EU Machinery Regulation 2027: What It Means for the Control Electronics, HMI and Software in Your Machines
On 20 January 2027, the rules for every new machine placed on the EU market change. The Machinery Directive 2006/42/EC, which has shaped machine building for more than 15 years, is replaced by the Machinery Regulation (EU) 2023/1230. Most of the attention goes to guards, risk assessment and CE paperwork. The bigger change, however, is hidden inside the control cabinet: in the electronics, the operator panel and the software.
On 20 January 2027, the rules for every new machine placed on the EU market change. The Machinery Directive 2006/42/EC, which has shaped machine building for more than 15 years, is replaced by the Machinery Regulation (EU) 2023/1230. Most of the attention goes to guards, risk assessment and CE paperwork. The bigger change, however, is hidden inside the control cabinet: in the electronics, the operator panel and the software.
If your machines contain a controller, a display, a network connection or a firmware update function, this article is for you. In about ten minutes you will know what changes, which questions you should ask your engineering team now, and how to avoid a redesign shortly before launch.
The regulation in 60 seconds
|
Why electronics developers should care
In a modern machine, safety is no longer just a mechanical guard and an emergency stop button. Safety functions run on microcontrollers, are configured via an HMI, receive parameters over Ethernet and are updated in the field. The Machinery Directive was written for a world in which this was the exception. The Machinery Regulation is written for a world in which it is the rule.
This means that decisions made today in schematic design, firmware architecture and HMI concept determine whether a machine can be placed on the market smoothly in 2027, or whether it needs late changes.
What changes: the five points that matter for control electronics
| Topic | Machinery Directive 2006/42/EC | Machinery Regulation (EU) 2023/1230 | What it means for development |
|---|---|---|---|
| Legal form | Directive, transposed into national law | Regulation, directly applicable in all member states | Same rules everywhere in the EU |
| Safety components | Physical components | Physical or digital components, including software | Safety software becomes a product in its own right |
| Protection against corruption | Not explicitly required | Essential requirement (Annex III, 1.1.9) | Security concept needed for safety-related parts |
| Control systems | Safety and reliability | Also covers malicious attempts by third parties (Annex III, 1.2.1) | Access protection, update concept, evidence of interventions |
| Instructions | Paper | Digital allowed; paper free of charge on request at purchase | Plan online documentation for the lifetime |
1. Software can be a safety component
The definition of "safety component" now explicitly includes digital components, including software. Safety components placed on the market independently need their own conformity assessment. For machine builders and their suppliers, this means that safety-related software must be developed, versioned, tested and documented with the same care as safety-related hardware.
For your team: clear separation between safety-related and non-safety-related code, traceable requirements, defined software versions and a test strategy that proves the safety function.
2. Protection against corruption: cybersecurity becomes part of machine safety
Annex III, section 1.1.9 requires that safety-related hardware, software and data are protected against accidental or intentional corruption. Evidence of legitimate or illegitimate interventions must be collected. In plain terms: if someone can change a safety parameter via a service port, a network interface or the HMI without anyone noticing, the design is no longer up to date.
Typical technical measures:
- role-based access to safety parameters on the HMI, with authentication instead of a shared service password
- secure boot and signed firmware updates, so that only authorised software runs on the controller
- closing or protecting debug and service interfaces in series devices
- network segmentation between the machine network and the office or cloud network
- logging of changes to safety-related software, configuration and parameters
CENELEC is developing the standard EN 50742 specifically for this requirement. Until it is published and listed as harmonised, the IEC 62443 series is widely used as the state of the art for industrial cybersecurity.
3. Control systems must withstand malicious attempts
Annex III, section 1.2.1 extends the classic requirement for safe and reliable control systems: they must also be designed so that malicious attempts by third parties cannot lead to a hazardous situation. The question is no longer only "what happens if a component fails?", but also "what happens if someone tries to manipulate it?". Both belong in the risk assessment.
4. Digital instructions and declaration of conformity
Instructions may be provided digitally, but they must stay accessible online for the expected lifetime of the machine. If the customer asks for paper at the time of purchase, it must be provided free of charge within one month. Machines for non-professional users still need essential safety information on paper. The EU declaration of conformity can also be digital.
Opportunity: an HMI with a QR code or an integrated help function can link directly to the right instructions for the exact firmware version.
5. Substantial modification: retrofits can turn you into the manufacturer
The regulation defines substantial modification as a physical or digital change that was not foreseen by the original manufacturer and creates a new hazard or increases an existing risk. Whoever makes such a change is considered the manufacturer and must carry out a new conformity assessment.
