Machinery Regulation (EU) 2023/1230 Compliance FAQ
Auditor-verified guide to the mandatory transition deadline (20 January 2027), digital instruction rules under Article 10, Annex III cybersecurity, and substantial modifications.
When does the Machinery Regulation (EU) 2023/1230 become legally mandatory?↓
Regulation (EU) 2023/1230 becomes mandatory on 20 January 2027 across all 27 EU Member States. As an EU Regulation (rather than a Directive), it applies directly and uniformly without requiring national transposition into domestic laws. It fully repeals and replaces Machinery Directive 2006/42/EC. From 20 January 2027, every new machine placed on the EU market must carry an EU Declaration of Conformity citing Regulation (EU) 2023/1230.
What are the exact rules for digital instruction manuals under Article 10(7)?↓
Article 10(7) permits machine manufacturers to deliver instruction manuals exclusively in digital format (PDF or online portal), provided four mandatory conditions are met: (1) instructions must remain accessible online for a minimum of 10 years following market placement, (2) the format must allow printing and offline downloading, (3) a durable QR code or web link must be clearly marked on the physical machine, and (4) the customer has the statutory right to request a printed paper copy free of charge, which the manufacturer must deliver within one month.
What constitutes a "substantial modification" under Article 3(16)?↓
Under Article 3(16), a substantial modification is any physical or digital change made to machinery after it has been put into service that was not foreseen by the original manufacturer, and which introduces a new hazard or increases an existing risk, requiring new protective devices or significant changes to safety circuits. The party executing a substantial modification legally assumes the role and responsibilities of the manufacturer, including technical file compilation, CE marking, and issuing a new EU Declaration of Conformity.
What are the cybersecurity requirements for safety systems under Annex III 1.1.9?↓
Section 1.1.9 of Annex III requires machinery control circuits to be designed to resist intentional or accidental external cyber interference. Key obligations include: (1) connection of external hardware (USB, diagnostic tools) or remote network links must not compromise safety functions, (2) logging and recording all software modifications and access attempts in an indelible audit log, and (3) coordinating with the Cyber Resilience Act (CRA - Regulation (EU) 2024/2847) to maintain software bills of materials (SBOM).
How does Annex I divide high-risk machinery between Part A and Part B?↓
Annex I lists machinery categories subject to stricter conformity assessment. Part A includes the highest-risk categories, such as safety components utilizing machine learning / AI with self-evolving behavior and software safety logic. For Part A equipment, manufacturers cannot use internal production control (Module A); assessment by an EU Notified Body (Module B+C or Module H) is mandatory. Part B categories allow Module A only if the manufacturer strictly applies harmonized European standards.
Can existing machines manufactured under Directive 2006/42/EC remain in operation after 2027?↓
Yes. Existing machines lawfully placed on the market or put into service prior to 20 January 2027 under Directive 2006/42/EC can continue operating indefinitely without requiring retroactive re-certification, provided they are not substantially modified. Article 52 transitional provisions also clarify that EC type-examination certificates issued under Directive 2006/42/EC remain valid until their stated expiration date.
Prepare Your Plant for the 2027 Machinery Regulation Deadline
IgeraIndustria provides compliant digital instruction hosting, semantic search across machine documentation, and automated technical file auditing.