ESG · Sustainability Reporting

CSRD & Sustainability Reporting ✦ Free Overview

The Corporate Sustainability Reporting Directive is the most significant expansion of corporate disclosure obligations in European history. Understand what it requires, who is in scope, and what you need to do.

Regulation (EU) 2022/2464
In force since January 2023
Replaces NFRD
Assess your CSRD compliance Take the free CSRD Readiness Assessment, 5 minutes, AI-generated report by email.
Start free assessment →

The Corporate Sustainability Reporting Directive

The Corporate Sustainability Reporting Directive (CSRD), adopted as Directive 2022/2464/EU, is the EU's framework for mandatory environmental, social and governance (ESG) reporting. It entered into force in January 2023 and will apply to companies in phased waves between 2025 and 2029. At full rollout, CSRD is expected to cover approximately 50,000 companies operating in the EU, compared to roughly 11,000 under the previous Non-Financial Reporting Directive (NFRD) it replaces.

CSRD dramatically raises the bar for sustainability disclosure in two ways: scope and depth. In terms of scope, it extends mandatory reporting to all large companies and listed SMEs, not just large public-interest entities. In terms of depth, it requires reporting according to the detailed European Sustainability Reporting Standards (ESRS), developed by EFRAG, which specify precise data points, methodologies, and disclosure formats, rather than leaving companies to choose their own frameworks.

At the heart of CSRD is the concept of double materiality: companies must assess and report on both how sustainability issues affect the company (financial materiality), and how the company affects people and the environment (impact materiality). This dual perspective distinguishes CSRD from most existing voluntary frameworks, which focus primarily on investor-relevant financial risks.

Reports prepared under CSRD must be included in the company's annual management report, published in machine-readable format (iXBRL) under the European Single Electronic Format (ESEF), and subjected to limited third-party assurance, with the requirement likely to escalate to reasonable assurance in future years.

Scope & thresholds

From financial years starting 1 January 2027, CSRD mandatory scope, as amended by Directive (EU) 2026/470 (Omnibus I, in force 18 March 2026), requires EU undertakings to meet both of the following cumulative criteria:

Criterion Threshold Notes
Employees More than 1,000 (annual average) Full-time equivalent across all subsidiaries
Net turnover More than €450 million Consolidated at group level
Test logic BOTH must be met Post-Omnibus I the pre-2026 "2 of 3" NFRD-style test (250 employees / €50M / €25M) no longer applies; Wave 1 PIEs >500 employees already reporting on FY2024 continue where they still meet the new threshold

In addition, CSRD applies to:

  • Large EU-listed companies that also meet the post-Omnibus I cumulative threshold (more than 1,000 employees and more than €450M net turnover). Listed SMEs have been removed from mandatory scope, voluntary reporting under the VSME standard only.
  • Non-EU parent companies with net turnover exceeding €150 million in the EU for two consecutive years, if they have an EU subsidiary or branch meeting certain thresholds (from 2028)
  • Value chain entities, even companies below the thresholds may face data requests from in-scope customers and suppliers reporting under CSRD

Six terms you need to know

Double Materiality

The requirement to assess both how ESG issues affect your company (financial materiality) and how your company's activities affect people and the planet (impact materiality). Both perspectives must be assessed and documented.

ESRS

European Sustainability Reporting Standards, the technical standards developed by EFRAG that specify exactly what must be disclosed under CSRD. There are 12 universal standards and forthcoming sector-specific standards.

Value Chain

CSRD requires companies to report on sustainability impacts, risks, and opportunities across their entire value chain, including upstream suppliers and downstream customers, not just their own direct operations.

DNSH Principle

Do No Significant Harm, a cross-cutting principle requiring that activities classified as sustainable must not significantly harm any of the EU Taxonomy's six environmental objectives.

