EU Machinery Regulation Risk Assessment Method

Define the exact product model, intended use, foreseeable misuse, operating modes, users, environment, interfaces, tooling, energy sources, maintenance activities, and life-cycle phases. The point is to make the assessment traceable to the machine that will be placed on the market or put into service, not to a product family label.

For assemblies and integrated systems, include interactions between machines and partly completed machinery. For autonomous or self-evolving behaviour, include hazards foreseeable at placement on the market or putting into service, including intended evolution of the behaviour or logic.

Record the governing instrument and date at the start of the assessment. The Regulation generally applies from 20 January 2027, while Article 52 preserves the making available of products placed on the market in conformity with Directive 2006/42/EC before that date.

Build the hazard log before choosing controls. For each life-cycle phase, list mechanical, electrical, thermal, noise, vibration, ergonomic, control-system, maintenance, access, installation, lifting, mobility, digital, and environment-specific hazards that are relevant to the machine.

Then map each hazard to the applicable Annex III essential health and safety requirements. Annex III is not a generic checklist: the Regulation says obligations apply when the corresponding hazard exists, while safety integration, marking, and instructions apply in all cases.

For each hazardous situation, estimate severity and probability using a consistent scale that engineering, safety, quality, and regulatory reviewers understand. Regulation (EU) 2023/1230 and ISO 12100 do not prescribe one universal numerical matrix or acceptance score, so document the chosen method, assumptions, uncertainty, and decision criteria instead of presenting a score as a legal threshold.

Risk reduction should follow the Machinery Regulation's safety-integration logic: design out the hazard where possible, use protective measures for risks that cannot be eliminated, and use information for use for residual risks that remain after design and protective measures.

Residual risk is not an afterthought. If a risk remains after design and protective measures, the record should explain why it remains, how it is communicated, and which instructions, markings, maintenance checks, PPE references, training information, or replacement criteria are needed.

Instructions for use must correspond to the product model and cover intended use, foreseeable misuse, safe installation, operation, adjustment, maintenance, and other safety information required by Annex III. Digital instructions can be used under the Regulation's conditions, but the risk assessment should still prove that the user receives the safety information needed for the machine.

Software belongs in the machinery risk assessment when it affects safety functions, control logic, autonomy, data dependency, connectivity, updates, or user interaction. The Regulation recognises digital safety components, machinery missing only the upload of application-specific software, and technical-file access to source code or programming logic when needed by authorities to check EHSR compliance.

Cybersecurity is relevant where IT-security threats can influence machinery safety. Use ISO/TR 22100-4 as a prompt to identify security threats that could corrupt or bypass safety-related functions, change parameters, interrupt safety monitoring, or create hazardous behaviour.

After placement on the market or putting into service, a physical or digital modification is substantial under Article 3(16) only if it was not foreseen or planned by the manufacturer, creates a new hazard or increases an existing risk, and requires guards or protective devices whose processing changes the existing safety control system, or additional protective measures for stability or mechanical strength. Check that threshold during change control for retrofits, firmware changes, model updates, safety-function updates, integration changes, and connected-machine deployments.

The risk assessment should be written so it can be lifted into the technical documentation. Annex IV requires risk assessment documentation showing the procedure carried out, including the EHSRs that apply, protective measures implemented, residual risks, standards or other specifications used, and reports or results of calculations, tests, inspections, and examinations.

Keep the evidence model version-controlled. A reviewer should be able to trace one hazard from the machine limit, through EHSR mapping and risk estimation, to the selected risk-reduction measure, verification result, residual-risk statement, instruction text, declaration, and release approval.

A weak machinery risk assessment usually fails because it cannot be traced. The file may contain a certificate, a standard list, or generic risk matrix, but not the reasoning that connects a specific hazard to a specific EHSR, reduction measure, verification result, and residual-risk communication.