In February 2025 the European Commission proposed a substantial simplification of its sustainability rules. The European Parliament adopted the deferral element on 3 April 2025, the Council followed on 14 April, and the resulting stop-the-clock directive was given until 31 December 2025 to be written into national law.
The practical effect is that the second wave of companies brought into scope by the Corporate Sustainability Reporting Directive now reports two years later than planned, in 2028 for the 2027 financial year. The transposition deadline for the sustainability due diligence directive moved to 26 July 2027, with its first phase of application a year after that.
The reaction inside a good many organizations was to stand the work down. That is an understandable reading of a deadline moving, and it misunderstands where the exposure sits.
The deadline moved; the claims did not
Regulatory reporting is one source of sustainability risk and it is not the fastest-moving one. The statements already on your website, in your tender responses, in investor materials and on your packaging are live commitments today, and they are read by regulators, competitors, journalists and claimants without reference to any reporting timetable.
Greenwashing exposure runs off published assertions rather than off filing obligations, and the two are routinely confused at board level. An organization that has paused its sustainability work has not thereby paused the claims it made while that work was running.
The relief is narrower than the headlines suggested
Two limits on the relief are worth knowing. The deferral applies to the later waves, so companies already reporting under the first wave gained nothing from it and continue on their original timetable. Non-EU parents drawn in through their European operations were similarly untouched by the deferral as adopted.
An international group is therefore likely to contain entities on at least two different timetables, which is a harder position to administer than a single deadline and considerably easier to get wrong.
The stop-the-clock directive moved reporting deadlines by two years for the later waves. Companies already reporting under the first wave, and non-EU parents drawn in through European operations, gained nothing from it.
Evidence takes longer to assemble than a report takes to write
The part of this work that consumes years is establishing what is actually happening several tiers down a supply chain that was never designed to be transparent, with documentation somebody outside the company would accept. Drafting the report itself is a matter of weeks.
Supplier questionnaires produce answers rather than evidence. The distance between a completed questionnaire and a verified position is where most sustainability claims quietly fail, and closing it involves the same disciplines as any other due diligence exercise: independent sources, sampling, and a willingness to go and look.
An organization that stops during the deferral arrives at the new deadline in the position it occupied when it stopped. The two years are better understood as an opportunity to arrive with something defensible than as a pause in the obligation, and the organizations treating them that way are the ones that were furthest along already.
What is worth continuing regardless
- Keep mapping beyond the first tier of suppliers. Most commitments are made about conditions the organization has no direct visibility of, and the mapping is the slow part rather than the reporting.
- Give every public claim a documented basis. For each environmental or social assertion the organization has published, somebody should be able to produce the evidence for it within a week and without asking a supplier for help.
- Reconcile the marketing copy with the formal disclosure. These are usually written by different teams to different standards, and the gap between them is the first thing an adversarial reader finds.
- Keep the internal record of what was deferred. A documented decision to defer specific work, with reasons, is a considerably better position than a silent gap in the file.
The slow part of this work is establishing what happens several tiers down a supply chain that was never built to be transparent. Two years is roughly what that takes.
Verification is not the same as reporting
An ESG verification and audit asks a narrower question than a reporting exercise does. It asks whether what the organization says about itself is accurate, defensible, and supported by something that can be produced when somebody asks to see it.
That question is unaffected by the reporting timetable, which is the reason the deferral changes less than it appears to. It is also the question that arrives first in practice, because a complaint, a tender challenge or a journalist's enquiry does not wait for a filing date.
Where the answer turns out to be uncomfortable, the work moves into different territory. Establishing whether a supplier's stated practices match its actual ones is investigative work rather than reporting work, and it is better commissioned deliberately than discovered under pressure.
The question for a board
The useful test is whether the sustainability claims the organization has already published could be evidenced within a week, using material it already holds, rather than whether it is ready for a deadline that has moved.
Where the answer is no, the deferral has bought time to fix it rather than permission to stop. Our Book of the Month shelf has The Cheating Culture, which is a useful companion here for its account of how ordinary organizations talk themselves into claims they cannot support.
Falcone International
Bring us a question like this one
We handle corporate investigations, due diligence, financial investigations and duty of care — usually for people who need something established quietly, and established properly, before it turns into a problem.