Clear, authoritative answers to the most common questions about the Corporate Sustainability Reporting Directive and ESRS standards.
Certigence automates double materiality assessment, data collection, and ESRS-aligned reporting — so your team can focus on strategy, not spreadsheets.
The Corporate Sustainability Reporting Directive (CSRD) is an EU law that requires companies above certain size thresholds to publish detailed sustainability disclosures as part of their annual management report. Its scope was substantially narrowed by the Omnibus I Directive (EU) 2026/470, in force since 18 March 2026: a company is now in scope only if it exceeds both 1,000 employees and €450m net turnover, replacing the original, much lower 'two of three' test (250+ employees, €50m+ net turnover, or €25m+ balance sheet total). Large public-interest entities that have reported since FY2024 (500+ employees) stay in scope only if they also exceed the new thresholds: those that do not fall outside scope from FY2027, and Member States may exempt them for FY2025 and FY2026; other large companies and non-EU parent companies follow the revised, later phase-in — see our CSRD reporting timeline FAQ for the current wave structure.
ESRS stands for European Sustainability Reporting Standards. They are the technical reporting standards that underpin CSRD — analogous to IFRS accounting standards but for sustainability. Developed by EFRAG (European Financial Reporting Advisory Group) and adopted by the European Commission, the ESRS comprise two cross-cutting standards (ESRS 1 and ESRS 2) and twelve topical standards covering environmental topics (E1–E5), social topics (S1–S4), and governance (G1). Companies must report on all ESRS topics assessed as material under their double materiality assessment.
Double materiality is the foundational concept behind CSRD reporting. It requires companies to assess sustainability topics from two directions simultaneously: (1) Impact materiality — how does the company's activity impact people and the environment? and (2) Financial materiality — how do sustainability risks and opportunities affect the company's financial performance and position? A topic is material if it meets either criterion. This is broader than the single-lens financial materiality concept used in traditional financial accounting, which is why it is called 'double' materiality. The outcome of the double materiality assessment determines which ESRS standards a company must report against.
CSRD's rollout was significantly narrowed by the Omnibus I Directive (EU) 2026/470, published in the Official Journal on 26 February 2026 and in force since 18 March 2026. Wave 1 — large public-interest entities already subject to the former NFRD with 500+ employees, around 11,700 organisations — has already published FY2024 reports; from FY2027 these companies stay in scope only if they exceed the new thresholds, and Member States may exempt those that do not for FY2025 and FY2026. All other companies now only fall into scope if they exceed both 1,000 employees and €450m net turnover; this narrower group begins reporting on FY2027 data, published from 2028. Listed SMEs, originally due to join under 'Wave 3', have been removed from mandatory CSRD scope and may report voluntarily under the simplified VSME standard instead. Non-EU parent companies remain covered from FY2028 (published 2029) if they generate more than €450m in EU net turnover and have a qualifying EU subsidiary or branch with turnover above €200m. Altogether, the Omnibus changes are estimated to remove roughly 80% of previously in-scope companies from mandatory CSRD reporting — always confirm current thresholds against the latest EFRAG and European Commission guidance, as implementation details continue to evolve.
The Non-Financial Reporting Directive (NFRD) required only ~11,700 large public-interest entities to publish a non-financial statement. CSRD originally expanded scope to roughly 50,000 companies; following the Omnibus I Directive (EU) 2026/470's narrower thresholds (1,000+ employees and €450m+ net turnover), the mandatory in-scope population is now expected to be a small fraction of that. Key differences from NFRD remain: CSRD introduces mandatory ESRS standards (NFRD allowed free-form reporting against any framework); CSRD requires double materiality assessment (NFRD only required single materiality); CSRD mandates external assurance; CSRD requires sustainability information in the management report in machine-readable format (XBRL); and CSRD covers the full value chain, not just own operations.
The data required depends on your materiality assessment, but typically includes: GHG emissions (Scope 1, 2 and 3 across 15 categories), energy consumption by source, water use, waste and circular economy metrics, biodiversity impact assessment, full workforce data (headcount, gender pay gap, health & safety incidents, training hours), supply chain due diligence information, anti-corruption incident data, and payment practices metrics. Scope 3 emissions, which cover the full value chain, are often the most challenging data category and require supplier engagement programmes. Data collection design should begin 18–24 months before the first reporting year.
A CSRD gap analysis is a structured assessment of the difference between your current sustainability reporting capabilities and what CSRD requires. It identifies: which ESRS disclosures apply based on your materiality assessment; which you can already report accurately; and where gaps exist in data, processes, governance, systems or skills. The output is a prioritised remediation roadmap. A gap analysis should be conducted after completing the double materiality assessment but before detailed implementation planning. Most companies find significant gaps in Scope 3 emissions, biodiversity, workforce data, and financial risk quantification.
From scratch, a robust CSRD implementation programme typically takes 18–24 months. The timeline includes: governance setup and team formation (1–2 months), double materiality assessment (2–3 months), gap analysis (1–2 months), data collection design and system implementation (3–6 months), supplier engagement for Scope 3 (ongoing, but 6–12 months for meaningful coverage), draft sustainability statement and internal review (3–4 months), and external limited assurance (1–2 months). Companies with existing sustainability programmes and good data infrastructure can compress this timeline, but those starting from scratch should budget the full 24 months.
Yes. CSRD requires limited assurance of the sustainability statement from a qualified assurance provider — typically a statutory auditor or an accredited independent assurance provider. Limited assurance is a lower level of verification than the reasonable assurance applied to financial statements: the auditor concludes that nothing has come to their attention indicating a material misstatement, rather than positively confirming accuracy. Under the Omnibus I Directive (EU) 2026/470, the earlier plan to eventually move to mandatory reasonable assurance was dropped — limited assurance remains the standard, which the European Commission cited as reducing cost and complexity for companies.
