Deep dive: Ethical sourcing & human rights due diligence — what's working, what's not, and what's next

A 2025 analysis by KnowTheChain found that the average score among the world's 100 largest food and beverage companies on human rights due diligence benchmarks rose from 21 out of 100 in 2020 to just 31 out of 100 in 2025, indicating that despite a wave of regulatory mandates and investor pressure, the gap between corporate commitments and operational reality remains enormous. For investors evaluating portfolio exposure to ethical sourcing risks across European markets, understanding where genuine progress is occurring and where it is not is essential for pricing regulatory, reputational, and operational risk.

Why It Matters

Ethical sourcing and human rights due diligence (HRDD) have shifted from voluntary corporate social responsibility exercises to legally mandated obligations across the European Union and its key trading partners. The EU Corporate Sustainability Due Diligence Directive (CSDDD), adopted in 2024 with phased implementation beginning in 2027, requires large companies to identify, prevent, mitigate, and account for adverse human rights and environmental impacts throughout their value chains. Companies failing to comply face administrative fines of up to 5% of global net turnover (European Commission, 2024).

The financial materiality is increasingly clear. The International Labour Organization estimates that forced labor in global supply chains generates $236 billion in illegal profits annually, with the electronics, garment, agriculture, and mining sectors carrying the highest concentration of risk (ILO, 2024). For investors, exposure to companies with weak HRDD practices translates into direct financial risk: the US Customs and Border Protection (CBP) issued 67 Withhold Release Orders between 2020 and 2025, blocking imports worth an estimated $3.4 billion from companies linked to forced labor. European import restrictions under the proposed EU Forced Labour Regulation, expected to take effect in 2027, will expand this enforcement model to the world's largest single market.

Beyond regulatory risk, consumer and procurement buyer expectations are shifting. A 2025 Deloitte survey of European procurement leaders found that 72% now include human rights performance criteria in supplier selection, up from 38% in 2021. Institutional investors managing over $14 trillion in assets have signed the Investor Alliance for Human Rights corporate engagement framework, signaling that HRDD performance will increasingly influence capital allocation decisions.

Key Concepts

Ethical sourcing encompasses the policies, systems, and practices companies use to ensure that goods and services are produced under conditions that respect internationally recognized human rights standards, including the UN Guiding Principles on Business and Human Rights (UNGPs), the OECD Guidelines for Multinational Enterprises, and ILO core labour standards. HRDD is the process through which companies identify and assess actual and potential adverse human rights impacts, integrate findings into decision-making, track responses, and communicate how impacts are addressed.

The CSDDD establishes a legal duty of care extending beyond direct (Tier 1) suppliers to encompass the full value chain, including raw material extraction, sub-component manufacturing, and logistics providers. This represents a fundamental shift from audit-based compliance toward continuous risk management. Companies must establish grievance mechanisms, engage with affected stakeholders, and demonstrate that their purchasing practices do not create or contribute to adverse impacts.

Salient human rights issues vary by sector and geography but commonly include forced labor, child labor, excessive working hours, wage theft, unsafe working conditions, freedom of association restrictions, land rights violations, and impacts on indigenous communities. Modern slavery risk is concentrated in specific commodity chains: cobalt mining in the Democratic Republic of Congo, cotton production in Xinjiang, seafood processing in Southeast Asia, palm oil plantations in Malaysia and Indonesia, and garment manufacturing in Bangladesh and Myanmar.

What's Working

Regulatory Convergence Driving Baseline Standards

The alignment of EU due diligence legislation (CSDDD, EU Forced Labour Regulation, Conflict Minerals Regulation) with the German Supply Chain Due Diligence Act (LkSG), the French Duty of Vigilance Law, and Norway's Transparency Act is creating a regulatory floor that makes non-compliance increasingly untenable. Companies operating across European markets now face overlapping and mutually reinforcing obligations that incentivize systemic HRDD integration rather than jurisdiction-specific responses. The European Sustainability Reporting Standards (ESRS S1 through S4 under the CSRD) further require disclosure of due diligence processes, identified risks, and remediation outcomes, giving investors standardized data for the first time.

