Machinery: EU Machinery Regulation transition

# Machinery: EU Machinery Regulation transition

Regulation (EU) 2023/1230 replaces the Machinery Directive (2006/42/EC) with directly applicable rules. It applies from 20 January 2027, when the directive is repealed. The regulation updates the health and safety requirements for connected and AI-enabled machinery, permits digital instructions and declarations under conditions, clarifies when a substantially modified machine becomes a new machine, and tightens conformity assessment for high-risk machinery.

Key facts

• Regulation (EU) 2023/1230 entered into force on 19 July 2023 and applies from 20 January 2027, when Directive 2006/42/EC is repealed.
• A small set of provisions applied earlier: Articles 6(2) to (6), (8) and (11), Article 47 and Article 53(3) have applied from 20 July 2024.
• As a regulation it applies directly in all member states, removing national transposition differences in machinery safety law.
• The essential health and safety requirements are updated for evolving technologies, including machinery with AI-based safety functions, connectivity and cybersecurity risks affecting safety.
• Instructions and EU declarations of conformity may be provided in digital form, with paper copies to be supplied on request.
• Substantial modifications can turn a used or altered machine into a new machine with fresh conformity duties; high-risk categories listed in Annex I face stricter assessment routes.

1. What is changing, and what stays familiar

The Machinery Regulation is a recast and modernisation, not a new philosophy. The familiar structure remains: the manufacturer carries out a risk assessment, applies the essential health and safety requirements in Annex III, follows the applicable conformity assessment procedure, draws up the technical documentation and the EU declaration of conformity, and affixes the CE marking. Importers, distributors and authorised representatives keep defined verification and cooperation duties.

What changes is the legal instrument and the content of the requirements. Because it is a regulation, the same text applies in every member state without transposition, which should reduce the variation in how machinery requirements are interpreted and enforced across the EU. The essential health and safety requirements are reworked to address machinery as it is actually built today: machines that are connected, that receive software updates, that use artificial intelligence in safety functions, and whose safety can be compromised through cybersecurity vulnerabilities.

For manufacturers with mature Machinery Directive processes, the transition is an update programme, not a rebuild: risk assessment templates, technical file structures and declaration formats need revision to the regulation's articles and annexes, and the gaps around software, connectivity and AI need new evidence.

2. The application timeline: two regimes during the changeover

The regulation applies from 20 January 2027. From that date, machinery placed on the market or put into service must comply with the regulation, and the EU declaration of conformity must reference Regulation (EU) 2023/1230 rather than Directive 2006/42/EC. There is no grace period for new placements: documentation issued under the repealed directive is not a valid basis for products placed on the market from the application date.

Products already placed on the market before 20 January 2027 under the directive do not need to be re-assessed; the regulation governs new placements. Machinery in development needs a cut-over plan: units placed before the date follow the directive, units placed from the date follow the regulation, and the technical file, risk assessment and declaration must match the regime under which each unit was placed.

A limited set of articles applied early, from 20 July 2024: provisions on high-risk machinery categories and procedures (Article 6(2) to (6), (8) and (11)), Article 47 and Article 53(3). These early-applying provisions concern the administrative and categorisation machinery of the regulation rather than product requirements, but they confirm that the transition is already legally under way.

3. New and updated essential health and safety requirements

Annex III restates the essential health and safety requirements with additions for modern technology. The notable updates include requirements addressing the safety implications of software and software updates, the protection of machinery against corruption (compromise of safety functions through external influence, including cyberattack), and machinery whose safety functions rely on artificial intelligence or machine-learning systems, including provisions on autonomous and self-evolving behaviour.

The regulation also addresses the interaction between safety and cybersecurity: where a cybersecurity risk could compromise the safety of machinery, it must be addressed in the risk assessment and the design. This creates an overlap with the Cyber Resilience Act for connected machinery, and manufacturers of smart machines will need to coordinate both compliance tracks rather than treating them as separate exercises.

Harmonised standards under the regulation are still being developed; until cited standards exist for the new requirements, manufacturers must address the essential requirements directly and document their solutions in the technical file. Following draft standards can be useful evidence, but the presumption of conformity only attaches to standards cited in the Official Journal.

