![\"\"](\"https:\/\/www.astor.com.pl\/en\/wp-content\/uploads\/2026\/07\/Standardy-bezpieczenstwa-w-robotyce-nowe-regulacje-prawne-juz-w-2027-roku-EN-photo.jpg\")
<\/p>\n<\/p>\n
The year 2027 will mark a period of major changes in the broadly understood field of safety for robotic systems. Not only robot manufacturers, but also integrators and end users must be prepared for them. What lies ahead, and what will these upcoming changes mean in practice?<\/p>\n
In 2027, the following will come into force:<\/p>\n
For the sake of accuracy, it should be noted that some of the provisions contained in these documents will come into effect earlier during transitional periods.<\/p>\n
The Machinery Regulation (EU) 2023\/1230<\/strong> is the primary legal act of the European Union containing provisions that define how all types of machinery and equipment must be designed, manufactured, and placed on the market. In other words, the regulation specifies the conditions a machine must meet in order to be commissioned in an EU factory. Unlike the previously applicable Machinery Directive, the new regulation is a regulation rather than a directive, meaning that its provisions apply directly and uniformly across all EU Member States without the need for implementation through separate national laws.<\/p>\n The purpose of the Machinery Regulation is to ensure workers’ physical safety<\/strong> in the workplace by protecting human health and life from physical hazards generated by machinery. The most significant changes compared to previous regulations focus on adapting the document to modern technological realities, including artificial intelligence, the Internet of Things (IoT), and mobile technologies. Cybersecurity becomes a key aspect\u2014the regulation explicitly requires machines to be designed in a cybersecure manner (for example, preventing unauthorized modification or disruption of control software) so that a cyberattack cannot lead to a dangerous physical situation that could endanger machine operators.<\/p>\n The Cyber Resilience Act (CRA)<\/strong> is also an EU regulation, focusing on the digital security of all products sold within the EU market. It contains provisions applicable to any product that incorporates digital elements (both hardware and software) capable of connecting to the Internet. Such products obviously include computers, PLC controllers, and robot controllers.<\/p>\n The CRA imposes an obligation on manufacturers of digital devices to ensure resilience against cyberattacks throughout the entire product lifecycle<\/strong>. In practice, this means providing the necessary technical support during that period and addressing discovered security vulnerabilities through appropriate software updates.<\/p>\n The new Machinery Regulation and the Cyber Resilience Act complement each other, creating a comprehensive legal framework governing the safety of machinery and equipment. The relationship between the CRA and the Machinery Regulation stems from a fundamental observation: no modern machine (i.e., one based on digital technologies and connected to a network) can be considered fully physically safe (safety<\/em>) unless it is also fully protected against cyber threats (security<\/em>). Unauthorized access to and control over a device by hackers can obviously create hazards for people working nearby.<\/p>\n <\/td>\n<\/tr>\n <\/p>\n Both legal acts are fully binding on all manufacturers and suppliers of equipment within the European Union. Violations may result in penalties explicitly defined in the regulations.<\/p>\n <\/p>\n ISO 10218:2025 is the latest version of ISO 10218, an international technical standard whose first edition was published in 2011. Unlike the documents discussed above, it is not a legal act but a voluntary set of engineering best practices developed specifically for industrial robots and their integration.<\/p>\n The latest update of ISO 10218 is, however, directly related to the Machinery Regulation and the CRA. It was developed to reflect the requirements introduced by these legal acts and to demonstrate how they can be implemented in practice for robotic systems. It should be remembered that the provisions contained in the Machinery Regulation and the CRA are general in nature, which is why detailed guidance is needed to explain what they mean for specific machines and applications. This is precisely the role of ISO 10218, which provides a set of precise technical guidelines ensuring that robots and robotic workcells designed in accordance with the standard meet all safety and cybersecurity requirements stemming from both EU regulations.<\/p>\n ISO 10218 consists of two parts. The first, \u201cIndustrial robots,\u201d<\/strong> focuses on the robots themselves and their use in industrial environments, specifying requirements related to design, control systems, and built-in safety functions. The second part, \u201cIndustrial robot applications and robot cells,\u201d<\/strong> concerns robotic systems as a whole\u2014complete applications such as robot cells. In this context, the robot is only one component of a larger system that may also include grippers, safety fencing, sensors, and other equipment. This part of the standard defines requirements for the integration of robotic applications and workcells. It addresses detailed issues related to the design, integration, commissioning, operation, maintenance, decommissioning, and disposal of machines and components used within robotic workstations.<\/p>\n What are the most important changes introduced by these new regulations from the perspective of industrial robotics?<\/p>\n First and foremost, the Machinery Regulation (and consequently the updated ISO 10218 standard) treats an entire robotic workstation as a single complete machine. In other words, it does not focus on the robot alone\u2014from the perspective of the new regulations, the \u201cmachine\u201d is the entire cell: the robot, gripper, safety fencing, safety systems, and any other equipment operating within the workstation. It is the safety of this complete machine that must be ensured under the new regulations. This is a significant change because it means that the safety assessment no longer focuses on whether the robot itself is \u201csafe\u201d; instead, the entire application is evaluated.