CSRD Portugal 2026: Scope, Deadlines and Compliance Steps

CSRD Portugal has become one of the most pressing corporate compliance topics for boards and finance teams operating in Portugal, and 2026 marks a decisive rollout year for new reporting cohorts across the European Union. The Corporate Sustainability Reporting Directive (Directive (EU) 2022/2464) fundamentally expands both the number of companies required to report sustainability information and the depth of what they must disclose under the European Sustainability Reporting Standards (ESRS). For Portuguese entities, whether listed companies, large undertakings, or subsidiaries of EU parents, the practical challenge in 2026 is mapping scope accurately, building ESRS-aligned data collection, and deciding an assurance pathway before the first reporting window closes.

This guide sets out the legal framework, scope tests, disclosure requirements, and a step-by-step readiness roadmap tailored to Portuguese corporate governance realities.

Executive summary: CSRD Portugal 2026 at a glance

The CSRD amends and builds on the earlier Non-Financial Reporting Directive regime, introducing a broader, standardised and assured sustainability reporting framework. Reporting obligations are phased by company type, with large undertakings and certain groups entering scope during this period. Companies must report against the ESRS, developed by EFRAG, which cover environmental, social and governance disclosures in structured detail.

For most Portuguese companies preparing for CSRD in 2026, three immediate actions should be prioritised at C-suite level:

• Run a scope and gap analysis. Confirm whether your entity or group is in scope for the current reporting phase and identify the gap between existing non-financial reporting and full ESRS disclosure.
• Assign data owners. Sustainability data spans finance, HR, procurement, legal and operations, appoint accountable owners now so data lineage is defensible under assurance.
• Decide your assurance pathway. The CSRD requires assurance of sustainability information; engage an assurance provider early and plan for limited assurance as the initial standard.

Getting these three decisions right early reduces both cost and last-minute risk. The sections below expand each into a practical compliance framework for CSRD Portugal.

What the CSRD requires now: legal status, ESRS and timelines

The CSRD is European Union legislation that applies across all Member States, including Portugal, following national transposition. It significantly strengthens the sustainability reporting obligations that companies must meet, moving from a comparatively light non-financial reporting regime to more detailed, standardised and independently assured disclosures. The European Commission maintains the authoritative policy overview, and the definitive legal text is published in the Official Journal of the European Union.

CSRD legal basis and key articles

The Corporate Sustainability Reporting Directive is Directive (EU) 2022/2464, amending the Accounting Directive (Directive 2013/34/EU), the Transparency Directive, the Audit Directive and the Audit Regulation. It introduces mandatory reporting under a common set of standards, extends the population of reporting companies, and requires that sustainability information be assured rather than merely published. The directive also defines the categories of undertaking to which reporting applies, including the concept of a “large undertaking” measured against size thresholds. Because the directive is EU-level legislation, its obligations take effect in Portugal through national transposition, and Portuguese companies should monitor transposition texts published in the Diário da República and guidance issued by national authorities.

ESRS and technical standards

The substance of what companies report is set by the European Sustainability Reporting Standards. These standards, developed by EFRAG as technical adviser to the European Commission and adopted by the Commission as delegated acts, specify the disclosure requirements across environmental, social and governance topics. The ESRS operate on a “double materiality” logic: companies must report both on how sustainability matters affect the business (financial materiality) and on how the business affects people and the environment (impact materiality). This is a substantial expansion from prior practice, and it is the ESRS, not the directive text alone, that determines the granular data points each Portuguese reporter must collect and disclose.

Phased deadlines

The CSRD applies in phases, with different cohorts of companies entering scope over successive reporting years. The table below summarises the phased structure that Portuguese companies should use to determine when their first CSRD-compliant report is due. Companies should verify the precise applicable phase against the Commission’s implementation guidance and the transposing Portuguese legislation, as the sequencing has been subject to revision through the Omnibus process discussed later in this guide.

This answers a common question, the current status of the CSRD: it is in force as EU law, its standards are adopted, and its reporting obligations are being rolled out on a phased basis, with 2026 an active year for reporting and preparation across affected Portuguese entities. Companies should note that the Omnibus process has proposed changes to the phasing and scope, so the applicable timing should always be confirmed against the latest Commission and national sources.

Who is in scope in Portugal for 2026: company thresholds and examples

Determining scope is the single most important step for any Portuguese company approaching CSRD compliance. Scope depends on company type and size, and, critically for groups, on how entities are counted together. Getting this analysis right avoids both over-reporting and the far greater risk of missing a mandatory filing.