Limited Assurance

CSRD requires sustainability information to be independently verified to a "limited assurance" standard initially, with plans to move to "reasonable assurance" in coming years as the market matures.

iXBRL / ESEF

Reports must be tagged in Inline XBRL (iXBRL) format under the European Single Electronic Format standard, making sustainability data machine-readable and comparable across companies and jurisdictions.

Phased implementation

FY2024
Report 2025

Phase 1: Large PIEs already subject to NFRD

Large public-interest entities (PIEs) already subject to the NFRD, typically listed companies, banks, and insurers with 500+ employees, must report on FY2024 data in their 2025 annual reports. This group numbers approximately 11,000 companies.

FY2027
Report 2028

Phase 2: Other large companies

Large EU undertakings meeting both post-Omnibus I thresholds (more than 1,000 employees AND more than €450M net turnover) must report on FY2027 data. The original Wave 2 "2-of-3" scope (250 employees / €50M / €25M) has been removed by Directive (EU) 2026/470, dramatically narrowing the population versus the pre-Omnibus design.

FY2028
Report 2029

Phase 3: Listed SMEs (REMOVED by Omnibus I)

The original Phase 3 obligation on EU-listed SMEs has been removed by Directive (EU) 2026/470 (in force 18 March 2026). Listed SMEs are no longer in mandatory CSRD scope. They may report voluntarily using the Voluntary SME (VSME) standard developed by EFRAG.

FY2028
Report 2029

Phase 4: Non-EU parent companies

Third-country (non-EU) companies with significant EU revenues (€150M+ net turnover in the EU for two consecutive years) must report at the consolidated group level, if they have qualifying EU subsidiaries or branches.

What CSRD requires you to do

  • Conduct a double materiality assessment (DMA), systematically identify and assess all material sustainability impacts, risks, and opportunities across your business and value chain, considering both impact and financial perspectives.
  • Report against applicable ESRS data points, prepare disclosures for each ESRS topic identified as material in your DMA, using the specific data points, metrics, and narrative disclosures prescribed by EFRAG.
  • Obtain third-party assurance, engage an accredited assurance provider to verify your sustainability disclosures to at least limited assurance standard before publication.
  • Include disclosures in the annual management report, CSRD sustainability information must be published as part of, not alongside, the annual management report, in a dedicated section.
  • Tag data in iXBRL format, all CSRD disclosures must be digitally tagged using the ESRS taxonomy published by EFRAG, enabling machine-readable access under the ESEF reporting format.
◈ Premium Deep-Dive

Article-by-article requirements, sector implications & full compliance checklist

Everything you need to move from understanding to implementation.

ESRS Standards Breakdown

CSRD reports must be prepared in accordance with the European Sustainability Reporting Standards. The first set of ESRS consists of two cross-cutting standards and ten topical standards:

ESRS 1: General Requirements

Sets out the overarching architecture: concepts, principles, and how to apply the materiality assessment. Not a disclosure standard itself but the rule book for all others.

ESRS 2: General Disclosures

Mandatory for all in-scope companies regardless of materiality results. Covers governance, strategy, materiality assessment process, and metrics & targets.

ESRS E1: Climate Change

Covers Scope 1, 2, and 3 GHG emissions, transition plans, climate scenario analysis, and physical climate risk. One of the most demanding standards in practice.

ESRS E2–E5: Environment

E2: Pollution. E3: Water and marine resources. E4: Biodiversity and ecosystems. E5: Resource use and circular economy. Each requires specific metrics and narrative disclosures.

ESRS S1–S4: Social

S1: Own workforce. S2: Workers in the value chain. S3: Affected communities. S4: Consumers and end-users. Broad social reporting covering pay, conditions, rights, and community impact.

ESRS G1: Governance

Business conduct standards including anti-corruption, anti-bribery, corporate culture, political engagement, supplier relationships, and payment practices.

Sector-Specific Implications

Food & Beverage

Companies in food and beverage typically face high materiality across ESRS E3 (water usage in production), E4 (biodiversity impacts from agriculture), S2 (value chain labour conditions in farming and processing), and E1 (Scope 3 emissions from agriculture). Packaging falls under E5. Expect value chain data collection to be the primary implementation challenge.

