Technical article

EN ISO 12100 is being revised

Standard on risk assessment and risk reduction

The new EN ISO 12100 - what's changing?


Share Article
Share Button Linkedin Share Button Xing Share Button X Share Button Email

The most important standard for risk assessment, (EN) ISO 12100, is currently being revised! You can find out the relevant facts below to stay on the ball.

Note: This technical article is updated on an ongoing basis. Don't miss any important updates and subscribe to our free newsletter right away:

What is the current status?

The follow-up project ISO/CD 12100 is currently in the so-called ‘exploratory phase’. The current status ‘DIS ballot initiated: 12 weeks’ means that the international draft standard was confirmed on 13 December 2024 and that from this day onwards comments can be submitted during the following 12 weeks.

On 1 January 2025, these draft standards were published by the national standardisation organisations (DIN for Germany and Austrian Standards for Austria) for public comment, which is possible until 14 February 2025.

When is the new standard (EN) ISO 12100 coming?

The ISO standardisation process involves several stages. The new standard is currently in phase 3 (committee phase). It will therefore be some time before the document reaches phase 6 (publication phase).

By way of comparison: when the standard was last revised in 2008, it took just under two years from the committee phase to the publication phase. If the current revision follows a similar cycle, users can expect a new edition of the standard around mid-2026. However, since the changes and additions made in the draft standard of 1 January 2025 are rather minor (see section ‘What will change in terms of content?’), publication is likely to take place earlier.

This publication process only reflects the international version. CEN, the European standardisation organisation, has also launched a new standardisation project with the name prEN ISO 12100 rev. It is expected that the ISO and CEN committees will work closely together as they did for the 2010 edition of the standard. Publication at the European and then at the national level usually takes place a few months after the international edition is published.

In July 2024, a draft standardisation request was issued by the EU Commission to CEN/CENELEC, calling for the development of harmonised standards for the new or amended requirements of the Machinery Regulation (EU) 2023/1230. Annex I of the document calls first for ‘standards and specifications on horizontal issues of risk reduction and safety of machinery and related products’, presumably referring to EN ISO 12100 as the only Type A standard. The deadline for the latest adoption of this standard by CEN/CENELEC (as for all other standards of the mandate) is set for 20 January 2026, exactly one year before the new MVO comes into force. Further information on this topic can be found in the technical article ‘New Machinery Regulation: Status of harmonised standards’.

Product note

Safexpert 9.1 - The CE software already supports the new Machinery Regulation (EU) 2023/123030


Since version 9.1, Safexpert has been providing you with targeted support when switching to the new Machinery Regulation (EU) 2023/1230. For machines with a long service life that are placed on the market from 20 January 2027, you can now use the CE guide in accordance with the new Machinery Regulation!

Is there a transition period?

When it comes to the question of a possible transition period, a distinction must be made between the various publishers:

  • International: ISO is expected to withdraw the predecessor document immediately upon publication of the successor, i.e. there will be no transition period.
  • Europe: CEN/CENELEC only communicate the date of withdrawal indirectly: In the date of the new standard, the DOW, the so-called "date-of-withdrawal", communicates the latest date by which national implementations of the standard that contradict the current edition must be withdrawn. This date is on average 2-3 years after a new publication.
  • European Union: A special case in Europe is also the indirect publisher status of the European Commission, which publishes the new standard as a harmonised standard in the EU Official Journal in accordance with the Machinery Directive (in future the Machinery Regulation). With the listing in the EU Official Journal, the predecessor standard EN ISO 12100:2010 is expected to be granted a transitional period of 2.5 years for the presumption of conformity, during which both editions may be used.
  • National level: National standardisation organisations such as DIN or Austrian Standards generally withdraw national predecessor standards immediately, but there are exceptions here too.
     

When does the new ISO 12100 standard have to be applied?

This question is not easy for manufacturers to answer, as they find themselves in a field of tension, especially in Europe.

On the one hand, the listing of the predecessor standard EN ISO 12100:2010 in the EU Official Journal in accordance with the Machinery Directive provides a certain degree of legal certainty, i.e. the presumption of conformity, while on the other hand the EU directives in particular require compliance with the state of the art. It could be argued here that the new edition of (EN) ISO 12100 better reflects this state of the art from the time of publication than the previous standard due to its up-to-dateness.

For more information - also from a legal perspective - on this topic, please refer to our technical article Standards topicality vs. presumption of conformity.
 

What will change in terms of content?

