EU CSRD and European Sustainability Reporting Standards: Compliance Roadmap After the 2026 Omnibus
Definition: The EU Corporate Sustainability Reporting Directive (CSRD) mandates large EU companies and EU-listed SMEs to disclose detailed sustainability information aligned with European Sustainability Reporting Standards (ESRS). The January 2026 Omnibus Directive narrowed CSRD scope from initial projections, affecting approximately 85-90% of companies subject to original estimates. The ESRS framework covers environmental, social, and governance (ESG) topics with double materiality assessment at its foundation.
Introduction: EU Regulatory Momentum and the 2026 Omnibus Update
The EU’s Corporate Sustainability Reporting Directive (CSRD), adopted in November 2022, represents the most comprehensive mandatory sustainability reporting framework globally. In January 2026, the EU adopted the Omnibus Directive, which narrowed the scope of CSRD applicability while maintaining core disclosure requirements. This guide addresses the updated regulatory landscape, implementation requirements, and compliance roadmap for affected organizations.
As of March 2026, the reporting timeline is:
- 2024-2025: Large listed companies (initially 500+ employees) begin first CSRD disclosures (reporting 2024 data)
- 2025-2026: Mid-cap listed companies (250+ employees) begin disclosures
- 2026-2027: SMEs and non-EU companies with significant EU operations transition to CSRD
EU CSRD Overview: Scope and Timeline After Omnibus Amendment
Original CSRD Scope (Pre-Omnibus)
The original CSRD directive proposed coverage of:
- All large companies (>250 employees or €50M revenue/€25M assets)
- All EU-listed companies (with limited exceptions)
- Non-EU companies with significant EU revenue (>€150M EU-generated revenue)
2026 Omnibus Amendment: Narrowed Scope
The January 2026 Omnibus Directive reduced applicability through several mechanisms:
| Company Category | Original CSRD | Post-Omnibus |
|---|---|---|
| Large Listed Companies | All (€250M+ revenue OR 500+ employees) | €750M+ revenue OR 500+ employees AND 2 of 3 criteria |
| Mid-Cap Listed | 250+ employees OR €50M+ revenue | Opt-out provision; delayed timeline |
| Small Listed Companies | Covered; proposed exemption | Exemption confirmed (phase-in timeline) |
| Private Companies | Large private companies covered | Narrowed thresholds; phase-in |
| Non-EU Companies | €150M+ EU revenue threshold | Clarified nexus; practical application |
Estimated Scope After Omnibus
The Omnibus amendments reduce CSRD applicability to approximately 85-90% of original estimates, affecting roughly 15,000-17,000 entities globally (down from ~20,000+ originally projected). Key impacts:
- Many mid-cap listed companies now have opt-out options or delayed timelines
- Large private companies face narrowed thresholds; phase-in timeline extends to 2030
- SME disclosure requirements (if covered) further delayed to 2030
- Non-EU companies with EU operations face clearer but more stringent nexus tests
European Sustainability Reporting Standards (ESRS) Framework
ESRS Structure: Topical Standards
The European Sustainability Reporting Standards consist of 10 topical standards covering environmental, social, and governance topics:
Environmental Standards
- ESRS E1 (Climate Change): Governance, strategy, risk management, metrics for GHG emissions (Scope 1, 2, 3), climate targets, capex alignment
- ESRS E2 (Pollution): Air, water, soil pollution; hazardous substances management; remediation efforts
- ESRS E3 (Water and Marine Resources): Water consumption, stress assessment, quality, biodiversity impacts; marine ecosystem protection
- ESRS E4 (Biodiversity and Ecosystems): Land use, biodiversity assessments, species protection, ecosystem services, restoration efforts
- ESRS E5 (Resource Use and Circular Economy): Material inputs, waste management, circular business models, product lifecycle
Social Standards
