Article

CSRD is now final — here's what that means for your company

Now the work begins.
John Davies
John Davies

If you've been following CSRD developments over the past year, you're familiar with a pattern: a major announcement, a flood of analysis, and then more waiting. Omnibus I broke that cycle. The directive was published in the EU Official Journal on February 26 — the first anniversary of the European Commission's original proposal — and entered into force on March 18, 2026. The law is now final.

What Omnibus I actually changed

The headline change is scope. CSRD now applies to EU companies with more than 1,000 employees and net annual turnover above €450 million. For non-EU companies, the threshold is €450 million in EU net turnover at group or individual level, with an additional requirement that an EU subsidiary or branch generated at least €200 million in the preceding financial year. According to Ropes & Gray, these changes reduce the number of in-scope companies by approximately 90% from the original directive.

That's significant. But for U.S. multinationals with meaningful EU revenue or operations, the math still applies and the compliance clock is running.

The Omnibus also ended the phased wave-and-threshold implementation system. Companies that were in Wave 1 — already required to report for financial years starting in 2024 — but no longer meet the revised thresholds are exempt from reporting requirements for financial years 2025 and 2026, subject to national transposition. Wave 2 companies with EU subsidiaries that remain in scope will generally be due to report in 2028.

Beyond scope, the Omnibus simplified the underlying reporting standards. The value chain also gets relief: companies with fewer than 1,000 employees are now protected from extensive information requests from larger reporting companies, a change that matters if your suppliers have been anxious about what CSRD would demand of them.

What's still in motion

The European Sustainability Reporting Standards (ESRS) define exactly what companies must disclose and how. Technically, the simplified standards are not final, though they are unlikely to change much. The draft EFRAG published in December 2025 reduced mandatory data points by 61% and eliminated all voluntary disclosures. The European Commission has committed to adopting a final version by September 18, 2026 — six months from the directive's entry into force. The revised standards are then expected to apply beginning with financial year 2027 reporting.

Two other items remain in progress:

Member state transposition: EU member states have until March 19, 2027 to transpose the Omnibus I directive into national law. Ropes & Gray's monthly CSRD Transposition Tracker shows meaningful variation in how member states are approaching this. For multinationals with subsidiaries in multiple EU jurisdictions, the national-level details matter: translation requirements, publication obligations, and local filing rules differ by country.

Assurance: The deadline for adopting limited assurance standards has been deferred to July 1, 2027, and the obligation to adopt reasonable assurance standards has been removed entirely. Additional implementation guidance in this area is still forthcoming, particularly relevant for Wave 1 companies already in their reporting cycles.

What this means if you're a U.S. multinational

The revised thresholds may have moved some companies out of scope. If you were borderline before, it's worth a fresh assessment. But if your EU operations or revenue put you above both thresholds, Omnibus clarified your situation.

For Wave 2 companies delayed by the "Stop the clock" directive, the compliance process begins in earnest. The two-year delay bought time. That time is now being spent.

The practical to-do list: confirm whether you're in scope under the revised thresholds, identify which EU member states your operations fall under and what their specific transposition requirements look like, and use the December 2025 draft ESRS to orient your data collection now. Waiting for the September 2026 final version before building any infrastructure is a way to run out of runway before FY2027 reporting arrives.

One more thing worth noting: even companies that fall outside the revised CSRD thresholds may face indirect pressure through their value chains or enterprise customers. That dynamic — and what voluntary reporting can do about it — is worth a separate look.


Our Regulatory Readiness Solutions: Whether you’re navigating CSRD in Europe, California’s climate disclosure laws, or emerging EPR requirements, the pressure to keep up with the ever-evolving sustainability landscape is mounting. If you’ve been asked to prepare for new sustainability regulations but aren't sure where to start, you’re not alone. We help companies cut through complexity with a clear roadmap that gets you from where you are to where you need to be. Reach out today.

How to embed sustainability into your brand

The blueprint for an integrated sustainability and brand strategy

sustainability