CSDDD Grievance Mechanisms

Who can use the CSDDD complaints procedure

Article 14 requires the complaints procedure to be accessible to a broader group than typical internal whistleblower mechanisms:

Affected persons: Natural persons whose human rights or environmental interests are adversely affected or at risk — supply chain workers, community members near operational sites, indigenous peoples whose rights are implicated.

Trade unions and worker representatives: Organisations representing workers in the company's own operations or value chain — including trade unions at supplier sites who may not have direct access to the company.

Civil society organisations: NGOs, human rights organisations, environmental groups, and other civil society actors that work on behalf of affected persons or monitor corporate conduct in value chains.

The breadth of this access is significant — it creates a formal channel for external stakeholders to raise supply chain concerns directly with the company. Previously, external parties had to rely on media pressure, regulatory complaints, or litigation to bring supply chain issues to corporate attention. CSDDD institutionalises this channel.

For companies: the complaints procedure must be genuinely accessible — not buried in a corporate website in one language. Effective accessibility requires: multiple languages covering supplier country languages; multiple channels (online form, email, phone, postal address); availability to anonymous complainants; and communication in the complainant's language.

The procedural requirements — what the complaints procedure must include

Article 14 sets out minimum procedural requirements for the CSDDD complaints procedure:

Acknowledgement: The company must acknowledge receipt of complaints within a reasonable timeframe — best practice is within 5–10 working days.

Follow-up: The company must follow up with the complainant on the steps taken to assess the complaint and any action taken or planned in response.

Outcome communication: The complainant must be informed of the outcome — whether the complaint was upheld, what action was taken, and if the complaint was rejected, why.

Retaliation protection: Companies must not take retaliatory action against complainants — whether they are internal employees, supply chain workers, or external civil society organisations. Retaliation includes dismissal, blacklisting, legal threats, and economic pressure.

Confidentiality: The identity of complainants must be protected where confidentiality is requested — balancing transparency with protection of vulnerable complainants.

Documentation: All complaints, investigations, outcomes, and actions taken must be documented and available for regulatory inspection.

The complaints procedure must be publicly disclosed — the mechanism, how to access it, and the process for handling complaints must be published on the company's website and communicated to value chain partners.

Integration with existing mechanisms — efficiency and coherence

Many companies already have internal whistleblower channels (required under the EU Whistleblower Directive for companies with 50+ employees), ethics hotlines, and customer complaints procedures. CSDDD does not require entirely new infrastructure — but existing mechanisms must be assessed for CSDDD compliance gaps.

EU Whistleblower Directive channels: These cover internal employees reporting breaches of EU law. CSDDD requires access for external parties — supply chain workers, communities, NGOs — who are typically excluded from internal whistleblower mechanisms. CSDDD requires either extending existing channels to external parties or creating a dedicated external complaints mechanism.

Supplier audit findings: Audit programmes identify adverse impacts but do not provide a channel for affected workers to self-report. A CSDDD-compliant grievance mechanism gives workers direct access — independent of the supplier management that may have suppressed previous complaints.

Worker voice platforms: Technology solutions (Ulula, Elevate, LaborVoices) provide worker-accessible grievance reporting through SMS, mobile apps, or phone — in local languages and with anonymity protection. These platforms integrate with supply chain management systems and can feed into the CSDDD complaints documentation requirement.

For annual CSDDD reporting: the number of complaints received, their categories, the actions taken, and the outcomes achieved must be disclosed. This creates public accountability for grievance mechanism effectiveness — a mechanism that receives zero complaints over multiple years may indicate inaccessibility rather than the absence of problems.

Frequently asked questions