EU Machinery Regulation 2027 — The Compliance Countdown Checklist for Safety-Sensor Selection

Let me deal with the question I get most often first, because the wrong answer to it wastes money. No, the new Machinery Regulation does not mean you rip out working safety devices. The curtains and relays on your machines in 2026 are, in all likelihood, the same ones you ship in 2027. The deadline is real and it is hard, but it lands on paperwork and on a handful of new requirements — not on the IEC 61496 curtain on the bracket.

What makes this one worth treating seriously is the calendar. Unlike most CE transitions, this one has no coexistence window to hide in. So the structure of this article is a dated countdown, followed by a one-page checklist tied to the devices you actually select.

What are the dates I cannot miss?

One date governs everything: 20 January 2027. That is the day Regulation (EU) 2023/1230 applies, and the day Directive 2006/42/EC stops applying. The rest is context that explains why the deadline is immovable.

• 14 June 2023 — adopted by the European Parliament and Council.
• 29 June 2023 — published in the Official Journal, OJ L 165.
• 19 July 2023 — entered into force, twenty days after publication. In force is not the same as applies; the requirements did not bite on machines yet.
• 2024 — some provisions started early. The requirements for notified bodies began applying around 20 January 2024, with further Article 53 provisions from 20 July 2024, so the conformity-assessment infrastructure would be in place ahead of the main date.
• 20 January 2027 — the Regulation applies. Directive 2006/42/EC is repealed the same day. No overlap.

The transition from entry into force to application is 42 months. That sounds generous; in practice, by the time most builders read the new text properly, half of it had already burned. Read the consolidated regulation on EUR-Lex if you want the primary source rather than a summary.

Why does “Regulation” instead of “Directive” change anything?

Because a Regulation is directly applicable in every Member State without national transposition, the legal text is identical across the bloc. The Directive had to be written into each country's law, which let national interpretations drift apart; the Regulation removes that step, so the requirement in Munich is word-for-word the requirement in Milan. For an exporter shipping one machine into several EU markets, that is a quiet practical win — one text to build a technical file against, not a dozen national flavours.

It also explains why there is no soft transition. A Directive that coexisted with national rewrites could be phased; a directly applicable Regulation with a repeal clause for the old Directive flips on a single day. That is the part to internalise.

What actually changed for safety-device selection?

Roughly 10% of the content is new or significantly revised, per TUV Rheinland's analysis, and only some of that touches the devices we make. The expanded essential health and safety requirements in Annex III now cover cybersecurity and protection against corruption, artificial intelligence and self-evolving behaviour, autonomous mobile machinery, software updates affecting safety, IoT connectivity, human-robot collaboration, and software-based functional safety. Three of these reach the bracket:

• Cybersecurity becomes part of machine safety. If accidental corruption, intentional interference, data manipulation, software alteration or external digital influence could create a hazardous situation, protective measures are required. That changes how you select a safety controller or safety relay on a connected machine. A hard-wired DA31 safety-relay module reading dual-channel OSSD from a curtain has no network surface to corrupt — its exposure is low. A networked safety controller taking remote parameters does, and the file has to show how that path is protected.
• AI and self-evolving behaviour are named. A safety function that learns or changes its own behaviour after deployment is treated differently. A plain interlocking Type 4 light curtain does not learn anything; it does not fall into this. We worked through where the line sits in what the Regulation permits for AI in safety functions.
• Annex IV high-risk list moved to Annex I, split A/B. For Annex I Part A categories, applying a harmonised standard no longer removes the mandatory third-party (Notified Body) assessment — those products can no longer be self-certified. Check whether your host machine sits in Part A and plan the Notified Body lead time.

For the devices themselves: scope confirms it. The Regulation explicitly covers safety components, interchangeable equipment, lifting accessories, chains, ropes and webbing, and removable mechanical transmission devices. So a Type 4 safety light curtain, a safety laser scanner and a safety relay sold as standalone safety components are in scope — and keep the certification they already hold under IEC 61496 and the functional-safety standards. The relationship between PL and SIL that drives that selection has not moved either; if you need to refresh it, see Performance Level (PL) vs SIL under ISO 13849-1 and IEC 62061.

When does a retrofit count as a “substantial modification”?

This is the sleeper clause, and it will catch people. Article 3(16) gives substantial modification a legal definition for the first time: a physical or digital change not foreseen by the original manufacturer that introduces a new hazard or increases an existing risk. Whoever performs it is treated as the manufacturer of the modified part and must run a new conformity assessment.

For safety devices, that means a re-tool which changes reach-in geometry, stopping time or the architecture of a safety function can pull the curtains, scanners and relays involved into re-validation — even on an old machine that was perfectly compliant the day it shipped. The distinction that matters: like-for-like replacement and routine maintenance do not count. Swapping a failed curtain for the same model is maintenance. Adding a robot, moving the guarding plane, or re-purposing a press for a different operation can be a substantial modification. When it is, you are re-doing the safety-distance calculation and re-justifying the device selection, not just bolting on a part.

The one-page countdown checklist

Print this. It is the short version of the work that has to be done before 20 January 2027, ordered the way I would tackle it.

1. Confirm the deadline applies to you. If you place machinery — or standalone safety components — on the EU market on or after 20 January 2027, you declare against (EU) 2023/1230. No exceptions, no overlap with the old Directive.
2. Re-base the technical file. Point the risk assessment, the EU Declaration of Conformity and the technical documentation at the Regulation, not Directive 2006/42/EC.
3. Map every safety function to a device. Confirm each Type 4 light curtain, safety laser scanner and safety relay still holds its IEC 61496 / functional-safety certification — it does — and that the selection still matches the risk assessment.
4. Check Annex I Part A. Does your host machine sit in the list that now needs a Notified Body? If yes, book the assessment and build its lead time into the 2026 schedule.
5. Write the cybersecurity argument for any connected safety function — fieldbus links, remote parameterisation, software updates affecting safety. Hard-wired OSSD into a safety relay needs little; networked safety controllers need a real case.
6. Flag self-evolving / AI safety functions. If a safety function learns or changes after deployment, treat it under the new provisions. Plain interlocking curtains do not qualify.
7. Set a substantial-modification rule. Decide internally what counts, so a future retrofit triggers a fresh conformity assessment instead of slipping through as “maintenance.”
8. Decide on digital documentation. You may ship the manual and Declaration of Conformity digitally; if you do, host them so they stay accessible for at least 10 years.

So what should a machine builder do in 2026?

Keep the device side calm and spend your scarce time on the file. The DQT4 curtains, the DLD scanners and the DA31-class relays you specify do not need replacing for the Regulation; their certifications carry over. What needs doing this year is the documentation re-base, the Annex I check, and an honest cybersecurity argument for anything networked — finished well before January 2027, because there is no grace period to finish it in afterwards. The deeper, function-by-function walkthrough is in what machine builders must change for the 2027 Machinery Regulation. The countdown is real. The panic about hardware is not.