<\/p>\n One consequence of this change is a new approach to cobots (collaborative robots). The new regulations introduce the concept of a collaborative application<\/strong>, and it is the safety of the whole application that must be ensured. Therefore, it is not sufficient for the cobot alone to be \u201csafe.\u201d Once any tool is attached to the cobot, testing of the entire workstation becomes necessary to ensure compliance with legal requirements.<\/p>\n The second major change has already been widely discussed. The new regulations establish cybersecurity as an integral component of overall machine safety. This means that not only all digital components used to build a machine\u2014computers, controllers, PLCs, robot controllers, and networking equipment equipped with Ethernet ports and network connectivity\u2014must comply with CRA requirements, but the workstation (machine) as a whole must also comply.<\/p>\n The machine manufacturer or system integrator must demonstrate that integrating components that are individually \u201ccybersecure\u201d has not created new vulnerabilities or risks, including physical risks to operators. An important requirement imposed on integrators is the performance of a cybersecurity risk assessment. Based on this assessment, appropriate additional safeguards are designed for the workstation or machine.<\/p>\n The practical implications of this change are substantial. Most importantly, regulations require a clearly defined product lifecycle. The manufacturer must provide appropriate application support, particularly software updates that address detected defects or vulnerabilities that could be exploited through cyberattacks.<\/p>\n Under the new regulations, the control system of a robotic cell must be resistant to any malicious attempts at manipulation or disruption (such as remotely disabling a light curtain). Machine control systems must be designed so that connecting a network cable or external device\u2014whether intentionally or accidentally, even a USB flash drive\u2014cannot lead to a hazardous situation or endanger people.<\/p>\n The third area of change concerns strict regulations regarding the monitoring and recording of all events that may affect machine safety.<\/p>\n In particular, machines must identify and record all modifications to hardware and software, whether authorized or unauthorized. The manufacturer must ensure that any change to hardware configuration, program code, or configuration settings is logged. This also applies to planned changes, such as routine software updates.<\/p>\n For industrial robots, the new requirements translate into the need for continuous monitoring of robot status and operating parameters. The following data and events must be recorded:<\/p>\n These requirements are specified by ISO 10218:2025, which, as explained earlier, defines the measures necessary for machines to comply with both the Machinery Regulation and the CRA.<\/p>\n Importantly, compliance does not end with data logging. The Cyber Resilience Act also specifies detailed obligations related to reporting all security incidents. The regulations define reporting timelines and the types of reports that must be submitted to the European Union Agency for Cybersecurity (ENISA). Failure to comply with these obligations may result in significant financial penalties.<\/p>\n The latest versions of Kawasaki Robotics robot controllers ensure compliance with all requirements imposed by the new EU legislation and the updated ISO 10218 standard.<\/p>\n The most significant innovation is the Core Cubic-S safety system<\/strong>, which is now an integral part of the controller rather than an optional add-on, as was previously the case. Core Cubic-S provides continuous monitoring of the robot arm and detects any abnormalities in its operation. It introduces a new, more precise method of tracking robot arm movement that remains active even when the robot is operating in manual mode. Additionally, all configuration is now performed directly from the Teach Pendant, eliminating the need to connect the controller to a computer via USB using additional software tools.<\/p>\n Other new features in Kawasaki Robotics controllers include:<\/p>\n The Machinery Regulation and the Cyber Resilience Act establish a new legal framework for which manufacturers and integrators of robotic systems must be prepared. The updated ISO 10218 standard provides essential support by supplying engineers with the information and tools needed to design compliant robotic workstations.<\/p>\n Strict adherence to this standard grants manufacturers the so-called presumption of conformity with EU requirements, meaning that a system built in accordance with the standard is deemed to comply with all applicable regulations and may be legally recognized as safe.<\/p>\n <\/p>\n","protected":false},"excerpt":{"rendered":"Cyber Resilience Act<\/h1>\n
\n\n
\n <\/td>\n Machinery Regulation (2023\/1230)<\/strong><\/td>\n Cyber Resilience Act (CRA)<\/strong><\/td>\n<\/tr>\n \n Purpose of regulation<\/strong><\/td>\n Protection of human health and life from physical hazards posed by machinery.<\/td>\n Protection of infrastructure and data against cyberattacks.<\/p>\n \n Scope of regulation<\/strong><\/td>\n A complete machine or production line.<\/td>\n Any device containing digital technology (hardware and software).<\/td>\n<\/tr>\n \n Addressed risk<\/strong><\/td>\n Safety (hazards to people generated by machines).<\/td>\n Security (risk to the safe and reliable operation of a machine caused by human actions).<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n ISO 10218:2025 Standard<\/h1>\n
What Changes Under the New Regulations?<\/h1>\n
Safety Concerns the Entire Workcell<\/strong><\/h3>\n
Cybersecurity as an Essential Element of Machine Safety<\/strong><\/h3>\n
Requirements for Application Monitoring and Incident Reporting<\/strong><\/h3>\n
\n
New Regulations and Kawasaki Robotics<\/h1>\n
\n
Summary<\/h1>\n