Technology & Software

Tech companies generally face high materiality on S1 (own workforce, pay equity, working conditions, development), G1 (responsible business conduct, supplier due diligence), and E1 (Scope 3 from data centre energy use). Physical climate risk tends to be low, but transition risk from energy regulation is growing.

Manufacturing

Manufacturers typically face the broadest ESRS coverage: E1 (direct emissions), E2 (industrial pollution), E3 (process water), E5 (raw material use, waste), S2 (supply chain labour), and G1 (procurement practices). Scope 3 Category 1 (purchased goods) is often the largest emissions source.

Financial Services

Banks and asset managers must grapple with the intersection of CSRD and SFDR/EU Taxonomy requirements. Facilitated emissions (Scope 3 Category 15), the GHG footprint of the lending and investment portfolio, represent the most material and complex reporting challenge.

Penalty Structure

CSRD penalties are enforced at member state level, the Directive requires states to implement "effective, proportionate and dissuasive" sanctions but does not prescribe specific amounts. In practice, penalties vary significantly by jurisdiction. Several member states have indicated penalties modelled on the NFRD regime, with potential for director-level liability. Companies face risks including: administrative fines, publication orders, temporary prohibition of commercial activities, and reputational damage from public enforcement.

Companies operating in multiple member states must track the local transposition of CSRD in each jurisdiction where they have reporting entities.

Full Compliance Checklist

1
Map all legal entities in your group against the post-Omnibus I CSRD thresholds (more than 1,000 employees AND more than €450M net turnover, cumulative) to identify mandatory-scope entities; flag any Wave 1 PIEs already reporting on FY2024 that may now fall out of scope
2
Confirm your first reporting year and corresponding first publication deadline (annual management report publication date)
3
Conduct a double materiality assessment (DMA), impact materiality and financial materiality, for all ESRS topics, documented and ready for assurance
4
Identify mandatory disclosures (ESRS 2 data points) and material topical standard data points based on DMA results
5
Conduct a gap analysis: for each required data point, assess current data availability and quality against ESRS requirements
6
Build a data collection programme: assign data owners per ESRS topic, define collection methodology, establish data quality controls
7
Develop a Scope 1, 2, and 3 GHG inventory if ESRS E1 is material, Scope 3 requires engaging with your value chain
8
Prepare your sustainability report section in the annual management report format (not a separate PDF)
9
Tag all CSRD disclosures in iXBRL format using the ESRS XBRL taxonomy developed by EFRAG
10
Appoint an assurance provider and begin pre-assurance engagement 6–9 months before your report publication date
11
Train your board and senior management on CSRD scope, their reporting responsibilities under ESRS 2 (governance disclosures), and oversight obligations
12
Set up a value chain data request process for Scope 3 categories and social topics (S2) requiring supplier and contractor information

How to Use the CSRD Assessment Tool

The Verdaio CSRD Readiness Assessment benchmarks your current ESG practices across the five core CSRD reporting areas: climate & environment, social & workforce, governance, strategy, and disclosure readiness. The 6-step questionnaire takes approximately 5 minutes and delivers an AI-generated score with personalised priorities to your inbox, no signup required for the free assessment. For a full ESRS gap analysis identifying specific missing data points and a phased compliance roadmap, use the premium ESRS Gap Analysis tool.

Start free CSRD Assessment →  |  Full ESRS Gap Analysis →

Unlock the full CSRD guide

Get the complete article-by-article breakdown, sector-specific implications, full penalty structure, and a 12-point compliance checklist, plus access to all Verdaio premium tools.

Unlock full guide, €1,490/year

Full access to all 6 learning guides + all premium tools

Sources & primary legislation

CSRD, Directive (EU) 2022/2464 ↗Corporate Sustainability Reporting Directive
Omnibus I, Directive (EU) 2026/470 ↗Latest change · in force 18 March 2026