CCC-INS-032CSDDD · CSRD · Regulatory

CSDDD vs CSRD: What Factories Need to Know After Omnibus I

CSRD tells large companies to report on sustainability. CSDDD tells them to act on adverse impacts across their chains of activities. After Omnibus I, both cover only the largest companies, on different timelines, and the old civil liability and transition plan points no longer work as this article first described them.

By Hufsa 8 October 2026 9 min read

CSRD (Corporate Sustainability Reporting Directive, Directive (EU) 2022/2464) requires large companies to disclose sustainability information in a standard format. CSDDD (Corporate Sustainability Due Diligence Directive, Directive (EU) 2024/1760) requires large companies to identify and address adverse human rights and environmental impacts across their chains of activities. One is a reporting obligation. The other is a due diligence obligation. Both were amended by Directive (EU) 2026/470, known as Omnibus I, and several points commonly repeated about them are now out of date. Complying with CSRD does not mean complying with CSDDD.

What Each Directive Requires

CSRDCSDDD
Legal citationDirective (EU) 2022/2464, amended by Directive (EU) 2026/470Directive (EU) 2024/1760, amended by Directive (EU) 2026/470
Core obligationDisclose sustainability information (ESRS)Conduct risk-based due diligence: identify, prevent, mitigate and remedy adverse impacts
OutputAnnual sustainability report, assuredOngoing due diligence process, with monitoring and complaints handling
Who is in scope (EU companies)More than 1,000 employees and more than EUR 450 million net turnoverMore than 5,000 employees and more than EUR 1.5 billion net turnover
ApplicationNew scope applies from financial years starting on or after 1 January 2027Companies must comply from 26 July 2029
Member state transposition deadline19 March 202726 July 2028
Supply chain scopeValue chain: upstream and downstream, including product end-of-lifeChain of activities: upstream and limited downstream, not end-of-life
Civil liabilityNo civil liability regime in the DirectiveThe EU-wide civil liability regime was removed; member states decide whether non-compliance creates civil liability

Who Is in Scope, and When Do Obligations Start?

CSDDD vs CSRD: What Factories Need to Know After Omnibus I — infographic
Illustrative summary

After Omnibus I, CSRD applies to EU companies with more than 1,000 employees and more than EUR 450 million in net turnover, at individual or consolidated level. Non-EU groups are in scope if they generate more than EUR 450 million in net turnover in the EU in each of the last two consecutive financial years and have an EU subsidiary or branch with more than EUR 200 million in net turnover. Listed small and medium-sized companies were removed from scope. The new scope applies from financial years starting on or after 1 January 2027. Member states must transpose the changes by 19 March 2027.

Omnibus I also changed CSDDD. It now covers EU companies with more than 5,000 employees and more than EUR 1.5 billion in net worldwide turnover, and non-EU companies with more than EUR 1.5 billion in net turnover in the EU. Companies must comply from 26 July 2029, and the transposition deadline moved to 26 July 2028. The earlier thresholds of 1,000 employees and EUR 450 million, and the earlier phased start dates, no longer describe current law. If you read a source that quotes them, it predates Omnibus I.

What Changed: Civil Liability and Transition Plans

Two points widely quoted about CSDDD no longer hold. First, the EU-wide civil liability regime was removed. Member states now decide whether failing to meet the due diligence duty creates civil liability under national law, so exposure depends on the country where a claim is brought. Second, the obligation to adopt and put into effect a climate transition plan was removed. Companies that fall under CSRD and have a transition plan must still report on it, but that is a CSRD disclosure, not a CSDDD duty.

Where the Two Directives Still Meet

The real overlap is practical. A large customer may need supplier information for CSRD reporting and for CSDDD due diligence, and the same questionnaire often serves both purposes. The two directives use different concepts of scope. CSRD's value chain covers all operations upstream and downstream, including product end-of-life. CSDDD's chain of activities covers upstream suppliers and limited downstream activities such as distribution, and does not include end-of-life. A company mapping its value chain for ESRS S2 (workers in the value chain) covers more than CSDDD due diligence requires.

The CSDDD and CSRD in Numbers

CSRD scope after Omnibus I: more than 1,000 employees and more than EUR 450 million net turnover; applies from financial years starting on or after 1 January 2027; transposition 19 March 2027. CSDDD scope after Omnibus I: more than 5,000 employees and more than EUR 1.5 billion net turnover; compliance from 26 July 2029; transposition 26 July 2028. EU-wide civil liability and the climate transition plan duty were removed from CSDDD. Figures checked 8 October 2026 against law firm summaries of Directive (EU) 2026/470; confirm against the Official Journal text before relying on them.

