LkSG: German Supply Chain Due Diligence Act

Q: 1. Scope and Thresholds: Who is Covered?

The scope of the LkSG remains firmly established: - It applies to any company headquartered in Germany, or foreign corporations with a major operational branch in Germany, that employs at least 1,000 people domestically. - While smaller sub-tier suppliers (SMEs) are not directly regulated by the government, they face massive indirect pressure. In-scope corporations are legally mandated to pass compliance obligations down through their supplier codes of conduct, making LkSG adherence a de facto requirement for doing business with German buyers.

Traceability

Jun 13

3 min read

Germany's Supply Chain Due Diligence Act (Lieferkettensorgfaltspflichtengesetz, or LkSG) marked a historic turning point in international trade by legally holding large corporations accountable for social and environmental conditions within their networks.

Sedex

However, following a major legislative overhaul designed to reduce administrative red tape and align with the European Union's Omnibus I simplification package, the LkSG has undergone significant changes. For global brands and their upstream suppliers, understanding what has been eliminated, and what strictly remains, is essential to maintaining an operational advantage.

1. Scope and Thresholds: Who is Covered?

The scope of the LkSG remains firmly established:

It applies to any company headquartered in Germany, or foreign corporations with a major operational branch in Germany, that employs at least 1,000 people domestically.
While smaller sub-tier suppliers (SMEs) are not directly regulated by the government, they face massive indirect pressure. In-scope corporations are legally mandated to pass compliance obligations down through their supplier codes of conduct, making LkSG adherence a de facto requirement for doing business with German buyers.

2. The Radical Bureaucracy Cut: No More Annual Public Reports

To eliminate administrative gridlock, the German government retroactively abolished the annual reporting obligation.

In-scope companies are no longer required to draft, publish, or submit exhaustive, multi-page annual compliance reports to the federal enforcement agency (BAFA).
The digital submission portals have been officially deactivated, and BAFA has ceased reviewing routine compliance documentation.

3. A Restructured Penalty Framework

The enforcement strategy has shifted from administrative box-ticking to targeting high-level negligence. The original structure, which threatened fines of up to 2% of global revenue, has been narrowed. Financial penalties are now strictly reserved for intentional or negligent omissions that result in severe, direct human rights violations.

4. What Remains Fully Enforced: The Core Due Diligence Mandates

While the paperwork has been cut, the legal obligation to execute real-world due diligence remains completely intact. Companies must continue to document their compliance internally and maintain those records for a minimum of seven years, ready for unannounced regulatory audits.

The core mechanical requirements include:

Continuous Risk Analyses: Businesses must maintain a structured risk management system to actively identify human rights risks (such as child labor, forced labor, and unsafe working conditions) and specific environmental violations within their own operations and their direct (Tier 1) suppliers.
Deep-Tier Escalation: If a company gains "substantiated knowledge" of a severe violation happening further up the supply chain—at a Tier 3 or Tier 4 indirect supplier—they are legally required to immediately launch a risk analysis and implement formal mitigation measures.
Functioning Complaints Procedures: Organizations must maintain a secure, accessible grievance mechanism allowing internal workers and external supply chain personnel to report violations anonymously without fear of retaliation.

Our Perspective: Preparing for the 2029 CSDDD Transition

The simplification of the LkSG is a short-term runway. Germany is modifying these rules to pave a seamless transition toward the EU's Corporate Sustainability Due Diligence Directive (CSDDD), which will completely absorb and replace the LkSG via national law by the late 2020s.

While the LkSG primarily focuses its baseline tracking on direct Tier 1 partners, the upcoming CSDDD rules will mandate a comprehensive, risk-based approach across a company's entire upstream chain of activities.

Relying on passive questionnaires or emailed supplier declarations is an operational risk. A software dashboard or a compliance spreadsheet is only as honest as the data entered on the shop floor. Achieving true, border-ready resilience requires a robust digital-physical validation layer. By pairing automated traceability platforms with unannounced ground-truth verification, we ensure that your digital records perfectly match real-world operating conditions, protecting your brand from severe structural liabilities.