Search every question across sub-FAQs

No. Amended Article 18 requires the Commission to adopt guidance on voluntary model contractual clauses by 26 July 2027. Until that guidance exists, a company should not present its own wording as an official EU model. After publication, using a model clause will still not replace the impact-specific action, verification, SME treatment, monitoring, or escalation required by Articles 10 and 11.

The clause should match the actual adverse impact and the partner's role. It should identify the code-of-conduct or action-plan obligation, evidence and access needed for verification, support the company will provide where required, milestones, review rights, and the response to non-performance. Contract language does not create an automatic defence to civil liability under amended Article 29.

A signed clause is not enough. Articles 10(5) and 11(6) say contractual assurances must be accompanied by appropriate measures to verify compliance. The directive allows independent third-party verification, including through industry or multi-stakeholder initiatives, where that is appropriate.

The contract file should therefore show both the promise and the control loop: what obligation is covered, how compliance will be checked, who reviews verification results, what evidence is accepted, and what happens when the partner misses the agreed action-plan milestones.

SMEs are not brought into the CSDDD scope merely because a large in-scope company asks for assurances, but Articles 10 and 11 protect SMEs in the assurance process. When assurances are obtained from, or a contract is entered into with, an SME, the terms must be fair, reasonable, and non-discriminatory.

The company must also assess whether SME assurances should be accompanied by SME support measures. The directive names capacity-building, training, management-system upgrades, and, where the code of conduct or action plan would jeopardise the SME's viability, targeted and proportionate financial support.

Weak assurances should trigger verification, stronger prevention or corrective action, support, operational change, collaboration, and proportionate relationship measures. Directive (EU) 2026/470 removed mandatory termination as the final CSDDD step.

Before suspension, disengagement, or continued engagement, assess expected impacts on affected people and the environment, the company's ability to influence the partner, alternative measures, notice where relevant, and the monitoring needed to test the decision.

Under the CSDDD, prevention is the first Article 10 objective for a potential adverse impact: stop the impact from occurring where possible. Mitigation is the Article 10 fallback where prevention is not possible or not immediately possible: reduce the likelihood, severity, or conditions that could allow the potential impact to occur.

For actual adverse impacts, the vocabulary changes. Article 11 requires companies to bring each impact to an end. If an impact cannot immediately be brought to an end, the company must minimise its extent and use corrective measures proportionate to the severity of the impact and the company's implication in it.

Start with the amended Article 8 process. Use reasonably available information to scope the general areas across the company's own operations, subsidiaries, and relevant chains of activities where impacts are most likely and most severe. Then conduct an in-depth assessment in those areas and decide whether each identified impact is potential or actual. If the company cannot address all identified impacts at the same time and to their full extent, Article 9 requires prioritisation based on severity and likelihood.

The classification should also record involvement and influence. Articles 10 and 11 ask whether the company caused the impact, caused it jointly through acts or omissions with a subsidiary or business partner, or whether only a business partner caused it. They also distinguish where the impact occurs in the chain of activities and whether the company can influence the relevant business partner.

For potential adverse impacts, Article 10 lists appropriate measures that may be relevant depending on the circumstances. A prevention action plan is needed where the nature or complexity of the measures requires one, and it should include reasonable and clearly defined timelines plus qualitative and quantitative indicators for improvement.

Article 10 covers more than supplier clauses. It also points to investments, operational adjustments, purchasing-practice changes, design and distribution changes, targeted SME support, and collaboration where that increases the company's ability to prevent or mitigate the potential adverse impact.

Once the impact is actual, the response should be managed as Article 11 work. The first objective is to bring the impact to an end. If that cannot happen immediately, the company must minimise the extent of the impact, and Article 11 measures include neutralising the impact or minimising its extent, corrective action plans, contractual assurances, investments, operational changes, SME support, collaboration, and remediation where Article 12 applies.

