ISO 12100:2010 — Safety of Machinery: General Principles for Design, Risk Assessment and Risk Reduction — Compliance Brief
Record covered: robotics-cert-017 Issuing body: ISO Technical Committee 199 (Safety of machinery). Jurisdiction: International; harmonized in the EU as EN ISO 12100:2010, which gives presumption of conformity to the Machinery Directive/Regulation EHSRs on risk assessment. Status: ISO 12100:2010 is the current published edition (it merged the former ISO 12100-1/-2 and ISO 14121-1 in 2010). No successor edition published as of September 2026 — flag: amendment/revision activity was not verified for this brief; check the ISO catalogue if citing currency in a conformity file.
1. What it is
ISO 12100 is the Type-A standard for machinery safety — the foundation of the entire machinery-safety standards hierarchy. Type-A = basic safety standard with general principles; Type-B = generic safety standards for a safety aspect (e.g. ISO 13849 for control-system safety); Type-C = machine-specific standards (e.g. ISO 10218 for robots). Every machinery risk assessment in the world is supposed to follow 12100's method, and every Type-C standard (including both parts of ISO 10218:2025) is built on it. TÜV Rheinland and other notified bodies use it as the base methodology for machinery safety services.
2. Scope — who and what it applies to
Machinery designers, manufacturers, integrators, and employers — anyone who must identify machinery hazards and reduce risk. In the EU it is the documented method for satisfying the Machinery Regulation's EHSR risk-assessment duty; in the US it is the recognized method OSHA and litigants expect behind a robot cell or machine risk assessment (via ANSI adoption and general recognition). It covers the full lifecycle: construction, transport, installation, commissioning, use (including reasonably foreseeable misuse), maintenance, and decommissioning.
3. Key requirements and compliance obligations
- The iterative risk-assessment process: (1) determine the limits of the machinery (use, space, time, other limits); (2) identify hazards systematically across all lifecycle phases (the standard's annexes list mechanical, electrical, thermal, noise, vibration, radiation, material/substance, ergonomic, and control-system hazards); (3) estimate risk for each hazardous situation (severity × probability, considering exposure, occurrence, and avoidability); (4) evaluate whether risk reduction is required; (5) apply protective measures; then iterate — re-estimate residual risk after each measure until it is as low as reasonably practicable and the remaining risk is documented.
- The three-step risk-reduction hierarchy (in strict order):
- Inherently safe design — eliminate the hazard or reduce risk by design (limit forces, speeds, energies; avoid sharp edges; design out the need for intervention in danger zones).
- Safeguarding and complementary protective measures — guards, interlocks, presence-sensing devices, emergency stop — for risks that can't be designed out.
- Information for use — warnings, signs, instructions, training — for residual risks. Information is never a substitute for steps 1–2.
- Documentation: the risk assessment must be documented — hazards identified, risk estimates, protective measures applied, and residual risks communicated downstream (this document is what the integrator's customer and the employer's safety file inherit).
- Reasonably foreseeable misuse must be considered — not just intended use.
4. Penalties / consequences of non-compliance
No fines attach to the standard. But the risk assessment it defines is the load-bearing document of machinery compliance: in the EU, the Machinery Regulation requires the manufacturer to assess risks per the EHSRs, and EN ISO 12100 is the harmonized method — no credible 12100-style assessment means no defensible CE marking. In the US, the assessment is the employer's/integrator's evidence of due diligence; its absence (or a copy-paste generic assessment) is what turns an incident into a willful OSHA citation and a losing litigation position. "We did a risk assessment" without following the 12100 iteration and hierarchy is worse than useless — it documents that you knew the method and skipped it.
5. Version and edition status — live changes
- ISO 12100:2010 current (EN ISO 12100:2010 harmonized). The standard's method is stable; what evolves is the ecosystem around it — the 2025 revisions of ISO 10218 explicitly build their expanded risk-assessment duties on it, and the EU Machinery Regulation's Annex III EHSRs assume it.
- Flag: revision/amendment status not verified against the ISO catalogue for this brief — confirm before citing edition currency in a technical file.
6. Related certifications
- Robotics — A3 Certified Robot Integrator (robotics-cert-001): cell risk assessment per 12100/10218-2 is the integrator's core examined competence.
- Robotics — TÜV Rheinland Functional Safety Engineer, Machinery track (robotics-cert-007): TÜV's machinery safety services use EN ISO 12100 as the base methodology; the credential tests its application.
- Industrial/Systems — INCOSE CSEP (industrial-systems-cert-008): system-level hazard and risk analysis competence that complements machinery-level assessment.
7. Flags and honest caveats
- 12100 tells you how to assess, not what is safe enough — risk acceptability criteria come from the Type-C standard, regulation, or company policy. An assessment that never defines its acceptance threshold is incomplete.
- Beware "risk assessment theater": generic templates filled without walking the actual machine, its task program, and its foreseeable misuse fail both the standard and any serious audit.
Original ETS reference writing, verified against public sources on 2026-09-30. Thin sourcing is flagged inline. Not legal advice — confirm current editions with the issuing body.