In 2025, ESG regulation in the EU and Germany shifted toward simplification rather than expansion.
The European Commission introduced so-called Omnibus Packages, and lawmakers agreed to streamline the Corporate Sustainability Reporting Directive (CSRD) and the Corporate Sustainability Due Diligence Directive (CSDDD), raising thresholds and reducing trickle‑down obligations to ease compliance. The EU Deforestation Regulation (EUDR) was postponed by one year to December 2026 and simplified, focusing responsibility on the first placer and reducing downstream duties. The EU Taxonomy framework was also lightened with fewer data points and non‑materiality exemptions starting in 2026 for FY2025 reporting. These changes reflect a regulatory trend toward increased proportionality and competitiveness rather than stricter ESG obligations.
In Germany, proposals emerged to slim down the Supply Chain Act (LkSG), including abolishing annual reporting obligations. In this context, the German Ministry for Economics (BMWE), together with the German Ministry for Labour (BMAS), instructed the Federal Office for Economic Affairs and Export Control (BAFA), which is the competent authority for enforcing the LkSG, to stop reviewing annual reports as a “pre-emptive measure”. Also, BAFA disabled the access to its official interface where economic operators could submit the annual reports. Hence, in practice, while there is still a formal obligation to submit such reports, this obligation will not be enforced.
No significant changes have been observed in general enforcement practices under the LkSG to date. In particular, BAFA continues to investigate supply chain-related concerns, and pending cases remain on the docket.
2025 saw a clear shift from expansion to simplification in EU environmental legislation. Instead of tightening obligations, lawmakers focused on lighter reporting duties and exemptions for smaller businesses. After the final adoption of the Omnibus Package in mid-December, the CSRD and CSDDD thresholds were raised – for the CSRD – to (i) a net turnover exceeding EUR450 million and (ii) an average of more than 1,000 employees for individual sustainability reporting (ie, at the company level) and – for the CSDDD – to (i) a net turnover exceeding EUR1.5 billion and (ii) and an average of more than 5,000 employees. Also, under the CSDDD, mandatory climate transition plans as well as civil liability regimes are now completely removed, and reporting requirements under the CSRD are scaled back to reduce the administrative burden.
In a similar vein, a new de minimis threshold was introduced for the EU’s CBAM (Carbon Border Adjustment Mechanism). Now, only importers exceeding 50 tonnes per calendar year across the different product categories (excluding electricity and hydrogen) remain in-scope. The amendment act also introduces an additional transitioning provision allowing in-scope importers to register by 31 March 2026 for FY 2026.
Moreover, the application of the EU Deforestation Regulation (EUDR) was postponed by another year to 30 December 2026 for larger operators and to 30 June 2027 for smaller operators. The EUDR has also been simplified: due diligence obligations have been streamlined by limiting the requirement to provide a due diligence statement to the operator that first places the commodity on the EU market. Downstream operators are only required to retain and pass on the statement’s reference number. Micro and small primary operators are permitted to submit a one-time simplified annual declaration,
At a national level, the draft amendment bill to the LkSG proposes eliminating administrative fines and liability for environmental violations in the value chain, whereas sanctions for serious human rights-related breaches as well as the failure to set up a grievance mechanism are retained. This development signals a shift toward a more lenient and targeted enforcement approach. However, existing statutory sanctions for environmental offences (eg, under the German Criminal Code, the Federal Environmental Protection Act or the Circular Economy Act) remain intact.
In Germany, the proposed reform of the LkSG aims to remove administrative fines and liability for minor due diligence breaches, concentrating enforcement on serious human rights violations.
The most significant change was the proposed downscaling of the LkSG. Following the federal election, the new CDU/CSU-SPD coalition announced that LkSG will be replaced by a law transposing the EU Corporate Sustainability Due Diligence Directive (CSDDD). Until the draft bill is adopted and takes effect (likely 2027–2028), existing LkSG obligations will not be sanctioned except for certain severe human rights violations, and annual reporting duties will be lifted. This move reflects strong political pressure to reduce bureaucracy and compliance costs for German companies.
At the EU level, the Omnibus package dominated the ESG agenda. After months of negotiations, it was adopted in mid-December. The new CSRD and CSDDD provisions provide for significant reductions in the scope of application and further delay implementation. The EU is thereby responding to concerns over regulatory burden and competitiveness and extending the transition periods.
The Federal Office for Economic Affairs and Export Control (BAFA) is the competent authority when it comes to the oversight of LKSG adherence. It can request information, conduct on-site inspections, issue orders, and impose administrative fines.
