Guide to Machinery Regulation EU 2023/1230
The EU has replaced its long-running Machinery Directive with a directly applicable regulation. That sounds like a legal detail, but it changes how manufacturers, importers, distributors, and users should prepare machinery for the EU market.
Regulation (EU) 2023/1230 was adopted to update machinery safety rules for modern equipment, including connected machinery, autonomous systems, software-based safety functions, and machines that can be modified after they are placed on the market. It keeps the familiar goal of the old regime, safe machinery with CE marking, but it adds clearer duties and new expectations.
This guide explains what changes, who has obligations, what products are covered, and how to prepare before the main application date.
This article is for general information only and is not legal advice.
What EU 2023/1230 changes
The Machinery Regulation EU 2023/1230 replaces Directive 2006/42/EC. The biggest legal change is the form of the law.
A directive had to be transposed into national law by each EU Member State. A regulation applies directly across the EU. That should reduce differences in interpretation and make the rules more consistent from one country to another.
The regulation entered into force in 2023, while the main rules apply from 20 January 2027. Until then, the Machinery Directive continues to govern most placing on the market. Some administrative provisions phase in earlier, but for most manufacturers the practical target is clear: be ready for the new regime before January 2027.
The regulation keeps several familiar concepts:
CE marking
EU Declaration of Conformity
Technical documentation
Essential health and safety requirements
Risk assessment
Conformity assessment procedures
Duties for manufacturers, importers, and distributors
The update matters because machinery is no longer only mechanical. A modern machine may include sensors, remote updates, AI-supported control, cybersecurity risks, and digital instructions. The new regulation addresses those realities more directly than the old directive did.
Which products are covered
The regulation applies to machinery and related products placed on the EU market or put into service. It also covers partly completed machinery, with a different set of documentation and declaration requirements.
The covered categories include:
Machinery
Interchangeable equipment
Safety components
Lifting accessories
Chains, ropes, and webbing
Removable mechanical transmission devices
Partly completed machinery
A few examples help make the scope clearer.
A packaging machine, a woodworking saw, and an automated conveyor system are machinery. A lifting hook sold separately may be a lifting accessory. A light curtain used as a protective device may be a safety component. A motorised unit intended to be incorporated into a larger production line may be partly completed machinery.
The regulation also treats some digital elements as safety-relevant. If software performs a safety function and is placed on the market separately, it can fall within the machinery safety framework as a safety component.
That is a major point for modern machine builders. Compliance is no longer only about guards, distances, and emergency stops. It also includes the software and control logic that keep people safe.
Who has obligations under the regulation
The regulation defines duties for several economic operators. The exact duty depends on the role in the supply chain.
Manufacturers
The manufacturer carries the main responsibility. Before placing machinery or a related product on the market, the manufacturer must make sure it meets the applicable essential health and safety requirements.
That usually means the manufacturer must:
Carry out a risk assessment
Design and build the machine in line with the results
Prepare technical documentation
Follow the right conformity assessment procedure
Provide instructions and safety information
Draw up the EU Declaration of Conformity
Affix the CE marking where required
The manufacturer must also keep documentation available for market surveillance authorities.
Importers
An importer brings machinery from outside the EU into the EU market. The importer must check that the manufacturer has completed the required conformity steps.
That includes checking for CE marking, the EU Declaration of Conformity, instructions, and traceability information. If an importer has reason to believe the product is not compliant, they should not place it on the market until the issue is fixed.
Distributors
Distributors also have duties, although they are more limited. They must act with due care and check that obvious compliance information is present.
For example, a distributor should check whether machinery bears the CE marking, has the required documents, and includes instructions in a language understood by users in the destination Member State.
Users who modify machinery
The regulation includes clearer rules on substantial modification. If an existing machine is changed in a way that creates a new risk or increases an existing risk, the person making the change may take on the responsibilities of a manufacturer.
That point is easy to overlook. A company that upgrades controls, changes speed, alters guarding, or adds automation to an existing machine may need to reassess compliance.
The new focus areas to understand
The regulation builds on the old machinery framework, but several areas deserve special attention.
High-risk machinery gets a clearer structure
The regulation uses an annex to identify categories of machinery that may require stricter conformity assessment. The annex is split into parts.
For some high-risk categories, a notified body must be involved. For others, the manufacturer may use internal production control if harmonised standards or common specifications fully cover the relevant requirements. If not, a notified body may be needed.
This matters because the route to compliance can affect cost, timing, and technical planning. A machine that needs third-party assessment cannot be treated like a standard low-risk machine at the end of the design process. The notified body may need technical files, test evidence, drawings, calculations, and safety validation data.
Cybersecurity becomes part of machinery safety
The regulation recognises that digital interference can create physical danger. If unauthorised access changes how a machine behaves, safety can fail.
That does not turn the Machinery Regulation into a full cybersecurity law. It does mean manufacturers must consider protection against corruption where it affects safety functions.
Practical questions include:
Can a software update change safety-related parameters?
Can remote access override safe operating limits?
Are safety settings protected against accidental or unauthorised changes?
Can the machine record evidence of safety-related software changes?
Are control systems designed so faults are detected and handled safely?
