CSRD: Corporate Sustainability Reporting Directive

What Is CSRD?

The Corporate Sustainability Reporting Directive (CSRD) is the EU's comprehensive sustainability disclosure regulation, adopted in November 2022. It replaces the Non-Financial Reporting Directive (NFRD) and dramatically expands the scope, detail, and rigor of required sustainability reporting in Europe.

CSRD brings approximately 50,000 companies into mandatory sustainability reporting scope — up from roughly 11,000 under NFRD. For the first time, sustainability reports must be included in the management report, digitally tagged in XBRL format, and subject to mandatory external assurance.

Who It Applies To

CSRD uses a phased approach:

Important: the criteria apply at the individual entity or consolidated group level. A non-EU parent company may be in scope through its EU subsidiaries.

Key Requirements

Double materiality assessment: Companies must assess both impact materiality (their effects on people and environment) and financial materiality (how sustainability topics affect the company financially). A topic is reportable if it meets either threshold.

ESRS compliance: Report against the European Sustainability Reporting Standards — detailed, prescriptive standards covering:

• ESRS 2: General disclosures (mandatory for all companies)
• E1-E5: Climate change, pollution, water, biodiversity, circular economy
• S1-S4: Own workforce, value chain workers, communities, consumers
• G1: Business conduct

Value chain coverage: ESRS requires disclosure on impacts, risks, and opportunities across the full value chain — upstream suppliers, own operations, and downstream customers.

Digital tagging: Reports must be tagged in XBRL format per the ESRS digital taxonomy, enabling machine-readable disclosure.

External assurance: Limited assurance is mandatory from the first reporting year, with plans to move to reasonable assurance by approximately 2028.

Timeline and Deadlines

• January 2023: CSRD entered into force
• July 2023: First set of ESRS adopted by European Commission
• FY2024: Phase 1 companies begin reporting
• FY2025: Phase 2 companies begin reporting
• FY2026: Phase 3 (listed SMEs) begin — with opt-out until FY2028
• FY2028: Phase 4 (non-EU companies) begin
• ~2028: Transition from limited to reasonable assurance (timeline TBC)

Compliance Steps

1. Determine your scope and timeline: Confirm which entities are in scope and when
2. Conduct double materiality assessment: Identify material topics across all ESRS standards
3. Gap analysis: Map required ESRS datapoints against current data availability
4. Build data infrastructure: Establish systems for collecting, validating, and managing required data
5. Prepare narrative disclosures: Develop governance, strategy, and risk management narratives
6. Engage assurance provider: Select and engage your assurer early in the process
7. Draft sustainability statement: Write the ESRS-compliant sustainability section of the management report
8. XBRL tagging: Tag the sustainability statement per ESRS digital taxonomy
9. Assurance engagement: Complete the assurance process
10. Board approval and filing: Obtain board approval and file with the management report

Penalties

Penalties are determined by individual EU member states during national transposition. Expected enforcement mechanisms include:

• Financial penalties (fines)
• Public naming of non-compliant companies
• Director liability for management report content
• Securities regulator enforcement for listed companies
• Potential impact on access to EU public procurement

How Council Fire Can Help

Council Fire provides end-to-end CSRD compliance support — from double materiality assessment through ESRS gap analysis, data system design, report drafting, and assurance readiness. Contact us to discuss your CSRD compliance needs.