FAQEUDREU

EU Deforestation Regulation enforcement FAQ

EUDR enforcement is handled through Member State checks, information-system records, and requests for due diligence evidence.

This FAQ helps understand what records should be ready before a product is placed, made available, or exported.

Author
Sorena AI
Published
May 9, 2026
Updated
Oct 15, 2026
Overview

A Member State enforces the EUDR through risk-based checks, evidence requests, , and . Member States set penalties within the Regulation's framework, so the applicable national procedure and sanction rules matter. Core obligations apply from 30 December 2026. The 30 June 2027 date is limited to operators established as natural persons or micro or small undertakings by 31 December 2024, and excludes products covered by the EU Timber Regulation annex.

Search this module

Find a question or answer quickly

6 of 6 questions
Question 1

How is the EU Deforestation Regulation enforced?

Member States designate competent authorities to check whether operators, downstream operators and traders comply with the EUDR. For an in-scope product, the practical enforcement file should show that the product is deforestation-free, was produced in accordance with relevant legislation in the country of production, and is covered by the required due diligence statement or simplified declaration.

For operators, enforcement readiness starts before placing on the EU market or exporting: exercise due diligence, submit the required statement through the information system when due diligence shows no or negligible risk, keep the due diligence statement record for five years, and pass the reference number or declaration identifier down the supply chain where required.

The EUDR itself is binding EU law. Commission guidance can explain how the Commission reads and applies the Regulation, but it does not replace, add to, or amend the legal duties. National law controls the procedure and the particular penalty imposed within Article 25's EU framework.

  • Keep the due diligence statement or simplified declaration identifier connected to the exact product, commodity, shipment, supplier, and downstream recipient records.
  • Make the Article 9 information and evidence available to competent authorities on request, including geolocation or permitted location information and documentation showing deforestation-free and legal production.
  • Do not treat an accepted internal supplier attestation as enough by itself; the enforcement question is whether the EUDR evidence file supports the due diligence conclusion.
Question 2

How are EUDR checks selected and carried out?

Competent authorities use annual risk-based plans. Selection criteria include the commodity, supply-chain length and complexity, mixing, processing stage, proximity of plots to forests, country risk, prior non-compliance, circumvention risk, information-system data, monitoring data, a , and other relevant information.

The annual minimum check objectives are 1% of covered operators, non-SME downstream operators, and non-SME traders for low-risk production origins; 3% for standard-risk origins; and 9% for high-risk origins. For high-risk origins, checks must also cover 9% of the quantity of each relevant product. Authorities calculate these objectives separately for each relevant commodity from the preceding year's actors and, where applicable, quantities.

Checks normally occur without prior warning. For operators, an authority examines the due diligence system and product-specific evidence. It may also inspect goods, use anatomical, chemical, or DNA analysis to test species or origin, use Earth-observation data to assess deforestation-free status, and conduct field audits where appropriate. Checks on downstream operators and traders focus on the Article 5 information and registration duties.

  • A low country-risk classification lowers the authority's minimum check rate; it does not exempt an actor or product from checks.
  • A customs release is not proof of EUDR compliance. Competent authorities remain responsible for EUDR enforcement for products entering or leaving the market.
  • Member States publish prior-year enforcement information by 30 April, and Commission services publish a Union-wide overview by 30 October.
Recommended next step

Prepare EUDR enforcement evidence before requests arrive

Connect due diligence statements, supplier records, geolocation evidence, risk assessment outputs, and authority-response ownership for EUDR controls.

Question 3

What can competent authorities ask to see?

Answer a request with the underlying due diligence file. The statement reference alone is insufficient. Connect the product to the commodity, country and place of production, supplier, risk assessment outcome, mitigation where needed, and final no-risk or negligible-risk conclusion.

Downstream operators and traders have a separate evidence burden. They must collect and keep the supply-chain information required by Article 5, including supplier details and relevant due diligence statement reference numbers or declaration identifiers, and provide that information to competent authorities upon request.

  • Product and commodity identification, including the Annex I product category used for scope.
  • Supplier and downstream recipient details needed to trace the product through the chain.
  • Due diligence statement reference numbers, simplified declaration identifiers, or the record explaining why a simplified declaration applies.
  • Article 9 information and evidence, including location data or permitted substitutes and documents showing deforestation-free and legal production.
  • Risk assessment and mitigation evidence where the simplified low-risk route is not enough or where risk is not negligible.
Question 4

What should teams do when a request or control arrives?

Treat the request as a product-specific evidence exercise. Preserve the current version of the relevant evidence file, identify the affected due diligence statement or declaration identifier, and assemble the records that prove the product met Article 3 before it was placed, made available, or exported.

