EU Corporate Sustainability Due Diligence Directive Proposal

On 23 February 2022 the European Commission unveiled its proposal for a Corporate Sustainability Due Diligence Directive (CSDDD). The measure imposes mandatory human-rights and environmental due diligence obligations on large EU companies and certain non-EU companies with significant EU turnover. It covers entire value chains, introduces civil liability for harm, and adds director duties to integrate due diligence into corporate strategy. Compliance teams must now design operating models that blend supply-chain mapping, contractual controls, remediation mechanisms, and board oversight to meet the Directive’s expectations before member states transpose the rules—likely in 2025 or later.

Scope and thresholds

The proposal applies to EU limited liability companies in Group 1 (500+ employees and €150 million worldwide net turnover) and Group 2 (250+ employees and €40 million turnover, operating in high-impact sectors such as textiles, agriculture, or minerals). Non-EU companies active in the EU are covered if they meet equivalent turnover thresholds generated within the EU.

Micro and small enterprises fall outside direct scope but may face cascading obligations through contractual arrangements. Sector-specific guidance and possible exemptions may arise during trilogue negotiations, but the Commission expects national supervisory authorities to oversee compliance and impose fines proportionate to turnover.

Due diligence duties

Companies must integrate due diligence into policies, identify actual and potential adverse impacts, prevent or mitigate impacts, bring impacts to an end, establish complaints procedures, and monitor effectiveness. They must also publicly communicate on due diligence, complementing existing sustainability reporting requirements.

Obligations cover adverse human-rights impacts (forced labor, child labor, occupational health and safety, adequate wages) and environmental harms (pollution, biodiversity loss, greenhouse-gas emissions) linked to international conventions listed in an annex. The Directive distinguishes between “established business relationships” and more remote tiers but emphasizes value-chain coverage beyond tier one.

Director responsibilities

The proposal introduces explicit director duties to set up and oversee due diligence processes and to consider human-rights and environmental consequences in corporate strategy and decisions. For EU companies, directors must adapt corporate strategy to ensure due diligence objectives are met. Member states may sanction directors for breaches via civil liability or administrative penalties, linking the Directive to national corporate governance regimes. Companies must also align variable remuneration with sustainability performance where climate change is a principal risk.

What to prioritize

• Value-chain mapping: Supply-chain, procurement, and sustainability teams must compile detailed maps of upstream and downstream partners. Use existing data from CSR questionnaires, ERP vendor records, customs filings, and logistics platforms to identify risk hotspots by geography, sector, and commodity.
• Risk assessment framework: Develop methodologies that score suppliers and partners against human-rights and environmental risk indicators. Use international benchmarks (ILO conventions, OECD Guidelines for Multinational Enterprises, UN Guiding Principles) and integrate with enterprise risk management frameworks.
• Preventive action plans: For high-risk relationships, build action plans including contractual clauses, capacity-building, audits, or joint remediation projects. Document timelines, responsibilities, and escalation thresholds for terminating relationships when remediation fails.
• Complaint mechanisms: Establish accessible grievance channels for workers, communities, trade unions, and NGOs. Ensure mechanisms support confidentiality, translation, and anti-retaliation policies. Integrate with whistleblowing systems required under the EU Whistleblower Protection Directive.
• Monitoring and reporting: Implement KPIs to track remediation progress, supplier training, site audits, and grievance resolution. Align data collection with Corporate Sustainability Reporting Directive (CSRD) metrics and taxonomy alignment disclosures.

Governance and oversight

• Board involvement: Update board charters to reflect new oversight duties. Sustainability or risk committees should review due diligence policies, approve risk prioritization, and monitor remediation outcomes. Provide training on international human-rights frameworks.
• Executive accountability: Assign senior executives to lead due diligence programs, integrating them with ESG strategy and climate transition plans. Link compensation metrics to sustainability KPIs such as supplier remediation rates or emissions reductions.
• Cross-functional governance: Create steering committees spanning procurement, legal, compliance, sustainability, operations, and finance. Establish clear decision rights for approving remediation budgets, supplier onboarding, and contract termination.
• Legal liability management: Work with legal counsel to understand civil liability exposure. Update directors’ and officers’ (D&O) insurance and consider contractual indemnities with suppliers. Monitor national setup choices that may expand liability.
• Stakeholder engagement: Engage with trade unions, NGOs, and industry alliances to co-develop due diligence approaches and show good faith efforts to regulators and investors.

Technology and data enablement

• Data platforms: Deploy supply-chain risk management platforms or ESG data services that aggregate supplier disclosures, audit results, satellite imagery, and media monitoring. Integrate with procurement systems to automate risk scoring during onboarding and contract renewals.
• Analytics and dashboards: Build dashboards combining due diligence KPIs, incident logs, and remediation status. Provide board-ready reports and self-service analytics for procurement teams to manage daily operations.
• Document repositories: centralize contracts, audit reports, capacity-building materials, and remediation evidence in secure repositories with role-based access control. Ensure data retention meets privacy laws across jurisdictions.
• Integration with sustainability reporting: Align data models with CSRD digital taxonomy requirements (XBRL tagging). Automate data feeds to sustainability reporting tools to ensure consistency across disclosures.
• Risk intelligence feeds: Subscribe to human-rights and environmental risk alerts from NGOs, government agencies, and commercial providers. Use machine learning to correlate alerts with supplier lists.

