We use privacy-by-default, cookieless analytics.

Optional analytics cookies are used only if you accept them.

Read our Terms of Use and Privacy Policy.

CSDDDNational implementation

CSDDD liability and enforcement after the 2026 amendment

Directive (EU) 2026/470 changed the penalty and civil-liability framework. The old EU 5% rule was replaced by a uniform 3% maximum limit, and the original harmonised Article 29 liability formula no longer applies.

The practical analysis now requires the amended Directive plus the transposition law, authority, procedure, sanction rules, and civil-liability law of each relevant Member State.

Back to main artifactReview sources
Author
Sorena AI
Published
Feb 21, 2026
Updated
Oct 15, 2026
3 sections2 primary sources
Overview

CSDDD requires Member States to provide supervision, orders, penalties, and access to review, but it does not impose a self-executing EU fine on a company. Administrative enforcement and civil liability are separate tracks. A is the Article 26 route for asking a supervisory authority to examine suspected non-compliance based on objective circumstances. Apply the amended Directive through the transposition law, competent authority, procedure, and private law of the relevant Member State.

Section 1

Supervisory exposure

National supervisory authorities must be able to request information and investigate compliance with Articles 7 to 16. They may investigate on their own initiative or after receiving a based on objective circumstances. If they find non-compliance, they must have powers that include ordering an infringement to cease, preventing repetition, ordering proportionate remediation where appropriate, imposing penalties, and adopting interim measures where severe and irreparable harm is imminent.

Member States must transpose the amended CSDDD by 26 July 2028 and apply those national measures from 26 July 2029, except that Article 16 reporting measures apply for financial years starting on or after 1 January 2030. Before those dates, track each transposition law and authority designation; do not present the Directive alone as an already-operative national penalty or damages rule.

  • Identify the competent authority for each in-scope entity.
  • Keep substantiated concerns separate from company complaints under Article 14: a goes to a supervisory authority, while a complaint goes through the company's complaints procedure.
  • Maintain an indexed response pack covering scope, policy, risk mapping, prioritisation, action, stakeholder input, complaints, remedy, monitoring, and Article 16 communication.
  • Log remedial orders, deadlines, responsible owners, completion evidence, and any challenge or appeal.
  • Use the national review route for a binding authority decision. Remedial action does not by itself prevent a penalty or civil claim.
Section 2

Penalty analysis starts with the EU 3% maximum-limit rule

The original Directive required national maximum fine limits of at least 5% of net worldwide turnover. Directive (EU) 2026/470 replaced that rule. Member States must now set the maximum limit at 3% of the company's net worldwide turnover in the financial year before the fine decision or, for the ultimate-parent cases named in amended Article 27(4), 3% of net consolidated worldwide turnover at ultimate-parent level.

  • Do not quote 5% as the current automatic fine, minimum fine, or required national maximum.
  • Do not quote 3% as an automatic fine; it is the maximum limit required for the national pecuniary-penalty framework.
  • Track the Article 27 factors: the nature, gravity, and duration of the infringement; impact severity; investments and targeted support; collaboration; prioritisation; prior infringements; remedial action; financial benefit or avoided loss; and other aggravating or mitigating circumstances.
  • Track each transposition law for covered infringements, penalty types, calculation, procedure, limitation, hearing rights, payment, challenge, and appeal.
  • Penalty decisions must be published, remain publicly available for at least five years, omit personal data, and be sent to the European Network of Supervisory Authorities. National implementation controls the publication mechanics.
  • Keep turnover and group records available where national rules use them.
  • Distinguish a supervisory order, public decision, monetary sanction, procurement consequence, and private claim.
Section 3

Civil liability requires Member State analysis

Directive (EU) 2026/470 deleted the original EU liability test in Article 29(1). Whether a claimant has a cause of action, who may bring it, fault, causation, protected damage, limitation, evidence, costs, and available remedies must therefore be tested under the relevant national law. If a company is held liable under national law for damage caused to a natural or legal person by failure to comply with CSDDD due diligence requirements, Article 29(2) still requires full compensation without punitive, multiple, or other overcompensation.

  • Do not promise that CSDDD automatically creates or excludes liability for a particular loss.
  • Do not treat industry initiatives, third-party verification, or contractual clauses as a liability shield; amended Article 29 says a participating company may still be liable under national law.
  • A company's civil liability does not displace possible liability of its subsidiaries or direct and indirect business partners in the chain of activities.
  • Map each alleged failure to the duty and national rule in force at the relevant time.
  • Preserve the impact record, prioritisation rationale, measures, stakeholder evidence, monitoring, remedy, and decision approvals.
  • Coordinate supervisory and litigation holds so evidence is consistent across both tracks.