EU thresholds explained

The CSRD applies to large undertakings and to listed companies, among others. A “large undertaking” is generally identified by whether it exceeds two of three size criteria, measured across balance sheet total, net turnover and average number of employees during the financial year. Listed companies fall within scope irrespective of size in the phases applicable to them, subject to limited exceptions for the smallest listed entities. The exact numerical thresholds are set in the directive and its amending instruments and should be confirmed directly against the Official Journal text and Commission guidance before any scoping decision is finalised, particularly as the thresholds have been the subject of proposed adjustment through the Omnibus process.

Applying thresholds in Portugal: how to count group entities

For Portuguese companies within a wider corporate group, the scope test is not applied to the standalone entity in isolation. Where a parent prepares consolidated financial statements, the group thresholds and consolidated sustainability reporting rules become relevant. A Portuguese subsidiary may be covered through a parent’s consolidated sustainability statement, but this does not automatically remove all local obligations, and companies must confirm whether an exemption genuinely applies to their structure. Portuguese legal forms, such as the sociedade anónima and the sociedade por quotas, must be mapped to the directive’s categories of undertaking, and consolidation relationships assessed carefully, particularly where holding structures span multiple jurisdictions.

Practical examples: three Portuguese company profiles

The following illustrative profiles show how scope analysis plays out in practice for CSRD Portugal:

• Listed Portuguese sociedade anónima. A company with shares admitted to trading on a regulated market falls within the listed-company scope for its applicable phase and must prepare full ESRS disclosures with assurance.
• Large private group parent in Portugal. A privately held Portuguese parent exceeding two of the three size criteria at consolidated level must produce consolidated sustainability reporting covering the group, including its subsidiaries.
• Portuguese subsidiary of an EU parent. A subsidiary whose EU parent prepares consolidated sustainability statements under CSRD may be covered through that consolidated reporting, but should verify that the exemption conditions are met and whether any local disclosure remains required.

Mini FAQ, does an EU parent make a Portuguese subsidiary report? Not automatically in a standalone sense. If the parent reports under CSRD at consolidated level and the exemption conditions are satisfied, the subsidiary may be covered by that consolidated statement. However, the subsidiary should confirm the exemption’s applicability and check whether local filing obligations persist, referring to Commission guidance and Portuguese transposition rules.

CSRD reporting requirements Portugal: what must be reported under ESRS

Once scope is confirmed, attention turns to the substance of disclosure. The ESRS require reporting across environmental, social and governance pillars, subject to the outcome of each company’s double-materiality assessment. This section breaks down the principal disclosure areas that Portuguese reporters must address, along with the methodologies that underpin them.

Climate and environment: GHG, energy and biodiversity

Environmental disclosures are among the most demanding elements of CSRD reporting requirements in Portugal. Companies must report greenhouse gas emissions across Scope 1 (direct emissions), Scope 2 (indirect emissions from purchased energy) and Scope 3 (other value-chain emissions), following recognised accounting methodology. The GHG Protocol Corporate Accounting and Reporting Standard is an established technical reference for measuring and categorising Scope 1 to 3 emissions and is a practical foundation for the emissions data the ESRS require. Beyond emissions, environmental disclosures extend to energy consumption, pollution, water and marine resources, biodiversity and ecosystems, and resource use and the circular economy, each addressed to the extent it is material to the reporting company.

Social and human rights: due diligence and workforce

The social pillar of the ESRS covers a company’s own workforce, workers in the value chain, affected communities, and consumers and end-users. Disclosures address matters such as working conditions, equal treatment and opportunities, human rights, and the policies and processes a company has in place to identify and manage adverse impacts. For Portuguese employers, this means coordinating data held across human resources and legal functions, and, importantly, extending visibility into the value chain, a point where CSRD reporting and CSDDD due-diligence obligations intersect closely.

Governance and anti-corruption

Governance disclosures address business conduct, including the role of administrative, management and supervisory bodies, business ethics and corporate culture, the management of relationships with suppliers including payment practices, and the prevention and detection of corruption and bribery. In the Portuguese context, these disclosures sit alongside established corporate governance expectations, and boards should align ESRS governance reporting with existing corporate governance practices to present a coherent picture to stakeholders and assurance providers.

The table below contrasts the CSRD/ESRS regime with the typical non-financial reporting that preceded it, illustrating the scale of change for Portuguese boards.

