normakte / Risk assessment
The risk assessment is not one document among others: it is what determines which essential requirements apply to your machine. It is done before the final design.
The manufacturer carries out a risk assessment to determine the applicable essential health and safety requirements (Annex III), then designs and builds the machine taking its results into account. It precedes the final design and is part of the technical documentation.
Not every later change is a substantial modification. Only where the conditions of Art. 3(16) are met — in particular a new or increased risk requiring additional protective measures — does whoever carries it out become the manufacturer, with the obligations under Art. 18. The risk assessment must then be redone.
For connected machinery, Annex III (points 1.1.9 and 1.2.1) touches on protection against corruption and the safety of control systems. The Cyber Resilience Act connects here: CRA conformity can make it easier to demonstrate these points, but the synergy must be demonstrated by the manufacturer (recital 53).
Register of all Machinery Regulation requirements, documents with checksum, declaration and nameplate with QR code – one trial file free until 20.01.2027.
Sources. Article and annex references are taken from the versions published in the Official Journal: Regulation (EU) 2023/1230, OJ L 165, 29.6.2023; Regulation (EU) 2024/2847, OJ L, 2024/2847, 20.11.2024.
Annex details are checked against the versions published in the Official Journal; they are paraphrased and shortened, the official text prevails.
normakte is a drafting and calculation aid; it replaces neither the conformity assessment, nor a notified body, nor legal advice.