Regulation

Is the industry ready for 20 January? Nobody has measured it.

3 min readMati Melchior
Is the industry ready for 20 January? Nobody has measured it.

Regulation (EU) 2023/1230 applies on 20 January 2027 — under five months from today. It is a cut-off date regulation with no transition period: the old Directive stops, the new Regulation starts.

The obvious question is how ready the industry is. I went looking for the answer and could not find one.

Not from VDMA, Orgalim, CECIMO, CECE, EGMF, FEM or EUnited. Not from TÜV SÜD, TÜV Rheinland, DEKRA, SGS, Intertek or Bureau Veritas. Not from Deloitte, PwC or McKinsey. Not in the Commission's own impact assessment, which quantifies an expected €16.6 billion in annual savings but publishes no preparedness figure. Under five months from a regulation binding a sector the Commission itself describes as 98% small and medium enterprises, there is no public number for how many manufacturers have completed a risk assessment, drafted a post-market surveillance plan, or engaged a notified body.

That absence is the finding. It is also worth being precise about: I am not saying the industry is unprepared. I am saying nobody has measured it, and that in a sector this consequential the measurement itself is missing.

Three things have been established, and they are worth more than an estimate.

The one qualitative study finds a split. Interact Analysis surveyed supplier readiness in July 2026 and reported a tiering rather than a percentage: established global vendors broadly claim to be prepared; mid-sized and emerging suppliers show significant awareness gaps; and emerging Asian suppliers — Chinese manufacturers in particular — are notably less prepared, with the R&D cost of compliance described as a significant and underestimated barrier. The same analysis notes that ISO 10218:2025 had still not been cited in the Official Journal as of mid-2026, meaning the presumption of conformity it would confer is not yet available.

The industry has asked for a delay, in writing. In January 2026, CECE, CECIMO, EGMF, FEM and others jointly asked the Commission to postpone the cybersecurity provisions of the Machinery Regulation to align them with the Cyber Resilience Act. A separate objection concerns the mandatory digital declaration of conformity, which has no transitional period at all. A formal, signed request for more time is a stronger readiness signal than any survey, because it is the industry describing its own position under its own name.

The certification capacity arrived late. TÜV SÜD announced itself as the world's first notified body designated under 2023/1230 — in September 2024, roughly twenty-eight months before the regulation applies. Intertek's designation was still pending publication in the second half of 2025. Notified body assessment is mandatory for the Annex I Part A categories, including machinery whose safety functions rely on self-evolving machine learning. A market cannot be assessed faster than its assessors were appointed.

Two structural problems compound this. The Commission's own application guide for the Regulation is not expected before the end of 2026 at the earliest, according to the editorial group at DG GROW — meaning manufacturers are building toward requirements whose official interpretation will arrive at roughly the same moment as the deadline. And member states are required to notify the Commission of their sanction and enforcement rules only by October 2026, three months before the regulation applies. Companies do not currently know, in most jurisdictions, what non-compliance will cost them.

The honest summary is narrower than a dashboard and harder to argue with. The companies that will be compliant on 20 January are the ones that started two years ago, because notified body capacity was not designated much earlier than that. Everyone else faces the same three options they have faced all year: delay market entry, restrict scope, or ship and rely on market surveillance being slow.

If a readiness survey does exist and I have missed it, I would genuinely like to see it. Until then, the most accurate thing anyone can say about industry readiness for 20 January 2027 is that it has not been measured.

Share

Physical AI Safety Dispatch

Monthly analysis. No spam. One exclusive insight per issue.

One issue per month. Unsubscribe in one click from any email. Privacy policy.

We use cookies

This site uses essential cookies to function and, with your consent, analytics cookies (Google Analytics) to understand how the site is used. Learn more.