What CSDDD Means for Manufacturers Not Directly in Scope

Almost no factory supplying EU brands meets the CSDDD thresholds. But a customer that is in scope must carry out due diligence across its chain of activities, which includes its suppliers. Expect questions about your impacts, your controls and your corrective actions. These requests can start before 2029 as customers build their processes. That timing is editorial judgment, not a legal date.

Omnibus I also introduced a value chain cap for CSRD reporting. In-scope companies generally cannot ask undertakings with an average of no more than 1,000 employees for more than the voluntary sustainability reporting standard for SMEs (VSME), and they can generally rely on those suppliers' self-declarations. Contract terms that undermine the cap are not binding. Whether the same cap limits CSDDD due diligence requests is not covered here, so check it before declining a CSDDD questionnaire.

The ISO 14001 framework helps with either type of request. CSDDD calls for risk-based prioritisation of adverse impacts, which resembles the significant aspects method in ISO 14001. A factory with a working environmental management system already holds the data customers ask for: an aspects register, compliance evaluation records and operational controls. A factory without one will have to build that evidence under customer pressure.

Three Things to Do Before 2029

  • List which of your EU customers are likely in scope: more than 1,000 employees and EUR 450 million turnover for CSRD, and more than 5,000 employees and EUR 1.5 billion for CSDDD. Ask them how they plan to collect supplier data.
  • Map your adverse environmental and human rights risks, using your ISO 14001 aspects register as a starting point if you have one.
  • When a due diligence questionnaire arrives, check its legal basis and your headcount before answering. Respond with documented evidence rather than general statements, and keep a record of what you sent.

Common Misconceptions to Avoid

  • Quoting CSDDD thresholds of 1,000 employees and EUR 450 million. After Omnibus I the thresholds are more than 5,000 employees and EUR 1.5 billion.
  • Assuming CSDDD creates an EU-wide civil liability regime. That regime was removed, and liability is now a matter for national law.
  • Treating a CSRD transition plan as a CSDDD requirement. The CSDDD duty to adopt a climate transition plan was removed.
  • Assuming CSRD's value chain and CSDDD's chain of activities are the same. They are legally distinct and cover different scope.
  • Assuming only Tier 1 suppliers are affected. A customer's due diligence covers its chain of activities, so sub-Tier 1 facilities can be asked for information.

References

Directive (EU) 2022/2464 (CSRD). Directive (EU) 2024/1760 (CSDDD). Directive (EU) 2026/470 (Omnibus I), which amends both. Summaries consulted on 8 October 2026: Clifford Chance, Omnibus I: The European Union concludes CSDDD and CSRD reforms (February 2026), and PLMJ, CSRD and CS3D reviewed. Always confirm figures and dates in the Official Journal text.

Frequently Asked Questions

Does my factory need to comply with CSDDD directly?

Almost certainly not. After Omnibus I, CSDDD covers EU companies with more than 5,000 employees and more than EUR 1.5 billion net turnover, and non-EU companies with more than EUR 1.5 billion net turnover in the EU. Your in-scope customers will still carry out due diligence across their chain of activities, which includes your facility, so you may receive requests for information and corrective action.

Does CSDDD create civil liability?

Not under an EU-wide regime. Omnibus I removed the EU-wide civil liability provision. Member states decide whether failure to meet the due diligence duty creates civil liability, so the position depends on national law once CSDDD is transposed.

When do CSDDD obligations start?

Companies must comply from 26 July 2029. Member states must transpose the Directive by 26 July 2028. These dates come from Omnibus I and replace the earlier phased dates.

Does the value chain cap protect me from CSDDD questionnaires?

The cap is written for CSRD reporting: in-scope companies generally cannot ask undertakings with an average of no more than 1,000 employees for more than the VSME standard. Whether it limits CSDDD due diligence requests is not settled in this article, so check the rules that apply and the purpose of each request before declining.

CSDDD vs CSRD: What Factories Need to Know After Omnibus I — diagram

Free tool · Sustainability Frisk

Not sure if CSRD applies to your business?

Use the free CSRD Applicability Checker — answer 5 questions and get a clear in/out result.

Need a CSRD gap analysis or hands-on implementation? Sustainability Frisk can help. www.sustainability-frisk.com

Related guides

Related insights

CSRD After Omnibus I: Who Is Still in Scope
CSRD · Regulatory

CSRD After Omnibus I: Who Is Still in Scope

Omnibus I removed most companies from the CSRD, but it did not stop supplier data requests. Here is who still reports, what the value chain cap protects, and what a factory should prepare.