4. Digital instructions and declarations

The regulation permits manufacturers to provide instructions and the EU declaration of conformity in digital format, provided defined conditions are met: the digital version must be accessible, the product must carry information on how to access it, and a paper copy must be provided free of charge on request. This is an opportunity to modernise documentation workflows, particularly for machinery sold in multiple language versions, where digital delivery simplifies updates and version control.

The conditions matter. Digital-only delivery that fails the accessibility or information requirements is non-compliant, and safety-relevant instructions that a user needs at the machine may still be expected in physical form depending on the risk assessment. Treat the digital option as a controlled process: define which documents go digital, how access is guaranteed over the product's lifetime, how versions are controlled, and how paper-on-request is fulfilled.

5. Substantial modifications: when a changed machine becomes a new machine

The regulation clarifies the boundary between maintenance and modification. A machine that undergoes a substantial modification, a change that affects its compliance with the essential health and safety requirements or creates a new hazard, is treated as a new machine: the person carrying out the modification assumes the manufacturer's obligations, including a new risk assessment, technical documentation and declaration of conformity.

This has practical consequences for integrators, refurbishers, and end users who modify machinery in service. Internal policies should define what counts as a substantial modification for each machine type: software changes that alter safety functions, changes to guards or interlocks, increases in speed or load ratings, and changes of intended use are typical triggers. Maintenance, like-for-like part replacement and manufacturer-approved updates remain outside the definition, but the assessment must be documented.

6. High-risk machinery and conformity assessment

Annex I lists categories of machinery and safety components considered high-risk. For these categories, the conformity assessment routes are stricter: depending on the category and whether harmonised standards are fully applied, manufacturers may need EU type-examination or full quality assurance involving a notified body rather than self-assessment through internal production control.

Manufacturers should check now whether their products fall into the listed categories under the regulation's classification, which differs in detail from the directive's Annex IV. Where notified-body involvement is required, capacity planning matters: notified-body lead times are finite, and every manufacturer in a category will be seeking assessment in the same transition window.

7. Preparing the technical file and the supply chain

The technical file must be updated to the regulation's requirements: the risk assessment should cover software, connectivity and AI-related hazards; the list of essential health and safety requirements applied should reference Annex III of the regulation; instructions should meet the new provisions; and the declaration of conformity must cite Regulation (EU) 2023/1230. Component suppliers should be aligned early, since evidence on bought-in safety components, drives, controllers and software feeds the manufacturer's file.

FAQs

Do machines already on the market need to be re-certified?

No. The regulation governs machinery placed on the market or put into service from 20 January 2027. Products already placed under the directive stay under it, but any new placement from the application date must follow the regulation.

Can we keep issuing declarations referencing the directive after January 2027?

No. Declarations for machinery placed from 20 January 2027 must reference Regulation (EU) 2023/1230. Directive-based declarations are not valid for new placements from that date.

What counts as a substantial modification?

A change that affects compliance with the essential health and safety requirements or introduces new hazards, such as altering safety functions, guards, speed or load ratings, or the intended use. The person making the modification then assumes manufacturer obligations.

Are digital manuals enough on their own?

Only if the regulation's conditions are met: accessibility, access information with the product, and paper copies supplied free of charge on request. Safety-critical instructions should be assessed for whether physical provision is still warranted.

How does the regulation interact with the Cyber Resilience Act?

Connected machinery can fall under both. The Machinery Regulation addresses cybersecurity where it affects safety; the Cyber Resilience Act sets horizontal cybersecurity requirements for products with digital elements. Coordinate both tracks in one compliance plan.

Where do we find the harmonised standards?

Harmonised standards are cited in the Official Journal once available. Until the regulation's standards are cited, address the essential health and safety requirements directly and document the solutions in the technical file.

Official sources

• Regulation (EU) 2023/1230 on EUR-Lex (Machinery Regulation)
• European Commission: Machinery
• UK: Placing manufactured goods on the market in Great Britain

Last verified: 2026-09-29. Confirm the consolidated text and the status of cited harmonised standards on EUR-Lex before finalising technical files.