CSDDD / CS3D: The EU Corporate Sustainability Due Diligence Directive Explained

What is the CSDDD?

The Corporate Sustainability Due Diligence Directive (CSDDD), also known as CS3D, is a landmark EU regulation that mandates large companies to identify and address human rights and environmental risks across their global operations and "chains of activities."

Below is a summary of the key points from the final directive (including recent amendments from the "Omnibus" simplification package).

---

Scope: Which Companies Are Affected?

The directive primarily targets very large corporations with significant influence over global value chains. The thresholds were recently increased to reduce the administrative burden:

• EU Companies: Those with more than 5,000 employees and a global net turnover of more than €1.5 billion.
• Non-EU Companies: Those generating a net turnover of more than €1.5 billion within the EU, regardless of where they are headquartered.
• Franchise/License Models: Companies with license fees exceeding €75 million in the EU and a net turnover of more than €275 million in the EU are also included.

---

Core Obligations: The 6-Step Due Diligence Process

The CSDDD follows the OECD Guidelines for Responsible Business Conduct. In-scope companies must:

1. Integrate Due Diligence: Embed responsible conduct into company policies and risk management systems.
2. Identify & Assess Risks: Map their "chain of activities" to find actual or potential adverse impacts on human rights (e.g., forced labor, child labor) and the environment (e.g., pollution, biodiversity loss).
3. Prevent or Mitigate: Take measures to prevent potential impacts or minimize actual ones. This can include financial investments, changing production processes, or seeking contractual assurances from partners.
4. Monitor Effectiveness: Conduct periodic assessments (at least every 12–24 months) to see if the measures are working.
5. Public Communication: Publish an annual report on their due diligence efforts (unless they already report under the CSRD).
6. Provide Remediation: If a company causes an adverse impact, it is legally required to provide or cooperate in remediation for the victims.

---

Risk-Based Approach and Prioritization

The directive does not require companies to solve every issue at once. It allows for a prioritization strategy:

• Companies can focus on areas where the risks are most severe or most likely to occur.
• The "chain of activities" focus is now more targeted toward upstream suppliers and limited downstream activities (like distribution or transport), rather than the entire lifecycle of a product.

---

Enforcement and Penalties

Member States will designate national supervisory authorities to monitor compliance. Penalties for non-compliance are significant:

• Fines: Can reach up to 5% of the company's net worldwide turnover.
• Civil Liability: Victims of human rights or environmental abuses have the right to sue companies in EU courts for damages if the company failed to take required preventative measures.

---

Implementation Timeline

The regulation is being phased in to allow companies time to adapt:

• July 2024: Directive officially entered into force.
• July 2028: Deadline for EU Member States to transpose the directive into national laws.
• July 2029: The rules begin to apply to the largest in-scope companies.

---

Notable Recent Changes (Omnibus I)

In early 2026, the EU adopted an amending directive that simplified several requirements:

• Climate Transition Plans: The mandatory requirement for companies to adopt and execute a climate transition plan (aligned with the 1.5°C Paris goal) within the CSDDD framework was removed to avoid duplication with the Corporate Sustainability Reporting Directive (CSRD).
• Simplified Reporting: Efforts were made to harmonize reporting duties to ensure companies don't have to report the same data under multiple different EU laws.