CSDDD Civil Liability
CSDDD introduces EU-level civil liability for companies that fail to prevent or end adverse human rights and environmental impacts in their value chains. This is the most commercially significant element of CSDDD — creating legal exposure for corporate directors and opening courts to supply chain victims across the EU.
CSDDD introduces EU-level civil liability for companies that fail to prevent or end adverse human rights and environmental impacts in their value chains. Article 29 of CSDDD requires member states to ensure that companies can be held civilly liable for damages caused to natural or legal persons where:.
How CSDDD civil liability works
Article 29 of CSDDD requires member states to ensure that companies can be held civilly liable for damages caused to natural or legal persons where:
(1) The company intentionally or negligently failed to comply with its CSDDD due diligence obligations; AND
(2) That failure caused or contributed to an adverse human rights or environmental impact; AND
(3) The adverse impact resulted in damage to a natural or legal person.
This is a fault-based liability standard — it does not impose strict liability (liability without fault). The claimant must prove both the due diligence failure AND the causal link between that failure and the harm suffered.
Damages: Member states must ensure full compensation for the damage caused. This includes: loss of earnings; cost of medical treatment; psychological harm; cost of restoring damaged environment; and legal costs.
Limitation periods: Member states must ensure that limitation periods for CSDDD liability claims are not less than 5 years — providing a meaningful window for victims to bring claims after harm is identified.
Who can bring CSDDD liability claims
Affected persons: Natural persons who have suffered harm as a result of the company's failure — workers in the supply chain, community members affected by environmental damage, indigenous peoples whose rights have been violated.
Representative organisations: Trade unions and civil society organisations can bring claims on behalf of affected persons — with the affected persons' authorisation. This is a significant provision — it enables NGOs like ClientEarth, Corporate Accountability Lab, or human rights organisations to litigate on behalf of supply chain victims who lack the resources to bring individual claims.
Jurisdiction: Claims are brought in the member state courts of the EU country where the company is incorporated (for EU companies) or where the company has its EU representative (for non-EU companies). For EU companies incorporated in Germany, France, or other large member states, claims would be brought in those national courts.
Class actions: CSDDD does not create a specific class action mechanism. However, the EU Representative Actions Directive (2020) allows qualified consumer organisations to bring representative actions for breaches of EU law — CSDDD violations may be brought under this mechanism in member states that have implemented the Representative Actions Directive.
Reducing civil liability exposure — the due diligence defence
The most important protection against CSDDD civil liability is a genuine, well-documented due diligence programme. If a company can demonstrate that it has complied with its CSDDD obligations — identified risks, taken appropriate preventive measures, established grievance mechanisms, and monitored effectiveness — it has a strong defence against civil liability claims.
The compliance defence: Article 29(2) allows member states to provide that a company cannot be held liable if it proves it took all due care to comply with its due diligence obligations and the damage could not have been prevented even with adequate care. This is a high bar — it requires demonstrating that the due diligence programme was comprehensive, well-implemented, and genuinely effective.
Documentation is the liability shield: A company with detailed records of its value chain mapping, risk assessments, supplier engagement, contractual requirements, audit results, and remediation actions is in a much stronger position than a company with the same programme but no documentation.
Insurance: CSDDD liability risk is driving demand for supply chain liability insurance products. Specialist insurers are developing CSDDD-specific liability coverage — covering legal defence costs and damages for claims arising from supply chain adverse impacts. Assess your existing directors and officers (D&O) and general liability coverage for CSDDD-related claims.
Frequently asked questions
Can a UK victim of supply chain harm sue an EU company under CSDDD?
CSDDD civil liability applies to harm suffered anywhere — not just in the EU. A victim of supply chain human rights violations in any country can potentially bring a claim in EU member state courts against an EU company subject to CSDDD, provided the company's due diligence failure contributed to the harm. CSDDD is deliberately extraterritorial in its protective scope.
Does civil liability under CSDDD apply to parent companies for subsidiary actions?
CSDDD does not automatically make parent companies liable for subsidiary actions. However, parent companies are responsible for CSDDD due diligence across their entire group — including subsidiaries. A parent company that fails to ensure its subsidiary conducts adequate due diligence may face liability for the parent's own due diligence failure, not as a secondary liability for the subsidiary's direct acts.
How does CSDDD civil liability interact with existing national laws?
CSDDD sets a minimum standard — member states can maintain or introduce stricter national rules. France's Loi de Vigilance already imposes civil liability for due diligence failures, and CSDDD broadly aligns with its approach. Germany's LkSG currently excludes civil liability — Germany must amend LkSG to introduce the civil liability mechanism required by CSDDD.