CSRD is a directive, so penalties are set by each EU member state through national transposition law. Enforcement mechanisms vary but typically include financial fines, public disclosure of violations, and potential civil liability. In some jurisdictions, company directors can face personal liability for false or misleading sustainability statements. The EU is also moving toward greater coordination of enforcement through the European Single Access Point (ESAP) and the European Securities and Markets Authority (ESMA). Companies should consult their home-country transposition law for the specific penalty regime applicable to them.
Yes, if they meet the threshold conditions — though these were raised significantly by the Omnibus I Directive (EU) 2026/470. Non-EU parent companies must report under CSRD if they generated more than €450 million in net turnover in the EU in each of the last two consecutive years and have at least one qualifying EU subsidiary or branch with net turnover above €200 million (previously €150m and €40m respectively). Reporting is required from FY2028 (published in 2029). The report must cover EU-generated activities and comply with ESRS or an equivalent standard (such as ISSB IFRS S1/S2, once equivalence is formally determined). The higher thresholds mean fewer US, UK, and Asian multinationals will be caught by this rule than originally expected — but those with substantial European operations should still check their position.
EFRAG (European Financial Reporting Advisory Group) is the technical body responsible for developing the ESRS standards. EFRAG consulted extensively with companies, investors, civil society, and standard-setters (including GRI, ISSB, and the GHG Protocol) during the drafting process. The European Commission formally adopts the ESRS as delegated acts. EFRAG continues to issue guidance documents, FAQs, and sector-specific supplements to help companies interpret and apply the standards. EFRAG's website is the primary source for authoritative ESRS interpretation guidance.
ESRS E1 follows the GHG Protocol definitions. Scope 1 covers direct emissions from sources owned or controlled by the company (combustion, industrial processes, fugitive emissions from refrigerants). Scope 2 covers indirect emissions from purchased electricity, heat, steam, and cooling — both location-based and market-based figures must be disclosed. Scope 3 covers all other indirect emissions across 15 categories in the value chain, including purchased goods and services, capital goods, business travel, employee commuting, use of sold products, and investments. Companies must report all material Scope 3 categories and are encouraged to use primary supplier data where available.
The ESRS do not specify a precise numeric threshold for materiality — companies must exercise professional judgement based on their specific circumstances. The assessment considers the scale, scope, and irremediability of impacts (for impact materiality) and the magnitude and likelihood of financial effects (for financial materiality). EFRAG has provided qualitative guidance: impacts or financial effects that are severe, widespread, or irreversible should generally be considered material. Companies are advised to document their threshold decisions with clear rationale, as these will be reviewed by external assurers.
Listed SMEs were originally due to join under 'Wave 3' (FY2026), but the Omnibus I Directive (EU) 2026/470 removed listed SMEs from mandatory CSRD scope entirely — they may report voluntarily using the simplified Voluntary SME Standard (VSME) instead. Non-listed SMEs were never directly subject to CSRD. However, all SMEs still face indirect pressure: large companies still in CSRD scope need Scope 3 supply chain data and are required to assess supply chain impacts under standards like ESRS S2. This creates a 'trickle-down' effect where SMEs receive detailed questionnaires from customers. EFRAG's VSME gives SMEs a structured way to respond to these requests without full CSRD compliance.
ESRS 2 is mandatory for all companies in scope regardless of their materiality assessment. It covers: governance structures (board composition, oversight of sustainability, remuneration linked to sustainability performance); strategy and business model (how sustainability matters are integrated); materiality assessment process; policies, actions and targets (at a high level, applicable to all topics); stakeholder engagement approach; and how sustainability information is integrated into internal management processes. ESRS 2 acts as the spine of the sustainability statement; the topical ESRS standards add the detail for each specific topic.
The EU Taxonomy Regulation requires companies in scope (currently overlapping significantly with CSRD in-scope companies) to disclose what proportion of their turnover, capital expenditure, and operating expenditure is aligned with the EU Taxonomy — a classification system for environmentally sustainable economic activities. CSRD companies must include Taxonomy disclosures in their sustainability statement. The two frameworks are complementary: CSRD provides the broader ESG narrative and data, while the Taxonomy provides a specific binary signal of environmental sustainability for revenue and investment flows.
CSRD requires sustainability information to be included in the management report — not in a standalone document — and to be tagged in XBRL (Extensible Business Reporting Language) format using the ESRS taxonomy. This machine-readable format enables regulators, investors, and data providers to extract and compare sustainability data automatically. The tagged data is submitted to the European Single Access Point (ESAP), which will make it publicly available. Companies should engage their finance and reporting teams early to understand the technical requirements of XBRL tagging.
While CSRD is a reporting directive (it requires disclosure of sustainability information), CS3D (the Corporate Sustainability Due Diligence Directive, also known as CSDDD) is an operational directive that requires companies to identify, prevent, mitigate, and remediate adverse human rights and environmental impacts across their value chains. The two directives are complementary: a robust due diligence process under CS3D generates data that can be reported under CSRD; and CSRD disclosures make due diligence outcomes transparent to stakeholders. Companies should design integrated programmes rather than treating CSRD and CS3D as separate compliance exercises.
First-year reporting under CSRD is challenging, and companies benefit from several phase-in reliefs built into the ESRS. In year one, some Scope 3 categories may be reported with reduced precision, certain financial risk quantification requirements may be deferred, and comparatives are not required for all metrics. Companies should focus first on completing the double materiality assessment and gap analysis, prioritising high-materiality disclosures and building accurate processes for year two. Transparency about limitations is acceptable in year one — auditors will assess effort and good faith as well as accuracy. Establish a continuous improvement mindset: CSRD compliance matures over multiple reporting cycles.