EU Machinery Regulation
Regulation (EU) 2023/1230 -- replacing the Machinery Directive 2006/42/EC with directly applicable rules for machinery safety, including AI-enabled and autonomous systems.
If your company makes, sells, or uses industrial machinery in Europe, there is a major rule change coming. The EU has replaced its decades-old Machinery Directive with a new Machinery Regulation that takes full effect on 20 January 2027. Unlike the old directive, this regulation applies directly and identically in every EU member state -- no national interpretation, no local variations, one set of rules for the entire single market.
The biggest shift is that the regulation now explicitly covers technologies that did not exist when the original rules were written. Collaborative robots working alongside people on factory floors. Autonomous vehicles navigating warehouses without a driver. AI systems that make safety-critical decisions in real time. If your machinery uses artificial intelligence for any safety function, a notified body must independently verify it before you can sell it in Europe.
The regulation also modernises how manufacturers communicate with their customers. Paper manuals are no longer required by default -- digital instructions delivered via a URL or QR code are now the standard format. But manufacturers must still provide printed copies free of charge when a customer asks, for the entire expected lifetime of the machine.
Perhaps most important for companies that modify or retrofit existing equipment: anyone who makes a "substantial modification" to a machine -- including software updates that affect safety -- is now legally treated as the manufacturer of that machine, with all the obligations that come with it. If you upgrade, integrate, or digitally transform machinery, you need to understand where the line is.
Compliance Atlas tracks the EU Machinery Regulation alongside related legislation -- the AI Act, the General Product Safety Regulation, the Cyber Resilience Act, and more. We monitor enforcement actions, court rulings, and standards updates so you can see exactly how these rules intersect and evolve over time.
Browse all tracked regulations →The transition from directive to regulation is not cosmetic. Under the old system, each EU member state transposed the Machinery Directive into national law, creating 27 slightly different implementations. Manufacturers selling across borders had to navigate these variations. The new regulation eliminates that fragmentation entirely -- one legal text, directly applicable everywhere.
The regulation also sits at a critical intersection with other EU legislation. The AI Act governs high-risk AI systems. The Cyber Resilience Act covers connected products. The General Product Safety Regulation sets baseline safety rules. Machinery that incorporates AI, connects to networks, and is sold to consumers may trigger obligations under all of these frameworks simultaneously. Coordination across compliance teams is no longer optional.
For companies already compliant with the old directive, the gap analysis is the immediate priority. Most existing harmonised standards (EN standards) will continue to provide presumption of conformity during the transition, but they will need updating to cover new requirements around cybersecurity, AI, and digital documentation. CEN and CENELEC are actively revising these standards, and early engagement is advisable.
Click each area to see detailed comparison and practical impact.
Machinery in these categories requires mandatory third-party conformity assessment by a notified body.
New requirements addressing machine learning, self-evolving systems, and autonomous decision-making in safety-critical contexts.
AI-enabled machinery must ensure that autonomous or semi-autonomous behaviour remains within predefined safe operational parameters at all times. The machine must not perform actions outside its intended use envelope.
Machinery incorporating self-evolving or machine learning behaviour must include mechanisms to prevent safety functions from being degraded through learning. Safety boundaries must be immutable regardless of operational experience.
Autonomous machinery must provide operators with the ability to override autonomous decisions and immediately halt machine operation. Override must not require specialised tools or software access.
Safety-critical functions must be protected against intentional or unintentional corruption through hardware and software interfaces, including remote access, wireless connections, and software updates.
Documentation must describe the autonomous decision-making logic, the operational design domain, and the conditions under which the machine may act without human instruction.
Any software or hardware that performs a safety function and incorporates AI or machine learning must undergo conformity assessment by a notified body. Self-certification is not permitted.
Three routes to CE marking, depending on machinery type and risk classification.
For the first time, the EU permits digital-first documentation for machinery.
Select your company type for tailored compliance guidance.
Inventory all machinery products against the new Annex I high-risk categories. Identify which require third-party conformity assessment and begin notified body engagement.