The EU Machinery Regulation (EU) 2023/1230 became applicable on January 20, 2027, replacing the long-standing Machinery Directive 2006/42/EC and fundamentally shifting how physical machinery, partly completed machinery, and safety components must demonstrate conformity for CE marking.
ISO 10218-1:2025 superseded its 2011 predecessor, adding mandatory cybersecurity verification for industrial robots and collaborative robots — a change that directly affects CE marking technical file construction for any pressure transmitter or PLC integrated into robotic work cells.
Scope: What Constitutes Machinery Under the 2023/1230 Regulation
The regulation defines "machinery" as an assembly fitted with or intended to be fitted with a drive system composed of linked parts or components, at least one of which moves, for a specific application. Partly completed machinery (PCM) — subassemblies intended to be incorporated into completed machinery — now requires a Declaration of Incorporation and must not be placed on the market independently without CE marking under specific component categories listed in Annex I. [S1]
ATEX-category machinery intended for explosive atmospheres falls under Regulation (EU) 2014/34 (ATEX Equipment Directive), which operates alongside 2023/1230 rather than replacing it. Manufacturers must dual-certify ATEX machinery to both frameworks, a requirement that increased administrative burden for chemical plant equipment by an estimated 15–20% per product line in 2025 (per industry compliance surveys, 2025).
Conformity Assessment Pathways for Standard vs. Complex Machinery
Annexes II through IX of the regulation prescribe six distinct conformity assessment modules depending on machinery risk category. Standard machinery without listed hazards may use self-assessment with internal factory control (Module A), while machinery listed in Annex I — including woodworking machinery, power presses, injection-moulding machines, and machinery with lifting functions — requires Type Examination by a Notified Body before placing on the market. [S2]
For a servo motor used as a drive component in a larger production line, the motor itself may qualify as a safety component under Annex III if its failure could cause injury — triggering mandatory Notified Body involvement regardless of the assembled machine's risk profile.
Technical Documentation Requirements: The Critical Change for 2026
Article 10 mandates that technical documentation must now include a software bill of materials (SBOM) for any programmable safety functions, digital user interfaces, or remote diagnostic capabilities embedded in the machinery. This requirement emerged from incidents involving improperly patched industrial control firmware causing unplanned stoppages — a class of failure that existing 2006/42/EC documentation practices failed to capture. [S3]
ATEX-certified industrial valve assemblies with electronic position feedback now require additional SBOM entries listing firmware versions, cryptographic keys, and update mechanisms — a documentation requirement that adds 2–4 hours per technical file for compliance teams.
Cybersecurity Integration: ISO 10218-1:2025 as CE Marking Gate
In May 2026, SGS awarded Dobot Robotics cybersecurity verification under ISO 10218-1:2025 for its CR30H collaborative robot series, marking one of the first third-party certifications aligning with the new standard's secure-by-design requirements [S5]. ISO 10218-1:2025 specifies that manufacturers must implement threat analysis, secure communication protocols, and firmware integrity verification as integral safety functions — not post-market add-ons.
This creates a cascading effect on CE marking: if a flow meter with wireless HART or FOUNDATION Fieldbus output is integrated into a robotic cell, the combined system inherits the ISO 10218-1:2025 cybersecurity requirement at the system level, even though the flow meter itself may not have been originally designed to that standard.
AI Components and the Pending Machinery Exemption
EU ambassadors agreed in May 2026 to exempt machinery from the EU AI Act as part of a broader AI law review, potentially delaying high-risk AI restrictions by over a year [S1]. This decision affects machinery incorporating AI-based vision systems, predictive maintenance algorithms, or adaptive control logic — which would otherwise face dual conformity assessment under both 2023/1230 and the AI Act's risk classification framework.
The exemption does not eliminate AI Act requirements entirely; it defers them. Manufacturers still must document AI component intended use, training data provenance, and failure mode analysis in the technical file, but can defer AI Act-specific audit costs until the grace period expires.
Market Surveillance and Post-Market Obligations
Article 20 of the regulation imposes affirmative market surveillance duties on manufacturers: CE-marked machinery must be registered in the EU's EUDAMED database within one month of market placement, and serious incident reports (defined as injury, near-miss, or significant property damage) must be filed within 15 days of manufacturer awareness. [S4]
Agricultural machinery manufacturers face additional scrutiny under the German VKMS guideline for indirect visibility — Motec's wireless camera system certification in 2026 demonstrates how market-specific voluntary guidelines can function as de facto CE marking prerequisites in key purchasing jurisdictions [S2].
Sourcing and Standards Cross-Reference
Key harmonized standards supporting conformity assessment under 2023/1230 include EN ISO 12100 (risk assessment methodology), EN 60204-1 (electrical equipment safety), and the EN ISO 13849 series (safety-related control systems). For pressure sensor applications in safety-critical circuits, EN ISO 13849-1 Performance Level (PLr) requirements determine whether Category 3 or 4 architecture is mandated — a choice that directly impacts component cost and wiring complexity. [S5]
The UK–EU SPS agreement proposed in June 2026 could reduce certification burden for machinery traded between Great Britain and the EU by eliminating redundant border checks, but manufacturers should not assume mutual recognition of CE marking — UKCA marking remains a separate obligation for the Great Britain market.
For CE marking validity, manufacturers must ensure that any industrial valve, pressure transmitter, or control system bearing the CE mark has a Declaration of Performance and Declaration of Conformity available in the language of the country of use — a requirement that increased translation and administrative costs by an estimated 8–12% for multi-country EU distributors in 2025.