What happened
Regulation (EU) 2026/1744 of 8 July 2026, published in the Official Journal on 24 July 2026, amends the AI Act, Regulation (EU) 2018/1139 and the Machinery Regulation (EU) 2023/1230. A new Article 42(3) of the AI Act states that high-risk AI systems within the scope of the CRA that meet the conditions of Article 12 of the CRA are deemed to comply with the cybersecurity requirements of Article 15 of the AI Act. A recital also asks the Commission to adopt delegated acts amending Annex III of the Machinery Regulation, to apply by 2 August 2028.
What it means for machine builders
Machines with AI safety components fall under the Machinery Regulation as high-risk AI. Until now a builder faced two cybersecurity assessments, one for the AI Act and one for the CRA. With this amendment the CRA assessment carries over. Technical directors should design the CRA technical documentation so it also serves the AI Act file and follow the delegated acts on Annex III of the Machinery Regulation that this regulation announces.
Official source EUR-Lex, Regulation (EU) 2026/1744 (Digital Omnibus on AI)
Published 16 October 2026 by Edge SDN. A summary, not legal advice. Always check the official text for your case.