CSRD (Corporate Sustainability Reporting Directive) is an EU law requiring large companies to disclose detailed, audited information about their environmental impact, social practices and governance — replacing the lighter-touch NFRD. If you manufacture or export to EU buyers, this guide covers exactly what it is, who it actually affects, and what to do about it, even if the directive doesn't apply to your company directly.
Key takeaways
- CSRD requires standardised, externally-assured sustainability reporting using the ESRS standards — not a voluntary framework.
- It replaced the NFRD in 2023 and is being phased in through 2028, with scope narrowed by the 2026 Omnibus simplification.
- Every disclosure starts with a double materiality assessment — what you report depends on what's material to your business.
- Non-EU manufacturers are rarely in direct legal scope, but their EU buyers are — and those buyers need supplier data to file their own reports.
- A full CSRD readiness engagement typically runs 10–14 weeks and starts around €8,500 for a single facility.
What is CSRD?
The Corporate Sustainability Reporting Directive entered into force in January 2023, applying from financial year 2024 onward on a phased timetable. It sits alongside — and feeds data into — parallel EU regulations like CBAM (carbon border pricing) and EUDR (deforestation-free supply chains), all part of the same push to make corporate environmental and social impact as auditable as financial results.
The directive is administered at EU level, but each member state transposes it into national law and sets its own enforcement and penalty regime — so specifics can vary slightly by country.
What is the difference between CSRD and NFRD?
| Aspect | NFRD (2018–2023) | CSRD (2024 onward) |
|---|---|---|
| Companies covered | ~11,000 large EU public-interest entities | Broader — narrowed again by the 2026 Omnibus, see below |
| Reporting standard | No single mandatory framework | Mandatory ESRS standards |
| Assurance | Not required | External limited assurance required |
| Format | Free-form narrative | Digitally tagged, machine-readable (ESEF/XBRL) |
Who needs to comply with CSRD?
Scope has changed materially since CSRD was first adopted — the original 250-employee / €50M threshold was raised sharply in 2026. Rather than repeat numbers here that a single regulatory update could make stale, see the definitive breakdown: CSRD Omnibus 2026: What Changed & Who Still Reports.
What are the ESRS standards?
| Category | Standards | Covers |
|---|---|---|
| Environment | E1–E5 | Climate change, pollution, water & marine resources, biodiversity, resource use & circular economy |
| Social | S1–S4 | Own workforce, workers in the value chain, affected communities, consumers & end-users |
| Governance | G1 | Business conduct — anti-corruption, supplier relationships, political engagement |
No company reports on all twelve standards in full — the double materiality assessment determines which topics actually apply, and disclosure is scoped accordingly.
What is double materiality?
This is the step every CSRD engagement starts with, because it defines the scope of everything that follows. Get it wrong — too narrow, undocumented, or done as a box-ticking exercise — and the disclosures built on top of it won't survive external assurance.
CSRD timeline: what's already in effect
Because scope and timing were both revised by the 2026 Omnibus, the safest approach is a direct scope check against current thresholds rather than relying on the original 2022 rollout schedule. See our Omnibus 2026 guide for the current position, including the "stop-the-clock" delay for early-wave reporters.
Why non-EU manufacturers need to prepare anyway
This is the single most common misunderstanding we see at Sustainability-Frisk: manufacturers checking whether CSRD applies to them legally, and stopping there. The more useful question is whether your customers are in scope — because if they are, they need your data whether or not the law names you directly.
We've seen this most acutely in Pakistani textile exports, where EU buyers (H&M, Inditex, Decathlon and similar) are increasingly pushing CSRD-aligned Scope 3 data requirements down into supplier RFPs — regardless of the mill's own legal CSRD status.
How to prepare for CSRD compliance
- Confirm your scope. Check both direct legal thresholds and indirect exposure through in-scope EU customers.
- Run a double materiality assessment. A structured workshop, not an internal guess — this defines everything downstream.
- Close the ESRS gap. Compare what you already track against what your material topics require.
- Build the data pipeline. Emissions, energy, workforce and governance data need a repeatable collection process, not a one-off spreadsheet.
- Get audit-ready documentation. Evidence structured the way an external assuror actually reviews it.
Our CSRD Compliance Readiness service runs exactly this process for a single integrated facility, typically over 10–14 weeks, starting at €8,500.
Common CSRD mistakes
- Treating materiality as a checklist instead of a genuine, documented assessment — this is the first thing an assuror probes.
- Assuming "out of scope" means "no action needed" — ignoring buyer-side data demand until a contract is already at risk.
- Starting data collection before defining scope — wastes effort gathering data nobody asked for while missing what's actually material.
- Relying on stale threshold numbers — the 2026 Omnibus changed scope materially; check current rules before assuming you're in or out.
- No audit trail — disclosures without defensible evidence behind them don't survive external assurance.
Get your CSRD scope confirmed, in one call
We'll map whether CSRD applies to you directly, whether your EU buyers will need your data anyway, and what a realistic readiness timeline looks like. Backed by €2.3M PI insurance.
📅 Book a Free 30-Minute CSRD Readiness CallFrequently asked questions
What is CSRD?
An EU directive requiring large companies and listed SMEs to report standardised, externally-assured environmental, social and governance information using the ESRS standards. It replaced the NFRD and is phased in through 2028.
What is the difference between CSRD and NFRD?
NFRD was lighter-touch, unstandardised disclosure for ~11,000 companies. CSRD replaced it with mandatory ESRS standards, external assurance, and digital tagging — a much stricter regime.
Who needs to comply with CSRD?
Following the 2026 Omnibus, companies with 1,000+ employees and €450M+ net turnover, plus large non-EU groups above equivalent thresholds. See our CSRD Omnibus 2026 guide for the full current breakdown.
What are the ESRS standards?
The mandatory CSRD disclosure standards: cross-cutting requirements plus E1–E5 (environment), S1–S4 (social) and G1 (governance) — scoped to whichever topics your materiality assessment finds relevant.
What is double materiality?
Assessing each topic for both impact materiality (your effect on people/environment) and financial materiality (its effect on your finances). A topic is material if it matters from either direction.
How much does CSRD compliance cost?
A full readiness engagement for a single facility typically starts around €8,500 over 10–14 weeks, covering materiality assessment, ESRS gap analysis and audit-ready documentation. Cost scales with sites and data maturity.
What happens if you don't comply with CSRD?
In-scope companies face member-state-set penalties, reputational harm and capital-access friction. For non-EU suppliers outside direct scope, the real risk is commercial — losing EU buyers who can no longer get the data they need.
Sources & further reading
- EFRAG — European Financial Reporting Advisory Group, the body developing the ESRS standards: efrag.org
- European Commission — Corporate sustainability reporting: finance.ec.europa.eu
- Council of the EU (Consilium) — "Council signs off simplification of sustainability reporting and due diligence requirements" (24 Feb 2026): consilium.europa.eu
- Accountancy Europe — "Omnibus explained: key changes to the CSRD and CSDDD": accountancyeurope.eu
This article is general guidance, not legal advice. Rules and thresholds evolve — verify current obligations against the official EU source and your national regulator before acting.