Machine Procurement: Costs, Risks and Effort under the New EU Rules

What Changes

From January 1, 2027, three new EU regulations will apply, governing data sovereignty, product safety, as well as service and maintenance of machines. The Data Sovereignty Regulation requires that all operational data generated during production be stored in a structured, machine‑readable format and made available to supervisory authorities on request. At the same time, the Product Safety Regulation is tightened: manufacturers must submit detailed risk analyses according to the new risk‑management standard and demonstrate the conformity of their equipment through independent testing bodies. The Service and Maintenance Regulation stipulates that maintenance contracts are only valid if they contain digital service protocols that document the entire maintenance history and enable seamless traceability.

For companies, this means that existing machines and equipment must be retrofitted or newly purchased to meet the required data formats, certifications and service documentation. The requirements affect not only the technical hardware but also internal processes: procurement departments need to define new supplier criteria, the IT department must provide interfaces to data platforms, and maintenance teams require training on digital logging tools. Overall, a new regulatory environment emerges that impacts the entire value chain from planning to after‑sales service.

What It Costs

The EU regulations themselves do not provide concrete cost figures, and to date neither industry associations nor manufacturers have published uniform numbers. Costs arise from several components: first, expenses for adapting or developing new software modules that can generate and export the required data formats; second, investments in certification and testing procedures, which can run into several thousand euros depending on machine complexity; third, consulting and training expenses, as staff need to learn the new processes. Because the individual items vary greatly with company size and existing technology stack, no average amount can be quoted.

A typical cost model can, however, be presented in a summary. The table below aggregates the main cost drivers and provides illustrative ranges derived from previous projects (figures from service providers, not the EU):

Cost Driver	Range (EUR)
Software adaptations	5,000 – 50,000
Certification and testing fees	2,000 – 20,000
Consulting and project management	10,000 – 100,000
Training for maintenance personnel	1,000 – 10,000

Although these figures are only indicative, they show that total costs for a mid‑size company can easily rise into the five‑ to six‑figure range when multiple machines need to be adapted simultaneously.

What Breaks

Implementing the new regulations triggers substantial changes in existing IT and production landscapes. Many companies still run proprietary ERP systems that do not support standardized data exports required by the Data Sovereignty Regulation. Migrating these systems demands not only technical adjustments but can also cause temporary production interruptions, as data exports during live operation are not always reliable. Moreover, interfaces to quality and maintenance software must be redesigned, which can lead to incompatibilities with existing supplier portals.

Another critical issue is training maintenance staff. The Service and Maintenance Regulation requires digital protocols captured with mobile devices. Without suitable equipment and training, personnel cannot execute the new processes correctly, leading to faulty maintenance records and, in the worst case, fines. Affected areas therefore include the IT department, production management, quality management and HR development, all of which must allocate resources simultaneously to enable the transition.

What a Transition Requires

A successful transition to the new regulatory requirements calls for a structured project with clear milestones. Companies should typically start with an inventory of all affected machines, data flows and service contracts. This is followed by selecting suitable software partners that can deliver data exports in line with EU standards. The implementation phase lasts between six and twelve months, depending on equipment complexity. During this period, functional units – procurement, IT, production and maintenance – must work closely together to test interfaces and coordinate certification processes.

Decisions that need to be made now involve selecting suppliers, committing to invest in new software licences and planning training programmes for maintenance staff. Companies should also introduce a control instrument that continuously monitors compliance with the new requirements and flags deviations early. Only through a coordinated approach and the involvement of all relevant stakeholders can the effort remain manageable and the risks to ongoing operations be minimised.