If relevant new information indicates that a product already placed or made available may not comply, Article 5(5) requires downstream operators and traders to inform the competent authorities of the affected Member States and their downstream business recipients immediately. For exports, the downstream operator informs the of the Member State that is the country of production. Operators have their own immediate notification duty under Article 4(5). Record the affected product lots, recipients, notification time and evidence supplied.

  • Match the authority request to the exact product lots, statements, suppliers, and recipient records covered by the request.
  • Provide the statement reference or declaration identifier together with the supporting due diligence evidence.
  • Escalate any new information indicating possible non-compliance to the EUDR owner, legal team, and the required external recipients.
  • For non-SME downstream operators and non-SME traders, do not place, make available, or export after a unless verification demonstrates no or negligible risk.
Question 5

What happens if the authority finds non-compliance?

Article 24 allows competent authorities to require proportionate , including fixing formal non-compliance, preventing placement or export, immediate withdrawal or recall, donation where appropriate, or disposal. Article 23 also provides for immediate such as seizure or suspension when potential non-compliance is detected.

Member States set and apply penalties. Article 25 requires effective, proportionate, and dissuasive regimes that include fines, confiscation of products and revenues, temporary exclusion from public procurement and funding, and, for serious or repeated infringements, temporary market prohibitions and loss of simplified due diligence. For a legal person, the maximum fine must be at least 4% of the total annual Union-wide turnover in the financial year preceding the fining decision and may need to exceed the economic benefit gained.

  • Distinguish Article 25's EU-wide minimum penalty framework from the exact procedure and sanction imposed under the applicable Member State rules.
  • Do not continue placing, making available, or exporting a product where verification does not demonstrate no or negligible risk.
  • Record the taken, the affected statements or declarations, the product disposition, and the authority communication.
Question 6

Questions and answers

Who enforces the EU Deforestation Regulation?

Member States designate competent authorities to carry out checks on whether operators, downstream operators and traders comply with the EUDR. In practice, teams should keep the due diligence file, reference numbers, and supply-chain records ready to show on request.

What happens if an authority finds non-compliance?

Competent authorities can require , including correcting formal failures, stopping placement or export, withdrawal or recall, donation where appropriate, or disposal. Member States set the applicable penalties, but Article 25 requires their regimes to include specified sanctions; for a legal person, the maximum fine must be at least 4% of the total annual Union-wide turnover in the financial year preceding the fining decision.

How are businesses selected for EUDR checks?

Competent authorities use risk-based annual plans. The EUDR sets minimum annual check rates of 1% for covered actors dealing in products from low-risk origins, 3% for standard-risk origins, and 9% for high-risk origins; the high-risk target also covers 9% of the quantity of each relevant product. These are authority-wide minimum objectives, not the probability that a specific shipment will be checked.

Can an EUDR check happen without warning?

Yes. Article 16 says checks are carried out without prior warning unless advance notice is necessary to make the check effective. An operator check can examine the due diligence system, product-specific records, due diligence statements or simplified declarations, goods on the ground, origin testing, Earth-observation data, and field audits where appropriate.

Primary sources

References and citations

eur-lex.europa.eu6 citations
Referenced sections
  • Primary EUDR text for competent-authority checks, evidence requests, interim measures, corrective action, penalties, and five-year statement and supply-chain recordkeeping.
  • Supports competent-authority checks, due diligence evidence requests, and the recordkeeping duties for statements, Article 5 information, and Article 9 evidence.
  • Supports authority access to EUDR evidence and Article 5 duties to retain supply-chain information for at least five years and provide it on request.
Show 3 more
  • Supports the notification and stop-work points when downstream operators or traders obtain information indicating risk or non-compliance.
  • Supports the rule that Member States establish penalties for infringements by operators, downstream operators, and traders.
  • Supports the operational response that products should not proceed when verification does not show no or negligible risk.
"Member States shall lay down rules on penalties applicable to infringements of this Regulation by operators, downstream operators and traders"
eur-lex.europa.eu2 citations
Referenced sections
  • Supports the information-system context for due diligence statements and authority access to EUDR compliance information.
  • Supports the role of the EUDR information system in exchanging due diligence statement information among operators, traders, competent authorities, customs authorities, and the Commission.
environment.ec.europa.eu2 citations
Referenced sections
  • Supports the Commission overview of current application dates and the role of designated Member State competent authorities.
  • Provides current Commission context on application dates, designated competent authorities, country benchmarking, and the EUDR information system.
Show all related guides (32)

EUDR non-negligible risk: what stops product release?

FAQ on how EUDR Articles 10 and 11 handle non-negligible risk, when operators should stop placement or export, and what evidence belongs in the file.

EUDR operator, trader, and downstream roles FAQ

Classify EUDR operators, downstream operators, and traders by product and transaction, then identify the due diligence, information, registration, and recordkeeping duties for each role.

