EU CSDDD: From Compliance to Competitiveness

In short: the CSDDD is an EU law that requires very large companies, meaning those with more than 5,000 employees and over EUR 1.5 billion in worldwide turnover, to identify, prevent, and address human rights and environmental risks in their own operations and their direct business partners. To be transposed into national law by EU member states by July 2028 and applied from July 2029, the impact of the EU Corporate Sustainability Due Diligence Directive (CSDDD) is already being felt as businesses prepare systems and data flows ahead of the deadline.

Although only very large companies are directly affected, if you feature in the supply chain of one of these businesses, this law will affect you. Preparations need to start now.

Corporate Sustainability Due Diligence Directive Q&A

The CSDDD introduces new requirements for how companies identify, address, and report on sustainability risks across their operations and value chains. But what does this mean in practice?

What does the CSDDD demand of businesses?

CSDDD will require in-scope organizations to: 

• Know their direct (tier-1) suppliers, and look further up the chain when there is credible evidence of risk.

• Report on their climate transition plan if already doing so under Corporate Sustainability Reporting Directive (CSRD).

• To establish an accessible grievance mechanism through which employees within the company and across the supply chain, as well as affected communities, can report concerns about human rights and environmental risks.

• Face legal and financial consequences for non-compliance. The exact rules around this will depend on the country in which they operate.

The CSDDD forms part of the EU’s broader framework for more sustainable and responsible business practices. It also contributes to the objectives of the UN Sustainable Development Goals (SDGs), particularly in areas such as decent work, responsible consumption, and climate action.

Who does the CSDDD impact? 

Only very large companies are directly covered. For all businesses with more than 5,000 employees and more than EUR 1.5 billion worldwide turnover (or equivalent turnover if outside the EU), the law will directly apply.

However, many more will be indirectly affected. Tens of thousands of suppliers across the EU are expected to face new data requests from in-scope customers. Organizations in the supply chains of companies that are in scope should expect requests from them well before 2029.

Some sectors will be impacted more than others. In renewables, for example, the CSDDD hits close to home. Solar, wind, and battery supply chains rely heavily on materials, including cobalt, lithium, and polysilicon, that carry exactly the kind of labor and sourcing risk this law targets.

The good news for renewables operators: they already use SCADA systems today to monitor wind, solar, and battery assets in real time and feed grid operators the output and performance data they require. That same operational data, energy generation, plant availability, and emissions avoided, is exactly what CSDDD and CSRD sustainability reporting asks for. Add IoT sensors that capture further environmental metrics, such as water use and land use around the site, and a significant share of reporting requirements can be covered automatically rather than built separately.

Why the urgency on CSDDD preparations?

Organizations won’t be able to manage these requirements using spreadsheets or manual processes. The sheer volume of supplier data, risk information, and reporting is simply too large. Much of the environmental data CSDDD requires from a company's own operations, such as energy use and emissions, already exists inside plant-level systems: SCADA (Supervisory Control and Data Acquisition), which captures real-time machine and process data, and MES (Manufacturing Execution System), which manages production execution and consumption on top of it. Organizations will need software that connects these operational systems with business systems and supply chain data, rather than collecting this information by hand.

Given this complexity, organizations will need to start preparations to collect and report on this information early, well ahead of the 2029 deadline. Of course, this means that organizations in the supply chains of these in-scope companies will also need to start their preparations early.

Waiting to provide this information reactively, and then scrambling last-minute to put systems in place, is going to result in solutions that are more costly and less well thought through. Plus, being unprepared could mean missing out on potential revenue to businesses that are prepared.

What information do organizations need to collect for CSDDD?

Preparing for CSDDD requires reliable, ongoing data from across operations. This includes energy and emissions data from plants, collected via SCADA, building management systems, and smart meters, as well as emissions data reported by suppliers and potentially integrated into procurement systems.

Information on working conditions, such as wages, working hours, and health and safety, may need to be sourced from internal HR and H&S systems as well as from suppliers. Environmental data, including water consumption, waste, and land use, may also be required.

Collecting this information presents a challenge. Poor data quality and availability was cited as the single biggest obstacle for companies preparing for the EU’s Corporate Sustainability Reporting Directive (CSRD) in PwC’s Global CSRD Survey 2024. It’s likely to present a similar challenge for companies preparing for CSDDD.

What is the best way to collect the information required under CSDDD?

Since 2026, CSDDD due diligence defaults to direct (tier-1) business partners; organizations only need to look further up the chain, sometimes all the way to where raw materials originate, when there is plausible information of a risk further upstream. The hardest part is building the monitoring that reliably surfaces those risk signals, especially since adjacent rules like the EU Forced Labour Regulation and EUDR (EU Deforestation Regulation) still require full traceability regardless of tier. Picture, for example, a mid-sized machinery manufacturer mapping its direct suppliers for CSDDD. Most check out cleanly. But one direct supplier provides a component containing a battery component whose cobalt originates from the Democratic Republic of the Congo. This raw material is included on the U.S. List of Goods Produced by Child Labor or Forced Labor, with documented cases of forced labor in the country’s Copperbelt. The manufacturer identifies this issue only because its monitoring system systematically reviews such publicly available sources.