Following the CDU/CSU–SPD coalition agreement, the government intends to abolish the LkSG and replace it with an EU-aligned law transposing the Corporate Sustainability Due Diligence Directive (CSDDD); until then, reporting shall be discontinued and sanctions are to be limited to severe human rights violations. BAFA, as the competent authority, has stopped examining LkSG annual reports and adjusted its enforcement practice accordingly, pre-empting the legislative change. It was, nonetheless, instructed to amplify its communication activities, including the support of co-operation between companies (and by extension, with relevant stakeholders) as part of a more facilitative oversight approach. Other environmental authorities continue to exercise their usual regulatory responsibilities within their jurisdictions.
In the next two to five years, significant ESG pressure will affect multiple sectors, including financial services, heavy industry and energy, construction and real estate, automotive and electronics, food/forestry and retail, mining and raw materials, aviation/maritime logistics, textiles and packaging, water/waste utilities, and digital/tech.
The drivers vary:
Cutting across all sectors, CSRD/ESRS reporting and CSDDD/LkSG‑style due diligence demand thorough governance and supplier controls.
Geopolitical developments keep European policymakers focused on supply chain resilience and energy security, reshaping ESG governance from a disclosure exercise into a board-level risk management mandate. Additionally, the EU kept expanding its global human rights sanctions regime to include additional individuals and entities linked to abuses in Syria, Russia and Belarus, as well as other regions. These measures – asset freezes and travel bans – heighten compliance risks and require companies to strengthen human rights due diligence within their compliance frameworks.
Following the European Parliament elections and the formation of the new Commission, the EU’s sustainability agenda has pivoted toward streamlining rather than expanding obligations. This shift was catalysed by the 2024 Draghi competitiveness report – commissioned by President von der Leyen – which called for simplification of ESG regulation to preserve Europe’s competitiveness and reduce regulatory burden.
The Commission’s 2025 “Sustainability Omnibus” Packages consequently introduce postponements and scope reductions to core files (CSRD/CSDDD/Taxonomy), explicitly tying ESG policy to a competitiveness narrative and a “reduce bureaucracy” promise under the new term. These reforms reflect political pressure from member states and business groups facing weak growth and inflationary aftershocks, and acknowledge the fragmented politics of the new Parliament.
Germany’s 2025 CDU/CSU–SPD coalition agreement marked a decisive recalibration: the government announced plans to abolish the national Supply Chain Act (LkSG) and replace it with a law transposing CSDDD, with limited interim sanctions (only for severe human rights abuses). Politically, the move signals responsiveness to industry concerns over compliance costs and duplication, and alignment with the EU’s intent to simplify and harmonise common standards. For companies, this means reviewing contracts, revising due diligence governance, and preparing for an EU‑level enforcement logic.
US pushback on DEI has created a compliance gap with certain EU ESG rules. Executive Orders 14151 and 14173 (2025) ended DEI programmes in federal agencies and require contractors to certify non-discriminatory practices, making even voluntary diversity targets risky. Several US states have also banned mandatory DEI training and closed DEI offices.
This contrasts with EU laws (CSRD, CSDDD), which mandate diversity disclosures and double materiality assessments. Multinational companies now face opposing obligations: US policies seem to penalise certain DEI practices – eg, related to hiring or purchasing, while EU rules require diversity and inclusion efforts. Failure to comply with EU standards can lead to reputational and financial risks as investors demand ESG-aligned reporting. For German companies, US anti-discrimination laws and Executive Orders apply only in limited circumstances. It is also important to note that US equality principles do not override mandatory local laws, such as Germany’s 30% gender quota for supervisory boards of listed companies with equal co-determination.
Over the coming year the dominant legal developments centre on two pillars reshaping governance, disclosure and liability:
The CSRD (and ESRS implementing standards) expands double-materiality reporting, requiring comparable, audited non-financial statements integrated into management reports and affecting risk management, internal control and audit processes.
Simultaneously, the CSDDD embeds mandatory value-chain due diligence duties (human rights and environmental), elevating oversight expectations for boards and senior management.
In December 2025, the Omnibus reform introduced material adjustments to scope and thresholds (raising employee/turnover cut-offs and delaying timelines). Practically, this means corporate governance programmes will need strengthened compliance functions, clearer allocation of ESG responsibilities and remuneration and risk frameworks to ensure oversight and documented decisions on sustainability strategy.