In the 2024 work programme of the European standardisation organisations CEN/CENELEC, the revision of the standard was listed as one of the main tasks of Technical Committee 114 (Safety of Machinery). The main objective of the revision is therefore to review some definitions, to align the content with the Machinery Regulation (EU) 2023/1230 and to introduce links to the latest horizontal documents of the committee.1

This scope of the revision is also reflected in the draft standard for public comment, which was published on 1 January 2025 as prEN ISO 12100:2024. Below, we have listed some of the most important innovations and changes that have appeared in this draft from our point of view. Comments on the content can still be submitted until 14 February 2025, among other things on the website of Austrian Standards!

Please note:

  • There may still be changes before the final standard is published!
  • The text section of the innovations/changes is only a list of the most important modifications from our point of view.
     

Annexes ZC and ZD explaining the relationships with the Machinery Directive and the Machinery Regulation

The previous Annex ZA (Relation of this document and the Essential Health and Safety Requirements of Directive 2006/42/EC) was transferred to Annexes ZA (MD) and ZB (MR).

In addition, Annex ZC (MD) and Annex ZD (MR) have been added to provide further information explaining the relationship between the standard and the directive or regulation. These annexes set out principles for the safe design of machinery, including the selection of appropriate safety standards and their application to minimise risk. The focus is on the presumption of conformity through harmonised standards, in particular C-type standards that cover specific requirements. It also explains protection against risks from moving transmission parts, such as fixed or movable safeguards.

1 Scope

The scope has been extended to include an additional paragraph on cybersecurity attacks/corruption and artificial intelligence/machine learning. The future standard is therefore intended to define measures for the effects of these areas on machine safety. The new standard also specifies that hygiene aspects are relevant to machine safety.

The previous comments in the scope have been expanded to include two further points: a note that the risk assessment process can be used not only for personal injury but also for damage to domestic animals, property or the environment, and a more precise definition of the role of the designer, who can be a manufacturer, integrator, supplier or user.

3 Terms

The following terms have been added to Section 3:

  • 3.19: tolerable risk: level of risk that is accepted in a given context based on the current values of society
  • 3.41: cybersecurity: measures to protect a machine control system against unauthorized access or attack that can result in a hazardous situation

On the other hand, the terms ‘relevant hazard’ (formerly 3.7), ‘failure to danger’ (formerly 3.32) and ‘comparative emission data’ (formerly 3.42) have been deleted. The term ‘risk reduction measure’ replaces the previous term ‘protective measure’, and the definition of ‘risk evaluation’ has been revised.

In the 2010 edition of the standard, a distinction was still made between relevant hazard (a hazard identified as present on the machine or associated with its use) and significant hazard (a hazard identified as relevant and requiring the designer to take special measures [...]). In the future, according to the draft, there will be only the term ‘significant hazard’.

4 Strategy for risk assessment and risk reduction

In Section 4, a new Figure 1 has been added, which shows the iterative process for risk assessment/risk reduction as an overall process. The previous Figure 1 of EN ISO 12100:2010 (Schematic representation of risk reduction process including iterative three-step method) is listed in an unchanged manner as Figure 2.

5 Risk assessment

In section 5.4, sub-clause b), an additional reference to unintended self-developing behaviour of applied AI has been added to the possible operating states of the machine. Users can read up on the details of this interaction in the technical report CEN ISO/TR 22100-5. This document describes how hazards being associated with artificial intelligence (AI) applications machine learning in machinery or machinery systems, and designed to act within specific limits, can be considered in the risk assessment process.

6 Risk reduction

In this section, the previous Figure 4 has been replaced by a new Figure 5 and now includes guidance for selecting safeguards against hazards, without focusing on moving power transmission elements or parts, but only on the hazard as a whole.

The new section 6.2.14 specifically addresses hygiene aspects of machinery and equipment used in applications that have requirements for hygiene and cleanability (e.g. food and pharmaceuticals).

The last newly added subsection 6.3.5.15 is titled ‘Cyber security and protection against corruption’. Aspects of cyber security had been expected in the course of the publication of the Cyber Resilience Act (EU) 2024/2847, but for further details (or subsequently specific requirements), reference is made to the future type-B standard prEN 50742 (Safety of machinery – Protection against corruption). In prEN ISO 12100, only a few rough measures for risk reduction for cyber security and protection against data corruption are defined, e.g.:

  • Preventing unauthorized access to hardware, software, application software and related configuration data,
  • Preventing accidental or unintended changes;
  • air gapping
  • locking access to ports,
  • control of remote access.

Section 6.3.4 on technical protective measures for reducing emissions has been shortened to reflect only general aspects instead of details (noise, vibration, etc.).

