Directive (EU) 2024/1760 enters into force after final adoption by the European Parliament and Council.
CSDDD: Corporate Sustainability Due Diligence Directive
In-scope EU and non-EU companies must identify, prevent, and address human rights and environmental impacts across their own operations and value chain, with documented due diligence and supervisory oversight in every Member State.
Next deadline
26 July 2029: Application date for in-scope companies under the revised CSDDD
The data layer behind CSDDD compliance is built over multiple procurement cycles. Supplier engagement frameworks, contract clauses and risk methodologies signed today determine what is available when due diligence obligations begin to apply. Companies that already report under CSRD or run national supply chain regulations are using the transition period to consolidate one supplier-data foundation across all relevant regimes.
Regulation timeline
What the regulation requires
In-scope companies must identify, assess, and address adverse impacts on human rights and the environment across their own operations, subsidiaries, and chain of activities.
The revised scope applies to EU companies with more than 5,000 employees and net worldwide turnover above €1.5 billion, and to non-EU companies generating more than €1.5 billion in EU turnover.
Direct (Tier 1) business partners are the primary focus for due diligence. Evidence of risk in deeper tiers triggers further investigation.
Due diligence obligations cover six areas:
- Integrating due diligence into company policy and risk management
- Identifying and prioritizing impacts
- Preventing and mitigating potential harms
- Remediating actual harms
- Engaging stakeholders
- Operating a grievance mechanism
Member States designate supervisory authorities and set penalties up to 3% of worldwide net turnover.
Operational challenges of CSDDD compliance
Scoping the chain of activities correctly
The revised CSDDD focuses in-depth assessment on direct business partners, with deeper investigation triggered only by plausible information of risk further upstream. Determining which partners are in scope, which trigger points warrant escalation, and how downstream relationships are treated requires a defined methodology applied consistently across the business.
Error 429 Too many requests
Too many requests
Error 54113
Details: cache-cmh1290056-CMH 1787165502 3067948197
Varnish cache server
Error 429 Too many requests
Too many requests
Error 54113
Details: cache-cmh1290056-CMH 1787165502 3067948197
Varnish cache server
Error 429 Too many requests
Too many requests
Error 54113
Details: cache-cmh1290056-CMH 1787165502 3067948197
Varnish cache server
Error 429 Too many requests
Too many requests
Error 54113
Details: cache-cmh1290056-CMH 1787165502 3067948197
Varnish cache server
Error 429 Too many requests
Too many requests
Error 54113
Details: cache-cmh1290056-CMH 1787165502 3067948197
Varnish cache server
Error 429 Too many requests
Too many requests
Error 54113
Details: cache-cmh1290056-CMH 1787165502 3067948197
Varnish cache server
Error 429 Too many requests
Too many requests
Error 54113
Details: cache-cmh1290056-CMH 1787165502 3067948197
Varnish cache server
Error 429 Too many requests
Too many requests
Error 54113
Details: cache-cmh1290056-CMH 1787165502 3067948197
Varnish cache server
Error 429 Too many requests
Too many requests
Error 54113
Details: cache-cmh1290056-CMH 1787165502 3067948197
Varnish cache server
Error 429 Too many requests
Too many requests
Error 54113
Details: cache-cmh1290056-CMH 1787165502 3067948197
Varnish cache server
Error 429 Too many requests
Too many requests
Error 54113
Details: cache-cmh1290056-CMH 1787165502 3067948197
Varnish cache server