The European Commission has published the results of its consultation on implementing the Corporate Sustainability Due Diligence Directive (CSDDD), providing an early indication of the evidence investors may seek as the framework moves towards implementation.

The factual summary, published on 11 November, covers 508 responses from 51 countries. Responses came predominantly from business associations, companies and NGOs. The findings point to a common theme across risk assessment, stakeholder engagement, assurance, purchasing practices and remediation: documentation alone may be insufficient. Investors are likely to focus more closely on whether due-diligence processes influence operational and commercial decisions in practice.

The consultation took place after changes to the CSDDD from the EU’s simplification omnibus entered into force on 18 March 2026, with Member States required to transpose the revised rules by 26 July 2028. Companies in scope must begin complying with the due-diligence requirements from 26 July 2029, while reporting obligations begin for financial years starting on or after 1 January 2030.

Stakeholder evidence could test CSDDD risk assessment

One area likely to attract investor scrutiny is the quality of information companies use to identify and prioritise risks.

Stakeholder engagement was the most frequently selected due-diligence source or method, cited by 47.6% of respondents. Media, NGO and independent reports were selected by 39.4%, complaints by 37.8%, site visits by 29.7%, and industry or multi-stakeholder initiatives by 29.5%. Multiple answers were permitted.

Respondents described using a combination of supplier data, audits, interviews, complaints, external reports, traceability tools and worker-voice mechanisms. They also highlighted barriers to obtaining reliable information, including restrictions on information, limited civic space and risks of retaliation.

Digital technologies raised similar concerns. Respondents emphasised the importance of data quality and human oversight. They also warned that excessive reliance on technology could reduce access to workers’ perspectives and stakeholder input.

Supplier questionnaires, audits and technology-based monitoring may therefore provide limited comfort if the underlying information is incomplete or insufficiently tested. Investors assessing human-rights and environmental risk management may instead focus on what evidence informs prioritisation decisions, how conflicting information is evaluated and whether affected stakeholders have meaningful routes into the process.

Third-party assurance and audit face closer investor scrutiny

The consultation results also raise questions about how much weight investors should place on external assurance.

Respondents highlighted independence, conflicts of interest, accreditation, competence, local and sector knowledge, worker involvement and transparency as important considerations in third-party verification.

Industry and multi-stakeholder initiatives were also viewed as potentially valuable. Collaborative leverage was selected as a function of such initiatives by 51% of respondents, risk identification by 50.8% and stakeholder engagement by 46.3%.

At the same time, respondents cited governance challenges including limited evidence of tangible impact, insufficient adaptation to local conditions or SME needs, and inadequate stakeholder engagement.

Participation in an industry initiative or third-party verification scheme may therefore demonstrate oversight without establishing effectiveness. More relevant investor questions may concern the independence of assurance providers, whose evidence is captured and how management responds to findings.

Purchasing practices bring due diligence closer to business decisions

The consultation responses also bring companies’ own commercial practices into sharper focus.

Respondents highlighted issues including fair pricing, living wages and incomes, reasonable lead times and incentives for longer-term supplier relationships. They also argued that model contractual clauses should address responsible purchasing practices.

This shifts attention beyond what companies require from suppliers. It raises questions about whether companies’ own purchasing decisions contribute to the risks they are seeking to manage.

Respondents requested voluntary risk-based contractual clauses covering shared responsibility, responsible purchasing, grievance mechanisms, monitoring, remedy arrangements and safeguards around termination. Some SME respondents also expressed concern about liability being transferred through contractual arrangements.

The responses suggest companies may find it harder to rely primarily on cascading contractual requirements if their own pricing, lead times or purchasing practices undermine the outcomes those requirements are intended to achieve.

Supplier disengagement may not be the lowest-risk option

The consultation results also complicate how investors interpret decisions to exit higher-risk commercial relationships.

Some 43.7% of respondents said they were aware of cases where commercial relationships had been maintained to avoid causing greater harm. Comments cited potential consequences of withdrawal including job losses, reduced wages, increased informal employment and impacts on essential services.

Disengagement therefore cannot automatically be regarded as evidence of stronger risk management. Its significance depends on how companies assessed the consequences of remaining versus withdrawing, and what mitigation or remediation measures were attempted beforehand.

Responses on remediation highlighted corrective action plans, financial compensation, participation by affected people and collaboration where multiple actors contributed to harm.

For investors, a more useful source of evidence may be management’s rationale for its decision and the steps taken to address the underlying harm.

CSDDD implementation timeline shifts focus to 2027 EU guidance

With the consultation closed and the results published, attention now turns to the European Commission’s final guidance, due by 26 July 2027.

The Commission cautions that the consultation summary should not be interpreted as the official position of the Commission or its services.

However, the responses provide an indication of where investor scrutiny may increasingly be directed as the CSDDD moves towards implementation. The emerging focus is not simply on whether companies can document due-diligence processes, but whether they can demonstrate that those processes influence decisions and outcomes in practice.