Interaction with CSDDD: scope, timing and practical overlap

The Corporate Sustainability Due Diligence Directive (Directive (EU) 2024/1760) operates alongside the CSRD but serves a different purpose. Where the CSRD is a reporting instrument, the CSDDD imposes operational obligations on certain companies to conduct due diligence on adverse human rights and environmental impacts within their operations and value chains. For Portuguese companies, understanding this relationship is essential to avoid duplicated effort and to build a single, coherent sustainability compliance programme.

CSDDD scope and timeline

The CSDDD applies to certain large companies and establishes duties to identify, prevent, mitigate and account for adverse impacts connected to their business activities and value chains. Its scope is defined by size and turnover thresholds set out in the directive, and its obligations are being phased in over time. The European Commission maintains the authoritative source on CSDDD scope and its interaction with the CSRD, and Portuguese companies should track transposition of the CSDDD into national law alongside their CSRD preparations. Companies should note that the CSDDD’s timing and scope have also been subject to proposed change through the Omnibus process.

Mapping CSRD disclosures to CSDDD due diligence

The practical overlap is significant. Many of the processes the CSDDD requires, mapping suppliers, assessing value-chain risks, defining mitigation actions and tracking key performance indicators, generate precisely the operational data that ESRS disclosures call for. A company that builds robust due-diligence processes for CSDDD purposes will find much of the underlying evidence base for its CSRD social, human rights and value-chain disclosures already in place. Treating the two regimes as a single data and governance exercise avoids collecting the same information twice through separate workstreams.

Immediate steps to align both programmes

To coordinate CSRD and CSDDD compliance, Portuguese companies should:

• Build a single value-chain map. One authoritative supplier and value-chain map should serve both due-diligence and reporting purposes.
• Define shared KPIs. Establish metrics that satisfy both CSDDD monitoring duties and ESRS disclosure requirements.
• Assign integrated ownership. Place procurement, legal, ESG and operations under a coordinated governance structure covering both obligations.

This answers a further common question, the scope of the CSDDD is defined by company size and turnover thresholds set in the directive, and its due-diligence duties are closely connected to the value-chain disclosures required under the CSRD.

Data architecture, internal controls and assurance options

Sustainability reporting under the CSRD is, in practice, a data-management challenge as much as a legal one. The reliability of disclosures, and their ability to withstand assurance, depends on a well-designed data architecture with clear ownership, controls and traceability. This is where many Portuguese companies will need to invest most heavily in the run-up to their first report.

Data owners and process map

Sustainability data originates across the organisation. Emissions and energy data typically sit with operations and facilities; workforce data with human resources; value-chain and supplier data with procurement; governance and ethics data with legal and compliance; and financial-materiality inputs with finance. Each data point in the ESRS should be assigned a named owner responsible for its accuracy, timeliness and source documentation. A process map linking each disclosure to its owner and source system is the backbone of a defensible reporting programme.

IT systems and data lineage

The CSRD requires sustainability information to be prepared in a structured, digitally tagged format, which places demands on the systems that capture and consolidate the data. Companies should assess whether existing systems can produce the required data points with reliable lineage, a clear trail from source record to reported figure, or whether dedicated ESG data tooling is needed. Assurance providers will test this lineage, so weak or manual data trails create both cost and risk. Establishing data lineage early is a recurring theme in successful CSRD Portugal implementations.

Assurance options and readiness checklist

The CSRD requires that sustainability information be assured, and Member States phase in the level of assurance required. In the initial period, limited assurance is the standard, with a potential move to reasonable assurance as the framework evolves. Portuguese companies should confirm the applicable assurance level and timetable with the competent national authorities and against the transposing legislation, and plan accordingly. Practical readiness for assurance includes documented methodologies, retained evidence, reconciliations for emissions data, and clear governance sign-off. Engaging an assurance provider before the first reporting cycle allows any gaps to be addressed while there is still time to remediate.

Practical six-step CSRD readiness roadmap for Portuguese companies

The following roadmap converts the requirements above into an actionable sequence. Each step should have an assigned owner and a deadline mapped to your first reporting year.

1. Scope assessment. Confirm whether the entity or group is in scope for the applicable phase, applying the size and listing tests and analysing group consolidation.
2. Gap analysis against ESRS. Compare current reporting with the full ESRS disclosure set, informed by a double-materiality assessment, to identify missing data and processes.
3. Data collection and responsibilities. Assign data owners, map each disclosure to a source system, and establish collection processes with clear lineage.
4. Governance and policies. Update policies, board oversight and internal controls so that sustainability reporting is governed to the same standard as financial reporting.
5. Assurance procurement. Engage an assurance provider, agree scope and level, and run a readiness review ahead of the first cycle.
6. First filing and disclosures. Prepare the sustainability statement in the required digital format, obtain assurance, secure board approval and publish within the applicable deadline.

