Why your smart power tools face new European rules

Smart power tools are everywhere on your shelves. They connect to phones, track inventory, and adjust settings automatically. But new European rules are about to change how these tools are sold. Starting next month, digital security and physical safety rules will merge. If you sell connected drills, grinders, or outdoor machinery, you need to know what your suppliers must do. Here is what is changing and how it affects your stock.

The boundary between digital security and physical safety is disappearing. On 11 September 2026, the first phase of the European Cyber Resilience Act (CRA) takes effect [1]. This regulation, which entered into force on 10 December 2024, introduces strict cybersecurity rules for products with digital features [1]. From 11 September 2026, manufacturers must report active vulnerabilities and security incidents [1]. The main obligations of the CRA will apply from 11 December 2027, at which point complying products must bear the CE marking [1].

This digital oversight directly collides with physical tool safety. On 20 January 2027, Regulation (EU) 2023/1230 on machinery will take effect, completely repealing and replacing the old Machinery Directive 2006/42/EC [2, 9]. According to engineering consultancy Fennec Engineering, this application will run with no overlapping transition window [3].

This matters directly to builders’ merchants because modern power tools are no longer just mechanical. They contain microchips, Bluetooth modules, and software. Under the new Machinery Regulation, product safety rules explicitly address modern technological risks, including artificial intelligence and corruption through outside interference, such as hacking [5]. If a smart angle grinder or a digital torque wrench can be hacked to bypass safety limits, it is a physical hazard. The European Union is forcing manufacturers to secure these digital entry points before the tools reach your warehouse.

The shift to digital also changes how product information is delivered. Under the new Machinery Regulation, manufacturers are permitted to provide instructions for use in a digital format [9]. This seems like a victory for reducing packaging waste. However, the transition is not entirely paperless, and traders need to understand the exceptions to avoid compliance issues.

According to engineering consultancy Fennec Engineering, digital instructions are only permitted when the machine itself indicates how to access them and a printable format is made available [3]. Furthermore, the same consultancy states that essential safety information must still be supplied on paper for machinery intended for non-professional users, or reasonably foreseeable to be used by them [3]. This distinction is critical for merchants who serve both professional contractors and DIY retail customers. If a semi-professional builder or a retail consumer buys a smart tool, they may still require paper safety sheets.

There is also a post-sale obligation to watch. Fennec Engineering states that if a user requests a paper copy of the instructions at the time of purchase, the manufacturer must provide it free of charge within one month [3]. While the official summary of the regulation does not explicitly detail this one-month deadline or the specific paper exceptions for non-professional users [9], traders should clarify with their suppliers how these requests will be handled. If a customer demands a paper manual at your counter, who prints it, and who pays for it?

For distributors, the immediate challenge is verifying that the stock on their shelves meets the new standards. In the Netherlands, for example, anyone who builds, imports, or sells machinery must ensure it complies with European product safety requirements [5]. This includes providing instructions that can be easily understood by users [5, 9]. For machines governed by the current Machinery Directive, you must provide a manual in the language of the country where you market the product [5].

The new Machinery Regulation continues this focus on clear, localized instructions [9]. Regulation (EU) 2023/1230 contains lists of obligations for manufacturers, importers, and distributors [2]. Because the specific exceptions and duties are complex, traders should work closely with suppliers to verify compliance rather than making assumptions about liability limits.

Instead, the focus must be on supplier transparency. Manufacturers are the ones who must compile the technical documentation. According to Fennec Engineering, this technical documentation under the new Regulation must be retained for ten years [3]. To ensure compliance, European standardization bodies are working on harmonized standards. These standards give users a presumption of conformity with both the Machinery Regulation (EU) 2023/1230 and the older Machinery Directive 2006/42/EC [4].

Procurement directors must take active steps to handle this dual regulatory shift. The first step is to map out your current inventory of connected tools and smart machinery. The Cyber Resilience Act’s reporting phase starts on 11 September 2026 [1], and the Machinery Regulation applies from 20 January 2027 [9].

Rather than waiting for these dates to arrive, traders should actively audit their suppliers’ readiness. Ask your tool brands for their compliance roadmaps. It is critical to verify whether supplier software platforms are ready to meet the CRA’s digital security requirements, and whether product packaging will include the necessary paper safety information for non-professional users.

This transition also presents an opportunity. Merchants who can confidently explain these safety and digital security features to their trade customers will position themselves as expert partners. Contractors are increasingly concerned about data security and equipment safety on smart jobsites. Being able to verify that your stock complies with the latest European safety requirements is a powerful selling point [5].

[1] digital-strategy.ec.europa.eu — https://digital-strategy.ec.europa.eu/en/policies/cyber-resilience-act [2] eur-lex.europa.eu — https://eur-lex.europa.eu/EN/legal-content/summary/machinery-safety-requirements.html [3] fennec-engineering.com — https://fennec-engineering.com/blog-eu-machinery-regulation-2027 [4] wp2025.cencenelec.eu — https://wp2025.cencenelec.eu/sectors-list/mechanical-and-machinery/ [5] business.gov.nl — https://business.gov.nl/regulations/safety-requirements-machinery/ [6] milwaukeetool.eu — https://www.milwaukeetool.eu/systems/one-key/ [7] bosch-professional.com — https://www.bosch-professional.com/nl/nl/pro360/connect/ [8] data.europa.eu — http://data.europa.eu/eli/reg/2023/1230/oj/eng [9] osha.europa.eu — https://osha.europa.eu/en/legislation/directive/regulation-20231230eu-machinery