This matters especially for modernisation projects: replacing an obsolete controller, adding remote access or updating safety-related software on an existing machine can trigger these obligations. Plan retrofits with a risk assessment from the start.
High-risk machines: when a notified body is mandatory
Annex I of the regulation lists machinery with higher risk. For the six categories in Annex I, Part A, self-certification is no longer enough: a notified body must be involved. These include safety components with fully or partially self-evolving behaviour using machine-learning approaches, and machinery that embeds such systems for safety functions. If you plan AI-based safety functions, involve a notified body early and plan for the extra lead time.
Myth or fact?
| Statement | Myth or fact? | Explanation |
|---|---|---|
| "Machines already in operation must be recertified in 2027." | Myth | The regulation applies to machinery placed on the market or put into service from 20 January 2027. A substantial modification of an existing machine can, however, trigger new obligations. |
| "Cybersecurity is the IT department's job." | Myth | Protection against corruption is an essential health and safety requirement of the machine and therefore part of its design. |
| "Paper instructions are no longer needed." | Partly | Digital instructions are allowed, but paper must be supplied free of charge on request at purchase, and consumer machinery needs essential safety information on paper. |
| "Software can be a safety component." | Fact | The definition explicitly covers digital components, including software. |
| "Our current standards are automatically valid." | Myth | Presumption of conformity under the regulation only applies to standards whose references are published for the regulation. Check the status for each standard you use. |
The Machinery Regulation and the Cyber Resilience Act: two rules, one design
Many machines and their components also fall under the EU Cyber Resilience Act (CRA) for products with digital elements. Its reporting obligations for actively exploited vulnerabilities have applied since 11 September 2026, and its main requirements apply from 11 December 2027. The Machinery Regulation looks at cybersecurity from the safety perspective; the CRA looks at it from the product security perspective.
The smart approach: one security architecture, documented once, that serves both. Secure boot, signed updates, access control, vulnerability handling and a software bill of materials (SBOM) help meet both sets of requirements.
Your checklist before 20 January 2027
10 questions for your next engineering meeting
|
If you answer "no" or "don't know" to several of these questions, now is the right time to involve your development partner. Changes to the electronics architecture take time, and the date will not move.
How T&O Electronic Solutions helps
T&O Electronic Solutions has developed and built electronic systems since 1990, for more than 800 customers in industrial and medical technology. With our development of control electronics and HMI, safety and security concepts are part of the architecture from the start, not added at the end:
- Hardware and firmware development for controllers, operator panels and embedded systems
- Security by design: secure boot, signed updates, access concepts and protected interfaces
- Modernisation of existing electronics: analysis, documentation and redesign of obsolete control systems
- From prototype to series production with one partner, at our sites in Hausham (Germany) and Ramsen (Switzerland)
- Quality management certified to ISO 9001
Note: this article provides technical guidance and does not replace legal advice. The legal responsibility for conformity lies with the manufacturer of the machine.
Frequently asked questions
When does the EU Machinery Regulation apply?
The Machinery Regulation (EU) 2023/1230 applies to most of its provisions from 20 January 2027. Machinery placed on the market before that date must comply with the Machinery Directive 2006/42/EC.
Does the regulation apply to machines that are already installed?
No, not automatically. It applies to machinery placed on the market or put into service from 20 January 2027. If an existing machine is substantially modified, the person who makes the change is considered the manufacturer and must carry out a new conformity assessment.
Is software now a safety component?
It can be. The definition of a safety component explicitly includes digital components, including software, if they fulfil a safety function.
What does "protection against corruption" mean?
It means that safety-related hardware, software and data must be protected against accidental or intentional changes that could lead to a hazardous situation, and that evidence of interventions must be collected. In practice, this covers access control, secure updates, protected interfaces and logging.
Which standard covers cybersecurity under the Machinery Regulation?
CENELEC is developing EN 50742 for protection against corruption. Until it is published and listed, many manufacturers use the IEC 62443 series as the state of the art. Check the current status before you rely on a standard.
Can the instructions be provided only digitally?
Yes, in principle. They must remain accessible online for the expected lifetime of the machine. On request at the time of purchase, a paper version must be provided free of charge within one month. For machinery intended for non-professional users, essential safety information must be provided on paper.
How do the Machinery Regulation and the Cyber Resilience Act fit together?
The Machinery Regulation addresses cybersecurity where it affects safety; the CRA addresses the security of products with digital elements in general. Many products must meet both. A single, well-documented security architecture is the most efficient way to do this.
We have an existing machine control system. Do we need to redesign it?
Not necessarily. An analysis shows where the current design already meets the new requirements and where measures such as access control, signed updates or interface protection are needed. Often, targeted changes are enough.