EUDR simplified due diligence: low-risk country evidence FAQ

When EUDR Article 13 simplified due diligence applies, what operators must still collect and submit, how mixing or circumvention defeats it, and which low-risk list controls.

EUDR SME timing: which dates apply to micro, small, and medium businesses?

EUDR timing by role and size: the 30 December 2026 main date, the narrow 30 June 2027 operator exception, its timber exclusion, and the evidence needed to use it.

EUDR Supplier Evidence FAQ

What supplier evidence to collect for EUDR Article 9 information, geolocation, risk assessment, due diligence statements, and downstream recordkeeping.

EU Deforestation Regulation FAQ

Concise EU Deforestation Regulation answers on scope, covered commodities, operator and trader roles, due diligence statements, geolocation, low-risk countries, customs release, SME timing, enforcement, and records.

EUDR Applicability Test: Products, EU Market Activity, and Actor Roles

Test whether the EU Deforestation Regulation applies by checking Annex I product scope, EU market placement or export, operator/trader status, downstream role, SME status, and simplified due diligence conditions.

EUDR compliance checklist for products, suppliers, and DDS filing

A practical EU Deforestation Regulation checklist covering product scope, supplier evidence, geolocation, risk assessment, mitigation, due diligence statements, recordkeeping, and customs readiness.

EUDR compliance obligations for operators and traders

EUDR compliance guide covering operator and trader duties, Article 9 information, Article 10 risk assessment, Article 11 mitigation, due diligence statements, records, and authority-readiness.

EUDR country benchmarking and simplified due diligence

How EUDR country-risk benchmarking affects low-risk simplified due diligence, full due diligence, information collection, risk monitoring, and evidence records.

EUDR country benchmarking triage workflow

Use the official EUDR country list to route each production origin through low-risk simplified due diligence or full due diligence, with evidence and review triggers.

EUDR deadlines and compliance calendar

EUDR calendar covering application dates, the current country-risk act, the information system, timber transition rules, and preparation tasks by actor.

EUDR deadlines, phasing, and first actions

EUDR readiness guide covering the correct application cohort, role-specific first actions, geolocation evidence, due diligence statements, and country risk.

EUDR Due Diligence Statement Evidence: DDS records, geolocation, and supplier proof

Build an EUDR evidence file for due diligence statements: Article 9 information, geolocation records, supplier proof, risk assessment, mitigation, reference numbers, and retention.

EUDR due diligence statement filing workflow

File an EUDR due diligence statement with the correct Annex II data, operator approval, Information System handoff, reference number, and retained evidence.

EUDR Due Diligence Statement Template

Prepare the mandatory EUDR Annex II due diligence statement fields and the internal evidence log that supports the operator's no-or-negligible-risk conclusion.

EUDR Geolocation Data Requirements: plots, suppliers, and DDS evidence

How to collect, check, and use EUDR geolocation evidence for relevant commodities and products, Article 9 information, risk assessment, supplier records, and due diligence statements.

EUDR Geolocation Evidence and Annex I Commodity Lookup

Build an EUDR evidence file that links Annex I commodity scope, supplier and trader records, geolocation evidence, product lots, risk assessment, and due diligence statement support.

EUDR Geolocation Traceability Systems: records, DDS handoffs, and supplier evidence

How to structure EUDR traceability records for geolocation, supplier evidence, product lots, risk assessment inputs, and due diligence statement handoffs.

EUDR in-scope commodities and products

How to check EUDR scope for the seven commodities, Annex I relevant products, operator and trader roles, and the evidence needed to support a scope decision.

EUDR penalties and enforcement: checks and sanctions

EUDR enforcement guide covering risk-based checks, no-warning inspections, interim measures, corrective action, penalties, and records by actor.

EUDR penalties and fines: what Article 25 requires

EUDR penalty guide explaining Article 25 fines, the 4% turnover rule, confiscation, temporary restrictions, corrective action, and national-law limits.

EUDR requirements for operators, traders, and DDS filing

EUDR requirements based on official sources: scope, due diligence, geolocation, risk assessment, mitigation, DDS filing, records, and simplified regimes.

EUDR risk assessment and mitigation under Articles 10 and 11

How to run an EUDR Article 10 risk assessment, decide when risk is not negligible, apply Article 11 mitigation, and keep release evidence before placing products on the EU market or exporting.

EUDR Supplier Onboarding Template

A practical EUDR supplier onboarding template for Annex I product scope, supplier roles, geolocation evidence, risk inputs, mitigation records, DDS references, and five-year records.

EUDR vs CSDDD: product due diligence vs corporate due diligence

Compare EUDR product-level market controls with the current CSDDD company-scope thresholds, human-rights and environmental due diligence, application dates, evidence, and enforcement.