Corporate Sustainability Reporting Directive
CSRD expands mandatory sustainability reporting to large companies and listed SMEs. Companies must report according to European Sustainability Reporting Standards (ESRS) covering environment, social, and governance matters.
What does CSRD require and when does it apply?
CSRD applies to Large Companies (250+ employees or €40M+ revenue) and Listed SMEs organisations across all EU member states. The key deadline is Phased: large companies from FY2024; listed SMEs from FY2026. Non-compliance carries a maximum penalty of Per member state (audit-based enforcement). Core obligations include report against esrs environmental standards and disclose social and workforce data.
- Report against ESRS environmental standards
- Disclose social and workforce data
- Report governance and anti-corruption
- Obtain third-party assurance on reports
- Report on value chain impacts (phased)
| Deadline | Phased: large companies from FY2024; listed SMEs from FY2026 |
| Max fine | Per member state (audit-based enforcement) |
| Primary sectors | Large Companies (250+ employees or €40M+ revenue), Listed SMEs, Financial Services |
CSRD: Per member state (audit-based enforcement) max fine
CSRD applies to Large Companies (250+ employees or €40M+ revenue) and Listed SMEs organisations in all EU member states. Key deadline: Phased: large companies from FY2024; listed SMEs from FY2026.
Source: Official Journal of the European Union — Corporate Sustainability Reporting Directive
Phased: large companies from FY2024; listed SMEs from FY2026
Per member state (audit-based enforcement)
Large Companies (250+ employees or €40M+ revenue), Listed SMEs, Financial Services
The highest penalty for non-compliance with CSRD in the EU.
EU Official Journal
How do I comply with CSRD?
- Report against ESRS environmental standards
- Disclose social and workforce data
- Report governance and anti-corruption
- Obtain third-party assurance on reports
- Report on value chain impacts (phased)
Does CSRD apply to your business?
Find out in 2 minutes with our free regulation checker.
Check now — freeCSRD by Country
Related Regulations
AI Act
The EU AI Act classifies AI systems by risk level and imposes obligations on providers and deployers. High-risk systems face mandatory conformity assessments, documentation, and human oversight requirements.
GDPR
GDPR governs the processing of personal data of EU residents. It requires lawful basis for processing, data subject rights, breach notification, and accountability measures.
NIS2
NIS2 expands cybersecurity obligations to essential and important entities across critical sectors. It mandates risk management, incident reporting, and supply chain security.
Next step — classify
Classify your AI systems
Use the free regulation checker to find out exactly which CSRD obligations apply to your business in 2 minutes.
For informational purposes only. This is not legal advice — consult qualified legal counsel.
Last updated: · Editorial policy