Machinery Regulation
From 20 January 2027 the Machinery Regulation replaces the Machinery Directive — with cybersecurity for safety functions and digital instructions.
- Reference
- Regulation (EU) 2023/1230
- Status
- Applies soon
- Sources last checked
What it is
The regulation applies directly in all Member States. New essential requirements cover protection against corruption (malicious or accidental) of software and data relevant to safety, safety and reliability of control systems, and AI-based safety functions. The Digital Omnibus on AI (Regulation (EU) 2026/1744) moves the AI-specific requirements for machinery into the Machinery Regulation; they are to be added by delegated acts that must apply by 2 August 2028. Industry asked to postpone the cybersecurity requirements; as of the last review this has not been adopted.
Who is affected
Manufacturers, importers and distributors of machinery, related products (safety components, interchangeable equipment, lifting accessories …) and partly completed machinery; integrators who substantially modify machines.
What you have to do
- Machines placed on the market from 20 January 2027: new conformity assessment under the regulation, including the new cybersecurity-related requirements.
- Check whether a product falls into Annex I (high-risk categories) — some require third-party assessment.
- Substantial modification of a machine (e.g. retrofit, new control software) can make the integrator the manufacturer.
- Instructions may be digital; a paper copy must be provided free of charge on request at the time of purchase, and for non-professional users the essential safety information must be provided on paper.
Fact check
Not correct “The cybersecurity requirements of the Machinery Regulation have been postponed to 2027/2028.”
Industry associations requested a postponement, but it has not been adopted (status at last review). What was shifted to 2028 are the AI-specific requirements (via Regulation (EU) 2026/1744). Plan for 20 January 2027.
Partly correct “A machine with CE under the old directive can still be sold forever.”
Machines placed on the market before 20 January 2027 stay legal. Each unit placed on the market from that date must comply with the regulation.
Sources
- Regulation (EU) 2023/1230 (Machinery Regulation) — Official Journal text (opens external website) ↗
- Machinery — Machinery Regulation overview (opens external website) ↗
- Regulation (EU) 2026/1744 (Digital Omnibus on AI) — Official Journal text (opens external website) ↗
- Joint industry call on cybersecurity and the Machinery Regulation (19 Jan 2026) (opens external website) ↗
General information, not legal advice. Authentic are only the texts published in the Official Journal of the EU and the Austrian Federal Law Gazette.
Not sure where your product stands?
Send us the product and its documents. We check the technical file against the rules on this radar and tell you what is missing — and source an EU-ready alternative if needed.