🎓 Lesson 13
D5
EU Machinery Directive 2006/42/EC Application to AHS
The EU Machinery Directive is a set of rules that makes sure machines sold in Europe — like autonomous haul trucks — are safe, reliable, and properly documented before they’re put to work.
🎯 Learning Objectives
- ✓ Explain the scope and exclusions of Directive 2006/42/EC as applied to AHS components
- ✓ Analyze an AHS subsystem (e.g., collision avoidance system) against Essential Health and Safety Requirements (EHSRs) Annex I
- ✓ Apply the conformity assessment procedure (Annex IV or Annex V) to determine whether a notified body is required for an AHS deployment
- ✓ Design technical documentation compliant with Annex VII A for an AHS integration project
- ✓ Evaluate CE marking validity by verifying traceability of declarations, risk assessments, and harmonized standards used
📖 Why This Matters
In open-pit mines deploying Autonomous Haulage Systems (AHS), non-compliance with the EU Machinery Directive can halt operations at EU-linked sites—even if the mine is outside Europe—due to supply chain obligations, OEM contracts, or export requirements. A single unvalidated safety function (e.g., emergency braking latency) may invalidate CE marking, expose operators to liability under the EU Product Liability Directive, and compromise insurance coverage. Understanding this directive isn’t about paperwork—it’s about engineering accountability for life-critical automation.
📘 Core Principles
The Directive defines 'machinery' broadly—including interchangeable equipment and safety components—and explicitly includes 'partly completed machinery' (e.g., AHS chassis with integrated drive-by-wire but no autonomy stack). Key concepts include: (1) The 'manufacturer' responsibility extends to integrators who place AHS into service—even if hardware is sourced globally; (2) Risk assessment per EN ISO 12100 must cover both mechanical hazards (e.g., rollover, crushing) and emergent hazards from autonomy (e.g., sensor spoofing, decision latency); (3) Harmonized standards like EN ISO 13849-1 (performance levels) and EN 61508-1 (functional safety) provide presumption of conformity—but only when applied completely and documented. Crucially, the Directive treats AHS as a *system*, meaning compliance must be verified holistically—not component-by-component.
📐 Conformity Assessment Pathway Selector
This decision logic determines whether a notified body is mandatory for AHS integration under Article 12 and Annex IV/V. It depends on hazard category, performance level (PL), and whether the AHS qualifies as 'partly completed machinery' or 'complete machinery'.
💡 Worked Example
Problem: An AHS integrator deploys Cat 794 AC trucks retrofitted with NVIDIA DRIVE Orin-based autonomy stack, SAE Level 4 functionality, and EN ISO 13849-1 PLd-rated emergency stop system. The system operates in a controlled mine environment with geofenced zones and no pedestrian access. Does this require involvement of a Notified Body?
1.
Step 1: Confirm AHS meets definition of 'machinery' — yes (Article 2(a): assembly with moving parts + drive system + control).
2.
Step 2: Check Annex IV list — 'machinery designed for lifting loads' is excluded, but 'machinery with electronic control systems affecting safety' applies where PL ≥ d (per EN ISO 13849-1). PLd is listed in Annex IV.
3.
Step 3: Verify if exclusion applies — no exemption for mining machinery exists; Annex IX does not exclude AHS.
4.
Step 4: Apply Article 12(2): If machinery falls under Annex IV, conformity assessment must involve a Notified Body (Annex IV procedure).
Answer:
Yes — Notified Body involvement is mandatory. The PLd-rated safety function triggers Annex IV, requiring type examination (Module B) plus quality assurance (Module D) or full quality assurance (Module H).
🏗️ Real-World Application
At the Kevitsa Mine (Finland), Boliden integrated Komatsu’s AHS (Haul Trucks + Fleet Management System) in 2021. To comply with 2006/42/EC, the integrator performed a full EN ISO 12100:2013 risk assessment covering 37 hazardous situations—including 'loss of communication leading to undetected path deviation' and 'GNSS denial causing unsafe stopping'. They applied EN ISO 13849-1 to validate the SIL2-equivalent safety PLC controlling brake actuation (PLr = e), engaged TÜV Rheinland (Notified Body #0036) for Module B + D assessment, and maintained Annex VII A documentation—including validated test reports for 200+ hours of edge-case scenario simulation (e.g., simultaneous LiDAR occlusion + radar spoofing). This enabled valid CE marking and acceptance by Finnish Transport and Communications Agency (Traficom).