Knowledge Base Regulation Tracker Standards & Frameworks OSS Directory AI Incident Database Research Paper Library Case Studies Society Articles News Jobs About Charter Sign inBecome a Member
Home/Regulation Tracker/Regulation (EU) 2023/1230 on machinery — safety of AI-driven and self-evolving machinery

Regulation (EU) 2023/1230 on machinery — safety of AI-driven and self-evolving machinery

From January 2027 machinery whose safety depends on AI or that evolves after deployment requires third-party conformity assessment and decision logging under the EU Machinery Regulation, ahead of the AI Act's Annex I obligations in 2028.

machineryroboticsself-evolvingconformity assessment

Required actions

  • Machinery with self-evolving behaviour or safety functions ensured by AI is high-risk and needs third-party conformity assessment - Risk assessment must cover self-evolving behaviour, cybersecurity and human-robot interaction; keep a log of safety-relevant AI decisions - Machinery-embedded AI is Annex I high-risk under the AI Act from August 2028

Sources

PreviousNew York Stop Addictive Feeds Exploitation (SAFE) for Kids Act and implementing rulesNextColorado Automated Decision-Making Technology Act

Contribute

Spot an error, or know a record we should add? Members can propose additions and submit corrections.

Add regulationReport a correction or request removal

Related in Regulation Tracker

Regulation (EU) 2026/1744 amending the AI Act (Digital Omnibus on AI)

The first amendment to the AI Act. Defers high-risk obligations to December 2027 (Annex III) and August 2028 (Annex I), leaves Article 50 transparency on the August 2026 schedule with a short marking grace period,…

European UnionIn force

Regulation (EU) 2023/988 on general product safety (GPSR)

The EU consumer product safety baseline since December 2024 explicitly counts a product's learning and evolving features and cybersecurity among safety characteristics, bringing AI-enabled consumer goods under recall…

European UnionIn force

Regulation (EU) 2024/2847 — Cyber Resilience Act

Mandatory cybersecurity requirements for hardware and software sold in the EU, including AI-enabled products, with secure-by-design duties, vulnerability handling for the support period, 24-hour incident reporting…

European UnionIn force, applied in stages