- ESRS S1 (Own Workforce): Employment practices, diversity/inclusion, compensation, health/safety, labor rights, training, work-life balance
- ESRS S2 (Value Chain Workers): Supply chain labor standards, forced labor, child labor, freedom of association, wages, grievance mechanisms
- ESRS S3 (Affected Communities): Community relationships, human rights due diligence, land rights, indigenous peoples, stakeholder engagement
- ESRS S4 (Consumers and End-Users): Product/service health/safety, data privacy, responsible marketing, access and affordability
Governance Standard
- ESRS G1 (Business Conduct): Board diversity, executive compensation linkage to ESG, anti-corruption programs, tax governance, whistleblower protection, business ethics
ESRS Implementation Approach: Sustainability Matters
ESRS uses “Sustainability Matters” as the organizing principle—combining three complementary approaches:
Double Materiality Assessment
- Financial Materiality: ESG factors that impact corporate financial performance and investor decision-making
- Impact Materiality: Company’s actual or potential impacts on environment and society
- Integration: Two-dimensional materiality matrix to identify disclosure priorities
Disclosure Requirements Structure
For each material ESRS topic, organizations disclose:
- Governance: Board/management oversight; strategy integration
- Strategy: Business model impacts; risks and opportunities; capital allocation alignment
- Risk Management: Identification, assessment, mitigation, and monitoring processes
- Metrics and Targets: Key performance metrics; progress toward targets; comparative benchmarks
Key ESRS Environmental Topics
Climate Change (ESRS E1): Expanded Requirements
ESRS E1 builds on TCFD recommendations with enhanced requirements:
- Governance: Board climate competency; committee oversight; climate expertise assessment
- Strategy: Climate targets aligned with science-based methodologies (SBTi); scenario analysis (1.5°C, 2°C, 4°C+ pathways)
- Capex Alignment: Investment plans aligned with climate strategy; renewable energy transition commitment
- Scope 3 Disclosure: Upstream and downstream emissions; value chain engagement
- Just Transition: Employee and community impacts of climate transition; workforce reskilling plans
Pollution (ESRS E2): Air, Water, Soil
- Air emissions (not covered by EU ETS) monitoring and reduction targets
- Hazardous substance management; REACH compliance disclosures
- Water discharge quality; environmental incident disclosures
- Soil and land remediation efforts; liability disclosures
Water and Marine Resources (ESRS E3)
- Water consumption and stress assessment (by geography)
- Water efficiency targets and progress
- Marine ecosystem impacts; ocean plastic prevention
- Interdependencies with supply chain water use
Circular Economy and Resource Use (ESRS E5)
Post-January 2026 EU Taxonomy update (effective January 2026), organizations should disclose:
- Alignment with EU Taxonomy technical screening criteria (updated January 2026)
- Circular business model maturity; product take-back programs
- Material sourcing; recycled content percentages
- Waste reduction targets; landfill diversion rates
Key ESRS Social Topics
Own Workforce (ESRS S1)
- Diversity: Board and management diversity by gender, age, professional background; targets and progress
- Pay Equity: Gender pay gap; ethnicity pay gap (where applicable); remediation plans
- Health & Safety: TRIR, LTIFR rates; high-risk location monitoring; incident investigation effectiveness
- Training & Development: Investment in workforce development; skills transition planning
- Engagement & Retention: Employee engagement scores; turnover rates; eNPS
Value Chain Workers (ESRS S2)
- Labor Standards Audits: % of supply chain audited; audit coverage by geography and risk level
- Wages and Working Hours: Living wage assessment; excessive hours monitoring
- Forced Labor Prevention: Modern slavery assessments; remediation; grievance mechanisms
- Child Labor Prevention: Risk assessment; monitoring; community engagement
