Directive (EU) 2026/470, adopted on 24 February 2026 and published on 26 February 2026, represents a substantive recalibration of the EU sustainability framework, amending both the Corporate Sustainability Reporting Directive (CSRD) and the Corporate Sustainability Due Diligence Directive (CS3D). The Directive entered into force on 18 March 2026 and reflects a clear policy shift towards simplification, proportionality, and competitiveness.
While the policy direction of sustainability governance remains intact, the Omnibus reforms significantly narrow the scope of application. For CSRD, the revised thresholds now apply only to companies exceeding 1,000 employees and EUR 450 million turnover, effectively removing a substantial majority of previously in-scope entities.
More critically from a compliance perspective, the revised CS3D introduces a highly targeted, risk-based due diligence regime aligned with international standards such as the UN Guiding Principles and OECD Guidelines. Unlike fragmented national or sectoral regimes, CS3D establishes a harmonised EU-wide obligation requiring companies to identify, prioritise, prevent, mitigate, and remediate adverse human rights and environmental impacts across their operations and value chains.
A key refinement lies in the operationalization of risk assessment. Companies are expected to undertake a structured scoping exercise based on “reasonably available information,” focusing on areas of highest severity and likelihood of impact. Notably, this limits excessive information requests to business partners and introduces a more proportionate approach to supply chain due diligence.
The Directive also recalibrates enforcement and liability exposure. Civil liability has been narrowed and increasingly deferred to national legal frameworks, while penalties are capped, reducing legal uncertainty for multinational enterprises. In parallel, certain obligations such as mandatory climate transition plans have been removed, signaling a shift from prescriptive requirements to risk-based governance.
Importantly, implementation timelines have been extended. Member States are required to transpose CSRD amendments by March 2027 and CS3D by July 2028, with substantive due diligence obligations applying from July 2029.
Implications for compliance professionals: The Omnibus Directive does not dilute regulatory expectations but rather redefines how compliance is operationalized. The emphasis is now on targeted, risk-based due diligence integrated into enterprise risk management, rather than broad, process-heavy reporting. Multinationals should reassess scope, refine risk prioritization methodologies, and align internal controls with evolving EU expectations on supply chain governance and accountability.
Official source – Directive (EU) 2026/470: