Machinery Regulation (EU) 2023/1230: what changes on 20 January 2027
On that date the Machinery Directive is repealed. There is no transition period, no overlap, and no choice between the two regimes.
If you build machines in the United States and sell them into Europe, this is the only hard deadline on your compliance calendar — and it is closer than it looks, because it does not apply from when you design the machine. It applies from when the machine is placed on the EU market. A machine you are quoting today for delivery in spring 2027 is already a Regulation machine.
First, get the date right
Fact — check it yourself
The Official Journal text says 14 January 2027. That is wrong.
The Regulation was published on 29 June 2023 with a clerical error running through every operative date. A corrigendum published five days later corrected it: the Regulation applies, and the Directive is repealed, from 20 January 2027.
Reg. (EU) 2023/1230, art. 51(2) and art. 54, as corrected by corrigendum OJ L 169/35, 4.7.2023
The uncorrected version is still in wide circulation — including in files served today from the EU’s own legislation portal, which is where most people go to check. We mention it because it is a useful test: if a supplier, a checklist or a compliance tool tells you 14 January, they took the date from the uncorrected text and did not verify it. It is worth asking what else they did not verify.
Who it hits, and when exactly
Fact — check it yourself
The trigger is placing on the market.
Not the design date, not the build date, not the purchase order.
Reg. (EU) 2023/1230, art. 52(1)
- Machines placed on the market before 20 January 2027 in conformity with the Directive can keep being made available. You do not have to retrofit your installed base, and your distributor’s inventory does not become illegal overnight.
- EC type-examination certificates issued under the Directive remain valid until they expire. If a Notified Body gave you one, it survives the change.
- Everything you place on the market from 20 January 2027 onward must comply with the Regulation in full.
- nowDirectivethe real decision point in 2026
- 20 January 2027no transition period, no overlap
- onwardRegulation
For a machine builder with a six-to-twelve-month lead time, that puts the real decision point in 2026 — which is now.
Change 1: some machines can no longer be self-assessed at all
Today, being on the Annex IV list does not automatically require a Notified Body: if you build fully to harmonised standards covering all the relevant requirements, you may still self-assess.
The Regulation ends that for six categories. The list becomes twenty-five entries in two parts:
Part A — six categories, Notified Body mandatory whatever standards you used:
- Removable mechanical transmission devices, including their guards
- Guards for removable mechanical transmission devices
- Vehicle servicing lifts
- Portable cartridge-operated fixing and other impact machinery
- Safety components with fully or partially self-evolving behaviour using machine-learning approaches to ensure safety functions
- Machinery with embedded systems of that kind, not placed independently on the market
Part B — nineteen categories, today’s logic continues: internal control if you build to harmonised standards covering all relevant requirements, third-party routes otherwise.
Not listed at all: internal production control, as today.
Fact — check it yourself
The four that move.
Removable mechanical transmission devices, their guards, vehicle servicing lifts, and portable cartridge-operated fixing machinery are on the Directive’s Annex IV today, where self-assessment is available to them. They move to Part A, where it is not.
If you make one of these and self-certify today, your route disappears on 20 January 2027 — and Notified Body capacity is not something you can book in a week.
Directive 2006/42/EC, Annex IV, points 14, 15, 16, 18 · Reg. (EU) 2023/1230, Annex I Part A, points 1–4
The other two Part A categories are new, and they exist for a reason: a safety function that changes its own behaviour cannot be validated once and left alone.
Change 2: your safety software becomes part of the file
Fact — check it yourself
The technical documentation must now include the source code or programming logic of safety-related software, to be provided to a national authority on reasoned request, where that is necessary to check conformity.
This is not a publication requirement and not a routine disclosure. But it does mean the code must be identifiable, versioned, and retrievable for at least ten years, tied to the specific machine it shipped with.
Reg. (EU) 2023/1230, Annex IV, Part A, point (m)
And where safety-related operations are controlled by sensor data — vision systems, lidar, remote operation, autonomous movement — the documentation must describe the system’s general characteristics, capabilities and limitations, plus the data and the development, testing and validation processes used.
