Key Timelines For EU CSDDD

Navigating the Corporate Sustainability Due Diligence Directive (CSDDD) has been a moving target for corporate legal and supply chain teams. Following intense political negotiations to boost EU competitiveness and reduce administrative strain, the European Union finalized its legislative overhaul via the Omnibus I simplification package (Directive (EU) 2026/470).  

This "stop-the-clock" initiative didn't just alter the scope thresholds—it fundamentally redrew the regulatory calendar. The original phased implementation schedule has been eliminated. Instead, the EU has established a single, unified application date for all in-scope companies, granting businesses a brief operational runway to transition from passive paper trails to proof of provenance.  

Here are the critical timeline milestones your organization must note to remain border-ready.

1. The Legislative Landscape (2026)

The foundational mechanics of the CSDDD are locked in.

• March 18, 2026: The Omnibus I Directive officially entered into force across the EU, codifying higher scoping thresholds.  

• Who is currently in scope? The rules now apply strictly to EU companies with more than 1,000 employees and over €450 million in net worldwide turnover. Non-EU parent companies are triggered if their EU subsidiaries or branches exceed €200 million in revenue, provided the global group generates over €450 million within the EU block.  

  
  

2. The Framework & Guidance Wave (2027–2028)

Before full enforcement begins, the European Commission is legally required to provide the technical blueprints companies need to build compliant systems.

• July 26, 2027 – The Primary Guidelines: The Commission will adopt the first set of general due diligence guidelines. These will outline expectations for risk identification, prioritization, digital technologies, and responsible supplier disengagement.  

• July 26, 2027 – Model Clauses: The EU will publish standard contractual clauses that companies can incorporate into supplier contracts to assist with cascading data obligations seamlessly.  

• July 26, 2028 – Data Sharing & Retaliation Protections: A second wave of guidance will land, detailing trade-secret protections for resource sharing and mechanisms to protect supply chain whistleblowers.  

  
  

3. The National Law Transposition (July 26, 2028)

Under the revised timeline, EU Member States have until July 26, 2028, to transpose the amended CSDDD provisions into their respective national legislation. This is the date when local regulatory bodies and enforcement agencies will officially establish their localized oversight frameworks.  

4. The "Go-Live" Compliance Deadline (July 26, 2029)

This is the definitive milestone for corporate operations. On July 26, 2029, the unified application of the CSDDD begins. Every in-scope organization—whether based in the EU or operating as a third-country parent enterprise—must have its core due diligence systems fully operational.  

By this date, your "root-to-route" scoping exercises must be complete, and your mechanisms for identifying deep-tier vulnerabilities must be actively running.  

5. Public Disclosure & Public Reporting (January 1, 2030)

While operational compliance starts in mid-2029, the formal mandate for public disclosure follows shortly after.  

• Financial Years Starting On or After January 1, 2030: Companies must begin compiling and publishing their annual website statements detailing their sustainability due diligence efforts. This aligns the transparency mandate directly with corporate fiscal reporting cycles.  

  
  

The CSDDD Compliance Timeline at a Glance

Milestone	Target Date	Impact on Your Strategy
Omnibus Entry into Force	March 18, 2026	Scope thresholds finalized at >1,000 employees / €450M turnover.
First EU Commission Guidelines	July 26, 2027	Official blueprints for risk-prioritization and digital tool selection drop.
Member State Transposition	July 26, 2028	National laws take effect, establishing local penalties and enforcement frameworks.
Unified Operational Application	July 26, 2029	Due diligence architecture must be fully operational; end of the runway.
Annual Website Reporting	FY starting Jan 1, 2030	Public, audit-ready statements on deep-tier supply chain tracing must go live.