Depending on the legislative context, there may be certain differences between listed and non-listed companies. Recent developments in sustainability reporting, however, show a trend towards harmonisation, focusing on the companies’ size rather than their listing status.
For instance, at the outset, the CSRD differentiated between listed and non-listed companies with listed companies being captured regardless of their size. With the Omnibus reform, requirements for listed and non-listed companies were harmonised by exempting smaller non-listed companies. With the latest amendment, CSRD obligations apply based on a size threshold (turnover exceeding EUR450 million and more than 1,000 employees for individual reporting), instead of the listing status.
Entities out of scope are encouraged to voluntarily adopt reporting standards, such as the Voluntary Standard for SMEs, the so-called VSME developed by the EFRAG (European Financial Reporting Advisory Group).
Regarding the CSDDD, there was and is no distinction between listed and unlisted entities. Instead, governance obligations apply based on a size threshold. With the latest amendment, the relevant size threshold was increased to a turnover exceeding EUR1.5 billion and 5,000 or more employees.
Besides, capital market regulations (transparency rules, shareholder rights, takeover law) impose additional governance duties on listed issuers (investor disclosure, market-sensitive ESG reporting, stewardship expectations) that do not apply to non-public firms.
National rules may add layers for both listed and non-listed entities, and typically differentiate based on their legal form.
ESG requirements significantly expand the role and responsibilities of directors and officers by transforming sustainability considerations into enforceable legal duties. Under German law, directors and boards already face personal liability for compliance failures that cause financial harm to the company. This now explicitly includes ESG-related obligations:
Practically, boards should:
Failure to integrate foreseeable ESG risks such as climate, human rights, or supply chain issues can be treated as governance failures by regulators, investors, or courts. In jurisdictions like Germany, non-compliance may lead to administrative fines, civil liability, and reputational damage. Proactive oversight and documented compliance programmes are therefore essential.
Germany and the EU do not have a single harmonised “social enterprise” corporate form; instead, a mix of established civil and corporate law vehicles are used.
In Germany, operators commonly use:
At EU level, the Social Economy Action Plan and accompanying guidance encourage member states to lower administrative barriers and support scaling, but they stop short of imposing an EU-wide corporate form: the Commission defines “social enterprises” by purpose (primacy of social objective, reinvestment rules), not by a single legal entity.
ESG law and market rules recalibrate the relationship between management and shareholders, particularly the fiduciary obligations incumbent on the management. The building blocks of appropriate corporate strategy as well as disclosure obligations increasingly include certain non-financial considerations and obligations. Mandatory reporting regimes (CSRD/ESRS) and investor–stewardship rules (SRD II and related guidance) enhance transparency about climate and human rights-related topics, enabling shareholders to engage and vote on ESG strategy with more complete information.
This does not eliminate directors’ primary statutory duties, but it reframes the “best interests” analysis: directors must identify and manage foreseeable ESG risks (financial and reputational) and document the decision-making process – failure to do so can attract regulatory scrutiny and activist litigation.
Institutional investors also face disclosure/engagement duties that push them toward active stewardship rather than short-term exit, strengthening dialogue channels (engagement policies, AGM votes, binding/consultative shareholder proposals depending on national law).
Contractually, ESG requirements increasingly appear in financing and shareholder agreements (reporting, transition targets, clawbacks), so shareholders and companies must negotiate concrete governance mechanisms (board ESG committees, named sustainability officers, KPI-linked remuneration) to reduce agency friction.
Across the EU and Germany, 2025 marked a shift from drafting rules to implementing and simplifying them. In November, the European Commission tabled the SFDR 2.0 proposal, focusing on three product categories (“Sustainable”, “Transition”, “ESG Basics”) alongside clearer disclosure and minimum portfolio thresholds – now awaiting co‑legislature negotiations.
On the corporate side, the EU Taxonomy was amended for further simplification: a mid‑year delegated act streamlined templates, introduced a 10% materiality threshold, and clarified so-called DNSH (Do No Significant Harm) criteria – changes that apply to 2026 reporting on FY2025.
The pending SFDR 2.0 negotiations are expected to define category tests and exclusions, with market application not before 2028 under the current timetable. ESG ratings supervision starts in July 2026, with authorisation windows for EU and third‑country providers through autumn 2026. The taxonomy simplifications take effect for FY2025, and together with the Omnibus package for the CSRD and CSDDD, collectively steer sustainable finance toward a simpler, more enforceable rulebook.
Entities raising or providing finance must map a multi-layered legal landscape:
Access to sustainable finance has improved significantly but still encounters certain fragmentation.
