What is the CSDDD?
The CSDDD, also known as CS Triple D or CS3D, requires in-scope EU and non-EU organizations to conduct human rights and environmental due diligence across their operations, subsidiaries and value chains. To comply, organizations must identify, prevent, mitigate and account for negative human rights and environmental impacts.
The goal is to foster sustainable and responsible corporate behavior while anchoring human rights and environmental considerations in organizations’ operations and corporate governance. The requirements aim to ensure that businesses address the adverse impacts of their actions, including those in their value chains inside and outside of Europe. This will reduce the risk of such adverse impacts within global value chains.
The directive is the first EU legislation to mandate organizations to adopt a climate transition plan and fits with the EU’s Corporate Sustainability Reporting Directive (CSRD) and associated standards. Large companies within the scope must have a plan to ensure that their business strategies are compatible with limiting global warming to 1.5°C, in line with the Paris Agreement and other targets*.
Published in the Official Journal of the EU in July 2024, member states now have until July 26, 2027 to transpose the directive into national legislation. When it will apply depends on the organization’s size:
Wave 1: July 2028
EU companies with:
- 5,000+ employees
- EUR 1,500m+ net turnover worldwide
Non-EU companies with:
- EUR 1,500m+ turnover in the EU
Wave 2: July 2028
EU companies with:
- 3,000+ employees
- EUR 900m+ net turnover worldwide
Non-EU companies with:
- EUR 900m+ turnover in the EU
Wave 3: July 2029
EU companies with:
- 1,000+ employees
- EUR 450m+ net turnover worldwide
Non-EU companies with:
- ≥EUR 450m turnover in the EU
| Current CSDDD | EU Omnibus* |
| Scope | Entire value chain | Limited to direct suppliers (Tier 1). Avoid, if possible, asking for information from companies <500 employees |
| Stakeholders | Comprehensive definition, consultation throughout the process | Only “own employees, employees from subsidiaries and business partners, trade unions, individual communities directly affected.” Not consulting when terminating relationship and when developing monitoring indicators |
| Monitoring | Every year | Every five years |
| Adverse impacts identified | Adopt and implement action plan and, if not successful, terminate business relationship | Adopt and implement action plan and, if not successful, suspend business relationship |
| Transition plans | Mandatory implementation | Mandatory adoption, not implementation |
| Downstream due diligence | Requirements for financial institutions under consideration | Deleted |
| Penalties | <5% of global turnover | Commission and member states to issue guidance. Maximum levels cannot be set |
| Member state harmonization | Member states could impose stricter requirements | Risk assessment, value chain due diligence, penalties, not allowed to impose stricter requirements |
| Transposition | July 26, 2026 | July 26, 2027 |
| Application | Companies over 3,000 employees: 2027 Rest of companies (>1,000 employees): 2028 | Companies over 3,000 employees: 2028 Rest of companies (>1,000 employees): 2029 |
| Civil liability | If noncompliance | Deleted |
The CSDDD will be enforced through administrative and civil liability. EU member states will designate authorities to supervise and impose sanctions, including fines of at least 5% of global net turnover.
* At the time of publication, EU Omnibus conversations were ongoing and not expected to be finalized until 2026.