The real cost of EU sustainability non-compliance: fines, lost contracts, and supply chain exclusion

This article is for informational purposes only and does not constitute legal advice. Consult a qualified legal professional for advice specific to your situation.

Two kinds of cost

Non-compliance with EU sustainability regulation carries two distinct categories of cost. The first is regulatory: fines, penalties, and enforcement actions imposed by EU authorities and member state regulators. The second is commercial: lost contracts, supply chain exclusion, and reduced access to EU market buyers. For most non-EU businesses, the commercial cost arrives first and is harder to recover from.

Understanding both requires understanding how each regulation creates consequences, and for whom.

Regulatory penalties: who pays and how much

EUDR: up to 4% of EU annual turnover

The EU Deforestation Regulation (Regulation (EU) 2023/1115) places formal obligations on EU operators and traders who place in-scope commodities and products on the EU market. The penalties for non-compliance are imposed on those EU entities, not on the non-EU exporters or producers supplying them. But the consequences for non-EU suppliers are direct, because a non-compliant EU importer cannot legally continue buying from a supplier whose product fails the due diligence requirements.

The penalties available to member state competent authorities under EUDR are deliberately punitive. Article 25 of the regulation requires member states to ensure their penalty regimes include:

Fines proportionate to the environmental damage caused and the value of the commodities or products involved. The regulation specifies a maximum fine of at least 4% of the EU operator’s total annual turnover in the EU in the financial year preceding the infringement decision. For a large EU food group with several hundred million euros in EU turnover, this is a substantial exposure.

Confiscation of the commodities or products concerned and any revenues derived from them. An EU importer who has placed non-compliant palm oil on the market can have both the oil and the proceeds of its sale confiscated.

Temporary exclusion from public procurement contracts and from access to public funding.

Temporary prohibition from placing or making available the relevant commodities on the EU market.

Member states may impose higher penalties than the minimum required by the regulation. The enforcement intensity will vary across member states, but the legal framework for significant financial penalties is established.

For non-EU exporters, the relevant implication is not that they will be fined directly. It is that their EU customers face these exposures and will manage their supply chain accordingly. An EU importer facing 4% of EU turnover in fines and potential product confiscation has a very strong incentive to source only from suppliers who can provide complete and verifiable EUDR documentation. Suppliers who cannot provide that documentation are not just inconvenient. They are a liability.

CSDDD: up to 3% of worldwide net turnover

The Corporate Sustainability Due Diligence Directive (Directive (EU) 2024/1760, as amended by Omnibus I) requires member states to designate supervisory authorities with investigative and enforcement powers. The penalties the regulation requires must be effective, proportionate, and dissuasive.

Article 27 of the directive specifies that penalties must include fines of up to 3% of the company’s net worldwide turnover. For a large EU company with global operations, this is a materially different scale of penalty from a domestic fine. A company with €10 billion in worldwide net turnover faces a maximum fine of €300 million under the CSDDD enforcement framework.

The 3% maximum applies to the EU company directly in scope, not to its suppliers. But the mechanism by which CSDDD creates costs for non-EU suppliers is the same as under EUDR: the EU company’s legal exposure creates a strong commercial incentive to manage its supply chain in ways that reduce that exposure, which means imposing requirements on suppliers and managing them out of the chain if they cannot meet those requirements.

CSDDD also provides for civil liability at member state level. While Omnibus I removed the EU-wide harmonised civil liability framework that appeared in earlier versions of the directive, member states with existing civil liability frameworks may still permit affected parties to bring claims against companies that failed to conduct adequate due diligence. The litigation risk for poorly documented due diligence programmes is real, particularly in member states with active civil society organisations and established legal aid structures.

CSRD: administrative sanctions and reputational consequences

CSRD (Directive (EU) 2022/2464) requires member states to establish penalties for non-compliance with the reporting obligation. The specific penalty levels are set at member state level rather than harmonised across the EU, but they must be effective, proportionate, and dissuasive.

The more significant consequences of CSRD non-compliance for large EU companies are not purely financial. A company that files a sustainability report with material gaps or inaccuracies faces scrutiny from its limited assurance auditor, which can result in qualified opinions that are visible to investors, lenders, and customers. As sustainable finance regulation tightens and as institutional investors apply ESG criteria more systematically to their holdings, a qualified sustainability audit opinion carries direct financial consequences in the form of increased cost of capital and reduced access to ESG-labelled investment.

For non-EU suppliers, the CSRD consequences operate through the same commercial channel as the other regulations: a buyer whose sustainability report is scrutinised will in turn scrutinise the supply chain data it relies on.

The commercial cost: what actually happens to suppliers

For most non-EU businesses, the regulatory penalties described above are one step removed. The more immediate reality is commercial. What actually happens to a supplier that cannot respond adequately to EU sustainability requirements?

Stage one: preferred supplier status

The first consequence is quiet. A supplier that cannot respond to sustainability questionnaires, that consistently provides incomplete data, or that fails social or environmental audits does not typically lose contracts immediately. Instead, it loses preferred supplier status in ways that are not always communicated directly.