Generally, the EU has created a layered infrastructure – Taxonomy, SFDR, CSRD and dedicated instruments (green bonds, sustainability-linked loans). Germany in particular, benefits from a highly developed banking sector, strong export finance capabilities and active green bond markets, making finance relatively accessible for creditworthy, well-prepared borrowers with clear transition plans.
However, barriers persist for smaller enterprises and many social-economy actors: compliance costs (reporting, assurance), lack of in-house ESG expertise, and rigid KPI/data requirements can pose significant hurdles for SMEs and social enterprises. Market fragmentation (different standards, evolving taxonomy scope) and ongoing concerns about greenwashing enforcement also raise transaction costs.
A just transition presents systemic tensions: capital reallocates toward low-carbon, transparent borrowers, creating risks of stranded assets (oil and gas, coal) and credit withdrawal from carbon-intensive regions.
“Old-economy” corporates face higher funding costs or risk market exclusion unless they can credibly demonstrate transition pathways; without public de-risking instruments, they could be forced into expensive transition finance or insolvency.
“Non-bankables” – small social enterprises, frontier SMEs, or companies in high-emission sectors lacking audited ESG data – may struggle to meet taxonomy/SFDR data demands and assurance costs, limiting their access to labelled finance.
Lastly, distributional risks include job losses, regional decline and weakened social objectives if capital shifts without social conditionalities such as reskilling or regional investments.
Supervisory fragmentation, measurement gaps, and litigation risk remain core challenges in sustainable finance.
Greenwashing is still the dominant concern: supervisory authorities are increasing respective thematic reviews and enforcement; fines and criminal investigations are possible where marketing diverges from actual product alignment. A related risk is “greenbleaching” (relabelling entire firms as green without aligning underlying activities) as companies adopt ESG branding while portfolios lag.
Meanwhile, “anti-ESG” political initiatives (laws or procurement rules disallowing ESG considerations) create legal uncertainty for asset managers and banks, even as EU investor stewardship and taxonomy frameworks still push in the opposite direction.
Liability exposure will likely grow. Misleading disclosures can trigger regulatory sanctions, civil or even criminal liability allegations as well as investor litigation; and directors who fail to integrate foreseeable ESG risks may face fiduciary breach allegations.
Practical challenges persist: aligning taxonomy, CSRD, SFDR, and national rules to avoid conflicting obligations and to ensure assurance processes are meaningful.
There has been a clear, gradual shift in Germany, driven primarily by EU-level action: from voluntary norms and supervisory guidance toward binding, enforceable requirements. What began as market‑led frameworks and best practice is increasingly embedded in legislation, assurance standards and supervisory practice.
In corporate reporting, the transition from narrative sustainability reports to mandatory and auditable disclosures has been decisive. The CSRD requires a sustainability statement within the management report, mandates the general use of European Sustainability Reporting Standards (ESRS), and introduces limited assurance standards, to be developed by July 2027 by the EU Commission. The planned phase-in of stricter reasonable assurance requirements has now been removed with the new CSRD Omnibus package alongside sector-specific ESRS. Voluntary standards remain relevant for out-of-scope companies.
In a similar vein, KPI reporting under the EU Taxonomy Regulation has introduced statutory datapoints such as KPIs on turnover, capital expenditure and operating expenditure. The December 2025 Omnibus reforms streamlined templates and included materiality thresholds while preserving the mandatory legal nature of taxonomy KPIs.
For financial products, supervisory “soft law” is increasingly taking on a binding character. ESMA’s Guidelines on funds’ names using ESG or sustainability‑related terms have been incorporated into national administrative practice. These guidelines set quantitative thresholds and exclusions as conditions for labelling and marketing financial products, such as an 80% threshold for the portfolio assets meeting sustainability objectives. In practice, these expectations are treated as de facto rules, reinforced by prospectus scrutiny and ongoing supervision by authorities such as the German BaFin.
Regarding supply chain due diligence obligations, Germany has been one of the frontrunners in the EU to codify guidelines into black letter law. The German Supply Chain Act (LkSG) established a comprehensive framework for corporate due diligence obligations back in 2023. EU-wide harmonisation followed with the Corporate Sustainability Due Diligence Directive (CSDDD), which was reformed recently with the Omnibus package. A central aspect of the reform is the narrower scope of application, now targeting only the biggest multinational corporations with over 5,000 employees and an annual turnover exceeding EUR1.5 billion.
