Supply Chain Law: the CSDDD Deadline, What German Corporates Must Do

The supply chain law CSDDD deadline has become one of the most closely watched compliance milestones in European corporate governance, yet few issues have generated as much confusion among German in-house counsel as the shifting timeline for its practical application. Directive 2024/1760 on corporate sustainability due diligence, the CSDDD, entered into force on 25 July 2024, but the Omnibus Simplification Package has since altered the thresholds, staggered the application dates and left critical implementation questions unanswered at the national level. For companies already subject to Germany’s Lieferkettensorgfaltspflichtengesetz (LkSG), the question is no longer whether new obligations are coming, but precisely when they apply, to whom, and what practical steps compliance teams should take during this volatile transposition window.

What Changed and Why Regulatory Uncertainty Around the CSDDD Deadline Matters

When the European Council formally adopted the CSDDD on 24 May 2024, the directive established a clear framework: member states would transpose its provisions into national law, and companies meeting defined size and turnover thresholds would begin conducting supply chain due diligence on human rights and environmental impacts across their value chains. The original text of Directive 2024/1760 set out a staggered application calendar, with the largest companies expected to fall within scope first and smaller in-scope entities following in subsequent phases.

Then came the Omnibus Simplification Package. The European Commission’s Omnibus proposals, designed to reduce regulatory burden on businesses, introduced significant modifications to the CSDDD’s practical application. According to analysis published by Fieldfisher in January 2026, the Omnibus changes postponed certain practical application dates, with some practitioner sources reporting an effective start date of 26 July 2028 for the first tier of in-scope companies. Wirtschaft-Entwicklung, reporting on the Omnibus I update in March 2026, cited advisory commentary suggesting that practical effective dates could extend as far as 26 July 2029 for certain categories of undertaking.

The consequence for corporate counsel in Germany is a layered compliance puzzle. Three scenarios illustrate the problem:

• Scenario 1, Large multinational (5,000+ employees, €1.5 billion+ turnover). This company was originally in the first application tier. Under the Omnibus proposals, industry observers expect its practical compliance start date to shift to 26 July 2028. Counsel must decide now whether to continue building CSDDD-aligned processes or pause investment pending final transposition.
• Scenario 2, Mid-cap German manufacturer (1,000+ employees, €450 million turnover). This entity already complies with the LkSG. The CSDDD would layer additional environmental due diligence and climate transition planning on top of existing LkSG obligations. With potential application dates ranging from 2028 to 2029, counsel faces a resource-allocation question: align LkSG processes with CSDDD now, or wait for Germany’s transposition law to clarify scope?
• Scenario 3, SME supplier to a large in-scope company. Although SMEs below the directive’s thresholds are not directly subject to CSDDD, contractual cascade effects mean they may face new due diligence demands from their customers. Early indications suggest that supply chain contractual clauses referencing CSDDD requirements are already appearing in procurement agreements across sectors.

The central risk is not the CSDDD itself, it is the regulatory uncertainty surrounding its final implementation dates. Companies that wait for absolute clarity risk being caught without adequate due diligence systems when transposition takes effect. Companies that invest too early risk building processes around requirements that may change again. Industry observers expect this tension to persist until Germany publishes its final transposition legislation.

Three practical steps can mitigate this uncertainty:

• Anchor to the Directive text. Use the official provisions of Directive 2024/1760, not advisory summaries, as the baseline for compliance architecture. Regardless of Omnibus modifications, the core obligations (prevention, remediation, grievance, climate planning) remain structurally intact.
• Build modular compliance processes. Design supply chain due diligence workflows that can scale up or down depending on final scope and thresholds. A modular approach avoids sunk costs if application dates shift again.
• Monitor national transposition closely. The German Federal Ministry of Labour and Social Affairs (BMAS) will publish the transposition instrument. Subscribe to official channels and track legislative drafts through the Bundestag process.

The likely practical effect of the Omnibus changes will be a compliance environment where the largest companies face binding obligations from mid-2028, with broader application following by 2029. Counsel who treat this as a fixed deadline, rather than waiting for certainty, will be best positioned to advise their boards effectively.

Quick Facts, Official CSDDD Deadline Dates and Where to Verify Them

The table below summarises the key legislative milestones. Authoritative text: Directive 2024/1760 (entered into force 25 July 2024), transposition deadlines vary; always verify against the Commission’s official page and national transposition instruments.