Companies should maintain a readiness tracker that lists each ESRS item, its assigned owner, source system and first reporting year, updated as the programme progresses. This single document becomes the operational heart of CSRD Portugal compliance.

Enforcement, penalties and supervisory bodies in Portugal

Enforcement of sustainability reporting in Portugal falls to national supervisory arrangements operating within the EU framework. The consequences of non-compliance extend beyond formal sanction to significant reputational and market risk, particularly for listed companies and those in regulated sectors or with international investor bases.

Portuguese supervisors and the CMVM role

The Comissão do Mercado de Valores Mobiliários (CMVM), the Portuguese securities regulator, has a central role in supervising the reporting of companies within its remit, and companies should consult CMVM guidance on national supervisory expectations, assurance timelines and enforcement. Alongside formal supervision, the Instituto Português de Corporate Governance provides national corporate governance context and best-practice guidance that boards should align with when structuring their reporting and oversight. Companies should also monitor the Diário da República for transposition measures that set out specific national enforcement provisions and any additional obligations. Beyond regulatory sanction, the practical effect of non-compliance includes investor scrutiny, reduced access to sustainable finance, and reputational damage, often more consequential than the formal penalty itself.

Quick compliance templates and annexes

To operationalise the guidance above, Portuguese companies should build two simple but powerful working documents.

The first is an ESRS mapping table structured to link each disclosure to its accountable owner and source, using columns for the ESRS item, the responsible data owner, the source system, and the first reporting year. This becomes the master tracker for readiness and assurance.

The second is a board-pack disclosure summary that presents the status of each material topic, the assurance position, and outstanding gaps, enabling directors to exercise informed oversight and to record their approval of the sustainability statement.

CSRD vs CSDDD: a comparison for Portuguese companies

The table below summarises the essential differences and links between the two regimes, which together define much of the sustainability compliance agenda for CSRD Portugal.

Context and related corporate reporting: the Omnibus and tax

Companies planning for CSRD in 2026 should also track the EU Omnibus process, through which the Commission has proposed simplifications and adjustments to the sustainability reporting and due-diligence framework, including changes affecting scope and timing. Because the Omnibus can alter which companies report and when, Portuguese entities should confirm their obligations against the most current Commission guidance and the transposing national legislation rather than relying on earlier assumptions. The practical effect for many companies is a need to keep scope analysis under review as the framework is refined.

On the frequently asked question of corporate taxation, the corporate tax rate in Portugal and the wider tax burden on companies, these matters sit outside the CSRD framework and should be assessed against dedicated tax sources. The standard corporate income tax (IRC) rate in Portugal, together with any applicable municipal surtax (derrama) and state surtax (derrama estadual), is set by national law and periodically amended; companies should confirm the current rates with the Autoridade Tributária e Aduaneira and take specific tax advice for their circumstances rather than conflating tax planning with sustainability reporting obligations.

Conclusion and next steps for CSRD Portugal

CSRD Portugal compliance in 2026 rests on three disciplines: an accurate scope analysis, a well-governed ESRS data architecture, and a considered assurance pathway, all coordinated with CSDDD due diligence to avoid duplicated effort. Companies that treat sustainability reporting with the same rigour they apply to financial reporting, assign clear data ownership, and engage assurance providers early will be best placed to file confidently and withstand supervisory scrutiny. Because scope and timing continue to be shaped by the Omnibus process and national transposition, boards should keep their analysis under active review against primary sources.

For a tailored, audit-ready gap assessment of your CSRD Portugal obligations, the Global Law Experts Portugal corporate team can help you map scope, build your ESRS readiness plan and align your reporting and due-diligence programmes.

This article provides general information on CSRD Portugal and does not constitute legal advice. Companies should obtain tailored counsel on their specific circumstances and confirm scope, deadlines and national transposition against primary sources before acting.

Sources

1. European Commission, Corporate sustainability reporting (CSRD)
2. European Commission, Corporate sustainability due diligence (CSDDD)
3. EUR-Lex, Corporate Sustainability Reporting Directive (Directive (EU) 2022/2464)
4. EUR-Lex, Corporate Sustainability Due Diligence Directive (Directive (EU) 2024/1760)
5. EFRAG, European Sustainability Reporting Standards (ESRS)
6. Comissão do Mercado de Valores Mobiliários (CMVM)
7. Instituto Português de Corporate Governance
8. GHG Protocol, Corporate Accounting and Reporting Standard