In Germany, supply chain due diligence has shifted from voluntary practice to binding law, but the near‑term trajectory is mixed: national rules are being eased while an EU‑wide regime is set to replace them with a narrower scope and later start dates.
The Supply Chain Due Diligence Act (LkSG) requires in‑scope companies to implement risk management systems, conduct risk analyses, adopt preventive and remedial measures, and maintain a grievance mechanism across their own operations and suppliers. In September 2025, the federal cabinet proposed a draft amendment bill to remove annual reporting obligations and restrict fines to certain serious human rights violations. In practice, BAFA had already been instructed by the relevant German ministry to defer the enforcement of reporting requirements. Substantive due diligence duties remain in force.
The Corporate Sustainability Due Diligence Directive (CSDDD) establishes an obligation to identify, prevent and address adverse human rights and environmental impacts across chains of activities, including certain downstream links. Following the Omnibus reform, adopted in December 2025, the threshold for in-scope companies was raised to those with over 5,000 employees and an annual turnover exceeding EUR1.5 billion.
Further, the amended CSDDD reshapes the applied methodology toward a risk‑based “scoping” focus rather than comprehensive mapping and eliminates the requirement for climate transition plans. Lastly, the envisaged EU-harmonised civil liability regime was removed and penalties were capped at 3% of worldwide net turnover. The deadline for the national transposition has been postponed by one year, to July 2028.
What this means in practice:
Companies (should) prioritise counterparties with transparent data, audit records, and remediation capacity. This can also mean shorter, deeper supplier lists (ie, fewer, better-documented partners), increased use of supplier scorecards, contractual ESG clauses (reporting, right-to-audit, termination for breaches), and procurement incentives for verified ESG compliance.
ESG is integral to M&A: material ESG risks affect valuation, warranties, indemnities, purchase price adjustments and completion mechanisms. Buyers perform ESG due diligence (regulatory exposure, legacy liabilities, climate alignment, labour issues), and sellers provide disclosures and reps.
Failure to uncover ESG liabilities can lead to post-closing disputes; conversely, positive ESG performance can be monetised in valuation. For private deals, the absence of public reporting increases the due diligence burden. Overall, ESG considerations materially influence pricing, deal allocation of risk and post-deal integration.
Distinctions by entity type:
For due diligence, the EU Corporate Sustainability Due Diligence Directive (CSDDD) originally envisaged large companies adopting climate transition plans. With the Omnibus reform in December 2025, the obligation to adopt and publish such climate transition plans was removed because the EU legislatures deemed the obligation a disproportionate administrative burden.
Germany’s LkSG does not require publishing transition plans or setting climate targets; in addition, in 2025, the cabinet proposed to remove annual reporting and to limit sanctions to severe cases, while core human rights due diligence remains. The adoption of the draft amendment bill is pending.
In consumer‑facing marketing, the EU Empowering Consumers Directive (EU) 2024/825 will ban misleading, unsubstantiated and irrelevant “green” marketing statements, and restrict “carbon‑neutral” claims based purely on offsetting; member states shall transpose the Directive into national law by September 2026.
The Commission’s proposed SFDR 2.0 provides three voluntary categories (“Sustainable”, “Transition”, “ESG Basics”) with 70% portfolio alignment and exclusions; only categorised products would be able to make sustainability claims in names/marketing (this is not yet law as legislative talks continue).
Product ecolabels such as the EU Ecolabel (EU‑wide) and Germany’s Blue Angel (Blauer Engel) are voluntary but regulated schemes with verified criteria and controlled use.
For mandatory disclosures, the CSRD requires member states to set effective, proportionate and dissuasive sanctions; Germany’s proposed transposition relies on existing company‑reporting enforcement under the Commercial Code, with non-compliance being considered administrative offences.
Overall, the penalty spectrum ranges from administrative fines and publication or marketing restrictions, through civil remedies, to criminal proceedings in egregious cases – eg, fraud. Relevant aspects to determine the non-compliance risks include the relevant statute (company‑law filing, consumer advertising, securities/funds), the intent and impact of the breach, and whether conduct is repeated or persistent, or quickly remediated.
It is difficult to forecast a linear path for ESG reporting. After the Stop-the-Clock Directive in April 2025, the recent Omnibus package in December 2025 further delayed reporting obligations. Under the amended CSRD, the previous reporting deadlines were delayed for two years – ie, until 2028 for the second wave and 2029 or 2030 for the third and fourth wave (depending on possible opt-out options).