Procurement teams managing large supplier networks score and tier their suppliers. Sustainability performance is increasingly part of that scoring. A supplier that scores poorly on sustainability criteria may still receive orders but is progressively deprioritised for new product development, volume growth, and contract renewals. The commercial relationship continues on its existing terms while the EU buyer gradually diversifies away.

This is the hardest cost to quantify and the easiest to miss until it has already happened. A supplier whose EU customer accounts for 30% of its revenue and who has been quietly deprioritised over two years may not realise the extent of the problem until a contract renewal is not offered.

Stage two: new business exclusion

Many large EU brands and retailers have updated their new supplier qualification processes to include sustainability screening. A supplier applying to begin a new supply relationship with a major EU buyer that is subject to CSRD and CSDDD may be required to complete a sustainability pre-qualification questionnaire, hold a current social compliance audit from an approved audit body, demonstrate that it tracks and can report basic environmental metrics, and sign a supplier code of conduct that includes sustainability data sharing obligations.

A supplier that cannot meet these pre-qualification requirements is excluded from new business before the commercial conversation has begun. This is a direct market access cost, and it compounds over time as the number of EU buyers applying these criteria grows.

Stage three: active exclusion from existing supply chains

The most significant commercial consequence is active exclusion from an existing supply relationship. This occurs when a supplier fails a due diligence assessment in a way that creates direct compliance risk for its EU customer.

Under CSDDD, an EU company that identifies an actual adverse impact in its supply chain and cannot remediate it through improvement plans or corrective measures is required to suspend or terminate the relationship as a last resort. This is not a discretionary commercial decision. It is a regulatory obligation. A supplier whose practices cannot be brought into compliance within the agreed timeframe faces relationship termination as a legal consequence of its customer’s due diligence process.

Under EUDR, the mechanism is more immediate. An EU importer who cannot obtain the documentation required to place an in-scope commodity on the EU market cannot legally continue that trade. A palm oil exporter who cannot provide plot-level geolocation data, or a timber exporter who cannot document deforestation-free status, is not creating a bureaucratic inconvenience for their EU customer. They are making it legally impossible for that customer to buy from them. The customer’s response is to find a different supplier who can provide the documentation.

The financial value of a lost EU supply relationship depends entirely on the business. For a commodity exporter for whom EU buyers represent the premium market, or for a manufacturer whose EU customer accounts for a significant share of production volume, the loss of that relationship is not a compliance cost. It is a business continuity risk.

Stage four: reputational and financing consequences

For larger non-EU businesses (regional manufacturers, listed exporters, businesses that access international capital markets) there is a fourth cost dimension that is becoming increasingly relevant.

International investors and lenders are applying ESG criteria to their investment and lending decisions. A business that is excluded from EU supply chains because of sustainability compliance failures, or that faces disclosed adverse impacts in a major EU customer’s CSDDD report, faces scrutiny from its own investors and lenders that can affect its cost of capital.

This is more relevant for publicly listed companies or businesses accessing international capital markets than for privately held manufacturers, but it is a real and growing dimension of the cost of non-compliance for businesses in those categories.

The asymmetry of early action

The costs of non-compliance are real. The costs of early action are also real: building sustainability data systems, completing social compliance audits, tracking environmental metrics, and engaging with supplier questionnaires all take time and money that could be spent on other things.

The asymmetry that makes early action rational is that the cost of building compliance infrastructure is largely fixed and largely one-time, while the cost of non-compliance is cumulative and accelerating.

A manufacturer who invests in tracking its workforce data, utility consumption, and health and safety performance this year has that data available for every questionnaire it receives for the rest of its commercial life. The marginal cost of responding to the fifth CSRD questionnaire is close to zero once the data systems are in place. The cost of responding to the first questionnaire, from a standing start, is significant. And the cost of not being able to respond to any questionnaire is the commercial cost described above.

The regulatory calendar also creates urgency. Large EU buyers have been filing CSRD reports since 2025. Their supply chain data requests are already arriving. EUDR application dates for large operators have passed. CSDDD applies from 2029 but the supply chain mapping and supplier assessment work that precedes it is happening now. The businesses that are best positioned are not those who responded to the first questionnaire fastest. They are those who built the underlying data infrastructure before the first questionnaire arrived.

What this means in practice

For non-EU businesses supplying EU markets, the practical implication of this analysis is that sustainability compliance is not a regulatory question about whether EU law applies to you. It is a commercial question about whether you will continue to have access to EU buyers as compliance requirements become a condition of market access.

The regulatory penalties under EUDR and CSDDD are real, substantial, and borne primarily by EU entities. The commercial consequences of being a supplier that cannot meet those entities’ compliance needs are borne by the supplier.

For an overview of what EU sustainability regulations specifically require and when, see EU sustainability regulation in 2026: an overview of what is now in force.

For a detailed guide to how compliance obligations flow from EU buyers to non-EU suppliers through contractual mechanisms, see How EU sustainability legislation flows down from buyer to supplier.

Verdandi monitors EUDR, CSDDD, CSRD, and CBAM continuously so non-EU businesses supplying EU markets are working from current penalty frameworks and enforcement developments as member state implementation progresses. Start for free.