A single substantiated red flag is sufficient to trigger enhanced due diligence along this particular supply chain, without requiring all other suppliers to undergo the same level of scrutiny. This is precisely what the “plausible information” underlying the legal trigger refers to: specific, documented indications such as this list, NGO reports, or credible media coverage, rather than the blanket classification of entire countries or regions.
That is why the real challenge lies in establishing a monitoring system that systematically captures and assesses such signals, rather than conducting a blanket, in-depth mapping of the entire supply chain.

To do this, organizations need the right tools.

How should I compile this information ready for CSDDD?

As the table above shows, the necessary data doesn’t live in isolation. Systems must talk to each other. For example, procurement systems should automatically flag new suppliers and contract renewals for review. Plant systems should feed verified energy and emissions data straight into reports. HR systems should surface working-condition data from all sites and contractors. And financial systems should be able to tag green investments for sustainability reporting.

In addition, organizations need a tool to compile this data for reporting. Unsurprisingly, the market for this kind of software is growing fast. The global ESG software market size was valued at USD 1.2 billion in 2025 and is projected to grow at a CAGR of 20.1% from USD 1.4 billion in 2026 to USD 5.2 billion by 2033.

Turn CSDDD compliance into competitive advantage

The CSDDD gives companies an opportunity to combine regulatory requirements with strategic value. By investing early in the right digital infrastructure, companies can streamline processes, identify risks more effectively, and turn these efforts into a sustainable competitive advantage.

How can organizations leverage advantage from CSDDD?

Commercial advantages include:

• Winning tenders
  As more buyers require CSDDD-readiness as a condition of doing business, falling short will mean losing out on contracts.

• Cheaper financing
  Good sustainability data opens the door to green loans and bonds.

• Lower insurance costs
  Being able to demonstrate that supply chain risk is managed effectively can result in reduced insurance premiums.

• Smoother Mergers and Acquisitions
  Reliable and robust sustainability data can accelerate the due diligence process in mergers and acquisitions and have a positive impact on the company’s valuation.
  

The same data can also help improve operational performance. For example, energy data can reveal efficiency opportunities and help predict maintenance needs, while modelling tools can identify low-carbon investments that reduce energy costs over time. And better visibility into supplier risk can help avoid costly surprises when disruptions occur.

At the same time, a central data platform can reduce administrative effort by avoiding the need to report the same information in different ways for different regulatory requirements. Getting there also means treating CSDDD as a shared responsibility across procurement, operations, finance, and IT, rather than leaving it solely with legal or IT teams.

Where are the potential pitfalls when tackling CSDDD?

While CSDDD offers commercial opportunity, there are potential hurdles to navigate. Risks include:

• Treating it as a checkbox exercise
  Companies that do the bare minimum will miss the competitive upside that better-prepared rivals capture.

• Buying a standalone tool
  A sustainability tool that doesn't talk to other systems means unreliable data and a far higher administrative burden.

• Ignoring risk signals beyond tier 1
  Since Omnibus I, due diligence defaults to tier-1 partners, but organizations that never look further leave real risk unmanaged wherever plausible information of a problem exists further up the chain, or where other rules (e.g. the Forced Labour Regulation) demand full traceability regardless of tier.

• One-off supplier checks
  A yearly questionnaire isn't enough: high-risk suppliers require ongoing monitoring.

• Underestimating the task of sourcing supplier emissions data
  Getting reliable emissions data out of suppliers takes years, not months, so it is imperative to start early.

What works when creating competitive advantage with CSDDD?

Creating competitive advantage from CSDDD starts with strong data governance. Good software cannot compensate for poor-quality data, so clear ownership and processes for validating data need to be established first. Systems also need to be connected: when the same emissions figure looks different in three separate spreadsheets, that is a sign the data is not flowing the way it should, and fixing it after the fact creates far more work than a properly connected system would have in the first place.

Restructuring processes and digitalizing supply chain data naturally requires resources: how much depends on where an organization is starting from. But it is worth viewing this as an investment in the future rather than simply a cost: it is a sustainable investment that pays off over time. Knowing your supply chains in detail is, at the same time, protection against unexpected disruption. Once weaknesses become visible, they can be fixed, or avoided in time, before they turn into a genuine problem.

Technology alone, however, is not enough. Supplier engagement remains essential, as gathering information will not by itself change supplier behavior.

The CSDDD: In conclusion

The CSDDD isn’t just another reporting exercise. It changes how organizations document and manage what happens across their supply chain. But it also offers an opportunity to lead, and build real competitive advantage and a more sustainable business model, too.

This is especially true for energy and industrial operators, where digitalization, sustainability rules, and supply chain visibility are now converging. Because these organizations typically manage complex physical supply chains and asset-heavy operations, the same infrastructure investment can pay off on multiple fronts at once: from compliance to efficiency to resilience.

The question isn't whether to invest in CSDDD reporting. It's whether you do it reactively, under pressure, or now, on your own terms.