A corrective action plan addresses a specific actual impact, while a prevention action plan addresses a potential impact. The corrective plan should use reasonable and clearly defined timelines and include qualitative and quantitative indicators for measuring improvement.

Directive (EU) 2026/470 removed mandatory termination and retained a mandatory last-resort response. If the preceding Article 10 or 11 measures fail, the company must refrain from new or extended relationships connected to the impact, adopt an enhanced action plan without undue delay where success can reasonably be expected, and suspend the affected activities where the governing law entitles it to do so.

Before suspension, the company must assess whether suspension could reasonably be expected to cause impacts that are manifestly more severe than the unresolved impact. If so, suspension is not required, and the company must be able to give the supervisory authority its duly justified reasons. A company that suspends must address the suspension's impacts, give reasonable notice, and keep the decision under review; a company that does not suspend must monitor the unresolved impact and periodically reassess the decision.

Use an impact file that lets a reviewer see the identified impact, the Article 10 or Article 11 classification, the prioritisation basis, stakeholder input, measures selected, implementation status, and monitoring result.

Article 15 requires effectiveness assessment. Directive (EU) 2026/470 uses a regular cycle of at least every five years plus event-driven reassessment after significant change or when reasonable grounds indicate new risks or ineffective measures.

The mandatory remediation trigger is narrow: the company must provide remediation when it has caused or jointly caused an actual adverse impact. The Directive defines remediation as restoring affected persons, communities, or the environment to a situation equivalent or as close as possible to the one that would have existed without the impact. The response must be proportionate to the company's implication.

Do not treat every supplier incident as an automatic company-funded remedy. If the actual adverse impact was caused only by a business partner, the company may provide voluntary remediation and may use its influence over that business partner to enable remediation.

Define the intended outcome with affected stakeholders before choosing the measure. The outcome should address the people, community, or environmental resource harmed, while reflecting what restoration is possible and the company's implication in the impact. Financial payment may be part of the response, but the Directive also permits non-financial compensation and restoration-oriented measures.

Set completion criteria that test the outcome rather than the activity. A payment record, supplier instruction, or corrective action may prove that a step occurred, but it does not by itself show that affected people or the environment were restored as far as possible. Record any part of the harm that cannot be reversed, any measure controlled by a business partner or public authority, and the follow-up needed.

Examples of non-financial remedy can include restitution, rehabilitation, an apology, or a guarantee of non-repetition, depending on the impact and the affected stakeholder's needs. Those examples come from the UN Guiding Principles' remedy framework; Article 12 controls whether the CSDDD requires the company to provide remediation in the specific case.

Start with the factual link between the company's own operations, its subsidiaries, and business partners in the chain of activities. The remediation file should explain what happened, who was affected, which activity or omission created the harm, and whether the company was one of the causes.

For a jointly caused impact, the remedy should be proportionate to the company's implication. For a business-partner-only impact, the record should explain what influence is available, what the company asked the partner to do, and whether voluntary support is appropriate.

Complaints can supply evidence for the remediation analysis. Article 14 requires companies to enable complaints from affected persons, people with reasonable grounds to believe they may be affected, their legitimate representatives, relevant trade unions or workers' representatives, and experienced civil-society organisations for environmental impacts.

If a complaint is well founded, the adverse impact is treated as identified and the company must take the relevant measures under the directive, including remediation where Article 12 applies. Complainants can request follow-up, meet company representatives about severe impacts and potential remediation, and receive reasons for a founded or unfounded decision.

The evidence should let a later reviewer see why remediation was required, what outcome was selected, what was done, whether it worked, and what remained unresolved. Recital 61 says compliance documentation should include remediation measures, periodic assessments, notifications, and complaints where relevant.

Keep enough detail to support the causation view and the remedy design without turning the file into unsupported legal conclusions. The most useful record is a compact remediation log tied to the underlying impact assessment, complaint file, stakeholder consultation, and implementation proof.