In light of the pending national transposition, and potential further adjustment to ensure interoperability between the ESRS, Taxonomy, SFDR and other frameworks, it is crucial for affected companies to proactively prepare for and monitor evolving reporting requirements.
German companies are repeatedly held liable in proceedings before German civil courts, in particular in cases relating to climate change damages or requests to cease and desist from climate-damaging behaviour.
NGOs such as Deutsche Umwelthilfe (DUH), Greenpeace and Bund für Umwelt und Naturschutz Deutschland (BUND) are important parties to consider in ESG-related cases against the government or corporations. NGOs are particularly active in demanding corporate climate action and often challenge alleged greenwashing claims. NGOs file lawsuits strategically because ESG-related cases receive substantial media coverage in Germany.
There have been several greenwashing claims brought by both NGOs and regulatory bodies in Germany, targeting misleading ESG claims in finance, transportation and consumer products. The claims are mostly based on the German Unfair Competition Act (UWG). German courts regularly decide in favour of the NGOs and demand concrete statements from the companies rather than vague or unsubstantiated “green statements” made on websites or product packaging.
Due to successful litigation against greenwashing, German companies are increasingly cautious when it comes to marketing their sustainability efforts.
The number of ESG-related proceedings will increase significantly in the future. Pending court proceedings show that companies are facing multiple challenges. Since ESG-related lawsuits receive substantial media coverage in Germany, NGOs may use uncertainties to their benefit and pursue claims against companies, alleging misconduct and calling for them to enhance their ESG efforts.
Junghofstraße 9
60315 Frankfurt/Main
Germany
+49 69 2 99 08 0
+49 69 2 99 08 108
Anahita.Thoms@bakermckenzie.com www.bakermckenzie.com/en/
ESG Germany: Five Considerations That Should Be on Top of Every Board’s Agenda
One might think that the “ESG hype” has passed its peak. Yet, companies find themselves in turbulent times, having to face regulatory changes, geopolitical instability and technological progress at the speed of light. While ESG topics were on top of every company’s agenda over the past three years, new issues and concerns have emerged which need at least as much attention – tariffs and sanctions being just two of these.
In the complex global regulatory landscape, handling ESG topics remains as relevant as ever. Below are five ESG considerations that should be on top of every board’s agenda.
Boards need to monitor evolving landscape of ESG regulations and guidelines
The European Union has adopted an array of ESG regulations that will substantially influence the way companies operate in Europe. At the forefront are the Corporate Sustainability Reporting Directive (CSRD) and the Corporate Sustainability Due Diligence Directive (CSDDD). CSRD sets detailed reporting requirements for ESG performance, while CSDDD obliges companies to conduct thorough human rights and environmental due diligence across their supply chains.
The deadline for member states to implement the CSRD was 6 July 2024, and most EU countries have complied. However, Germany has not yet implemented the CSRD into national law and, along with other member states, is currently facing infringement proceedings initiated by the EU Commission.
Recently, the European Commission proposed amendments to the CSRD and other ESG regulations under the so-called Omnibus I-Package. Its declared aim is to boost EU competitiveness by reducing bureaucracy and lowering reporting requirements of companies within the European Union.
The Omnibus I Package was heavily negotiated between the Commission, the European Parliament and the Council. On 9 December 2025, the Council’s presidency and the European Parliament’s negotiators reached a provisional agreement. In short, the co-legislatures agreed to:
In parallel, the so-called Stop-the-Clock Directive, which has already been adopted by the EU co-legislatures, postpones the CSRD reporting deadlines for certain companies. Member states that already implemented the CSRD must now also transpose the Stop-the-Clock Directive by 31 December 2025 in order to give effect to the revised reporting timelines.
The Omnibus I Package was adopted by the EU Parliament and the EU Council in mid-December 2025 and provides for a transposition into national law by July 2028 for the CSDDD. In-scope companies will thus need to comply with the new requirements by July 2029.
For Germany, as of 2024, companies with more than 1,000 employees are already required to monitor and comply with human rights and environmental due diligence obligations along their supply chains under the German Supply Chain Due Diligence Act (Lieferkettensorgfaltspflichtengesetz) which came into force on 1 January 2023. The act does not link its scope of application to a turnover threshold. There are ongoing legislative discussions to eliminate or replace reporting obligations under the German Supply Chain Due Diligence Act in light of the pending changes by the CSDDD.
As the Omnibus I Package shows, the ESG landscape is constantly changing, boards must therefore stay informed to avoid costly missteps. For this purpose, they should establish a robust compliance system to keep track of ESG developments, both EU-wide and nation-wide, and monitor it accordingly.