Documenting what your system cannot reliably do is a different exercise from documenting what it can, and it is not one you can do retroactively.
Change 3: cybersecurity becomes a safety requirement
Fact — check it yourself
The Regulation adds essential requirements on protection against corruption, alongside the requirements on safety and reliability of control systems.
Hardware and software whose corruption could lead to a hazardous situation must be adequately protected against corruption that is accidental or intentional — and control systems must withstand intended and unintended external influences, including reasonably foreseeable malicious attempts.
Reg. (EU) 2023/1230, Annex III, 1.1.9 and 1.2.1
The shift is one of category, and it is the part most often underestimated. Today, if a customer raises cybersecurity, it is a commercial conversation. From 2027 it is a conformity requirement: a machine whose safety function can be defeated by a foreseeable attack does not meet the essential requirements, whatever else is in the file.
Change 4: substantial modification is now defined in law
For the first time the Regulation defines it: a modification, by physical or digital means, made after the machine was placed on the market or put into service, not foreseen or planned by the manufacturer, that affects safety by creating a new hazard or increasing an existing risk — to the point that it requires added guards or protective devices involving changes to the safety control system, or additional measures for stability or mechanical strength.
And the consequence is explicit:
Fact — check it yourself
whoever carries out a substantial modification is considered the manufacturer for that machine, takes on the manufacturer’s obligations, must declare conformity on their sole responsibility, and must apply the relevant conformity assessment procedure.
Non-professional users modifying their own machine for their own use are excluded.
Reg. (EU) 2023/1230, art. 18
Two reasons this matters commercially, and they cut in both directions:
- Your customer may be about to become a manufacturer without knowing it. Integrators and end users who retrofit machines are inheriting the whole obligation set. Telling them before they do it is a service they remember.
- “By digital means” is in the definition. A software update that changes what a safety function does can be a substantial modification. If you ship remote updates, this belongs in your release process, not in your legal department.
Change 5: digital instructions, with a catch worth knowing
You may provide the instructions for use in digital format. That is a genuine simplification, and it comes with conditions:
- Mark on the machine — or on the packaging or an accompanying document — how to access them.
- Make them printable and downloadable, so the user can save them and reach them at any time, including during a machine breakdown. This applies even when the instructions are embedded in the machine’s own software — which is the point: a manual you can only read on the HMI of a machine that has stopped is not a manual.
- Keep them online for the expected lifetime of the machine and at least ten years after it was placed on the market.
- On request at the time of purchase, provide paper free of charge within one month. The customer decides, not you.
- For machines that non-professional users could foreseeably use, the essential safety information must be provided on paper regardless.
Language obligations do not go away because the format changed.
Change 6: the Declaration of Conformity changes shape
The EC Declaration becomes the EU Declaration of Conformity. You must state expressly that it is issued under your sole responsibility; harmonised standards must be cited with the date their reference was published in the Official Journal, and partial application must be specified; and substantially modified machinery has its place on the form.
One change matters specifically to U.S. manufacturers: the EU-established “person authorised to compile the technical file” is no longer among the Declaration’s required particulars. That is not a relaxation — the EU-side obligation moves to the authorised representative, whose mandate must let them hold the documentation and produce it on request, while drawing up that documentation expressly cannot be delegated to them.
What to decide, and roughly when
- Now, if you build anything in Part A. Four categories lose self-assessment entirely. Notified Body engagement takes time you do not control, and every builder in the same categories is arriving at the same queue.
- Now, if a safety function involves software you wrote. Version control, retention and traceability are process changes, and process changes take longer than document changes.
- Before your next design freeze, if you have sensor-driven or autonomous functions. Documenting limitations is a design-stage activity.
- Before your next remote-update release, if you push software to machines already in the field.
- With your next long-lead quote, if delivery lands anywhere near 2027. Design to the Regulation and you have one machine. Design to the Directive and you may have two.