How to Be Compliant with the Machinery Regulation (EU) 2023/1230

How to Be Compliant with the Machinery Regulation (EU) 2023/1230: A Complete Step-by-Step Guide

With the European Union transitioning from the long-standing Machinery Directive 2006/42/EC to the new Machinery Regulation (EU) 2023/1230, safety professionals, engineers, and manufacturers face a modernized but stricter regulatory landscape. Because it is a Regulation, these rules now apply uniformly across all EU Member States, eliminating divergent national implementations.

Full enforcement begins on January 14, 2027, when the old Directive is officially repealed. To ensure your equipment can legally enter or operate within the European market, you must follow a rigorous compliance pathway. Here is a comprehensive guide on how to achieve and maintain compliance with Regulation (EU) 2023/1230.

Step 1: Identify Your Legal Role and Obligations

Before assessing the machine, you must identify your status under the Regulation, as obligations are now strictly distributed across the supply chain among "economic operators".

• Manufacturers: If you design or build machinery, place it on the market under your name, or build it for your own use, you hold the primary responsibility for the conformity assessment, technical documentation, and CE marking.
• The "Substantial Modification" Rule: If you are a user or maintenance manager who modifies an existing machine (physically or digitally) in an unforeseen way that creates new hazards requiring new protective measures, you are legally considered the manufacturer of that modified machine and must conduct a new conformity assessment.
• Importers and Distributors: Importers must verify that the manufacturer has carried out the correct conformity assessments and drawn up technical documentation before bringing third-country products into the EU. Distributors must act with "due care" to verify CE markings and language-compliant instructions.

Step 2: Determine Your Machine's Classification (Check Annex I)

Your compliance journey heavily depends on whether your product is classified as "high-risk." You must check if your machinery falls under Annex I, which is split into two parts:

• Annex I, Part A: This includes systems with highly complex risks, such as fully or partially self-evolving AI safety components. You cannot self-certify Part A machinery. You must use a Notified Body to carry out a third-party conformity assessment, such as EU type-examination (Module B) or full quality assurance (Module H).
• Annex I, Part B: This includes traditional high-risk equipment like woodworking band-saws, presses for cold working metals, and logic units for safety functions. For Part B, you can use internal production control (Module A) to self-certify, but only if you design and construct the machinery strictly in accordance with specific harmonised European standards that cover all relevant essential health and safety requirements. If you do not use these standards, a Notified Body is required.
• Non-Annex I Machinery: If your product is not listed in Annex I, you can perform internal production control (Module A) without a Notified Body.

Step 3: Conduct an Iterative Machine Safety Risk Assessment

The core of compliance is the risk assessment. Manufacturers must conduct an iterative process to determine the machine's limits, identify hazards, estimate risks (Severity, Frequency, Possibility of Avoidance, and Probability of Occurrence), and evaluate if risk reduction is required.

Under the new Regulation, this assessment must also include:

• Lifecycle and AI Risks: Hazards arising during the machine's lifecycle due to intended fully or partially self-evolving behavior (AI) operating with varying levels of autonomy.
• Cybersecurity Risks: Ensuring "protection against corruption," meaning remote connections or third-party malicious attempts do not lead to hazardous situations.

Pro Tip for Streamlining: Modern safety teams are increasingly utilizing machine risk assessment software like HazardLens to accelerate this process. HazardLens uses AI to instantly detect hazards from uploaded machine photos, suggest risk ratings, and map mitigations directly to the Regulation's framework and industry standards.

Step 4: Apply Harmonised Standards for a "Presumption of Conformity"

To easily prove that your machinery meets the Essential Health and Safety Requirements (EHSRs) set out in Annex III, you should design your equipment according to Harmonised Standards.

When you apply harmonised standards whose references have been published in the Official Journal of the European Union, your product gains a "presumption of conformity" with the specific safety requirements covered by that standard. If standardisation is delayed, the European Commission may also publish "common specifications" which carry the same presumption of conformity.

Step 5: Compile the Technical Documentation

Before placing the product on the market, you must draw up comprehensive technical documentation (Annex IV, Part A). This file proves your compliance and must include:

• A complete description of the machinery and its intended use.
• The full risk assessment documentation.
• Design and manufacturing drawings, schemes, and circuit diagrams.
• References to the harmonised standards or common specifications applied.
• Source Code: If requested by a competent national authority, you must provide the source code or programming logic of safety-related software to prove compliance.

You must keep this technical documentation available for market surveillance authorities for at least 10 years.

Step 6: Provide Digital Instructions and the EU Declaration of Conformity

Regulation (EU) 2023/1230 drastically modernizes administrative requirements by allowing paperless compliance:

• Digital Instructions: You can provide the instructions for use in a digital format. You must clearly mark on the machine or packaging how to access them, ensure they can be downloaded and saved offline, and keep them online for at least 10 years. Note: If a user requests a paper copy at the time of purchase, you must provide it for free within one month.
• EU Declaration of Conformity: You must draw up this declaration stating that your machine fulfills all applicable essential health and safety requirements. You can provide this digitally via a web address or a QR code in the user manual.