For connected machinery, cybersecurity and functional safety now sit closer together.
AI and self-evolving behaviour are addressed
The regulation refers to machinery with fully or partly self-evolving behaviour using machine learning approaches where that behaviour affects safety functions.
The key concern is control. If a system can change behaviour after deployment, the manufacturer must show that safety remains assured within intended limits.
This is especially relevant for autonomous mobile machinery, robotic systems, and equipment using adaptive control. The risk assessment should not only ask how the machine behaves on day one. It should also consider how it may behave after learning, updating, or adapting.
Digital instructions are allowed with conditions
The regulation allows instructions to be provided in digital form in many cases. This is a welcome change for complex machinery where instructions may include large files, videos, software references, or updateable content.
Still, digital instructions must be accessible and suitable for the user. For machinery intended for non-professional users, key safety information may still need to be provided in paper form. Paper instructions must also be available on request under the conditions set by the regulation.
For manufacturers, this means digital documentation should be treated as a controlled compliance item, not as a loose download page. Version control matters.
How conformity assessment works
The core process remains familiar. Before machinery is placed on the EU market, it must go through the correct conformity assessment route.
A typical compliance process looks like this:
Step | What it involves | Why it matters |
Define the product | Identify whether it is machinery, a related product, or partly completed machinery | The category controls the documentation and declaration required |
Check the applicable requirements | Review the essential health and safety requirements | The design must address all relevant hazards |
Carry out risk assessment | Identify hazards, estimate risks, and reduce them | The technical file should show a reasoned safety process |
Apply standards where suitable | Use harmonised standards or other technical solutions | Standards can support a presumption of conformity |
Choose the conformity route | Decide whether internal control or notified body involvement applies | High-risk categories may need external assessment |
Prepare documentation | Compile drawings, calculations, test data, software information, and instructions | Authorities can request evidence of compliance |
Issue the declaration | Draw up the correct EU declaration | This is a formal compliance statement |
Mark the product | Affix CE marking where required | CE marking signals conformity with applicable EU law |
Standards remain useful, but they are not the whole job. A standard may not cover every feature of a specific machine. The risk assessment should fill the gaps.
What should be in the technical documentation
Technical documentation is the evidence behind the CE marking. It should show how the machine meets the regulation.
The exact contents depend on the product, but a strong technical file usually includes:
A general description of the machinery
Design and manufacturing drawings
Control circuit diagrams
Software and safety function descriptions where relevant
Risk assessment records
Applied standards and specifications
Test results and calculations
Inspection reports
Instructions for use
Declaration documents
Details of quality controls for production
For partly completed machinery, the documentation route differs. Instead of an EU Declaration of Conformity, the manufacturer provides a declaration of incorporation and assembly instructions. The final machinery manufacturer then takes responsibility for the complete machine before it is placed on the market or put into service.
Good documentation does not need to be decorative. It needs to be traceable, complete, and easy to defend. If a market surveillance authority asks why a design choice was made, the file should answer that question.
Practical preparation before 2027
The main application date may seem distant, but machinery development cycles can be long. A machine designed now may still be sold, modified, supported, or assessed under the new rules.
A practical preparation plan should start with product mapping.
Identify which products fall under the regulation. Note which are complete machinery, which are partly completed machinery, and which may count as related products or safety components.
Next, review high-risk categories. If any product may fall into the stricter annex categories, assess whether notified body involvement will be required. Do this early, not during final production.
Then review software and connectivity. Any system with remote access, update capability, safety software, autonomous behaviour, or data-based adaptation deserves a focused safety review.
Manufacturers should also update document templates. Declarations, instructions, risk assessment forms, and technical file checklists may need revision to match the regulation’s terminology and requirements.
A useful readiness checklist includes:
Product scope review completed
High-risk classification checked
Risk assessment method updated
Cyber-related safety risks reviewed
Software safety evidence documented
Digital instruction process controlled
Substantial modification process defined
Importer and distributor checks agreed
Technical file templates updated
Staff trained on new obligations
Do not wait for the final months before application. Notified bodies, test labs, and internal engineering teams may face heavy demand as the date approaches.
Common mistakes to avoid
One common mistake is treating the regulation as a simple renaming of the Machinery Directive. Much of the structure is familiar, but the details matter.
Another mistake is separating software from machine safety. If software affects safety, it belongs in the compliance file.
A third mistake is assuming modifications are only a workplace safety issue. Some modifications can trigger product compliance duties, especially where they change the intended function or risk profile of the machine.
Poor instructions are another weak point. Instructions must match the machine that is actually supplied. If software versions change, operating modes change, or guarding options differ, the instructions should reflect that.
Last, do not rely on CE marking alone when importing. Importers and distributors have their own duties. A badge on a machine is not enough if the supporting documents are missing or inconsistent.
The key takeaway
EU 2023/1230 keeps the core idea of European machinery safety: place safe machinery on the market, prove conformity, and make responsibilities clear. The new regulation updates that idea for connected, software-driven, and more autonomous equipment.
The best next step is simple: review your product range against the new scope, identify high-risk machinery early, and update risk assessment and documentation processes before the 2027 application date. The organisations that prepare now will have fewer surprises when the regulation fully applies.
Comments