Affected Communities (ESRS S3)
- Community engagement; grievance mechanisms effectiveness
- Human rights due diligence; risk assessments
- Indigenous peoples and land rights; consultation processes
- Community investment; local employment
ESRS Implementation Roadmap: 2026-2028 Timeline
Applicability Timeline (Post-Omnibus)
| Phase | Applicable Companies | First Reporting Year | Publication Year |
|---|---|---|---|
| Phase 1 (Large Listed) | €750M+ revenue + 2 of 3 criteria; 500+ employees | 2024 | 2025 (initial disclosures) |
| Phase 2 (Mid-Cap Listed) | €250M+ revenue/€50M net income OR 500+ employees | 2025 | 2026 |
| Phase 3 (SME Listed) | Opt-in initially; mandatory delayed | 2028 | 2029 |
| Phase 4 (Large Private/Non-EU) | Large private companies; non-EU with EU operations | 2025-2026 | 2026-2027 |
CSRD Implementation Phases (Detailed)
Phase 1: Assessment and Governance (Now – Q2 2026)
- Assess CSRD applicability based on updated Omnibus criteria
- Conduct double materiality assessment (financial + impact)
- Establish cross-functional CSRD implementation team
- Designate governance owner; board-level awareness training
- Begin data mapping for required metrics
Phase 2: Framework and Process Development (Q2 – Q3 2026)
- Document materiality assessment methodology and results
- Identify material ESRS topics and disclosure requirements
- Develop sustainability data governance framework
- Implement systems for metric collection and validation
- Engage with auditors/assurance providers on EDD requirements
Phase 3: Data Collection and Analysis (Q3 – Q4 2026)
- Collect GHG emissions data (Scope 1, 2, 3 where material)
- Gather employee diversity, safety, pay equity metrics
- Supply chain labor standards audit compilation
- Assessment of governance structure and business ethics program
- Quality assurance and data validation processes
Phase 4: Disclosure and Assurance (Q4 2026 – Q1 2027)
- Draft CSRD-aligned sustainability statement (integrated with annual report)
- Double assurance: integrated assurance provider review
- EU Taxonomy assessment (if applicable) and disclosure
- Board-level approval and sign-off on disclosures
- Publication of annual report with integrated ESRS disclosures
CSRD Disclosure Integration with Financial Reporting
Non-Financial Reporting Directive (NFRD) Transition
CSRD replaces the NFRD (Directive 2014/95/EU). Key transition aspects:
- CSRD is significantly more prescriptive and detailed than NFRD
- Double materiality requirement is new; impacts topic coverage
- ESRS provide specific metrics and KPIs (unlike flexible NFRD guidance)
- Assurance requirements strengthened; “Limited Assurance” minimum, escalating to “Reasonable” by 2028-2030
Integrated Reporting: Connecting Sustainability to Financial Statements
CSRD requires sustainability statement integrated with annual report. Key linkages:
- Environmental Liabilities: Ecological remediation costs; environmental provisions linked to balance sheet
- Climate Scenario Impacts: Potential financial impacts quantified; asset impairment testing
- Supply Chain Risk: Contingent liabilities; impairment risks linked to supply chain disruption
- Human Capital: Personnel costs; pension obligations; workforce value creation
Assurance Requirements Under CSRD
Assurance Timeline
CSRD assurance requirements phase in over time:
- 2025 (Large Listed – 2024 data): Limited assurance by statutory auditor OR independent assurance provider
- 2026 onwards: Assurance providers must be independent (not primary financial auditor)
- 2028 onwards: Transition to “Reasonable Assurance” for specified disclosure areas
Assurance Scope
Assurance should cover:
- Completeness of material ESRS topic disclosures
- Accuracy and reliability of reported metrics and KPIs
- Consistency with underlying governance and processes
- Alignment with CSRD and ESRS requirements
- EU Taxonomy alignment disclosure (if applicable)
Frequently Asked Questions
How did the January 2026 Omnibus amendment affect CSRD scope?