Note: Where industry sources differ on dates, the Directive text and European Commission factsheet represent the authoritative baseline. Omnibus-adjusted dates reflect proposed amendments and practitioner interpretation, always confirm against the final national transposition law published by the BMAS.

What the CSDDD Requires: Core Due Diligence Obligations

Directive 2024/1760 establishes a comprehensive due diligence framework covering human rights and environmental impacts across a company’s chain of activities. Understanding these due diligence obligations under the CSDDD is essential for any compliance team preparing for the supply chain law CSDDD deadline. The core obligations fall into three categories.

Preventive Measures

In-scope companies must identify and assess actual and potential adverse human rights and environmental impacts in their own operations, those of their subsidiaries and those of their business partners throughout the value chain. The Directive requires companies to:

• Integrate due diligence into corporate policies and risk management systems
• Adopt and implement a due diligence policy approved at board level
• Take appropriate measures to prevent or mitigate potential adverse impacts
• Establish prioritisation procedures where it is not feasible to address all identified impacts simultaneously

Remediation and Grievance Mechanisms

Where adverse impacts have already occurred, companies must take appropriate action to bring them to an end and remediate their effects. A critical operational requirement is the establishment of a grievance mechanism, a complaints procedure accessible to affected persons, trade unions, civil society organisations and other relevant stakeholders. The grievance mechanism under the CSDDD must be:

• Accessible, fair and transparent
• Capable of receiving and processing complaints from those affected by value chain impacts
• Designed to provide information to complainants on the follow-up to their submission

Climate Transition Plan Obligations

One of the CSDDD’s most distinctive provisions, and a significant departure from Germany’s existing LkSG framework, is the climate transition plan requirement. In-scope companies must adopt and implement a transition plan for climate change mitigation aligned with the Paris Agreement’s 1.5°C target. This obligation includes setting time-bound emissions reduction targets and describing the decarbonisation levers the company intends to deploy. Early indications suggest that this provision will be particularly impactful for German industrial companies with energy-intensive supply chains.

Scope and CSDDD Thresholds After the Omnibus Changes

Determining whether a company falls within scope is the first compliance question counsel must answer. The Omnibus Simplification Package proposed changes to the size and turnover thresholds originally set out in the Directive, altering which companies face direct obligations and when.

The practical effect for Germany is significant. Under the original thresholds, a substantial number of German Mittelstand companies would have been drawn into scope, either directly or through the high-risk sector provisions. The Omnibus proposals narrow direct applicability to the very largest companies, at least in the first application tier. Industry observers expect, however, that indirect supply chain effects will continue to reach smaller companies through contractual obligations imposed by their in-scope customers.

Counsel should conduct a threshold assessment using current employee counts and consolidated turnover figures, then monitor the final transposition text for any German-specific modifications to the EU thresholds.

Interaction with Germany’s LkSG: Practical Impact for Supply Chain Due Diligence in Germany

Germany’s LkSG, the Lieferkettensorgfaltspflichtengesetz, in force since 1 January 2023, already requires companies with 1,000 or more employees to conduct human rights due diligence in their supply chains. According to the BMAS, the LkSG remains in force, although certain external reporting obligations have been modified in anticipation of the CSDDD transposition.

The two instruments overlap substantially but differ in several critical respects:

• Environmental obligations. The LkSG addresses environmental due diligence only where environmental harm leads to human rights violations. The CSDDD imposes standalone environmental due diligence obligations and adds the climate transition plan requirement.
• Scope of the value chain. The LkSG focuses primarily on direct suppliers and, to a lesser extent, indirect suppliers. The CSDDD extends due diligence across the full chain of activities, including downstream relationships.
• Civil liability. The LkSG explicitly excludes a private right of action for breach. The CSDDD introduces a civil liability regime, creating the possibility of court claims by affected parties, a significant shift for German corporate risk management.
• Enforcement. The LkSG is enforced by BAFA (Federal Office for Economic Affairs and Export Control). The CSDDD requires each member state to designate a supervisory authority with investigation and sanction powers, but also layers in civil court jurisdiction.

The likely practical effect is that Germany’s transposition law will either amend the LkSG or replace it with a new statute that incorporates CSDDD requirements. Until that happens, companies should maintain their existing LkSG compliance architecture and begin building the additional modules, climate planning, expanded value chain mapping, grievance mechanism upgrades, that the CSDDD will require.

