EU CSDDD After the 2026 Simplification: Scope, Supply Chains and Timeline

Last verified — 13 August 2026. The EU Corporate Sustainability Due Diligence Directive (CSDDD) was materially narrowed and delayed by Directive (EU) 2026/470. Member States must transpose the due-diligence changes by 26 July 2028 and apply them from 26 July 2029. It is a Directive, so the national law is the operating layer.

For most SMEs, the immediate question is not “Are we directly in scope?” It is: which customers are preparing for the Directive, what evidence are they requesting, and is the request necessary, controlled and compatible with other laws and contracts?

Fact

Operative EU framework

After the 2026 amendment, the main direct thresholds include:

• an EU company with more than 5,000 employees on average and more than €1.5 billion net worldwide turnover in the relevant financial year;
• a non-EU company with more than €1.5 billion net turnover in the EU in the financial year specified by the Directive; and
• separate franchising or licensing pathways where the Directive’s common-identity and business-method conditions, royalty thresholds and turnover thresholds are all met.

Group and ultimate-parent rules, exemptions and calculation provisions can change the result. A small supplier does not become directly subject to CSDDD merely because it sells to an in-scope customer.

For companies within scope, the due-diligence framework covers actual and potential adverse human-rights and environmental impacts in their own operations, subsidiaries and relevant business-partner operations in the chain of activities. The amended identification process begins with a scoping exercise using solely reasonably available information to find general areas where impacts are most likely and most severe. It then requires an in-depth assessment in those areas.

Information requests must be necessary. For a business partner with fewer than 5,000 employees, the in-scope company may request information for the in-depth assessment only when it cannot reasonably obtain that information by other means. The amendment also moves monitoring to after a significant change and at least every five years, or sooner when there are reasonable grounds to think measures are no longer adequate or effective or new risks have arisen.

Transition dates

The 2026 amendment deleted CSDDD Article 22, which had contained the climate transition-plan obligation. A business should not keep describing that deleted CSDDD duty as live. Other EU, national, reporting, financial or contractual climate obligations may still apply.

Business trigger

Test the direct threshold at company and group level, including EU and non-EU turnover and the special franchise or licence route. Separately map indirect commercial pressure: an in-scope customer may seek risk-relevant evidence or contractual assurances from suppliers even when those suppliers are not directly regulated.

National laws remain a separate trigger. Existing Member State supply-chain or due-diligence regimes may apply earlier, at lower thresholds or to different conduct, subject to the Directive’s harmonisation provisions and later national amendments.

Proposal or uncertainty

The 2026 scope reduction and delay are enacted EU law, not an “Omnibus proposal.” The remaining uncertainty lies mainly in Member State transposition, Commission guidance and model clauses, supervisory practice and interaction with existing national regimes. The Directive also requires a later Commission review that may consider thresholds and high-risk sectors; that review is not a current expansion.

Signal

PARAVEILUX judgment. The unexpected pitfall is replacing risk-based due diligence with a universal supplier questionnaire. This can collect sensitive data, burden smaller suppliers and produce large volumes of untested assertions while missing the places where harm is most likely and severe.

Investigate when:

• scope is based on an old 1,000-employee or €450 million threshold;
• a customer demands the same evidence from every supplier without explaining necessity or risk relevance;
• the questionnaire asks a sub-5,000-employee partner for information readily available elsewhere;
• contract clauses promise an outcome, unlimited audit access or immediate termination without a workable prevention and remediation process;
• supply-chain maps stop at direct contractual partners despite a known severe upstream risk;
• sustainability, procurement, legal, privacy and security teams store duplicate and conflicting supplier evidence; or
• an internal policy still presents the deleted Article 22 climate-plan duty as CSDDD law.

Counter-signals

• Threshold calculations are documented at the correct company or group level and revisited after transactions or growth.
• Scoping records distinguish reasonably available information from targeted in-depth requests.
• Supplier requests identify purpose, necessity, confidentiality, retention and a route to challenge errors.
• Contracts support prevention, escalation, remediation and responsible disengagement rather than relying on a bare warranty.

Action

Implementation checkpoints

1. Recalculate scope. Use the amended employee and turnover thresholds, group rules, non-EU test and franchise or licence pathway.
2. Map existing national duties. Record which current Member State laws already apply and who owns each transposition watch.
3. Design risk-based scoping. Use reasonably available geography, sector, product, service and partner indicators before asking suppliers for new information.
4. Control supplier requests. Require necessity, minimisation, source, confidence, confidentiality, correction and retention fields for each request.
5. Review contract levers. Align information, audit, prevention, remediation, suspension and exit clauses with operational capability and the forthcoming EU models.
6. Set dated watchpoints. Review Commission guidance in July 2027, national laws by July 2028 and the operating programme well before July 2029.

Limitations

This page covers the CSDDD framework, not the separate Corporate Sustainability Reporting Directive thresholds and value-chain information cap. National transposition, existing national due-diligence laws, sector rules, sanctions, forced-labour, environmental, employment, privacy and contract law can apply independently. The amended Directive sets a 3% maximum limit for pecuniary penalties to be implemented nationally and provides for full compensation where a company is held liable under national law; it does not make every adverse impact an automatic breach or guarantee a particular remedy.

Official sources checked

• Directive (EU) 2026/470
• European Commission corporate sustainability due-diligence page
• Council final-adoption announcement, 24 February 2026

This is general information, not legal or professional advice. Law and facts vary. Consult qualified advisers for a specific situation.