Build a country-specific CSDDD enforcement register

Connect each entity to its authority, transposition law, response evidence, penalty rules, and civil-liability analysis.

Research workflow
Open Research Copilot

Connect the CSDDD decision to cited sources, owners, evidence, and reviewable implementation work.

Explore next step
Next step
Open the amended CSDDD hub

Return to current scope, dates, due diligence, reporting, and enforcement guidance.

Explore next step
Talk to Sorena
Discuss CSDDD implementation

Review the relevant entity, national-law dependency, evidence gap, and next control decision with Sorena.

Explore next step
Primary sources

References and citations

Directive (EU) 2026/470
eur-lex.europa.eu4 citations
Referenced sections
  • Current amendment for penalties and civil liability.
  • Binding amendment limiting supervision to Articles 7 to 16 after deletion of Article 22 and retaining authority powers through the amended framework.
  • Current source replacing the original 5% rule with a uniform 3% maximum limit and amending penalty rules.
Show 1 more
  • Deletes the original Article 29(1) liability test and representative-action provision, retains full compensation without overcompensation, and confirms that initiatives, verification, and contractual clauses do not necessarily prevent national liability.
Consolidated Directive (EU) 2024/1760 as at 18 March 2026
eur-lex.europa.eu3 citations
Referenced sections
  • Current consolidated supervision, penalty, substantiated-concern, and civil-liability framework.
  • Articles 25 and 26 govern investigations, orders, interim measures, substantiated concerns, records, and judicial review under the current consolidated text.
  • Current Article 27 framework for penalty factors, required penalty types, publication, and the amended turnover limit.

Related guides

CSDDD adverse impact prioritisation workflow

A CSDDD workflow for identifying actual and potential adverse human rights and environmental impacts, ranking severity and likelihood, and documenting prevention, mitigation, remediation, and stakeholder evidence.

CSDDD Applicability Test After 2026 Changes

Test CSDDD scope after Directive (EU) 2026/470 using the current EU and third-country thresholds, parent-company rules, exclusions, dates, and evidence.

CSDDD chain of activities and supplier due diligence

Explain CSDDD chain-of-activities scope, upstream and downstream boundaries, subsidiaries, direct and indirect business partners, supplier risk segmentation, and evidence.

CSDDD Chain of Activities Boundaries

Define CSDDD upstream and downstream chain of activities boundaries for subsidiaries, direct and indirect business partners, distribution, transport, storage, and records.

CSDDD compliance duties and evidence guide

A source-backed CSDDD compliance guide covering due diligence policy, impact scoping, prevention, corrective action, complaints, monitoring, reporting, climate-plan status, and supervisory evidence.

CSDDD Deadlines After Directive 2026/470

Current CSDDD calendar: 2027-2028 guidance, 2028 transposition, 2029 application, 2030 reporting, 2031 ESAP submission and review.

Show all related guides (35)

CSDDD due diligence checklist

A source-backed CSDDD checklist for scope, risk scoping, impact prioritisation, action plans, complaints, monitoring, communication, evidence, and the removed climate-plan duty.

CSDDD Due Diligence Steps Playbook for Articles 5 and 7-16

A playbook using current CSDDD provisions for policy integration, impact assessment, prioritisation, prevention, correction, remediation, stakeholder engagement, complaints, monitoring, communication, and evidence.

CSDDD FAQ: scope, dates, duties, liability, and evidence

Practical answers on CSDDD scope, current application dates, chain of activities, due diligence duties, complaints, remediation, civil liability, climate plans, and evidence.

CSDDD grievance and remediation workflow guide

Build a CSDDD grievance, notification, stakeholder engagement, and remediation workflow under Directive (EU) 2024/1760 as amended by Directive (EU) 2026/470.

CSDDD Non-EU Scope and 2029 Start

Test third-country CSDDD scope using the amended EUR 1.5 billion EU-turnover route and one 26 July 2029 application date.

CSDDD Penalties After Directive 2026/470

Current CSDDD penalty guidance after the EU 5% rule was replaced by a uniform 3% maximum limit: national sanctions, authority decisions, evidence, and country-by-country monitoring.

CSDDD Remediation Plan Template: Article 12, 13 and 14 evidence

A CSDDD remediation plan template for actual adverse impacts, complaint inputs, stakeholder engagement, action records, and monitoring under the Directive as amended in 2026.