Step 7: Affix the CE Marking

The final step before placing your machinery on the market or putting it into service is affixing the CE marking.

• It must be affixed visibly, legibly, and indelibly to the machinery.
• If a Notified Body was involved in the production control phase (e.g., for high-risk Annex I products), the CE marking must be followed by that Notified Body's identification number.

Essential Health and Safety Requirements (EHSRs)

Under the Machinery Regulation (EU) 2023/1230, the Essential Health and Safety Requirements (EHSRs) are the mandatory legal provisions that dictate how machinery and related products must be designed and constructed. Found in Annex III of the Regulation, these requirements ensure a high level of protection for the health and safety of persons (especially operators and consumers), domestic animals, property, and the environment.

Because technology has evolved, the EHSRs have been heavily updated from the old Directive to address new risks like cybersecurity, artificial intelligence, and human-machine coexistence.

Here is a detailed breakdown of the core components of the Essential Health and Safety Requirements:

1. The Foundation: General Principles and Risk Assessment

Before applying specific engineering fixes, manufacturers must follow the General Principles laid out at the beginning of Annex III. You must perform an iterative risk assessment to determine which EHSRs apply to your specific machine. This involves:

• Determining the limits of the machinery, including intended use and reasonably foreseeable misuse.
• Identifying hazards, estimating the severity and probability of harm, and evaluating if risk reduction is required.
• The Lifecycle & AI Rule: The risk assessment must now account for hazards that might arise during the machine's lifecycle due to the intended evolution of fully or partially self-evolving behavior (AI).

The Hierarchy of Protective Measures: When reducing risks to meet the EHSRs, manufacturers must strictly apply the following principles in order:

1. Eliminate or minimize risks through inherently safe design and construction.
2. Take necessary protective measures (like adding guards) for risks that cannot be eliminated.
3. Inform users of residual risks, specify required training, and indicate necessary personal protective equipment (PPE).

2. General Requirements for All Machinery (Part 1 of Annex III)

If a machine falls under the Regulation, it must comply with the relevant general EHSRs in Chapter 1 of Annex III. Key areas include:

• Ergonomics and Human-Machine Interaction: Machinery must be designed to minimize operator discomfort, fatigue, and psychological stress. For autonomous machines, the interface must be adapted so the machine can adequately respond to people (verbally or non-verbally) and communicate its planned actions.
• Protection Against Corruption (Cybersecurity): A major new addition. Machinery must be designed so that connection to remote devices does not lead to hazardous situations. Critical safety software and hardware must be protected against accidental or intentional malicious corruption, and any interventions must be logged.
• Safety and Reliability of Control Systems: Control systems must withstand intended operating stresses and malicious third-party attempts. For self-evolving AI, the control system must ensure the machine does not perform actions beyond its defined task, and modifications during the "learning phase" must be prevented if they could lead to hazards.
• Protection Against Mechanical Risks: Machinery must be stable enough to avoid tipping, built with materials durable enough to avoid break-ups during operation, and designed to prevent risks from falling or ejected objects.
• Guards and Protective Devices: Moving parts that create risks of contact must be fitted with guards (fixed, interlocking movable, or adjustable) or protective devices (like light curtains). These guards must be robust, securely held in place, and impossible to easily bypass.
• Risks Due to Other Causes: The EHSRs dictate that machinery must be designed to prevent hazards from electricity, extreme temperatures, fire and explosion, and emissions of hazardous materials. Furthermore, risks resulting from airborne noise and vibrations must be reduced to the lowest possible level at the source.

3. Maintenance and Information

• Safe Maintenance: Adjustment and maintenance points must be located outside danger zones. Crucially, the machine must be fitted with clearly identifiable means to isolate it from all energy sources (Lockout/Tagout) so it can be safely serviced at a standstill.
• Information and Instructions: The machinery must feature readily understandable warnings and symbols. The manufacturer must also provide comprehensive instructions for use (which can now be digital) detailing intended use, residual risks, operating methods for breakdowns, and noise/vibration emission data.

4. Supplementary Requirements (Chapters 2 to 6)

In addition to the general requirements, Annex III contains specific supplementary EHSRs for certain categories of machinery that present unique hazards. These include:

• Machinery for Foodstuffs/Cosmetics: Strict hygiene and cleaning requirements to avoid infection or contagion.
• Portable Hand-Held Machinery: Specific handle, stability, and vibration requirements.
• Mobile Machinery: Requirements for visibility, seating, braking, and—for autonomous mobile machinery—strict rules for remote "supervisory functions" and obstacle detection.
• Lifting Operations: Specific working coefficients for ropes/chains, loading control warnings, and strict rules to prevent the risk of carriers falling (especially when lifting persons).

By applying Harmonised European Standards (such as the EN ISO 12100 for risk assessments), manufacturers can gain a "presumption of conformity" to prove they have met these complex Essential Health and Safety Requirements.