Europe has the Cyber Resilience Act and of course the more well known General Data Protection Regulation. They do not mandate licensing but they do establish liability when something goes wrong