EU sustainability compliance deadlines: what is already in force and what is coming

This article is for informational purposes only and does not constitute legal advice. Consult a qualified legal professional for advice specific to your situation.

Why the timeline matters

EU sustainability regulation does not arrive as a single event. It arrives as a sequence of application dates, transposition deadlines, phase-in windows, and delegated act publications spread across several years and several distinct frameworks. A business that tracks only the headline regulation without tracking the milestone structure underneath it will frequently find itself either over-preparing for obligations that do not yet apply or under-preparing for ones that already do.

This article maps every significant deadline across the five frameworks with the widest impact on non-EU businesses: EUDR, CSRD, CSDDD, CBAM, and EU Taxonomy. It is structured as a reference document. If you need the substantive explanation of what each regulation requires, the linked explainers cover that in detail.

What is already in force

EUDR: obligations apply from 30 December 2025 for large operators and traders

The EU Deforestation Regulation (Regulation (EU) 2023/1115) originally had an application date of December 2024. Following a one-year delay, the revised timeline is:

• 30 December 2025: Obligations apply to large operators and large traders. From this date, covered commodities and derived products cannot legally be placed on the EU market or exported from it without a completed due diligence process and a submitted due diligence statement in TRACES NT.
• 30 June 2026: Obligations extend to SME operators and SME traders. The same substantive requirements apply; SME traders benefit from a lighter verification regime in which they may rely on the operator’s due diligence statement rather than conducting their own full assessment.

For the full explanation of what due diligence requires, which commodities are in scope, and what non-EU suppliers are expected to provide, see EUDR explained: what the EU Deforestation Regulation requires and who it affects.

The benchmarking system classifying countries by deforestation risk is expected to be operational before these application dates. Classifications determine what level of due diligence is required and whether simplified procedures apply.

CSRD: the first wave of reporting is already underway

The Corporate Sustainability Reporting Directive (Directive (EU) 2022/2464) follows a phased rollout by company category:

• Financial year 2024, reporting in 2025: Large public-interest entities already subject to the Non-Financial Reporting Directive (more than 500 employees). First CSRD-compliant sustainability reports are being published now. This wave is unaffected by Omnibus I.
• Financial year 2027, reporting in 2028: Other large EU companies meeting revised Omnibus I thresholds: more than 1,000 employees AND net turnover above €450 million. Companies that were previously in scope under the original lower thresholds (250 employees, €40 million turnover) but fall below the revised thresholds are no longer subject to mandatory CSRD. Listed SMEs were removed from mandatory scope entirely by Omnibus I (Directive (EU) 2026/470, in force March 2026).
• Financial year 2028, reporting in 2029: Non-EU companies with net turnover above €150 million in the EU and at least one EU subsidiary or branch meeting defined thresholds.

The non-EU parent company obligation in 2028 is the direct CSRD exposure for large multinationals with EU operations. But the more immediate pressure on non-EU suppliers comes from the supply chain disclosure requirements built into the European Sustainability Reporting Standards: EU companies reporting under CSRD must disclose material impacts, risks, and opportunities across their value chains, which creates a demand for information from suppliers who are not themselves in scope.

For the full explanation of CSRD scope, the ESRS disclosure topics, and how obligations flow to non-EU suppliers, see CSRD and ESRS explained: what the corporate sustainability reporting directive requires.

CBAM: the definitive phase begins in 2026

The Carbon Border Adjustment Mechanism (Regulation (EU) 2023/956) follows a two-phase structure:

• October 2023 to December 2025: Transitional period. EU importers of covered goods were required to report embedded emissions quarterly but were not yet required to purchase CBAM certificates. The transitional period was a data collection and system-building exercise for both importers and the Commission.
• 1 January 2026: The definitive phase begins. From this date, EU importers must purchase and surrender CBAM certificates corresponding to the embedded carbon price of their imports, with a credit for carbon prices already paid in the country of production. The sectors in scope for the definitive phase are cement, iron and steel, aluminium, fertilisers, electricity, and hydrogen.

For non-EU manufacturers in these sectors, the definitive phase means that the carbon content of their production process now has a direct effect on the cost competitiveness of their products in the EU market. Exporters who have already established monitoring and reporting processes for embedded emissions during the transitional period are in a significantly better position than those who have not.

For the full explanation of how CBAM works, which products are covered, and what exporters need to prepare, see CBAM explained: what the carbon border adjustment mechanism means for exporters.

What is coming

CSDDD: member state transposition by July 2028, application from 26 July 2029

The Corporate Sustainability Due Diligence Directive (Directive (EU) 2024/1760, as amended by Omnibus I — Directive (EU) 2026/470, in force March 2026) follows a different legislative structure from the regulations above: as a directive rather than a regulation, it requires transposition into the national law of each member state before it applies.

• July 2028: Member states must transpose the directive into national law. The core obligations are set at EU level and cannot be diluted, but implementation details may vary across jurisdictions.
• 26 July 2029: Application begins for all directly regulated companies: EU companies with more than 5,000 employees and worldwide net turnover above €1.5 billion, and non-EU companies with net turnover above €1.5 billion generated in the EU. The original two-phase rollout to smaller companies was removed by Omnibus I.

