By 2027, Software Will Be Part of Machine Safety
Effective January 20, 2027, the EU Machinery Regulation will take effect, replacing the previous Machinery Directive. Software can then be considered a safety component in its own right, and connected construction machinery must be protected against tampering and cyberattacks. Added to this is the Cyber Resilience Act: The first reporting requirements take effect in September 2026, and starting in December 2027, manufacturers of connected products must provide security updates throughout the entire product lifecycle. For many, this means fundamentally revising software architecture, update processes, and technical documentation. Those who wait until shortly before the deadline will have to make costly retrofits under time pressure.