Practical Roadmap, 12-Month Corporate Compliance CSDDD Plan for Counsel

Regardless of the precise transposition date, the following 12-month action plan provides a structured approach to CSDDD readiness. This roadmap is designed for compliance teams that already operate under the LkSG and need to scale up their supply chain due diligence in Germany.

• Months 1–2: Governance and ownership. Assign board-level responsibility for CSDDD compliance. Designate a project lead (typically the Chief Compliance Officer or General Counsel). Establish an internal steering committee with representatives from legal, procurement, sustainability and operations.
• Months 3–4: Threshold and scope assessment. Calculate employee headcount and consolidated turnover against current and proposed CSDDD thresholds. Identify which group entities and business units fall within scope. Document the assessment methodology for audit purposes.
• Months 5–6: Value chain mapping. Expand existing LkSG supplier mapping to cover the full chain of activities, including indirect suppliers and downstream business relationships. Identify and prioritise high-risk segments by geography, sector and commodity.
• Months 7–8: Policy and process alignment. Update the corporate due diligence policy to reference CSDDD requirements. Integrate environmental due diligence into existing human rights processes. Draft or update the climate transition plan with time-bound targets.
• Months 9–10: Contractual and grievance updates. Revise supplier contracts to include CSDDD-aligned due diligence clauses. Upgrade the grievance mechanism to meet accessibility and transparency requirements. Train procurement and supplier-facing teams on new procedures.
• Months 11–12: Testing and board reporting. Conduct a dry-run compliance assessment. Report results to the board and audit committee. Identify gaps and allocate budget for remediation. Establish KPIs for ongoing monitoring (e.g., percentage of high-risk suppliers assessed, grievance response times, climate target progress).

Enforcement and Liability Risks, What Counsel Must Advise Boards

The enforcement architecture of the CSDDD represents a material change in risk exposure for German companies. Under the Directive, member states must designate supervisory authorities with powers to investigate, impose corrective measures and levy administrative sanctions, including fines calculated as a percentage of net worldwide turnover. According to KPMG’s supply chain due diligence overview, the Directive also introduces civil liability provisions, enabling affected parties to bring claims in national courts for damages resulting from a company’s failure to comply with its due diligence obligations.

For boards and management, the practical implications are threefold:

• Financial exposure. Fines linked to turnover can be substantial. Civil liability claims add an additional layer of financial risk that does not exist under the current LkSG framework.
• Reputational risk. Regulatory enforcement actions and civil claims are public events. Non-compliance can trigger investor, customer and media scrutiny that extends well beyond the immediate financial penalty.
• Director duties. The Directive places due diligence responsibilities at board level, creating potential personal liability exposure for directors who fail to implement adequate compliance systems.

Resources and Next Steps

Navigating the supply chain law CSDDD deadline requires specialist guidance tailored to each company’s size, sector and existing compliance infrastructure. Germany-focused compliance advisory can help in-house teams assess scope, build modular due diligence systems and prepare for transposition. Corporate counsel seeking a compliance specialist should engage early to ensure that governance frameworks, supplier contracts and grievance mechanisms are aligned with both the LkSG and the incoming CSDDD requirements before the transposition deadline arrives.

Conclusion

The supply chain law CSDDD deadline presents German companies with a compliance challenge defined as much by regulatory uncertainty as by the substance of the obligations themselves. The path forward for corporate counsel is clear: map your value chain now, assess your threshold exposure against both original and Omnibus-adjusted figures, align your existing LkSG processes with CSDDD requirements and build modular systems that can adapt as the transposition timeline crystallises. Companies that begin this work today, rather than waiting for final legislative clarity, will be positioned to meet their due diligence obligations on time, protect their boards from liability exposure and demonstrate compliance leadership in an increasingly scrutinised regulatory environment.

Sources

1. European Commission, Corporate sustainability due diligence
2. Federal Ministry of Labour and Social Affairs (BMAS), Supply Chain Act (LkSG)
3. Fieldfisher, Update on German Supply Chain Act and EU CSDDD (Jan 2026)
4. KPMG, Supply chain due diligence overview
5. DFGE, LkSG & CSDDD
6. Normative, CSDDD explained
7. Wirtschaft-Entwicklung, Omnibus I update and practical implementation (Mar 2026)