Machinery Regulation 2027: Here's What's Changing.
Effective January 20, 2027, the EU Machinery Regulation will replace the previous Machinery Directive. It makes digital safety, software, and AI integral parts of machine safety.
Why CSR Is on the Rise
Machine safety is going digital.
The new Machinery Regulation (MVO) establishes uniform rules across the EU and adapts product safety requirements to connected, software-controlled, and increasingly autonomous machines.
For companies, this means that risks associated with cyberattacks, software updates, and machine learning systems will need to be incorporated into design, risk assessment, and technical documentation going forward.
The 6 Key Changes
What's Changing Under the Machinery Regulation.
The most important changes in Regulation (EU) 2023/1230—summarized briefly and in a practical manner.
Cybersecurity Becomes a Security Requirement
Connected machines must be protected against unintentional or malicious tampering. Digital interfaces and safety-related software must be taken into account in the risk assessment.
Cybersecurity Machines
Focus on AI and Learning Systems
Self-learning safety functions must not cause machines to enter an unsafe state. The logic, data basis, and behavior must be documented in a traceable manner.
AI & Machine Safety
"Material Change" Clearly Defined
Digital modifications can also be significant. If new hazards arise or existing risks increase, the party making the modification may become the manufacturer—with all the associated CE obligations.
Machine Retrofits
Stricter inspections for high-risk machinery
For machinery covered by Annex I, Part A, a Notified Body must be involved—even if harmonized standards are fully applied.
Conformity Assessment
Digital user manual available
Instructions and declarations of conformity may be made available digitally under specified conditions. They must be accessible, printable, and remain available in the long term.
Technical documentation
More products in this application area
Security software can itself be a safety component. Incomplete machines, autonomous systems, and products that only function fully when combined with software are also covered more clearly.
Scope of Application: MVO
Machinery Directive vs. Machinery Regulation
From Mechanical Products to Digital Responsibility.
| Topic | Previously: Directive 2006/42/EC | New: Regulation (EU) 2023/1230 |
|---|---|---|
| 01 Legal Form | National implementation required | Applies directly in all EU member states |
| 02 Digital Risks | Only Indirectly Covered | Cybersecurity, software, and AI are explicitly regulated |
| 03 Significant Change | Interpretation Based on Guidelines and Practice | Physical and Digital Changes Defined Legally |
| 04 Documentation | Operating instructions are generally provided in paper form | Digital format is possible as standard if certain conditions are met |
What Companies Should Be Assessing Right Now
The deadline is what matters—not the project start date.
As a general rule, the decisive factor is when a machine is placed on the market or put into service. Projects with delivery dates on or after January 20, 2027, should therefore be planned in accordance with the new requirements.
1
Review the product portfolio
Which machines fall under the MVO or Annex I?
2
Assessing Digital Risks
Which software, interfaces, updates, or AI features are relevant to security?
3
Update Documentation
What documentation, instructions, and conformity assessment procedures need to be updated?
Frequently Asked Questions
A Quick Overview: The New Machinery Regulation
Serving the industry since 1995

