patents dated before manufacture, competitor products, trade publications, and standards revisions. It must quantify the cost as accurately as available data permit, and it must describe the utility impact honestly, including any performance or convenience loss that the user would bear.

Describe the existing design
Include engineering drawings or dimensional photographs. State which design standard, if any, it was designed to meet. Identify the hazard mode with specificity, not 'the product was dangerous' but 'when rear impact force exceeded N newtons the fuel tank moved forward onto the differential housing, rupturing at the bolted flange.'
Describe the SAD in concrete terms
Provide a drawing, a specification, or reference to an existing product that embodies it. Vague descriptions ('a more robust tank' or 'better mounting') are not SADs under the legal standard and invite the court to strike the opinion.
Document feasibility at the date of manufacture
Provide the patent publication date, competitor product introduction date, or standards revision date that proves the SAD was available. If the SAD uses materials or processes that did not exist at the time, it fails the feasibility test regardless of how well it works now.
Quantify cost and utility impact
Provide a cost estimate at production scale, not prototype cost. Document any performance or utility change. If the SAD adds weight that affects fuel economy, say so and quantify it. Acknowledging trade-offs builds credibility; hiding them creates cross-examination opportunities.
Quantify risk reduction
Use incident data, FMEA, or controlled test results to estimate how much the SAD reduces the injury probability or severity. This completes the Risk-Utility calculation and lets the court see why, in engineering terms, the SAD should have been adopted.

Worked example

Evaluating a SAD for a children's folding chair collapse

A concrete SAD evaluation from identification through court-ready quantification.

A six-year-old sits on a folding aluminium chair at a school event. The locking mechanism releases spontaneously and the child falls, sustaining a wrist fracture. The plaintiff's engineer is retained to evaluate whether a design defect exists and to identify a SAD.

Identify the hazard mode. Examination of the recovered chair shows a spring-loaded lock that holds the rear legs in the open position. The spring retainer is a single-component stamped bracket. Under repeated loading and vibration, the bracket fatigues and the spring disengages, releasing the lock. This is confirmed by testing five exemplar chairs from the same production run: two show fatigue cracks in the bracket after simulated use cycling.
Survey for SADs. A patent search finds a two-component locking system patented by a competitor six years before the defendant's product was manufactured. The competitor's design uses a secondary redundant latch that prevents accidental release even if the primary spring disengages. The competitor's chair was sold at a retail price $3.50 higher than the defendant's.
Assess feasibility. The competitor's patent predates the defendant's manufacture by six years, so the design was available. The stamped-metal components it uses are standard in the manufacturer's existing supplier chain. Technical feasibility is established.
Quantify the cost. The additional components in the two-component locking system are estimated at $1.20 per chair in production quantities. The competitor's $3.50 higher retail price includes a margin; the manufacturing cost increment is closer to $1.20 to $1.50. This is less than 3% of the defendant's retail price.
Quantify utility change and risk reduction. The SAD adds negligible weight (under 50 grams). It introduces a second step to fold the chair for storage, adding approximately three seconds to the operation. The FMEA shows the two-component system reduces the probability of spontaneous release under normal use fatigue by approximately 90%, based on the absence of any reported locking failures in the competitor's ten-year production history.

The analysis concludes that a SAD existed that was technically feasible, commercially practical (adding under $1.50 per unit), involved trivial utility loss, and would have reduced the spontaneous-release risk by approximately 90%. Under the Risk-Utility Test, the design was defective. The standards analysis adds a further point: no mandatory standard required a secondary locking mechanism, but the voluntary ASTM F1858 standard for folding chairs was amended to require one four years before the defendant manufactured the chair. The defendant was aware of the amendment, meeting minutes show its representative was on the committee, and chose not to adopt it.

Check your understanding

Question 1 of 4· 0 answered

Why does the Restatement Third require the plaintiff to identify a specific safer alternative design rather than simply arguing the product was too dangerous?

Key Takeaways

A safer alternative design (SAD) must be specific, technically and commercially feasible at the date of manufacture, and must materially reduce the risk without destroying the product's utility.
The four-part SAD evaluation covers technical feasibility, commercial feasibility, change in utility, and magnitude of risk reduction; omitting any one creates a gap that opposing experts will exploit.
Design standards are evidence of industry custom, not a safe harbour; a product can meet every applicable standard and still fail the Risk-Utility Test if a feasible SAD existed.
The Ford Pinto case shows that an internal risk-utility analysis that explicitly trades predicted deaths against modification cost will almost certainly be presented to a jury and interpreted as evidence of conscious disregard for safety.
An expert report presenting a SAD must include a concrete description of the alternative, patent or competitor evidence establishing its availability, a production-scale cost estimate, a utility-impact assessment, and a risk-reduction quantification.

What is a safer alternative design (SAD) and why is it required?

A SAD is a concrete alternative product configuration that would have reduced or eliminated the hazard while retaining the product's primary utility. Under the Restatement Third Risk-Utility Test, the plaintiff must identify a SAD to sustain a design defect claim; without one, the claim is speculative. The requirement forces the analysis into a real engineering comparison rather than vague hindsight criticism.

How do engineers assess the feasibility of a safer alternative design?

Feasibility has two dimensions: technical (could the design have been built with materials and manufacturing processes available at the time?) and commercial (would the cost have made the product unaffordable or uncompetitive?). Engineers examine patents, existing competitor products, prototype records, and industry standards in effect at the date of manufacture to determine what was achievable.

Is meeting an industry standard proof that a design is not defective?

No. Standards represent minimum thresholds accepted by a technical consensus process, not necessarily the safest achievable design. Courts have repeatedly found products defective even when they met all applicable standards. Standards are persuasive evidence but do not create a safe harbour in most jurisdictions.

What happened in the Ford Pinto fuel system litigation?

Ford's internal cost-benefit analysis, which became public during litigation in the 1970s, showed the company had calculated that paying tort damages for predicted burn deaths and injuries was cheaper than retrofitting a fuel-system modification across the fleet. Courts and juries treated this document as evidence that Ford knowingly chose a dangerous design for economic reasons, leading to large punitive damage awards and regulatory action.

Test yourself on Forensic Engineering with free, timed mocks.

Practice Forensic Engineering questions

Found this useful? Pass it along.

Spotted an error in this page? Report a correction or read our editorial standards.

Your journey to becoming a forensic professional starts here.

Key Takeaways

Key Takeaways