Zum Hauptinhalt springen

Corporate Sustainability Due Diligence Directive (CSDDD)

Due diligence obligations relating to human rights and adverse environmental impacts along the chain of activities

Important note:

All of our advisory approaches, workshops and individual information reflect the latest regulatory developments as at the reporting date (e.g. in relation to the omnibus package). The content of the website will be updated when final regulatory changes are made.

The EU’s Corporate Sustainability Due Diligence Directive, known as CSDDD, came into effect on July 25, 2024. Under the directive, companies are subject to human rights and environmental regulations governing their own business activities and the chain of activities of their respective operations.

The CSDDD will apply to relevant companies as of 2029.

Classification of the CSDDD

The CSDDD sets standards for the responsible conduct of European businesses while also aiming to make them more competitive. By mandating more sustainable business practices, the EU seeks to reduce or prevent future adverse impacts on human rights and the environment in each company’s field of operation and chain of activities.

 

Who is affected by the CSDDD?

Starting in 2029, compliance with the CSDDD requirements will become mandatory for all in‑scope companies. The directive applies to EU companies with more than 5,000 employees and global turnover exceeding EUR 1.5 billion and Non‑EU companies generating more than EUR 1.5 billion in turnover within the EU.

This includes standalone companies, parent companies, and businesses operating through franchise or licensing models, each of which can create specific applicability scenarios:

An EU company falls within the scope of the CSDDD if it:

  • has more than 5,000 employees (all employees are counted, including part time staff, based on the most recently available financial year) AND
  • simultaneously generates more than EUR 1.5 billion in worldwide net turnover.

An EU parent company falls within the scope of the CSDDD if:

  • the parent company itself does not meet the thresholds of an EU company, but it is the ultimate parent company of a group AND
  • the group as a whole has more than 5,000 employees (consolidated) AND
  • simultaneously generates more than EUR 1.5 billion in worldwide net turnover (consolidated).

An EU company operating franchise or licensing systems falls within the scope of the CSDDD if it:

  • acts as a franchisor or licensor AND
  • has agreements, franchise contracts, or licensing arrangements with legally independent but economically integrated businesses AND
  • its franchise/licensing royalties exceed EUR  75 million, while its EU turnover simultaneously exceeds EUR  275 million.

A non EU company falls within the scope of the directive if it:

  • generates more than EUR 1.5 billion in net turnover within the EU.

A non EU parent company falls within the scope of the CSDDD if:

  • the parent company itself does not meet the EU turnover thresholds, but it is the ultimate parent company of a group AND
  • the group as a whole generates more than EUR 1.5 billion in net turnover within the EU in the financial year (consolidated).

A non EU company operating franchise or licensing systems falls within the CSDDD if it:

  • operates franchise or licensing agreements with independent companies in the EU that share a common brand, business concept, and standardized business practices AND
  • the franchise/licensing royalties within the EU exceed EUR 75 million AND
  • simultaneously, the company’s or the group’s EU turnover exceeds EUR 275 million.

*According to the CSDDD, a company is defined as a legal entity created in one of the legal forms specified in Annexes I and II of Directive 2013/34/EU (in the case of companies from third countries, comparable legal forms) or as the supervised financial institutions specified in Directive (EU) 2024/1760 Article 3 (1) a) iii).

What does the CSDDD cover? The so-called “chain of activities”

Under the directive, companies must take measures to prevent or mitigate adverse impacts on human rights and the environment in relation to:

  • their own business activities
  • the business activities of their subsidiaries and
  • the operations of their business partners along the company's chain of activities.

The directive uses the new term "chain of activities", which is similar to the supply chain used in other EU legislation. However, the chain of activities has a number of special features you should be aware of (also in relation to other directives). In simple terms, the chain of activities includes the following:

i) the activities of a company's upstream business partners related to the production of goods or the provision of services by that company, including the design, extraction, sourcing, manufacture, transportation, storage and supply of raw materials, products or parts of products and the development of the product or service, and

ii) the activities of a company's downstream business partners related to the distribution, transportation and storage of a product of that company, where the business partners carry out those activities for the company or on behalf of the company.

What needs to be done? Due diligence duties under the CSDDD

Many of the due diligence obligations outlined in the CSDDD are also found in other EU legislation (like the CSRD). However, the CSDDD also contains new provisions.

 

Companies are subject to the following due diligence obligations:

  • Integrate due diligence into corporate strategy
  • Develop a risk-based strategy for compliance with the CSDDD due diligence obligations
  • Identify, assess and prioritize actual and potential adverse impacts on human rights and the environment
  • Assess the company’s own business activities as well as those of its subsidiaries and business partners along the chain of activities (Limiting information requests to business partners during the risk assessment to large companies)
  • Ability to prioritize direct business partners when risks are equivalentlent 
  • Prevent and mitigate any adverse impacts on human rights and the environment by determining and executing appropriate mitigation measures
  • Remediate the adverse impact voluntarily if it is caused only by the company or its business partner
  • Internal: encourage both employees and their representatives to become involved in implementing the CSDDD
  • External: where necessary, include business partners (e.g., in terms of prevention), multi-stakeholder initiatives and other relevant actors and associations
  • Introduce a fair, publicly available, accessible, predictable and transparent complaints procedure and/or
  • Take part in a publicly available complaint procedure
  • Conduct regular (at least every 5 years) and risk-based assessment of the prevention and mitigation measures to ensure they are appropriate and effective (where suitable, these assessments should be based on qualitative as well as quantitative indicators)

Due diligence obligations that may be covered under the CSRD (Corporate Sustainability Reporting Directive)

  • Draft a statement annually outlining compliance with due diligence obligations
  • Publish the report on the company website

Further publications on regulatory topics

The LkSG has been in force since 01.01.2023. It applies to companies with generally at least 3,000 (from 2024: 1,000) employees in Germany. Here you can find information on the Supply Chain Duty of Care Act and the EU Supply Chain Directive.

The EU Deforestation Regulation (EUDR) aims to limit deforestation for agricultural land and promotes a more sustainable Europe. What does the EU regulation on deforestation-free supply chains mean for your company?

On May 17. 2023, EU Regulation 2023/956 on the creation of a carbon border adjustment mechanism came into force. Since October 1, 2023, affected companies have had to comply with quarterly reporting obligations for the Carbon Border Adjustment Mechanism (CBAM).

What next? Partner with Deloitte!