The Omnibus amendment narrowed CSRD applicability by raising size thresholds (€750M+ revenue), offering opt-out options for some mid-cap listed companies, and delaying SME requirements to 2030. The scope was reduced from ~20,000+ entities to approximately 15,000-17,000 entities (85-90% of original estimates).
Are non-EU companies subject to CSRD?
Non-EU companies are subject to CSRD if they have a significant EU nexus. Applicability is determined by EU revenue threshold (post-Omnibus clarification) or listing on EU exchanges. Non-EU companies should assess their specific situation based on updated guidance from their relevant competent authority.
What is double materiality and why is it important?
Double materiality assesses both financial materiality (how ESG factors impact company) and impact materiality (how company impacts environment/society). This comprehensive approach ensures disclosures address both investor needs and broader stakeholder interests, supporting sustainable business practices.
Is Scope 3 emissions disclosure required under ESRS E1?
ESRS E1 requires Scope 1 and 2 emissions universally. Scope 3 is required if material based on double materiality assessment. For many organizations, Scope 3 is material and required. Measurement should follow GHG Protocol methodology.
How does CSRD align with ISSB standards?
CSRD and ESRS are complementary to ISSB standards. Both use double materiality and investor-centric frameworks. ESRS provides more granular requirements on specific topics (e.g., pollution, supply chain labor) not covered in ISSB. Organizations can achieve both ISSB and CSRD compliance with aligned disclosure strategies.
What happens to companies that miss CSRD deadlines?
Non-compliance with CSRD triggers regulatory enforcement actions, including fines and potential disclosure suspension. The CSRD is enforced by national competent authorities (financial regulators) with power to impose penalties. Early compliance is advisable to avoid enforcement actions and maintain investor confidence.
Conclusion
The EU CSRD and ESRS framework, refined by the January 2026 Omnibus amendment, represents the most comprehensive mandatory sustainability reporting regime globally. While the Omnibus narrowed scope to approximately 85-90% of original estimates, affected organizations face stringent disclosure requirements grounded in double materiality and integrated with financial reporting. Organizations subject to CSRD should prioritize materiality assessment, establish robust data governance, and plan for phased implementation aligned with applicable timelines. Early action strengthens governance maturity, supports data quality, and demonstrates leadership to investors and stakeholders.
EU CSRD After the Omnibus: Who Must Report and When (2026 Status)
Yes, the EU Corporate Sustainability Reporting Directive (CSRD) is still in force, but the Omnibus I “simplification” package adopted on 24 February 2026 dramatically narrowed it: mandatory reporting now applies only to companies with more than 1,000 employees and over EUR 450 million in net turnover, cutting the number of in-scope companies by roughly 80-90% (from about 50,000 to around 5,000). Most remaining large companies (Wave 2/3) now file their first report in 2028 for financial year 2027.
| Item | Before the Omnibus | After the Omnibus (2026 status) |
|---|---|---|
| In-scope threshold | EU companies meeting 2 of 3 criteria: 250+ employees, EUR 40M+ balance sheet, or EUR 50M+ net turnover (plus listed SMEs) | More than 1,000 employees and more than EUR 450M net turnover; listed-SME mandate removed |
| Companies in scope | ~50,000 companies | ~5,000 companies (roughly 80-90% reduction) |
| First reporting year by wave | Wave 1: FY2024 (report 2025); Wave 2: FY2025 (report 2026); Wave 3 / listed SMEs: FY2026 (report 2027) | Wave 1: continues for FY2024-2026; Wave 2 & 3: first report in 2028 for FY2027; non-EU groups: 2029 for FY2028 |
| ESRS data points | ~1,000+ data points, including voluntary disclosures and planned mandatory sector-specific standards | Mandatory data points cut ~60-61%; all voluntary data points removed; mandatory sector-specific standards scrapped |
| Assurance | Limited assurance, with a legal mandate to move toward reasonable assurance later | Limited assurance only; the path to mandatory reasonable assurance is removed |
What changed in the 2025 Omnibus
The European Commission published its Omnibus I proposal on 26 February 2025, and the Council formally signed off the final directive on 24 February 2026 (published in the Official Journal on 26 February 2026, in force 18 March 2026). The package made four major changes:
- Stop-the-clock: A separate “stop-the-clock” directive (EU 2025/794, published 16 April 2025) postponed reporting by two years for companies not yet reporting (Waves 2 and 3), moving their first reports from 2026/2027 to 2028.