Boards need to expect to be held liable for ESG due diligence and reporting failures
Reporting failures or inadequate due diligence can lead to harsh consequences. This holds true not only for the company itself but also for individual board members.
The CSRD and CSDDD do not contain uniform sanctions regimes in case of non-compliance with reporting or due diligence requirements. Both directives only require that the sanctions or penalties provided are “effective, proportionate and dissuasive”. Moreover, following the Omnibus I reform, the EU co-legislatures removed the uniform civil liability regime for due diligence and reporting failures. It is thus left to the EU member states to choose the penalty when transposing the directives to national law and to define whether companies are civilly liable for due diligence and reporting failures.
If penalties or damages are imposed, they may be recoverable from the company’s managing director or the management board based on a breach of duty. Under German Law, directors and boards may be held personally liable if compliance failures cause financial harm to their company. Whilst there are different provisions for managing directors of limited liability companies than for management and supervisory boards of stock corporations, the key requirements remain similar: a director or board member may be held liable if an act or omission constitutes a breach of duty and is causally linked to a financial loss suffered by the company.
Mostly, it is the general duty of care of a prudent businessman that is at stake. Management boards of stock corporations are explicitly required to implement a risk monitoring system (Section 91 Para. 3 German Stock Corporation Act). In addition, the relatively new German Corporate Stabilisation and Restructuring Act declares that, regardless of the legal form of the company, managing directors have a duty to continuously monitor developments that could jeopardise the company’s existence. Finally, the German Supply Chain Due Diligence Act constitutes an obligation to implement a risk monitoring system minimising human rights violations and environmental risks.
In the past, German courts have been increasingly focusing on the management’s duty of care, and non-compliance allegations are taken increasingly seriously. In this context, administrative offences and criminal investigations are becoming more common.
Where the company seeks recourse against its management, the directors or board members may invoke the so-called business judgement rule. Under this rule, directors and boards generally have a wide range of entrepreneurial discretion in business decisions. To benefit from this protection, they must demonstrate that they acted in the best interests of the company, on the basis of adequate information and after weighing all relevant pros and cons. Likewise, they must prove that the financial loss would have occurred even if alternative lawful conduct had been adopted.
As a general rule, it is crucial to establish and monitor appropriate and robust compliance systems. Further, to demonstrate adherence to the business judgement rule, thorough and consistent documentation is key. When it comes to ESG monitoring and reporting obligations, boards should therefore diligently document that they took environmental and social aspects into account in their decision-making process.
Boards need to balance political and regulatory pushback with ESG values
In 2025, the USA has seen a strong backlash against ESG initiatives, particularly DEI programmes. The Trump administration issued Executive Orders 14151 and 14173 in January, ending DEI programmes in federal agencies and requiring government contractors to certify they do not engage in practices deemed discriminatory. While these orders have not changed US anti-discrimination laws, enforcement has intensified, making even voluntary diversity targets and DEI-linked incentives risky. Some states have banned mandatory DEI training and dismantled DEI offices, while many corporations have scaled back or rebranded DEI programmes to reduce legal exposure.
The USA has adopted a rather contrary position to EU policies such as the reporting obligations under the CSRD and CSDDD, which mandate double materiality assessments and detailed ESG disclosures, including diversity and inclusion. The USA is particularly critical of their perceived broad extraterritorial effect. Multinational companies now face opposing obligations: US policies seem to penalise certain DEI practices – eg, related to hiring or purchasing, while EU rules require diversity and inclusion efforts. Failure to comply with EU standards can lead to reputational and financial risks as investors demand ESG-aligned reporting.
For German companies, US anti-discrimination laws and Executive Orders apply only in limited circumstances. It is also important to note that US equality principles do not override mandatory local laws, such as Germany’s 30% gender quota for supervisory boards of listed companies with equal co-determination. The situation becomes more complex when local laws impose only general obligations, leaving room for interpretation, such as setting gender diversity targets for leadership positions. For German companies acting as government contractors, this is particularly relevant. US authorities are likely to accept maintaining the status quo but may view more ambitious measures, such as raising targets beyond previous levels, critically. The same applies to aspirational gender targets, which remain lawful under German law but will likely face stricter scrutiny in practice. Internal rules on team composition based on diversity criteria or mandatory programmes for under-represented groups may also be rejected by US authorities.
