EU CSDDD (Directive (EU) 2024/1760) Compliance guide

Start with scope, ownership, and the Article 7 due diligence policy. The policy should connect code of conduct expectations, implementation processes, and verification logic. It should also fit the real group structure rather than an idealized organization chart.

Board or equivalent oversight should be visible in minutes, delegations, and reporting packs. If nobody can show where difficult tradeoffs are decided, the program is not mature enough.

Article 8 and Article 9 require companies to identify and assess actual and potential impacts, then prioritize where not all impacts can be addressed at once. This is where the chain-of-activities register and the scoring method become core infrastructure.

The program should be able to explain why one geography, site, supplier cluster, or product route was investigated more deeply than another. If the logic is not documented, it will look arbitrary later.

Articles 10 to 12 move the company from analysis to action. Potential impacts need prevention and mitigation. Actual impacts need corrective action and, when the company caused or jointly caused the impact, remediation.

This is the part of the program where contract clauses, supplier action plans, leverage strategies, suspension decisions, and remediation funding all need to connect cleanly.

Articles 13 to 17 require meaningful stakeholder engagement, a complaints procedure, periodic monitoring, annual communication, and later ESAP publication mechanics where applicable. These duties are often underbuilt because teams focus only on suppliers.

The complaints process must be usable by affected people and organizations, not just by employees with access to a hotline. The annual communication process must be designed before the first reporting cycle, not during it.

Article 22 climate planning and Articles 24 to 29 enforcement rules have to be treated as part of compliance, not as separate ESG side projects. Supervisory authorities can investigate, order remedial action, and impose penalties. Civil liability sits beside that regime, not behind it.

A mature program keeps a response pack ready with the current scope memo, policy, chain map, prioritization rationale, action plans, complaint logs, monitoring outputs, annual communication files, and climate transition plan updates.