Machinery Risk Assessment, GPSR and Safety Gate: What’s the Difference?

Sources checked 10 November 2026. For laser cutting, engraving and marking machinery in the EU. The examples explain the assessment process; they are not findings about a particular product.

Three assessments, three different jobs

A manufacturer’s machinery risk assessment, a GPSR internal risk analysis and a Safety Gate risk assessment all consider harm and likelihood. They serve different legal purposes.

EN ISO 12100 supports the design of safe machinery. GPSR Article 9 requires an internal risk analysis for products to which that provision applies. Safety Gate uses a prescribed method to classify product risks for notification by authorities.

The distinction matters because a Safety Gate risk rating cannot establish CE conformity, and a machine does not automatically need a second Article 9 assessment just because it is sold to consumers. 1, 2, 3, 4, 5

Both manufacturer assessments start before placing the product on the market. Safety Gate is part of market surveillance and action on dangerous products. It is not a pre-sale approval system. 1, 2, 3, 4, 5

1. Machinery law sets the duty; ISO 12100 provides a method

Under Machinery Directive 2006/42/EC, Annex I, General Principle 1, the manufacturer must assess risks and use the results to design and construct the machine. This is a legal duty. ISO 12100 is a technical standard, not a directive or regulation. Its European adoption is EN ISO 12100. It provides a systematic approach to assessment and risk reduction. 1, 2

In practical terms, the manufacturer needs to:

1. Define the machine’s limits: intended use, users, materials, environment and reasonably foreseeable misuse.
2. Identify hazards and hazardous situations throughout relevant life stages.
3. Estimate and evaluate the risks.
4. Eliminate hazards or reduce risks through design and protective measures.
5. Reassess the result and document the evidence.

For a laser cutter, this extends beyond the beam: electricity, moving axes, fire, fumes, servicing, cleaning and foreseeable access to hazardous areas also matter. A classification label on the laser does not complete the machine assessment.

The legal order of risk reduction is safer design first, protective measures next, then information about remaining risks. Warnings and eyewear do not justify leaving out required engineered protection. This order is already in Annex I, section 1.1.2 of the Directive. 2

Applying standards is generally voluntary; meeting the applicable legal requirements is mandatory. An appropriate harmonised standard can give a presumption of conformity for the requirements it covers, subject to its Official Journal citation and any restrictions. Citing EN ISO 12100 alone does not establish that the complete machine complies with all applicable requirements. 2, 6

2. What the GPSR actually requires of manufacturers

The General Product Safety Regulation (EU) 2023/988, or GPSR, has applied since 13 December 2024. Its product scope concerns products intended for consumers or reasonably likely to be used by consumers, even when not marketed for them. Sector-specific legislation and the exclusions in Article 2 must be checked first. 3

Where Article 9 applies, the manufacturer must carry out an internal risk analysis before placing the product on the market and prepare technical documentation. At minimum, this describes the product and its safety-relevant characteristics. Where appropriate to the risks, it also records identified risks, measures taken, relevant test results and the standards or other safety criteria used.

The documentation must be kept current and available to authorities for ten years after the product is placed on the market. Article 9 also covers continuing safety responsibilities, including series production, complaints, investigation and action on dangerous products. 3, Article 9

The assessment considers the real product and foreseeable users. Article 6 includes product characteristics, interactions with other products, instructions, presentation, vulnerable consumers and relevant cybersecurity or evolving functionality.

Article 9 does not prescribe the Safety Gate probability grid as the universal manufacturer assessment template. A structured analysis supported by suitable evidence is needed; a particular spreadsheet or commercial “GPSR certificate” is not specified by that provision. The GPSR itself does not create a CE-marking requirement. 3, 7

3. Does a laser machine need both manufacturer assessments?

A laser machine covered by EU machinery legislation is not automatically subject to a duplicate GPSR Article 9 risk-analysis duty.

GPSR Article 2(1) sets the relationship with specific EU safety legislation. For products covered by Union harmonisation legislation, it expressly excludes Chapter III, Section 1, which contains Article 9. Chapter II’s safety requirements apply only to risks or categories of risks not covered by the sector legislation. 3

For a laser cutting or engraving machine within machinery scope, the manufacturer’s design risk assessment therefore comes from machinery law. Laser radiation, mechanical hazards, electrical hazards, fire and hazardous emissions are already addressed within that framework. The existence of GPSR does not move them into a second, parallel design-assessment system. 2, 3

That does not make the whole GPSR irrelevant. Other provisions can complement sector law where there is no specific provision with the same objective. Relevant examples for consumer products include distance-sale information, reporting qualifying serious accidents, consumer recall communication and remedies. Applicability must be checked provision by provision. 3, Articles 2, 19, 20 and 35–37

The description “professional use only” is not enough on its own to settle scope. Consider the actual design, sales channels and reasonably foreseeable use. Likewise, Safety Gate can cover dangerous professional products under the market-surveillance framework: appearing there does not prove a product is governed solely by GPSR. 3, 4, 5, 8

4. Safety Gate classifies risks for market surveillance

The current legal reference is Commission Delegated Regulation (EU) 2024/3173, Annex II. It supplements the GPSR and also addresses products covered by Market Surveillance Regulation (EU) 2019/1020. Its requirements are directed at Member States’ Safety Gate notifications. 4, 5

The method generally requires authorities to:

1. Describe the product hazard and a credible sequence leading to harm.
2. Classify the severity of the injury or other harm.
3. Assess the probability of the scenario during the product’s foreseeable lifetime.
4. Combine severity and probability using the prescribed grid.
5. Determine the risk as low, medium, high or serious.

