Emergency stop — periodic function test (ISO 13850 / NEN-EN-IEC 60204-1)

The [guide on emergency-stop button design](/guides/nen-3140/noodstopknop-ontwerp-iso13850) covers the physical requirements for the emergency-stop button itself (colour, shape, direct-opening contacts), and the guide on emergency-stop categories covers the difference between stop category 0, 1 and 2. Both guides deal with the design of an emergency-stop device. This article covers an additional, recurring question: how it is periodically verified that an already-installed emergency-stop device still actually works as designed at commissioning.

Why an emergency stop needs periodic testing

An emergency-stop device is in practice often rarely or never actually used — that is precisely the intent, since it is a last resort, not a daily operating action. This is exactly what makes an emergency stop vulnerable to a creeping problem: a fault (a corroding contact, a loosened wire, a mechanically jammed actuator) can go unnoticed until the device is genuinely needed at a critical moment and turns out not to work. Periodic function tests are intended to limit this risk by regularly verifying operation, even without an actual emergency situation occurring.

What a function test covers

A complete periodic test of an emergency-stop device typically covers several aspects, not just pressing the button:

Visual inspection: is the button physically undamaged, easily accessible, and not obstructed by obstacles or other material?
Mechanical operation: does the button actually switch when pressed, and does it remain latched in the pressed position until a deliberate, manual release (typically by twisting or pulling the button) occurs — see the guide on emergency-stop button design for the background to this latching requirement?
Functional operation of the connected machine: does the machine actually stop according to the designed stop category (0, 1 or 2 — see the guide on emergency-stop categories) when the emergency stop is activated, and not just part of the moving parts?
Reset procedure: does restarting the machine after an emergency stop require a deliberate, manual action on a separate reset device — an emergency stop must never be cleared automatically, without human intervention.

No fixed test frequency prescribed

Neither ISO 13850 nor NEN-EN-IEC 60204-1 prescribes a universal, fixed time interval within which every emergency-stop device must be tested. Instead, the test frequency follows from a risk assessment of the specific machine and its usage pattern: an emergency stop that is frequently used in practice (and is thereby already regularly functionally verified through that use) requires a different testing approach than an emergency stop that is almost never activated and therefore specifically needs an explicit, planned periodic test to retain the same confidence in its operation.

Note: although no universal frequency is prescribed, "never testing" is not an acceptable outcome of a risk assessment — the absence of a fixed figure in the standard is not an exemption from the obligation to periodically verify the emergency-stop function.

Documenting the test

Just as with a regular NEN 3140 inspection, recording the test results is relevant: which emergency-stop device was tested, on what date, with what outcome, and — in case of a defect found — what corrective action was taken. This makes it possible to demonstrate afterwards that the periodic test was actually and consistently carried out, and helps identify an emergency stop that repeatedly shows defects and may need replacement.

Practical relevance

During a NEN 3140 periodic inspection of a machine installation, it is worthwhile to assess the presence and documentation of a periodic emergency-stop test regime as part of the broader machine safety assessment (see the guide on machine safety) — even though the emergency-stop function itself falls primarily under the Machinery Directive and not exclusively under NEN 3140. An emergency stop that looks fine visually but has not been functionally tested for months provides a false sense of security that only becomes apparent during an actual emergency.

Common mistakes

Checking an emergency stop only visually (is the button present and undamaged) without verifying the actual functional operation of the connected machine — a button can look intact while the underlying switching function has failed.
Assuming that "no prescribed test frequency" equals "no test obligation" — the absence of a universal figure in ISO 13850 and NEN-EN-IEC 60204-1 shifts responsibility to your own risk assessment, not to no periodic testing at all.
Not keeping documentation of emergency-stop tests carried out — without a test log, it cannot be demonstrated afterwards that periodic verification actually and consistently took place.
Testing only the button itself, not the full stop chain up to the machine — a working button with a broken or incorrectly wired signal chain to the machine still does not deliver a working emergency stop.