Start by separating the legal deadline from device selection. A working sensor is not automatically obsolete, but neither is a familiar model automatically suitable for a changed function. Use our machine safety standards index to distinguish the legal act, device standard, positioning rules and control-system assessment before signing off each checklist item.
What makes this one worth treating seriously is the calendar. Unlike a general choice to keep first-placing new products under either regime after that date, Article 52 provides specific protections for qualifying earlier products and certificates. So the structure of this article is a dated countdown, followed by a one-page checklist tied to the devices you actually select.
What are the dates I cannot miss?
The general application date is 20 January 2027, when Regulation (EU) 2023/1230 generally replaces Directive 2006/42/EC. Article 54 provides earlier application dates for certain provisions; Article 52 preserves specified transitional treatment for products and certificates. Do not apply the general date without checking those exceptions.
- 14 June 2023 — adopted by the European Parliament and Council.
- 29 June 2023 — published in the Official Journal, OJ L 165.
- 19 July 2023 — entered into force, twenty days after publication. In force is not the same as applies; the requirements did not bite on machines yet.
- 2024 — some provisions started early. The requirements for notified bodies began applying around 20 January 2024, with further Article 53 provisions from 20 July 2024, so the conformity-assessment infrastructure would be in place ahead of the main date.
- 20 January 2027 — the Regulation applies. Directive 2006/42/EC is repealed the same day; the Article 52 transitional provisions still apply.
The transition from entry into force to application is 42 months. That sounds generous; in practice, by the time most builders read the new text properly, half of it had already burned. Read the consolidated regulation on EUR-Lex if you want the primary source rather than a summary.
Why does “Regulation” instead of “Directive” change anything?
Because a Regulation is directly applicable in every Member State without national transposition, the legal text is identical across the bloc. The Directive had to be written into each country's law, which let national interpretations drift apart; the Regulation removes that step, so the requirement in Munich is word-for-word the requirement in Milan. For an exporter shipping one machine into several EU markets, that is a quiet practical win — one text to build a technical file against, not a dozen national flavours.
The main application date and transitional protections must be read together. Record when each product was first placed on the market, which conformity route applies and whether a specific certificate falls within Article 52; do not assume that repeal erases every existing product or certificate.
What actually changed for safety-device selection?
A percentage comparison cannot establish conformity for a particular machine. The essential health and safety requirements in Annex III now cover cybersecurity and protection against corruption, artificial intelligence and self-evolving behaviour, autonomous mobile machinery, software updates affecting safety, IoT connectivity, human-robot collaboration, and software-based functional safety. Three of these reach the bracket:
- Cybersecurity becomes part of machine safety. If accidental corruption, intentional interference, data manipulation, software alteration or external digital influence could create a hazardous situation, protective measures are required. That changes how you select a safety controller or safety relay on a connected machine. A hard-wired DA31 safety-relay module must be assessed in its complete circuit, including compatible input signals, configuration access and connected equipment. Networked controllers add communication and update paths requiring explicit protection in the technical file.
- AI and self-evolving behaviour are named. A safety function that learns or changes its own behaviour after deployment is treated differently. A plain interlocking Type 4 light curtain does not learn anything; it does not fall into this. We worked through where the line sits in what the Regulation permits for AI in safety functions.
- Annex IV high-risk list moved to Annex I, split A/B. For Annex I Part A categories, applying a harmonised standard no longer removes the mandatory third-party (Notified Body) assessment — those products can no longer be self-certified. Check whether your host machine sits in Part A and plan the Notified Body lead time.
For the devices themselves: scope confirms it. The Regulation explicitly covers safety components, interchangeable equipment, lifting accessories, chains, ropes and webbing, and removable mechanical transmission devices. So a Type 4 safety light curtain, a safety laser scanner and a safety relay sold as standalone safety components are in scope. Article 52(2) preserves specified Directive certificates until expiry, not every product claim without conditions. The relationship between PL and SIL that drives that selection has not moved either; if you need to refresh it, see Performance Level (PL) vs SIL under ISO 13849-1 and IEC 62061.
When does a retrofit count as a “substantial modification”?
This is the sleeper clause, and it will catch people. Article 3(16) gives substantial modification a legal definition for the first time. The definition includes both a new hazard or increased risk and the specified additional-protective-measure conditions. Article 18 assigns manufacturer duties to the affected machinery or related product identified by the risk assessment, not simply a component called the modified part.
For safety devices, that means a re-tool which changes reach-in geometry, stopping time or the architecture of a safety function can pull the curtains, scanners and relays involved into re-validation — even on an old machine that was perfectly compliant the day it shipped. The distinction that matters: like-for-like replacement and routine maintenance do not count. Swapping a failed curtain for the same model is maintenance. Adding a robot, moving the guarding plane, or re-purposing a press for a different operation can be a substantial modification. When it is, you are re-doing the safety-distance calculation and re-justifying the device selection, not just bolting on a part.
The one-page countdown checklist
Print this. It is the short version of the work that has to be done before 20 January 2027, ordered the way I would tackle it.
- Confirm the deadline applies to you. If you place machinery — or standalone safety components — on the EU market on or after 20 January 2027, determine the Regulation route. Separately document pre-deadline first placement and Article 52 treatment; later distribution is not necessarily first market placement.
- Re-base the technical file. Point the risk assessment, the EU Declaration of Conformity and the technical documentation at the Regulation, not Directive 2006/42/EC.
- Map every safety function to a device. Confirm each Type 4 light curtain, safety laser scanner and safety relay still has model-specific evidence within its scope and validity, and matches the complete risk assessment.
- Check Annex I Part A. Does your host machine sit in the list that now needs a Notified Body? If yes, book the assessment and build its lead time into the 2026 schedule.
- Write the cybersecurity argument for any connected safety function — fieldbus links, remote parameterisation, software updates affecting safety. Hard-wired and networked circuits have different exposure; neither is exempt from assessment.
- Flag self-evolving / AI safety functions. If a safety function learns or changes after deployment, treat it under the new provisions. Plain interlocking curtains do not qualify.
- Set a substantial-modification rule. Decide internally what counts, so a future retrofit triggers a fresh conformity assessment instead of slipping through as “maintenance.”
- Decide on digital documentation. You may ship the manual and Declaration of Conformity digitally; if you do, host them for the expected lifetime and at least ten years, with download, offline access and the required paper versions.
So what should a machine builder do in 2026?
Decide on retention or replacement from evidence, not the calendar alone. Distinguish certified protective scanners from ordinary DLD perception and verify the exact curtain and relay versions. The work includes the documentation review, the Annex I check, and an honest cybersecurity argument for anything networked — finished well before January 2027, because there is no grace period to finish it in afterwards. The deeper, function-by-function walkthrough is in what machine builders must change for the 2027 Machinery Regulation. The countdown is real. The panic about hardware is not.
References & sources cited
- Regulation (EU) 2023/1230 on machinery (EUR-Lex) — primary text; applies 20 January 2027.
- EU-OSHA — Regulation (EU) 2023/1230 — official summary and scope.
- TUV Rheinland — New Machinery Regulation guidance — supplementary interpretation, not a product approval.
- Pilz — Machinery Regulation guidance — transition, substantial modification, Annex I.
- Rockwell Automation — Machinery Regulation overview (PDF) — machine-builder conformity perspective.