Early data from Germany's LkSG implementation shows measurable impact. The Federal Office for Economic Affairs and Export Control (BAFA) received over 4,800 corporate risk reports in the first compliance year (2023), and enforcement actions against 23 companies resulted in remediation commitments covering 145 supplier facilities across 18 countries (BAFA, 2024). Companies subject to LkSG reporting have increased their supplier audit coverage by an average of 34% and established grievance mechanisms reaching an estimated 2.8 million workers in their supply chains.

Technology-Enabled Risk Mapping

Satellite imagery, natural language processing of media and civil society reports, and worker voice technologies are transforming the ability to identify human rights risks beyond Tier 1 suppliers. Platforms such as Altana AI's supply chain mapping technology and Everstream Analytics use customs data, shipping records, and corporate registry information to map multi-tier supply chains that companies themselves often cannot fully trace. A 2025 pilot by a major European automotive manufacturer used Altana's platform to map 94% of its Tier 2 and 78% of its Tier 3 cobalt supply chain within six months, compared to 40% and 12% visibility achieved through traditional supplier questionnaires over the preceding three years.

Worker voice platforms, including Ulula, Laborlink (by ELEVATE), and Issara Institute's Golden Dreams app, enable workers to report grievances and working conditions anonymously via mobile phone. Issara Institute's deployment across Thai seafood and Malaysian electronics supply chains has reached over 300,000 workers, identifying forced labor indicators that traditional audits missed in 38% of assessed facilities (Issara Institute, 2025). These technologies do not replace on-the-ground engagement but provide early warning signals and continuous monitoring between periodic assessments.

Sector Collaboration Models

Multi-stakeholder initiatives are demonstrating that pre-competitive collaboration can drive systemic improvements. The Responsible Business Alliance (RBA), representing over 200 electronics and ICT companies, operates the Validated Assessment Program (VAP) that has conducted over 2,500 facility audits across 48 countries. RBA members collectively invested $450 million in supplier capacity building between 2020 and 2025, funding management system improvements, worker training, and remediation programs. The Fair Cobalt Alliance, combining mining companies (Glencore, Zijin Mining), battery manufacturers (Samsung SDI, BASF), and automotive OEMs (Tesla, BMW), has formalized artisanal mining operations at 12 sites in the DRC, providing protective equipment, fair pricing, and child labor monitoring systems covering approximately 8,000 miners and their communities.

What's Not Working

Audit Fatigue and Diminishing Returns

The social audit model that has dominated ethical sourcing for two decades is showing diminishing effectiveness. A comprehensive study by the NYU Stern Center for Business and Human Rights analyzed 40,000 audit results across garment supplier factories and found no statistically significant correlation between audit frequency and sustained improvements in working conditions (NYU Stern, 2024). Factories receiving annual audits showed initial improvements followed by regression to pre-audit conditions within 6 to 12 months. The study identified root causes including: audit preparation (factories coaching workers on responses and hiding violations), auditor competency gaps, time pressure (typical social audits allocate 1 to 2 days for facilities employing thousands of workers), and the fundamental conflict of interest in buyer-funded auditing models.

The cost burden is also significant. The Ethical Trading Initiative estimates that the global social auditing industry generates $2.3 billion in annual revenue, with costs ultimately borne by suppliers and, through margin compression, by workers themselves. Duplication is rampant: major garment suppliers report undergoing 15 to 25 separate buyer audits annually, each with slightly different standards, creating compliance overhead that diverts resources from actual improvement programs.

Purchasing Practices Contradicting HRDD Commitments

Perhaps the most fundamental barrier to progress is that buyers' own purchasing practices frequently create the conditions that generate human rights violations. A 2025 analysis by the Business and Human Rights Resource Centre found that 63% of garment brands that publicly committed to responsible purchasing practices continued to use short lead times (under 30 days), last-minute order changes, and aggressive price negotiations that force suppliers to impose excessive overtime, subcontract to unmonitored facilities, or suppress wages below living wage thresholds (BHRRC, 2025).

