CSRD and CSDDD Link
CSRD and CSDDD are the two pillars of the EU's corporate sustainability framework — designed to complement each other. CSRD creates transparency about sustainability practices; CSDDD creates legal obligations to act. Understanding how the two interact prevents duplication and maximises compliance efficiency.
CSRD and CSDDD are the two pillars of the EU's corporate sustainability framework — designed to complement each other. The most efficient approach to CSRD and CSDDD compliance is to treat them as a single integrated programme — not two parallel workstreams.
Where CSRD and CSDDD reinforce each other
The most efficient approach to CSRD and CSDDD compliance is to treat them as a single integrated programme — not two parallel workstreams.
Value chain mapping: CSDDD requires mapping the value chain to identify adverse impacts. CSRD ESRS S2 requires disclosure of how you identify material impacts on value chain workers. The same mapping exercise satisfies both — conduct it once, use it for both.
Due diligence policy: CSDDD Article 5 requires a board-approved due diligence policy. CSRD ESRS S2-1 requires disclosure of policies related to value chain workers. One policy document satisfies both regulatory requirements.
Grievance mechanisms: CSDDD Article 14 requires an external complaints procedure accessible to affected persons. CSRD ESRS S2-2 and S2-3 require disclosure of grievance channels and remediation processes. Build one mechanism, disclose it under ESRS, and it satisfies CSDDD.
Transition plan: CSDDD Article 22 requires adoption and implementation of a climate transition plan. CSRD ESRS E1-1 requires disclosure of a climate transition plan. One plan, two regulatory purposes — the ESRS E1-1 format and content requirements are well-defined and directly satisfy CSDDD Article 22.
Director pay: CSDDD Article 22(4) requires linking director variable pay to transition plan delivery. CSRD ESRS 2 GOV-3 requires disclosure of sustainability-linked executive incentives. Designing the incentive structure once satisfies both — the GOV-3 disclosure evidences CSDDD Article 22(4) compliance.
Where CSDDD goes beyond CSRD
Several CSDDD obligations have no direct CSRD equivalent — these represent the incremental compliance effort beyond CSRD.
Active prevention obligation: CSDDD requires taking preventive measures — supplier contractual commitments, capacity building, and in last resort termination. CSRD requires disclosure of actions taken — but not that those actions meet a minimum effectiveness standard. A company that discloses an inadequate supply chain programme is CSRD-compliant but CSDDD non-compliant.
Remediation obligation: CSDDD requires companies to bring actual adverse impacts to an end and provide remedy to victims. CSRD discloses how impacts are managed — not that impacts are actually remedied. The remediation obligation is unique to CSDDD.
Civil liability: CSDDD Article 29 creates civil liability for due diligence failures — affected persons can sue in EU courts. CSRD has no civil liability provision. CSRD non-disclosure results in regulatory fines; CSDDD due diligence failures can result in both fines and private litigation.
For integrated planning: use CSRD ESRS disclosures as the primary evidence base for CSDDD due diligence documentation. Your ESRS S2 report is not just a disclosure — it is the record of your CSDDD due diligence programme. Build the programme to be genuinely effective (CSDDD standard) and disclose it accurately (CSRD standard).
Timeline coordination — managing dual 2027 obligations
For Wave 1 CSDDD companies (5,000+ employees, €1.5B+ turnover), CSDDD obligations begin July 2027 — the same year Wave 2 CSRD companies begin their first reporting period.
For large companies meeting both thresholds: you are simultaneously a Wave 1 CSDDD company (programme operational July 2027) and likely already a Wave 1 CSRD company (already reporting for FY2024). Your CSRD sustainability report for FY2026 (published 2027) should already reflect your CSDDD-compliant due diligence programme.
The 2027 milestone: By July 2027, your CSDDD programme must be operational — value chain mapped, due diligence policy adopted, preventive measures implemented for high-priority risks, complaints procedure established. Your FY2027 CSRD report (published 2028) will be the first full-year disclosure of your operational CSDDD programme — a significant accountability moment.
Programme integration calendar: 2026 Q1–Q2: Conduct integrated CSDDD/CSRD gap analysis. Identify where existing CSRD programmes satisfy CSDDD requirements and where gaps exist. 2026 Q3–Q4: Implement CSDDD-specific requirements not satisfied by CSRD — active prevention measures, external complaints procedure, civil liability insurance review. 2027 Q1–Q2: Test CSDDD programme effectiveness. Process first complaints procedure submissions. Verify supplier contractual commitments are in place. 2027 Q3: CSDDD Wave 1 application date — programme fully operational. 2028 Q1–Q2: Prepare FY2027 CSRD report reflecting first year of operational CSDDD programme.
Frequently asked questions
If our CSRD S2 disclosure is compliant, does that mean we satisfy CSDDD?
Mostly but not fully. CSRD S2 compliance requires accurate disclosure of your due diligence programme. CSDDD compliance requires that programme to be genuinely effective at preventing and remediating adverse impacts. A well-documented but ineffective programme is CSRD-compliant but CSDDD non-compliant. The key test: does your due diligence programme actually prevent and remedy adverse impacts, not just describe them?
Do smaller companies in CSRD scope but not CSDDD scope need to worry about CSDDD?
Indirectly — their large CSRD-reporting customers are subject to CSDDD and will impose due diligence requirements through supply chain contracts. Additionally, CSDDD Wave 3 (2029) applies to companies with 1,000+ employees and €450M+ turnover — which is the same threshold as CSRD Wave 2. Most CSRD Wave 2 companies are also CSDDD Wave 3 companies.
Does CSDDD create any new data collection requirements beyond CSRD?
Limited new data collection — most CSDDD documentation requirements are met by CSRD data collection. The incremental CSDDD data need is primarily operational records — supplier audit findings, complaints procedure case logs, corrective action plan status, and remediation outcomes. These are process records rather than quantitative ESG data.