The January 20, 2027 It is the date that every company in the European Union that manufactures, integrates, or uses machinery needs to mark on its calendar. On that day, the Regulation (EU) 2023/1230, which permanently repeals Directive 2006/42/EC and establishes a new regulatory framework for the placing on the market, putting into service, and modification of machinery. This is not a minor update: It affects the technical file, conformity assessment, CE marking, and the handling of software and cybersecurity as an integral part of the machine's safety.
There's still time, but not as much as it seems. Companies that wait until 2027 to begin the transition will have to redo their documentation, design, and validations under pressure. Those that start now will be in control.
What is Regulation (EU) 2023/1230, and why does it represent a change for the industry?
Regulation (EU) 2023/1230 is the new European regulation governing the safety of machinery, related products, and partly completed machinery. It was published on June 29, 2023, in the Official Journal of the EU and took effect on July 19, 2023, although it will not become generally mandatory until January 20, 2027.
The most profound change lies not in the security requirements themselves, but in their legal status: being a regulation and not a directive, is applied directly and uniformly in all Member States, without the possibility of differing national transposition. This eliminates the disparities that Directive 2006/42/EC created among countries and requires companies to operate within a single, common framework.
Key Changes in the New Machinery Regulation 2023/1230
| Appearance | Directive 2006/42/EC | Regulation (EU) 2023/1230 ↓ What's New |
|---|---|---|
| Legal Status | Directive: required national implementation, leading to differences among countries | Regulation: Direct and uniform application in all Member States without transposition New |
| Software and Control Systems | Not specifically addressed. The software was not considered a security component. | The software is recognized as a security component. It must be included in the risk analysis. New |
| Cybersecurity | Unregulated. Remote connections and digital systems were outside the scope | Specific cybersecurity requirements for connections, remote updates, and protection against unauthorized access New |
| Artificial Intelligence | Not covered | AI is included as a technology to be evaluated in the machine's risk analysis New |
| Instructions for Use | On paper as the standard format. Digital was optional. | Digital by default. On paper only if the customer specifically requests it. Change |
| Declaration of Conformity | EC Declaration of Conformity | EU Declaration of Conformity, with a new format and additional information requirements Change |
| CE Marking | Standard nameplate without digital contact information | The label has been updated to include the manufacturer's website and digital contact information Change |
| High-Risk Machines | Listed in Annex IV. Assessment by a notified body is mandatory in certain cases | Listed in Annex I. Mandatory third-party verification and certification. Expanded list and clearer criteria Change |
| Substantial modification | An existing concept, but one that is interpreted differently from country to country | This is clarified in greater detail. The operator who makes substantial modifications assumes all the obligations of the manufacturer. Clarification |
| Obligations of Importers and Distributors | Less detailed. Main focus on the manufacturer | Strengthened obligations for all economic operators: manufacturers, authorized representatives, importers, and distributors Change |
| Ergonomic factors | Included but subject to general requirements | Stricter ergonomic requirements in the design and manufacture of machines Expanded |
Why was this regulatory update necessary?
Directive 2006/42/EC was drafted in a context in which Software, connectivity, and artificial intelligence were not part of the machines' design. In 2027, that scenario is radically different. Modern machines incorporate digital control systems, remote connections, firmware updates, and machine learning capabilities that the previous directive did not address. The new Regulation directly addresses these elements, by introducing specific cybersecurity requirements and recognizing software as a security component of the machine.
When does the new Machinery Regulation take effect?
The Regulation is from Mandatory implementation as of January 20, 2027. Until that date, Directive 2006/42/EC remains the framework of reference for machinery placed on the EU market for the first time. However, some provisions of the Regulation are already in effect and It is best not to wait until 2027 to begin adapting: Technical documentation, declarations of conformity, and risk assessments prepared from now on must be in compliance with the new regulation by the deadline.
Which companies are affected by the new Machinery Regulation?
It affects all economic operators in the supply chain: manufacturers, authorized representatives, importers, and distributors. It also affects the companies that use machinery that make substantial modifications to existing equipment, since in that case the operator may become a manufacturer for the purposes of the Regulation, assuming all the corresponding obligations, including a new conformity assessment and CE marking.
What obligations must companies fulfill under the Machinery Regulation?
The main obligations include updating the technical file in accordance with the new requirements, preparing the EU Declaration of Conformity in the new format, ensuring that the instructions for use are provided by default in digital format, reviewing the CE marking (which incorporates new information requirements), and assessing the risks associated with software, connectivity, and cybersecurity as an integral part of the machine’s risk analysis.
How can you prepare to comply with the Machinery Regulation by 2027?
The preparation has four key components. The first is audit the machinery inventory: review which pieces of equipment are affected, which have undergone substantial modifications, and what the current status of their technical documentation is. The second is update the procedures for conformity assessment and CE marking to bring them into line with the new requirements. The third is Addressing industrial cybersecurity: identify the connections, control systems, and remote updates that are part of each machine and assess their risks. And the fourth is train the technical teams in the new requirements, particularly regarding digitization, security software, and AI applied to machinery.
What happens if a company fails to comply with Regulation 2023/1230?
Noncompliance has direct consequences. Market surveillance authorities may request documentation regarding the CE marking not only in the event of an accident, but also in response to allegations of noncompliance by citizens or other companies. Machines that do not meet the requirements may be withdrawn from the market. And if a company has substantially modified a piece of equipment without following the required conformity assessment process, it assumes the manufacturer’s legal liability for that machine.
How to Adapt to the New Machinery Regulation, Step by Step?
The most efficient adaptation process follows this sequence: identify the scope (which machines and products are affected), review existing technical documentation and identify gaps with respect to the new regulation, update the risk assessments to incorporate the new software and cybersecurity requirements, adapt the user instructions to a digital format, draft the new EU Declaration of Conformity, and train the technical team responsible for compliance on the specific aspects of Regulation 2023/1230.
Frequently Asked Questions About the Machinery Regulation 2023/1230
Does it completely replace Directive 2006/42/EC?
Yes. Regulation (EU) 2023/1230 repeals the Directive 2006/42/EC and Directive 73/361/EEC effective January 20, 2027. Until that date, the directive remains the applicable framework for machinery placed on the EU market for the first time.
Does it also affect older machines?
Not retroactively simply because of a change in the regulations. However, If an existing machine is substantially modified, It can be considered a new machine for the purposes of the Regulation, which requires a new, comprehensive conformity assessment. Reviewing the machine fleet now and properly documenting the changes made is essential to minimizing risks as we approach 2027.
When will the new regulation take effect?
The The general effective date is January 20, 2027. However, some specific provisions are already in effect. Certification bodies and industrial safety experts unanimously recommend not waiting until that date to begin the transition.
