Cyber Resilience Act reporting obligations: what applies now
Cyber Resilience Act reporting obligations started on 11 September 2026: early warning within 24 hours via ENISA's platform, also for older products.
Industrial automation: EU rules for components and systems
Controllers, drives and robot cells sit where machinery, electrical and cybersecurity rules meet. We sort out which ones apply to each product and hold your CE documents in the EU.
- EMC DirectiveDirective 2014/30/EU
- Cyber Resilience ActRegulation (EU) 2024/2847Applies from 11 December 2027
- RoHS DirectiveDirective 2011/65/EU
- Machinery DirectiveDirective 2006/42/EC
- Machinery RegulationRegulation (EU) 2023/1230Applies from 20 January 2027
- Low Voltage DirectiveDirective 2014/35/EU
- Ecodesign for electric motorsRegulation (EU) 2019/1781
- Radio Equipment DirectiveDirective 2014/53/EU
- RED cybersecurityDelegated Regulation (EU) 2022/30
Three key facts on industrial automation
2027
Machinery Regulation
From 20 January 2027 Regulation (EU) 2023/1230 replaces the Machinery Directive for machines and safety components.
24 h
Vulnerability reporting
Since 11 September 2026, actively exploited vulnerabilities in products with digital elements are reported within 24 hours.
Art. 4
Business in the EU
Machinery, EMC, RoHS and radio products need an economic operator in the EU that holds the declaration of conformity.
What applies to your product?
Pick a product to see the EU rules it usually falls under. Yours may differ, so we check each one.
Robots and robot cells
Machinery; under the Machinery Regulation control systems must also be protected against corruption.
Machinery Regulation replaces the Machinery DirectiveMachinery Regulation
Safety components such as light curtains
Light curtains and safety logic units are safety components under the machinery rules.
Machinery Regulation replaces the Machinery DirectiveMachinery Regulation
PLCs, I/O modules and industrial PCs
Low Voltage Directive only from 50 V AC or 75 V DC; as logic unit for safety functions a safety component.
All Cyber Resilience Act requirements applyCyber Resilience Act
Drives and motors
Electric motors and variable speed drives must also meet the ecodesign efficiency rules.
Industrial gateways and wireless sensors
A radio module brings the Radio Equipment Directive, an internet connection its cybersecurity rules.
All Cyber Resilience Act requirements applyCyber Resilience Act
HMIs and operator panels
With a data connection the Cyber Resilience Act applies, reporting since 11 September 2026.
All Cyber Resilience Act requirements applyCyber Resilience Act
Deadlines ahead
The next dates from the rules on this page.
Reporting of actively exploited vulnerabilities and severe incidents
Cyber Resilience Act
2 October 2026
Machinery Regulation replaces the Machinery Directive
Machinery Regulation
All Cyber Resilience Act requirements apply
Cyber Resilience Act
How we help
EU Authorized Representative
We hold your CE documents in the EU and answer authorities for your components.
CE marking support
We map the Machinery Regulation, LVD, EMC, RED and Cyber Resilience Act to each product.
Compliance consulting
We plan the changes from the Machinery Regulation and the Cyber Resilience Act with your engineering team.
Industrial automation: frequently asked questions
Is a PLC a machine under EU law?
Not on its own. A PLC is electrical equipment under the EMC and RoHS rules, and under the Low Voltage Directive from 50 V AC or 75 V DC. A safety PLC placed on the market as a logic unit for safety functions is a safety component under the machinery rules.
Do safety components with machine learning need a notified body?
Yes. Safety components with fully or partially self-evolving behavior using machine learning approaches that ensure safety functions are listed in Annex I Part A of the Machinery Regulation, so a notified body is always involved.
Who must be in the EU for automation components?
For products under the Machinery, Low Voltage, EMC, RED or RoHS rules, a business in the EU must hold the declaration of conformity: an importer, an authorized representative or a fulfilment service provider.
What changes for robot cells under the Machinery Regulation?
From 20 January 2027 the Machinery Regulation applies, with requirements to protect control systems against corruption and the option of digital instructions.
Insights on this topic
EU motor efficiency regulation: IE3, IE4 and CE
EU motor efficiency regulation 2019/1781: which motors need IE2, IE3 or IE4 since when, what is exempt, what the rating plate shows, who must be in the EU.
Partly completed machinery: what to supply
Partly completed machinery in the EU: when robots and drive units qualify, what the declaration of incorporation must contain and what changes in 2027.
Why companies choose Representa GmbH
Representa secured our EU Authorized Representative appointment within 48 hours, saving our shipment from costly delay.
U.S. electronic device manufacturerEU Authorized Representative They turned the CE Marking process into clear, actionable steps, helping us meet our launch timeline and pass compliance the first time.
Canadian consumer electronics companyCE marking Thanks to Representa, our products became fully GPSR-compliant well before the deadline, ensuring uninterrupted marketplace sales.
Asian consumer and healthcare exporterGPSR Responsible Person Our beauty cosmetics line faced labeling issues, but Representa's quick review and precise updates got us approved without delay.
Global beauty, fashion and cosmetics brandCompliance consulting The onboarding was fast and transparent. Representa made EU compliance simple and gave us confidence to expand across Europe.
Canadian industrial equipment supplier We were unsure how to manage new GPSR rules. Representa guided us step by step, keeping us fully compliant and avoiding delays.
U.S. consumer goods manufacturerGPSR Responsible Person
Which rules apply to your components?
Send us your product list. We map the applicable rules for each item and the role we can take for you.
Get in touch with our team of experts
Tell us what you manufacture and where you want to sell. We identify the requirements for EU and UK market access and come back to you with the next steps.