Skip to main content

Corporate Sustainability Due Diligence Directive (CSDDD)

Due diligence obligations for human rights and environmental impacts across the chain of activities

Important note:
All of our advisory approaches, workshops and individual information reflect the latest regulatory developments as at the reporting date (e.g. in relation to the omnibus package). The content of the website will be updated when final regulatory changes are made.

The EU’s Corporate Sustainability Due Diligence Directive, known as CSDDD, came into effect on July 25, 2024. This directive mandates companies to address human rights and environmental regulations not only within their own operations and those of their subsidiaries, but also throughout their direct and indirect business relationships.

Starting in July 2027, the CSDDD will begin applying to the first wave of companies.

Classification of the CSDDD

The CSDDD provides a framework that requires European businesses to adopt responsible practices while also aiming to enhance competitiveness. The EU seeks to reduce or prevent future adverse impacts on human rights and the environment across the operations and chain of activities of European businesses.

 

Who is affected by the CSDDD?

EU member states have until July 26, 2026, to transpose the CSDDD into their national laws. The directive will begin applying to companies in 2027, following a phase-in approach:

  • EU companies with more than 5,000 employees on average and a worldwide net turnover exceeding €1.5 billion in the previous financial year, and
  • (Parent) companies incorporated under the laws of a third country (outside the EU) that generated a net turnover of more than €1.5 billion within the EU during the previous financial year.
  • EU companies with more than 3,000 employees on average and a worldwide net turnover exceeding €900 million in the previous financial year, and
  • (Parent) companies incorporated under the laws of a third country (outside the EU) that generated a net turnover of more than €900 million within the EU during the previous financial year.
  • EU companies with more than 1,000 employees on average and a worldwide net turnover exceeding €450 million in the previous financial year, and
  • (Parent) companies incorporated under the laws of a third country (outside the EU) that generated a net turnover of more than €450 million within the EU during the previous financial year, and
  • (Parent companies of) franchisees with EU license fees of more than €22.5 million and an EU net turnover of more than €80 million in the previous financial year.

*According to the CSDDD, a company is defined as a legal entity created in one of the legal forms specified in Annexes I and II of Directive 2013/34/EU (in the case of companies from third countries, comparable legal forms) or as the supervised financial institutions specified in Directive (EU) 2024/1760 Article 3 (1) a) iii).

What does the CSDDD cover? Chain of activities and beyond

The directive requires companies to take action to prevent or mitigate adverse impacts on human rights and the environment in relation to:

  • their own business activities
  • the business activities of their subsidiaries and
  • the operations of their business partners across the company's chain of activities.

 

The directive uses the new term "chain of activities", a concept similar to the “supply chain” used in other EU legislation. However, the chain of activities has distinct features that companies should be aware of (particularly in relation to other directives). In simple terms, the chain of activities includes the following:

i) The activities of a company's upstream business partners related to the production of goods or the provision of services by that company, including the design, extraction, sourcing, manufacture, transportation, storage and supply of raw materials, products or parts of products and the development of the product or service, and

ii) the activities of a company's downstream business partners related to the distribution, transportation and storage of a product of that company, where the business partners carry out those activities for the company or on behalf of the company.

What needs to be done? Due diligence duties under the CSDDD

Some of the CSDDD due diligence obligations are also found in other EU legislation. However, the CSDDD introduces new elements and builds on existing requirements. For example, while the Corporate Sustainability Reporting Directive (CSRD) already covers the disclosure of a climate transition plan, the CSDDD expands this by enhancing related due diligence obligations

 

Companies are subject to the following due diligence obligations:

  • Integrate due diligence into corporate strategy
  • Develop a risk-based strategy for compliance with the CSDDD due diligence obligations
  • Identify, assess and prioritize actual and potential adverse impacts on human rights and the environment
  • Assess the company’s own business activities as well as those of its subsidiaries and business partners along the chain of activities
  • Prevent and mitigate any adverse impacts on human rights and the environment by determining and executing appropriate mitigation measures
  • Remediate adverse impacts if they are caused by the company or business partners
  • Internal: encourage both employees and their representatives to become involved in implementing the CSDDD
  • External: where relevant, engage with business partners (e.g., in terms of prevention), multi-stakeholder initiatives and other relevant actors and associations
  • Introduce a fair, publicly available, accessible, predictable and transparent complaints procedure and/or
  • Take part in a publicly available complaint procedure
  • Conduct regular and risk-based assessment of the prevention and mitigation measures to ensure they are appropriate and effective (where suitable, these assessments should be based on qualitative as well as quantitative indicators)

Due diligence obligations that may be covered under the CSRD (Corporate Sustainability Reporting Directive)

  • Draft a statement annually outlining compliance with due diligence obligations
  • Publish the report on the company website
  • Adopt time-bound targets for 2030 and in five-year steps up to 2050
  • Describe the identified decarbonization levers
  • Outline the investments required as well as the roles to be played by administrative, management and supervisory bodies

Further publications on regulatory topics

The LkSG has been in force since 01.01.2023. It applies to companies with generally at least 3,000 (from 2024: 1,000) employees in Germany. Here you can find information on the Supply Chain Duty of Care Act and the EU Supply Chain Directive.

The EU Deforestation Regulation (EUDR) aims to limit deforestation for agricultural land and promotes a more sustainable Europe. What does the EU regulation on deforestation-free supply chains mean for your company?

Make the most of regulations Deloitte helps organizations in all industries anticipate and adapt to changes in the regulatory environment.

On May 17. 2023, EU Regulation 2023/956 on the creation of a carbon border adjustment mechanism came into force. Since October 1, 2023, affected companies have had to comply with quarterly reporting obligations for the Carbon Border Adjustment Mechanism (CBAM).

What next? Partner with Deloitte!