Companies should avoid rash decisions and act carefully and in compliance with the law. DEI programmes have significant implications for corporate reputation and represent a strategic choice. As employers, companies should weigh their approach to DEI programmes thoughtfully and accompany any changes with clear and deliberate communication.
Boards need to keep track of geopolitical risks
In 2026, multinational enterprises are confronted with heightened legal and compliance risks arising from escalating trade disputes, enhanced export controls, and evolving sanctions regimes, particularly between the USA, China, and the European Union. The United States has implemented additional tariffs and expanded the scope of export controls, while the EU is pursuing new bilateral and multilateral trade agreements and updating its regulatory framework. Such foreign trade agreements regularly include chapters on sustainability, underscoring the global importance of ESG policies.
Corporations are legally obligated to conduct ongoing due diligence of their supply chains, including the identification and mitigation of vulnerabilities and the strategic use of customs regimes and free trade agreements. Maintaining adequate inventory reserves is advisable to ensure continuity of supply in the event of regulatory or logistical disruptions.
Export control compliance has become increasingly complex, as the USA, China, and the EU assert extraterritorial jurisdiction over high-technology exports. Companies must establish and maintain robust internal compliance programmes, including risk-based product classification, end-use and end-user verification, comprehensive documentation, and regular employee training. Contractual arrangements should address extraterritorial risks and incorporate force majeure provisions to mitigate exposure to regulatory changes.
Sanctions compliance is critical, given the proliferation and complexity of EU sanctions against Russia and Iran. Legal departments must ensure the inclusion of “No-Russia” clauses and best-efforts obligations in relevant contracts, implement automated sanctions screening, and establish internal reporting and training mechanisms. Ongoing monitoring of regulatory developments and regular internal and external audits are essential to demonstrate compliance and mitigate liability.
With respect to supply chain transparency and human rights due diligence, companies must comply with evolving legal obligations, including the appointment of a human rights officer. The human rights officer is responsible for overseeing compliance with human rights standards, managing escalation processes, and ensuring the establishment of internal and external whistle-blower channels. In Germany, the human rights officer has a crucial role and reports directly to the board. Proactive risk management, digital monitoring, and contractual compliance clauses are necessary to ensure legal conformity and protect corporate reputation.
Boards need to integrate the use of AI
As AI becomes increasingly central to business operations, boards are under growing pressure from both employees and the market to integrate AI into their corporate strategies. Employees expect access to advanced AI tools that can enhance productivity and innovation, while investors and customers look for companies that leverage AI to remain competitive. However, this demand must be carefully balanced with a complex and evolving legal landscape.
The European Union’s AI Act introduces a risk-based regulatory framework that requires boards to ensure robust governance over AI systems. This includes classifying AI applications according to risk, implementing human oversight, maintaining technical documentation, and conducting post-market monitoring. Non-compliance can result in significant fines based on global turnover. In Germany, additional legal requirements arise from the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and the Works Constitution Act (BetrVG), particularly where AI systems impact employee monitoring or workplace conditions. Boards must ensure that works councils are appropriately involved in the introduction of AI technologies, and that data protection impact assessments are conducted where necessary.
Moreover, ESG frameworks, such as the CSRD and the CSDDD implicitly consider potential AI effects on governance, risk management, and social factors, including diversity and inclusion. A critical aspect of both compliance and ESG is the management of data bias and algorithmic fairness. Boards are expected to implement measures for bias testing, data quality assurance, explainability, and human-in-the-loop decision-making to ensure that AI systems do not perpetuate discrimination or undermine trust.
To meet these multifaceted obligations, boards should establish comprehensive AI governance frameworks that align innovation with legal and ethical standards. This includes appointing responsible officers, such as the human rights officer, to oversee compliance with human rights and data protection requirements, and to manage escalation and whistle-blower processes. By embedding AI governance into their strategic agenda, boards can harness the benefits of AI, such as improved decision-making, compliance monitoring, and risk management, while demonstrating accountability to regulators, employees, and the broader market.
***
The challenges for boards acting in an international environment are diverse and dynamic. Boards can reduce risks for their companies and themselves by planning and acting with foresight, implementing robust compliance structures, and continuously monitoring EU- and nation-wide developments. It is crucial not only to respond to new regulations, but also to set up systems and processes in a forward-looking and resilient manner. This will enable boards to navigate successfully even in turbulent times.
Junghofstraße 9
60315 Frankfurt/Main
Germany
+49 69 2 99 08 0
+49 69 2 99 08 108
Anahita.Thoms@bakermckenzie.com www.bakermckenzie.com/en/