Why manufacturing is affected by the EU AI Act
AI in manufacturing falls under the EU AI Act primarily through Annex III Category 2: AI systems intended to be used as safety components in the management and operation of critical digital infrastructure, road traffic, or in the supply of water, gas, heating and electricity.
Additionally, Article 6(1) captures AI that is a safety component of a product covered by EU harmonised legislation — including the new Machinery Regulation (EU) 2023/1230, which replaces the Machinery Directive 2006/42/EC from 20 January 2027.
Typical high-risk scenarios in manufacturing
| Application | EU AI Act basis | Additional regulation |
|---|---|---|
| Worker safety monitoring (PPE, hazard zones) | Annex III Nr. 2 | Machinery Reg. 2023/1230 |
| Autonomous mobile robots (AMR) | Art. 6(1) + Annex I | Machinery Reg. 2023/1230 |
| Quality inspection (computer vision) | Usually not high-risk | — |
| Predictive maintenance | Minimal risk (unless safety-related) | — |
| Collaborative robots (cobots) with AI | Art. 6(1) + Annex I | Machinery Reg. 2023/1230, ISO 10218 |
| AI-driven process optimisation | Usually minimal risk | — |
Machinery Regulation and EU AI Act interplay
The new Machinery Regulation (EU) 2023/1230 explicitly addresses AI. Article 5 and Annex III require that machinery with AI-based safety functions undergoes a conformity assessment that considers the specific risks of machine learning systems — including non-deterministic behaviour, data quality, and cybersecurity.
For AI that is a safety component of machinery, the conformity assessment under the Machinery Regulation also satisfies the EU AI Act requirements (Article 43(1)). However, providers must still maintain the full Technical Documentation per Annex IV EU AI Act.
Worker monitoring and data protection
AI-based worker monitoring (e.g. PPE detection, posture analysis, zone monitoring) raises additional compliance obligations:
- GDPR Art. 35 – Data Protection Impact Assessment (DPIA) required for systematic monitoring of employees
- Works council involvement – In many EU member states, employee representatives must be consulted before deploying workplace monitoring AI
- Biometric data – If the system processes biometric data (face recognition, gait analysis), GDPR Article 9 applies with stricter consent requirements
Documentation obligations for manufacturing AI
For providers and deployers of high-risk AI in manufacturing:
- Technical Documentation per Annex IV – including system architecture, training data specifications, and performance metrics for safety-critical functions
- Transparency notice – Workers affected by the AI system must be informed about its purpose, capabilities and limitations (Art. 13 + Art. 26)
- FRIA – Recommended for deployers in manufacturing, mandatory for public sector deployers per Art. 27
Market surveillance for industrial AI
For AI safety components in machinery, market surveillance lies with the existing product safety authorities (e.g. BNetzA/BAuA in Germany, AESIA in Spain, SUVA in Switzerland). For standalone AI systems under Annex III, the national AI market surveillance authorities are responsible.
Next steps for your organisation
- Inventory – List all AI systems in use: safety-critical, quality, logistics, maintenance
- Classification – Use the free risk check to determine which systems fall under high-risk
- Machinery Regulation review – Clarify with your Notified Body whether AI components are safety-relevant
- Documentation – Generate your compliance documentation