Where several harm scenarios produce different levels, the highest identified level is used for the notification. Annex II also specifies cases in which serious risk is presumed and a notification can be submitted without an individual risk assessment. 4, sections 3–4

A serious risk can require rapid intervention even when the harmful effects are delayed. Under Article 19 of Regulation 2019/1020, authorities must ensure appropriate measures against products presenting a serious risk. The assessment supports the decision; the risk label by itself is not a complete recall procedure. 3, Article 3(5), 5

The earlier RAPEX guidelines in Implementing Decision (EU) 2019/417 provide historical context. For the current Safety Gate risk criteria, use Regulation 2024/3173 rather than relying only on an old RAPEX worksheet. 4, 9

5. One laser cutter, two different questions

Consider an enclosed laser cutter whose lid interlock can fail, allowing hazardous radiation to remain accessible when the lid is opened. This is an illustrative scenario, not an assessment of a particular model.

During design: prevent hazardous access

The manufacturer examines normal operation, foreseeable opening or misuse, maintenance, faults and people near the machine. The assessment guides enclosure design, access protection, safety-control behaviour and verification.

The evidence should show that the protective measures work in the actual machine configuration. A statement such as “the software stops the job” is not, by itself, validation of a safety function. The assessment also needs to address any remaining risks and the information supplied to users. 2

After a defect is discovered: establish the product risk

An authority examines the affected product, defect and evidence. A possible sequence is:

1. The interlock fails to prevent hazardous emission with the lid open.
2. Someone is exposed to a direct or reflected beam.
3. The exposure causes an eye injury.

The authority evaluates plausible injury severity and the likelihood of the sequence in foreseeable use. Relevant evidence may include optical measurements, access geometry, fault tests, operating patterns and incident information. 4

An injury does not have to occur before a risk can be identified. Equally, laser power or a missing interlock alone is not enough for this article to assign a defensible numerical probability or universal risk rating. The actual circumstances and the serious-risk presumptions must be examined.

The manufacturer’s original assessment helps explain what protection was intended. Evidence of a failed safeguard requires reassessment; an old “low residual risk” conclusion cannot simply be carried over to a defective product.

6. Why risk scores cannot be copied between systems

The same words can describe different scales.

• Severity describes how bad the harm is. Risk combines severity and likelihood.
• A machine-design risk score belongs to the method and assumptions used to produce it.
• A Safety Gate risk level belongs to the Annex II methodology.
• A required Performance Level (PLr) concerns a particular safety-related control function; it is not a Safety Gate product-risk category. ISO 13849-1 does not prescribe one universal PLr for every laser machine. 1, 4, 10

A “low” result in one worksheet does not automatically mean “low” in another. Nor does a low Safety Gate rating waive a mandatory machinery requirement or certify that a machine may be sold.

When scenario probabilities are multiplied, the steps and assumptions must be justified. Use conditional probabilities where events depend on earlier events. Do not count the same protection twice or add artificial steps to make the final number smaller. Annex II expressly requires a clear, concise path to harm and limits subdivision to five steps. 4, section 3.2

7. Keep the evidence connected

A useful practical approach is to maintain one organised evidence base, with distinct conclusions for each legal purpose:

This does not mean every document must be sent to every purchaser. Machinery technical documentation must be available through the applicable legal process; the declaration, instructions and other required accompanying information have their own supply requirements. 2, 3

Keep business reporting and authority notification separate. The Safety Business Gateway is a route for businesses to provide required information to authorities. The Safety Gate Rapid Alert System is used by authorities to exchange notifications, while the public portal makes safety information available. Businesses should follow their applicable reporting duties without waiting for a public alert. 3, Articles 20 and 25–27

8. What changes in January 2027?

The main requirements of Machinery Regulation (EU) 2023/1230 apply from 20 January 2027, replacing the Machinery Directive. The manufacturer’s risk-assessment duty continues in Annex III, Part B, General Principles. Technical documentation is addressed in Annex IV. 11

The central distinction remains: machinery law governs design and conformity; applicable GPSR provisions complement it; Safety Gate supports market surveillance. The new Regulation does not replace the manufacturer’s assessment with the Safety Gate matrix.

For new machines, check the legislation applicable to the individual product and the current harmonised-standard citations. A standard’s citation under the old Directive should not simply be assumed to cover the new Regulation.

Read our guide to the 2027 machinery changes, Safety Gate and its RAPEX history, and laser protection guide.

Sources and legal references

The legal provisions are the basis for this explanation; the laser scenarios and evidence tables are practical interpretations. Consolidated EUR-Lex texts help show amendments; the Official Journal acts are authoritative.

1. ISO 12100:2010 — scope and design-risk methodology.
2. Machinery Directive 2006/42/EC — Articles 5 and 7; Annex I, General Principles and sections 1.1.2, 1.2.1, 1.5.12; Annex VII.
3. GPSR (EU) 2023/988 — particularly Articles 2, 3, 6, 9, 19, 20, 25–27, 35–37 and 52.
4. Delegated Regulation (EU) 2024/3173 — Annex II; official PDF.
5. Market Surveillance Regulation (EU) 2019/1020 — particularly Articles 19–20.
6. European Commission: harmonised standards.
7. European Commission: conformity assessment.
8. PPE Regulation (EU) 2016/425 — scope and essential health and safety requirements.
9. Implementing Decision (EU) 2019/417 — earlier RAPEX guidelines.
10. ISO 13849-1:2023 — safety-related control systems.
11. Machinery Regulation (EU) 2023/1230 — Annexes III–IV and Articles 52 and 54.