The distinction between when the directive applies and when its effects are felt in supply chains matters. Companies subject from 2029 are building their due diligence systems now, in 2026 and 2027. Their supply chain mapping exercises, supplier assessment programmes, and contractual frameworks are being developed before the regulatory deadline arrives. Non-EU suppliers who are not engaged with this process before 2029 risk finding themselves deprioritised or excluded from supplier lists before the regulation formally applies to their buyers.

For the full explanation of what CSDDD due diligence requires, how it differs from CSRD, and what the enforcement provisions mean, see CSDDD explained: what the corporate sustainability due diligence directive means for supply chains.

EU Taxonomy: ongoing expansion of the technical screening criteria

The EU Taxonomy Regulation (Regulation (EU) 2020/852) is not a single set of rules with a single application date. It is a classification framework whose coverage expands as technical screening criteria are adopted for additional economic activities and additional environmental objectives.

• In force: Taxonomy alignment disclosure requirements already apply to large companies subject to the Non-Financial Reporting Directive (now being transitioned to CSRD). These companies must report what proportion of their revenue, capital expenditure, and operating expenditure is Taxonomy-aligned.
• Expanding: The Commission continues to publish delegated acts adding technical screening criteria for additional sectors and activities. Companies with activities in sectors not yet covered by finalised criteria cannot yet make Taxonomy alignment claims for those activities.
• CSRD integration: As CSRD-obligated companies expand to include more large EU companies from financial year 2027 onwards, the population required to make Taxonomy disclosures expands with them.

For non-EU businesses, Taxonomy exposure typically arrives indirectly: through EU investors asking about the Taxonomy alignment of investee companies, through EU buyers asking suppliers about the sustainability characteristics of their products and processes, and through the disclosure obligations of EU companies that hold supply chain relationships with non-EU producers.

For the full explanation of how the Taxonomy works and why it affects non-financial businesses, see The EU Taxonomy explained: what it is and why it affects more than just financial firms.

Delegated acts, technical standards, and implementation guidance

The headline deadlines above are the most visible part of the timeline. Beneath them, each framework generates a secondary layer of implementing rules that define how the headline obligations must be met in practice.

For CSRD, the European Sustainability Reporting Standards (ESRS) were adopted in 2023 and provide the detailed disclosure requirements. Sector-specific standards were anticipated in subsequent years. The Commission has also published guidance on materiality assessment and other implementation questions.

For EUDR, the benchmarking system for country risk classifications is a significant downstream publication. Operators cannot fully calibrate their due diligence processes until they know which countries will be classified as low, standard, or high risk, and the classification can change over time.

For CBAM, the Commission continues to publish implementing regulations and guidance on the calculation of embedded emissions and the procedures for certificate purchase and surrender.

For CSDDD, the Commission is expected to publish guidelines on due diligence for specific sectors and on the due diligence requirements for SMEs in the supply chains of in-scope companies. These will define the substantive standard that due diligence processes must meet.

Tracking these secondary publications requires a different approach from tracking headline application dates. A business that knows the application date of CSDDD but does not know when the Commission’s sector-specific guidelines will be published does not know when it will have the information it needs to build its due diligence system. Monitoring for delegated acts and implementing regulations is as important as monitoring for the primary legislation.

For a guide to how the EU regulatory publication process works and how to monitor it efficiently, see how EU financial regulation works: the legislative and implementation process.

Interaction between frameworks

The five frameworks above do not operate independently. For businesses affected by more than one of them, the timelines interact in ways that create planning dependencies.

A large EU retailer that sources palm oil from Indonesia faces EUDR obligations from December 2025, CSRD reporting obligations from financial year 2024 (as a wave 1 entity, assuming it meets that threshold), and CSDDD due diligence obligations from 2029. The data it needs to collect from its Indonesian suppliers for EUDR compliance, specifically geolocation data, deforestation evidence, and legal compliance declarations, overlaps significantly with the supply chain information it will need for CSRD value chain disclosures and CSDDD due diligence assessments.

A non-EU manufacturer of steel components exporting to EU buyers faces CBAM certificate costs in the definitive phase from 2026 and is likely to begin receiving CSDDD-related supplier questionnaires from its EU buyers from 2025 or 2026, ahead of the regulation’s formal application.

The practical implication is that data collection processes developed for one framework should be designed with the requirements of related frameworks in mind. A supplier that builds its EUDR documentation process in isolation from its CSRD and CSDDD data obligations will have to rebuild significant parts of that process when the later obligations arrive.

An overview of how the EU sustainability regulation frameworks relate to each other and where they overlap is available here: EU sustainability regulation in 2026: an overview of what is now in force.

Summary timeline

This table reflects the legislative position as of publication. Application dates are subject to change through amendment or delegated acts. Always verify against the current published text of each regulation.

This article is part of the Verdandi EU sustainability regulation series. Verdandi is Citium’s EU sustainability compliance tracker, currently in development. If you want to be kept informed ahead of launch, get in touch.