CSDDD requirements: scope, due diligence, climate plan, and evidence

A source-backed map of current CSDDD requirements across scope, due diligence policy, impact assessment, complaints, remediation, monitoring, communication, and the removed climate-plan duty.

CSDDD Scope Thresholds After 2026

Understand amended CSDDD thresholds for EU and non-EU companies, group scope, exclusions, two-year evidence, and the 2029 application date.

CSDDD Supplier Contract Clause Review Workflow

Review supplier contract clauses against CSDDD Articles 10 and 11: contractual assurances, verification, SME fairness, support, action plans, and escalation evidence.

CSDDD Supplier Contract Clauses: Articles 10 and 11 Evidence

How to use CSDDD supplier contract clauses without treating clauses as a substitute for due diligence: contractual assurances, verification, SME support, action plans, limits, and evidence.

CSDDD supplier human rights impact scoring template

A CSDDD supplier impact scoring template for Article 8 identification, Article 9 prioritisation, severity, likelihood, stakeholder input, chain-of-activities boundaries, and evidence records.

CSDDD vs CSRD: Due Diligence and Reporting Compared

Compare CSDDD due diligence duties with CSRD sustainability reporting, including scope, timing, Article 16 reporting, evidence overlap, assurance, and enforcement.

CSDDD vs German LkSG Comparison

Compare the EU CSDDD with Germany's LkSG without mixing directive duties, national-law duties, chain boundaries, complaints, reporting, and enforcement routes.

CSDDD vs OECD Guidelines

Compare the binding EU CSDDD with the OECD Guidelines for responsible business conduct across scope, due diligence duties, business relationships, remediation, and evidence.

Did CSDDD Keep Its Climate Plan Duty?

Directive (EU) 2026/470 removed the standalone CSDDD Article 22 climate-transition-plan duty. Understand what changed and which separate obligations may remain.

CSDDD chain of activities boundaries: upstream and downstream FAQ

FAQ on how the CSDDD defines chain of activities boundaries for subsidiaries, direct and indirect business partners, upstream activities, downstream logistics, and evidence.

CSDDD complaints and notifications FAQ

FAQ on Article 14 CSDDD complaint and notification mechanisms, who may complain, follow-up rights, confidentiality, retaliation, and evidence.

CSDDD contractual assurances FAQ for Articles 10 and 11

How CSDDD Articles 10 and 11 use contractual assurances with business partners, verification, SME support, action plans, and possible suspension escalation.

CSDDD prevention vs mitigation: potential and actual adverse impacts

CSDDD FAQ on when to prevent or mitigate potential adverse impacts, when to end or minimise actual adverse impacts, and what evidence records to keep.

CSDDD remediation FAQ: when companies must remedy adverse impacts

FAQ on CSDDD remediation: when Article 12 requires remedy, how complaints and stakeholder engagement affect the response, and what evidence to keep.

CSDDD risk prioritisation FAQ: severity, likelihood, and evidence

How to prioritise CSDDD adverse impacts when teams cannot address everything at once, using severity, likelihood, stakeholder evidence, and a reviewable rationale.

Does CSDDD Still Have Scope Waves?

No separate company scope waves remain after Directive (EU) 2026/470: transposition is due in 2028 and all companies remaining in scope apply from 2029.

Does Franchising Trigger CSDDD Scope?

Directive (EU) 2026/470 retained the CSDDD franchise and licensing scope route but raised its royalty and turnover thresholds. Learn the current test.

How CSDDD overlaps with OECD, UNGP, and ILO standards

FAQ on how OECD responsible business conduct guidance, the UN Guiding Principles, and ILO labour standards inform CSDDD due diligence without being the same legal instrument.

How Does CSDDD Civil Liability Work Now?

Directive (EU) 2026/470 removed the uniform EU liability test but retained compensation and procedural safeguards. Claims still depend on Member State law.

Is a Climate Plan Still Required by CSDDD?

Directive (EU) 2026/470 removed the standalone CSDDD Article 22 climate-transition-plan duty; separate CSRD and national obligations need their own review.

What Did Omnibus Change in CSDDD?

CSDDD Omnibus amendment: what Directives (EU) 2025/794 and 2026/470 adopted, which dates apply, and which old duties were removed.

What EU Turnover Triggers CSDDD Scope?

A third-country company generally needs more than EUR 1.5 billion net turnover in the EU under Directive (EU) 2026/470; learn the evidence and timing.