Design Managers Forum SPOTLIGHT 2025 How New Regulations Will Change Product Development

From Jan Vollmuth | Translated by AI 2 min Reading Time

Related Vendors

The new Machinery Regulation and the Cyber Resilience Act will profoundly change product development. The extent to which the two regulations need to be considered together is the topic of a presentation at the Design Managers Forum Spotlight 2025.

Without CE marking, no product with digital components can be sold in Europe: From 2027, the requirements of the Machinery Regulation (MVO) and the Cyber Resilience Act (CRA) must be met for this.(Image: © Looker_Studio - stock.adobe.com)
Without CE marking, no product with digital components can be sold in Europe: From 2027, the requirements of the Machinery Regulation (MVO) and the Cyber Resilience Act (CRA) must be met for this.
(Image: © Looker_Studio - stock.adobe.com)

With the new Machinery Regulation (EU) 2023/1230 and the Cyber Resilience Act (EU) 2024/2847, the European Union is setting the stage for a holistic approach to security in the era of connected machines. While the Machinery Regulation explicitly establishes cybersecurity requirements for machine safety for the first time, the Cyber Resilience Act defines comprehensive requirements for digital products and software.

What initially appears to be two separate pieces of legislation in practice affects one and the same product—especially in machinery and plant engineering. Therefore, it is crucial to consider the MVO and CRA together and to have a detailed understanding of their overlaps. One thing is certain: the MVO and CRA will profoundly change product development, from risk assessment to documentation and update concepts.

Andreas Schader, Global Product Management Division Drive Products, ABB Motion.(Image: ABB AG)
Andreas Schader, Global Product Management Division Drive Products, ABB Motion.
(Image: ABB AG)

Mr. Schader, why is the topic of your presentation relevant for designers and developers?

Quite simply: Without CE marking, no product with digital components can be sold in Europe—it is the "ticket to play." From January 20, 2027, the new Machinery Regulation (MVO) will apply, and from December 2027, the Cyber Resilience Act (CRA). Both regulations include cybersecurity requirements as an integral part of product safety.

What are the key aspects of the presentation?

First, I clearly delineate the protection objectives: the MVO primarily focuses on protecting people from physical hazards posed by machines, while the CRA addresses the protection of data, system integrity, and critical functions. Second, I dispel myths—for instance, the misconception "If I comply with the CRA, I automatically comply with the MVO." This is not the case. Additionally, I address the false belief in "grandfathering protection": machines whose series production began before 2027 must comply with the requirements of the MVO and CRA as of their respective effective dates, without exception. Third, I provide an overview of current discussions regarding the potential omnibus update from the EU Commission and the status of standardization.

What will the participants learn from your presentation?

Participants will gain an overview of current developments in regulations as well as standardization. They will receive the necessary guidance to initiate discussions within their companies and steer them in the right direction.

Subscribe to the newsletter now

Don't Miss out on Our Best Content

By clicking on „Subscribe to Newsletter“ I agree to the processing and use of my data according to the consent form (please expand for details) and accept the Terms of Use. For more information, please see our Privacy Policy. The consent declaration relates, among other things, to the sending of editorial newsletters by email and to data matching for marketing purposes with selected advertising partners (e.g., LinkedIn, Google, Meta)

Unfold for details of your consent