What the two-year delay to EU sustainability reporting does not change

In February 2025 the European Commission proposed a substantial simplification of its sustainability rules. The European Parliament adopted the deferral element on 3 April 2025, the Council followed on 14 April, and the resulting stop-the-clock directive was given until 31 December 2025 to be written into national law.

The practical effect is that the second wave of companies brought into scope by the Corporate Sustainability Reporting Directive now reports two years later than planned, in 2028 for the 2027 financial year. The Omnibus I directive published on 26 February 2026 has since limited reporting to companies with more than 1,000 employees and net turnover above €450 million, which takes many second-wave companies out of scope altogether. The transposition deadline for the sustainability due diligence directive first moved to 26 July 2027, and the Omnibus I directive published on 26 February 2026 has since moved it again, to 26 July 2028, with application from 26 July 2029 and only for companies with more than 5,000 employees and net turnover above €1.5 billion.

The reaction inside a good many organizations was to stand the work down. That is an understandable reading of a deadline moving, and it misunderstands where the exposure sits.

The deadline moved; the claims did not

Regulatory reporting is one source of sustainability risk and it is not the fastest-moving one. The statements already on your website, in your tender responses, in investor materials and on your packaging are live commitments today, and they are read by regulators, competitors, journalists and claimants without reference to any reporting timetable.

Greenwashing exposure runs off published assertions rather than off filing obligations, and the two are routinely confused at board level. An organization that has paused its sustainability work has not thereby paused the claims it made while that work was running.

The relief is narrower than the headlines suggested

Two limits on the relief are worth knowing. The deferral applies to the later waves, so companies already reporting under the first wave gained nothing from the stop-the-clock directive and continue on their original timetable, although the later Omnibus I directive lets Member States exempt first-wave companies that fall below its new thresholds from reporting for financial years 2025 and 2026. Non-EU parents drawn in through their European operations were similarly untouched by the deferral as adopted.

An international group is therefore likely to contain entities on at least two different timetables, which is a harder position to administer than a single deadline and considerably easier to get wrong.

Evidence takes longer to assemble than a report takes to write

The part of this work that consumes years is establishing what is actually happening several tiers down a supply chain that was never designed to be transparent, with documentation somebody outside the company would accept. Drafting the report itself is a matter of weeks.

Supplier questionnaires produce answers rather than evidence. The distance between a completed questionnaire and a verified position is where most sustainability claims quietly fail, and closing it involves the same disciplines as any other due diligence exercise: independent sources, sampling, and a willingness to go and look.

An organization that stops during the deferral arrives at the new deadline in the position it occupied when it stopped. The two years are better understood as an opportunity to arrive with something defensible than as a pause in the obligation, and the organizations treating them that way are the ones that were furthest along already.

What is worth continuing regardless

• Keep mapping beyond the first tier of suppliers. Most commitments are made about conditions the organization has no direct visibility of, and the mapping is the slow part rather than the reporting.
• Give every public claim a documented basis. For each environmental or social assertion the organization has published, somebody should be able to produce the evidence for it within a week and without asking a supplier for help.
• Reconcile the marketing copy with the formal disclosure. These are usually written by different teams to different standards, and the gap between them is the first thing an adversarial reader finds.
• Keep the internal record of what was deferred. A documented decision to defer specific work, with reasons, is a considerably better position than a silent gap in the file.

Verification is not the same as reporting

An ESG verification and audit asks a narrower question than a reporting exercise does. It asks whether what the organization says about itself is accurate, defensible, and supported by something that can be produced when somebody asks to see it.

That question is unaffected by the reporting timetable, which is the reason the deferral changes less than it appears to. It is also the question that arrives first in practice, because a complaint, a tender challenge or a journalist's inquiry does not wait for a filing date.

Where the answer turns out to be uncomfortable, the work moves into different territory. Establishing whether a supplier's stated practices match its actual ones is investigative work rather than reporting work, and it is better commissioned deliberately than discovered under pressure.

The question for a board

The useful test is whether the sustainability claims the organization has already published could be evidenced within a week, using material it already holds, rather than whether it is ready for a deadline that has moved.

Where the answer is no, the deferral has bought time to fix it rather than permission to stop. Our Book of the Month shelf has The Cheating Culture, which is a useful companion here for its account of how ordinary organizations talk themselves into claims they cannot support.