- Raised thresholds: Mandatory reporting now applies only to companies with more than 1,000 employees and more than EUR 450 million in net annual turnover, replacing the old “2 of 3” test that started at 250 employees.
- Scope cut: The higher thresholds remove roughly 80-90% of previously in-scope companies, dropping the population from about 50,000 to around 5,000. Listed SMEs are no longer mandated, and the non-EU (third-country) parent threshold rose to EUR 450 million of EU turnover.
- ESRS revision: EFRAG’s simplified standards (draft delegated act published by the Commission in May 2026) cut mandatory data points by about 60-61%, removed all voluntary data points, and eliminated the obligation to develop mandatory sector-specific standards. The revised ESRS apply from FY2027, with optional early application from FY2026.
What is still required
CSRD was simplified, not repealed. Companies that remain in scope still face substantive obligations:
- Double materiality: The core principle stays. Companies must still report on how sustainability issues affect the business and how the business affects people and the environment.
- ESRS-based disclosures: In-scope companies report against the (slimmed-down) European Sustainability Reporting Standards, including climate, governance, and material ESG topics.
- Limited assurance: Sustainability reports must still be checked under a limited-assurance standard from the first year of application.
- Digital tagging: Disclosures must still be machine-readable (digitally tagged) and published in the management report.
- Wave 1 continuity: Original Wave 1 companies that already started reporting generally continue for FY2024-2026, though member states may exempt those that fall below the new thresholds.
Frequently Asked Questions
Is CSRD still happening?
Yes. CSRD remains EU law and was not repealed. The 2026 Omnibus I package simplified and narrowed it, raising the size thresholds, delaying reporting deadlines, and cutting the number of required data points, but the directive, its double-materiality requirement, and ESRS-based reporting all remain in force for the largest companies.
Who is exempt after the Omnibus?
Companies with 1,000 or fewer employees, or with EUR 450 million or less in net turnover, fall outside mandatory CSRD scope. Listed small and medium-sized enterprises are no longer required to report, and many mid-sized companies that were originally captured (those above the old 250-employee line) are now exempt. Roughly 80-90% of previously in-scope companies are removed.
When is the first CSRD report due?
It depends on the wave. Wave 1 companies (already reporting under the old NFRD) published their first reports in 2025 for financial year 2024 and continue through FY2026. Waves 2 and 3 now file their first CSRD report in 2028, covering financial year 2027. Non-EU parent groups report from 2029 for FY2028.
Does CSRD apply to US companies?
It can. A non-EU company (including a US parent) is caught if its group generates more than EUR 450 million in net turnover in the EU and it has an EU subsidiary or branch above the relevant size threshold (a branch with more than EUR 50 million turnover, or a subsidiary that is itself a large EU company). These third-country groups report from 2029 for financial year 2028. The Omnibus raised the EU-turnover trigger from EUR 150 million to EUR 450 million, so fewer US companies are now in scope.
How many companies are still in scope of CSRD?
Approximately 5,000 companies, down from an estimated 50,000 under the original directive. The higher thresholds (1,000+ employees and EUR 450M+ turnover) account for the roughly 80-90% reduction in the in-scope population.
What level of assurance does CSRD require now?
Limited assurance, the same standard required since the directive took effect. The Omnibus removed the previous legal requirement for the Commission to escalate to reasonable assurance later, so reasonable assurance is no longer on the mandatory roadmap. The deadline for the Commission to adopt limited-assurance standards was pushed to July 2027.