Finally, Section 6.4 (information for use) was adapted to the new option of providing the documents in electronic form in the future. The revision is supplemented by the note that the accompanying documents (operating instructions) must meet the requirements of the standard EN ISO 20607 in the future. This standard, in contrast to EN IEC 82079-1 (Preparation of information for use (instructions for use)), is listed in the Official Journal of the European Union in accordance with the Machinery Directive – in future in accordance with the Machinery Regulation. EN ISO 20607 is also currently being revised and could be published together with the new EN ISO 12100. In addition, a new point has been added to the ‘Information on the use of the machine’ on the ‘significance and purpose of signals and warning devices’.

Annex B – Examples of hazards, hazardous situations and hazard events

There are almost no changes in Annex B, which lists examples of hazards. Besides minor editorial changes, the only addition to Table B.1 is the description of the electrical hazard ‘electromagnetic processes’ with the sentence ‘including those related to permanent
magnets’. 

In Table B.3, the term ‘verification’ will be replaced by ‘validation’ in some places in the future. Finally, Table B.4 (hazard events) was modified in the area of control systems: ‘Machine action resulting from inhibition [...] of protective devices’ becomes the new term ‘machine action resulting from inhibition [...] of protective devices’.

Annex C - Using the system of type-A, type-B and type-C standards to design a machine to achieve a level of tolerable risk by adequate risk reduction

This new Annex C has been taken from the contents of the technical report ISO/TR 22100-1. This provides informative guidance on the application of Type A, Type B and Type C standards for machine safety, with the aim of achieving an acceptable level of risk through appropriate risk reduction. The focus is on the role of type C standards, which define specific safety measures and requirements, supplemented by verification methods. The annex explains how these standards interact, particularly when type C standards deviate from type B standards, and provides practical steps for implementing these standards during design.

Annex D – Relationship between this document and ISO 13849-1

The new Annex D of EN ISO 12100 reproduces the contents of the technical report ISO/TR 22100-2 and explains the link to ISO 13849-1 and its integration into the risk assessment. It describes how safety-related control parts are incorporated into the process in order to achieve an acceptable level of risk, and illustrates this with graphics and examples. This rule has not yet been adopted by CEN/CENELEC as a European standard and is therefore reflected in European standardisation.

 

When will Safexpert - the risk assessment software - be adapted to the new requirements?

As soon as the first details of the content are available in the draft standard, we will start the preparatory work in order to enable our customers to perform risk assessments according to the new standard as soon as possible after the final version of the standard is published.

Of course, we cannot definitively define the functions until the official documents are available. Implementing the new requirements in Safexpert is a top priority.

Conclusion

The draft of prEN ISO 12100 is essentially an editorial revision without any major surprises in terms of content.

At the same time, the draft was adapted to the requirements of the new Machinery Regulation, particularly with regard to cybersecurity and artificial intelligence. Anyone hoping for specific guidance here, such as ‘hazardous event due to a cyber attack’ as a new item in the hazards list (Table B.4), will look in vain.


Posted on: 2025-01-13 (last amendment)

Author

Daniel Zacek-Gebele, MSc
Produktmanager bei IBF für Zusatzprodukte sowie Datenmanager für die Aktualisierung der Normendaten am Safexpert Live Server. Studium der Wirtschaftswissenschaften in Passau (BSc) und Stuttgart (MSc) im Schwerpunkt International Business and Economics.

E-Mail: daniel.zacek-gebele@ibf-solutions.com | www.ibf-solutions.com

 

Christian Aumann, Dipl.-Ing. (FH)
Specialist for CE marking and Safexpert. Since 2023 in product management at IBF. Before that, he worked as a design engineer in special machine construction and as an occupational safety expert (SiFa). Studied mechanical engineering at the OTH Regensburg with a focus on production and automation technology.

Email: christian.aumann@ibf-solutions.com | www.ibf-solutions.com

 


Share Article
Share Button Linkedin Share Button Xing Share Button X Share Button Email

CE InfoService


Don't miss CE news and changes!

You are not yet registered? Register now for the free CE InfoService and receive information by e-mail when new technical papers, important standards publications or other news from the field of machinery and electrical equipment safety or product compliance are available.

 

Picture Advertisement Software-tip: Safexpert the practice software for risk assessment

Support by IBF

CE Software Safexpert

CE software for systematic and professional safety engineering

Seminars

Practical seminars on aspects of risk assessment and ce-marking

Stay Up-to-Date!

With the CE InfoService you stay informed about important developments in the field of product safety.