The "price squeeze" dynamic is particularly acute. In Bangladesh, the average FOB price paid by European buyers for basic garment products declined by 8% in real terms between 2020 and 2025, even as minimum wages increased by 56% following the 2023 wage revision. The gap between price reductions demanded by buyers and wage increases mandated by regulation creates impossible economics for compliant manufacturers, incentivizing the very labor violations that HRDD programs claim to address.

Sub-Tier Visibility Gaps

Despite advances in technology-enabled supply chain mapping, meaningful visibility below Tier 2 remains elusive for most companies. A 2025 CDP Supply Chain survey of 350 European companies subject to CSDDD obligations found that only 18% could identify more than half of their Tier 3 suppliers, and just 6% had any visibility into Tier 4 (raw material extraction). Commodity supply chains involving aggregation points, where products from hundreds of smallholders or artisanal producers are blended and traded through intermediaries, present structural barriers to traceability. Palm oil, cocoa, coffee, cotton, and artisanal minerals all follow this pattern, making individual producer-level due diligence effectively impossible at current scale and cost.

Key Players

Established Companies

Inditex: Operates one of the most advanced supply chain traceability systems among global fashion companies, with RFID tracking across 1,800 Tier 1 and Tier 2 suppliers and published wage data for key sourcing countries.

Unilever: Integrated HRDD into procurement through the Responsible Sourcing Policy, achieving third-party verification across 100% of Tier 1 suppliers and 67% of strategic Tier 2 suppliers by 2025.

Apple: Invests over $50 million annually in Supplier Responsibility programs, conducting over 1,100 supplier assessments in 2024 across 52 countries and publishing detailed findings including identified violations and corrective actions.

Startups and Technology Providers

Altana AI: Provides AI-powered supply chain mapping using trade data and corporate records to build multi-tier supply network visibility for HRDD compliance.

Ulula: Offers worker engagement technology enabling real-time feedback from supply chain workers via SMS, voice, and app-based channels across 90 countries.

Sourcemap: Delivers end-to-end supply chain transparency software with blockchain-verified traceability for conflict minerals, textiles, and agricultural commodities.

Investors and Standard-Setters

APG Asset Management: The Dutch pension fund manager, overseeing EUR 600 billion, uses HRDD performance as a core criterion in engagement programs with portfolio companies.

Norges Bank Investment Management (NBIM): The manager of Norway's Government Pension Fund Global has divested from 14 companies since 2020 due to unacceptable human rights risks and actively engages with over 200 companies on supply chain due diligence.

Investor Alliance for Human Rights: A collective of institutional investors managing over $14 trillion, coordinating shareholder engagement on corporate HRDD implementation aligned with the UNGPs.

KPI Benchmarks

Metric	Lagging	Median	Leading	Unit
Tier 1 Supplier HRDD Coverage	<50%	70-85%	>95%	% of suppliers assessed
Tier 2+ Supplier Visibility	<15%	25-40%	>60%	% of Tier 2 suppliers identified
Grievance Mechanism Reach	<10%	25-45%	>70%	% of supply chain workers with access
Audit-to-Remediation Closure Rate	<40%	55-70%	>85%	% of findings remediated within 12 months
Living Wage Coverage (Tier 1)	<20%	35-55%	>75%	% of Tier 1 workers earning living wage
Supplier Capacity Building Spend	<0.1%	0.2-0.5%	>1%	% of procurement spend

What's Next

Three developments will reshape HRDD practice for European investors over the next 18 to 36 months:

First, mandatory human rights impact assessments under the CSDDD will require companies to demonstrate not just policy adoption but measurable outcomes. Companies that have relied on checkbox compliance will face enforcement pressure as CSDDD transposition into national law begins in 2026 and obligations phase in starting with the largest companies (over 5,000 employees and EUR 1.5 billion net turnover) in 2027. Investors should expect increased disclosure granularity and, initially, higher reported violation rates as transparency improves.

Second, the integration of trade data analytics and AI-powered risk scoring will enable continuous due diligence that moves beyond periodic auditing. Companies like Altana AI, Sayari, and Everstream Analytics are building real-time monitoring capabilities that flag supplier-level risk changes, including ownership transfers, regulatory actions, and media reports of labor violations, within days rather than audit cycles measured in years.

