Cybersecurity from January 2027

The new EU Machinery Regulation (2023/1230/EU) is due to enter into force in January 2027, replacing the current Machinery Directive (2006/42/EU).

The updated regulation introduces stricter requirements for industrial equipment in the context of the new opportunities and risks that arise with the introduction of digital technologies.

For the parties affected – manufacturers, integrators and users of machines, industrial automation systems and related products in the EU – there is no transitional period in which the old directive and the new regulation would be applied in parallel. This means that companies now have less than a year to familiarise themselves with the new requirements and put them into practice.

The leader in the segment Omron and its Bulgarian partners from Gemamex have prepared a useful guide for businesses in our country, which will facilitate the process of compliance. You can read the first part here.

Now let’s look at the specific considerations that parties involved in the implementation of industrial automation projects should take into account:

• Cybersecurity of connected systems: the new regulation addresses the growing risks of connected and remotely controlled equipment. Machines must now be designed to be protected against unauthorized access or manipulation (through physical connections or digital channels) that could compromise safety-critical functions;
   
• Artificial intelligence requires increased caution: for systems whose behavior is partly or entirely based on self-learning, it should be ensured that adaptive functionality does not compromise safety. The regulation explicitly requires safety-critical AI platforms to undergo rigorous risk assessments and, in many cases, third-party conformity assessments;
   
• Integration of autonomous systems: Autonomous machines, such as mobile robots, must now include dedicated monitoring functions that give supervisory personnel remote access to real-time machine information and the option to intervene when necessary – to stop, start or reposition. The regulation states that supervision can be carried out directly or indirectly, for example through a camera system, provided that the movement and working area of ​​the machine are fully observable;
   
• Collaborative robots: The new regulation aims to address the risks of human-robot collaboration. Cobots often work in close proximity to humans, and companies must ensure that their safety features remain reliable even in dynamic environments. More stringent requirements are introduced for collaborative robots with AI or adaptive behavior, especially if these systems affect safety-critical functions. In such cases, third-party conformity assessments may be required.

A proactive approach to compliance preparation

To ensure compliance with the new legislation, companies should start by conducting a comprehensive review of existing machinery and systems and identify any gaps in the new requirements.

Particular attention should be paid to provisions for high-risk machinery, digital safety components and potential cybersecurity vulnerabilities.

Early adoption of harmonised standards – where possible – can help streamline the compliance process. Training is another important step that will equip teams with the competencies needed to successfully implement new technologies and requirements.

The Machinery Regulation offers a broad framework to drive innovation and ensure safety in an increasingly digitalised manufacturing landscape. By acting now, stakeholders can prepare for a smooth transition, explore the available options and build resilient automation systems that meet the requirements of the future.