EU Deforestation Regulation FAQ scope, evidence, filings, and records

The EUDR applies to relevant commodities and the derived products listed in Annex I. The Regulation covers cattle, cocoa, coffee, oil palm, rubber, soya, and wood as relevant commodities, with listed derived products also in scope.

A product is not cleared by commodity name alone. The practical scope check should match the product, commodity input, and Annex I product listing, then confirm whether the activity is placing on the EU market, making available on the market, or export.

The product must meet all three Article 3 conditions: it is deforestation-free, it was produced in accordance with relevant legislation of the country of production, and it is covered by a due diligence statement or simplified declaration where required.

If due diligence does not show no or only negligible risk, the product should not be placed on the market or exported until risk mitigation has reduced the risk to the required level.

An operator first places relevant products on the EU market or exports them, excluding downstream operators. A downstream operator places on the market or exports a relevant product made using relevant products that are all covered by due diligence statements or simplified declarations. A trader makes relevant products available commercially and is neither their operator nor their downstream operator.

Role classification matters because the filing, registration, information-collection, and downstream communication duties differ. Non-SME (outside the micro, small and medium-sized enterprise categories) downstream operators and non-SME traders must register in the EUDR information system before placing, making available, or exporting relevant products.

A due diligence statement is the operator's submission through the Article 33 information system after due diligence shows compliance and no or only negligible risk. The information system assigns a reference number for the submitted statement.

Operators must communicate due diligence statement reference numbers, or simplified declaration identifiers where relevant, to downstream operators and traders further down the supply chain. Those identifiers are not a substitute for checking whether the right product, supplier, batch, and role are covered.

Article 9 information collection includes geolocation of the plots of land or establishments connected to the relevant commodity or product, plus evidence showing deforestation-free status and legal production.

For micro or small primary operators, the Regulation includes a limited replacement: the Article 9 geolocation may be replaced by the postal address of plots of land or the establishment. That exception should be applied only after confirming the actor meets the micro or small primary-operator conditions.

Commission Implementing Regulation (EU) 2025/1093 provides the current country list: countries named in its Annex take the listed low- or high-risk tier, while unlisted countries remain standard risk. Retain the implementing-act version and date checked because Article 29 benchmarking can change.

Low-risk production does not remove all EUDR work. Operators using simplified due diligence for low-risk production still need to assess supply-chain complexity and risks of circumvention or mixing, and they must be able to provide documentation showing negligible risk of circumvention or mixing.

Article 13 requires low-risk production for every relevant input. If new information points to non-compliance or circumvention, the operator must perform Articles 10 and 11 and immediately communicate the information to the competent authority.

Supplier evidence should prove the Article 3 conditions for the specific product and supply chain. That means supplier identity, product and commodity linkage, country and place of production, geolocation or permitted substitute, legal-production documentation, deforestation-free evidence, and any due diligence statement reference number or declaration identifier received from an upstream actor.

Downstream operators and traders also need enough information to identify their supplier and downstream recipients, keep the information for at least five years, and provide it to competent authorities upon request.

As an internal release control, no: if the product is in EUDR scope and the transaction requires an operator filing, the customs or logistics workflow should not move ahead without the due diligence statement reference number or applicable declaration identifier tied to that product and movement. This control does not describe every customs authority's procedure or decide whether a particular declaration will be accepted.

The Regulation supports the core dependency: operators must submit the required statement before placing on the market or exporting, and reference numbers or declaration identifiers must travel downstream. Treat the identifier as a release gate, not as an after-the-fact cleanup item.

The high-level Commission overview and consolidated Regulation identify 30 December 2026 as the main EUDR application date and 30 June 2027 as the later date for certain operators. The consolidated Regulation narrows that later date to operators that are natural persons or micro or small undertakings established as such by 31 December 2024, except for products covered by the Annex to the EU Timber Regulation.

Do not apply the later date merely because an entity calls itself an SME. Confirm the actor type, establishment date, size category, product role, and any specific conditions before relying on the later application date.

A micro or small primary operator is a natural person or micro or small undertaking established in a low-risk country that places on the market or exports relevant products it has itself grown, harvested, obtained from, or raised on plots or cattle establishments in that low-risk country. Article 2(15a) also includes an operator above the general size limits when the commodity-related portions of its balance-sheet total, net turnover, and employee count remain within at least two of the three micro or small thresholds.

For that actor, certain Article 4 obligations do not apply. Instead, the Regulation describes a one-time simplified declaration in the Article 33 information system before placing on the market or exporting, after which the operator receives a declaration identifier. If all Annex III information is already available in another system or database under Union or Member State law, Article 4a(4) instead requires the Member State to make it available in the Article 33 system; the operator still needs an assigned declaration identifier before placing or exporting.

Downstream operators and traders receiving relevant new information indicating that a product they placed or made available risks non-compliance must immediately inform the competent authorities and downstream operators and traders they supplied. Operators have the corresponding immediate duty under Article 4(5). For exports, Articles 4(5) and 5(5) refer to the competent authority of the Member State that is the country of production; confirm the reporting destination with the competent authority where production occurred outside the EU.

Before placing, making available, or exporting, non-SME downstream operators and non-SME traders that receive information indicating non-compliance must immediately inform competent authorities. For substantiated concerns, they verify due diligence and do not proceed unless verification demonstrates no or negligible risk.

Operators retain due diligence documentation for at least five years and due diligence statement records for five years from submission. Downstream operators and traders retain Article 5 information for at least five years from their placing, making available, or export and provide it to competent authorities on request.

A useful EUDR record should connect the scope decision, product classification, role classification, supplier evidence, geolocation or permitted substitute, legal-production evidence, deforestation-free evidence, risk assessment, mitigation record where needed, due diligence statement reference number or declaration identifier, and downstream communication record.

Article 24 allows competent authorities to require corrective action such as correcting formal failures, preventing placement or export, withdrawal or recall, donation where appropriate, or disposal. Article 25 requires Member States to establish effective, proportionate, and dissuasive penalties, including fines and other listed sanctions.

For a legal person, the maximum fine available under national rules must be at least 4% of the total annual Union-wide turnover in the financial year preceding the fining decision and may need to exceed the economic benefit gained. The exact penalty, procedure, and available remedies depend on the applicable Member State rules and the case facts.