Sourcing and contractual strategy

• Contract clauses: Update supplier contracts to include due diligence obligations, audit rights, remediation cooperation, and termination clauses for severe breaches. Reference international standards and require suppliers to cascade obligations downstream.
• Supplier development: Offer training, technical assistance, or co-investment to help small and medium enterprises meet requirements. Document support to show proportionality before resorting to disengagement.
• Industry collaboration: Participate in sector initiatives (for example, Responsible Business Alliance, Fair Labor Association, Initiative for Responsible Mining Assurance) to share risk assessments and remediation programs, reducing audit fatigue and enhancing use.
• Responsible purchasing practices: Align pricing, lead times, and order volumes with suppliers’ ability to comply. Avoid practices that contribute to labor abuses, such as last-minute changes or penalty-heavy contracts.
• Integration with finance: Coordinate with treasury and investor relations to assess how due diligence performance affects access to sustainable finance instruments, loan covenants, and ESG ratings.

Path to implementation

1. 2022–2023: Conduct readiness assessments, map value chains, and pilot improved due diligence in high-risk sectors. Engage teams and align with CSRD data collection efforts.
2. 2023–2024: finalize governance structures, update contracts, deploy technology platforms, and scale grievance mechanisms. Begin publishing voluntary progress reports to show transparency.
3. 2024 onward: As member states transpose the Directive, ensure national requirements are reflected in policies. Prepare for supervisory inspections, respond to stakeholder complaints, and adapt to potential changes from European Parliament or Council negotiations.

Strategic outlook

The CSDDD proposal signals the EU’s intent to embed human-rights and environmental risk management into corporate governance. Companies that operationalize due diligence now will gain credibility with investors, regulators, and consumers.

They can also use data collected for CSRD, EU Taxonomy, and sustainable finance reporting, creating integrated ESG management systems. Failure to act risks enforcement, litigation, and reputational harm as civil society monitors corporate behavior. preventive programs that combine supplier collaboration, strong governance, and transparent reporting will position enterprises to comply with the Directive and respond to global due diligence mandates emerging in Germany, France, Norway, and beyond.

Related articles

Curated signals from the same pillar or overlapping topics.

Policy · Credibility 90/100 · March 1, 2022

China Algorithm Recommendation Rules Take Effect

China's algorithm regulation took effect, requiring recommendation systems to offer opt-out mechanisms, banning addictive features for minors, and mandating transparency about how algorithms work. The CAC has enforcement…

Policy · Credibility 93/100 · March 9, 2022

SEC proposes cyber incident disclosure rules

On 9 March 2022 the SEC proposed rules requiring public companies to disclose material cybersecurity incidents within four business days and provide annual disclosure of cybersecurity governance.

Policy · Credibility 88/100 · March 9, 2022

SEC Cybersecurity Disclosure Proposal

The SEC proposed mandatory cybersecurity disclosure rules. Public companies would report material incidents within four business days, disclose board oversight of cyber risk, and describe their risk management programs.

Policy · Credibility 71/100 · March 9, 2022

EO 14067 on responsible development of digital assets

The White House finally weighed in on crypto. Executive Order 14067 kicks off the first whole-of-government approach to digital assets—everything from consumer protection to stablecoin risks to whether the Fed should…

Policy · Credibility 92/100 · February 8, 2022

European Chips Act Proposal Unveiled

The European Commission’s 8 February 2022 Chips Act package pushed semiconductor teams to prioritize operational resilience, governance, and sourcing alliances across the EU value chain.

Continue in the Policy pillar

Return to the hub for curated research and deep-dive guides.

Visit pillar hub

Latest guides

• Policy Advocacy Roadmap

  Coordinate cross-border policy advocacy aligned with EU Better Regulation, U.S. Administrative Procedure Act, Lobbying Disclosure rules, and Canadian transparency requirements.

• AI Policy Implementation Guide

  Coordinate governance, safety, and reporting programmes that meet EU Artificial Intelligence Act timelines and U.S. National AI Initiative Act mandates while sustaining product…

• Export Controls and Sanctions Policy Guide

  Integrate U.S. Export Control Reform Act, International Emergency Economic Powers Act, and EU Dual-Use Regulation requirements into trade compliance, engineering, and supplier…

References

1. Proposal for a Directive on corporate sustainability due diligence — European Commission
2. Commission proposes Corporate Sustainability Due Diligence Directive — European Commission
3. ISO 31000:2018 — Risk Management Guidelines — International Organization for Standardization