Third, purchasing practice reform will emerge as the critical leverage point. The CSDDD explicitly requires companies to consider how their own business practices, including pricing, lead times, and payment terms, contribute to adverse impacts. This provision, combined with investor engagement campaigns from the Investor Alliance for Human Rights and PRI-coordinated engagement, will create pressure for buyers to align commercial terms with human rights commitments. Early movers such as Patagonia and Eileen Fisher, which have restructured purchasing to guarantee minimum order volumes, extend payment terms to 30 days, and commit to multi-year supplier relationships, demonstrate that alternative models are commercially viable.

Action Checklist

• Assess portfolio exposure to CSDDD compliance requirements by mapping which portfolio companies fall within the directive's scope thresholds
• Request disclosure of multi-tier supply chain visibility metrics from portfolio companies, benchmarking against the KPI table above
• Evaluate whether portfolio companies' purchasing practices (pricing, lead times, payment terms) are aligned with or contradicting their stated HRDD commitments
• Review grievance mechanism design and accessibility, prioritizing companies with worker voice technology deployment over those relying solely on hotline-based systems
• Monitor enforcement actions under Germany's LkSG and France's Duty of Vigilance Law as leading indicators of CSDDD enforcement intensity
• Engage with portfolio companies on living wage commitments and closure rates for identified violations as indicators of HRDD effectiveness
• Track KnowTheChain and Corporate Human Rights Benchmark scores for sector-level comparison and trend analysis

FAQ

Q: How should investors distinguish between companies with genuine HRDD programs and those engaged in compliance theatre? A: Focus on four indicators that are difficult to fake: multi-tier supply chain visibility percentages (request Tier 2 and Tier 3 data, not just Tier 1); grievance mechanism utilization rates (active mechanisms receive complaints, inactive ones do not); remediation closure rates and timelines for identified violations; and evidence that purchasing practices have been modified to support supplier compliance. Companies publishing detailed violation data, including the number and type of issues found, are generally more credible than those reporting only positive outcomes.

Q: What is the expected cost of CSDDD compliance for large European companies? A: Early estimates from the European Commission's impact assessment project compliance costs of EUR 0.005% to 0.14% of revenue for companies in scope, depending on supply chain complexity and existing due diligence maturity. However, analysis by the German Institute for Human Rights based on LkSG implementation experience suggests that actual costs for companies starting from a low baseline may be 2 to 3 times higher in the first two years, averaging EUR 1.5 to 4 million annually for companies with complex global supply chains. These costs typically include supply chain mapping technology, additional staff, third-party assessments, and remediation programs.

Q: Which sectors present the highest human rights risk for European investors? A: The highest risk sectors based on KnowTheChain and CHRB benchmarking data are: apparel and footwear (forced labor, wage theft, excessive overtime in manufacturing), electronics and ICT (conflict minerals, forced labor in component manufacturing), food and agriculture (child labor, forced labor in harvesting and processing, land rights violations), extractives and mining (community impacts, artisanal mining conditions), and construction and infrastructure (migrant worker exploitation, particularly in Gulf states). Within each sector, risk concentration varies significantly by sourcing geography and commodity.

Q: How effective are blockchain-based traceability systems for HRDD? A: Blockchain provides an immutable record of transactions but cannot verify the accuracy of initial data entry. If a supplier falsely records that cobalt was sourced from a certified mine, the blockchain faithfully preserves that false claim. Blockchain traceability is most effective when combined with physical verification methods such as isotope tracing (for minerals), DNA testing (for agricultural commodities), or satellite monitoring (for deforestation-linked supply chains). Investors should be skeptical of companies that present blockchain adoption as evidence of supply chain transparency without describing the physical verification mechanisms that feed data into the system.

Sources

• European Commission. (2024). Directive on Corporate Sustainability Due Diligence: Final Text and Implementation Timeline. Brussels: European Commission.
• International Labour Organization. (2024). Profits and Poverty: The Economics of Forced Labour. Geneva: ILO.
• KnowTheChain. (2025). Food and Beverage Benchmark: Findings Report. San Francisco: KnowTheChain / Business and Human Rights Resource Centre.
• Federal Office for Economic Affairs and Export Control (BAFA). (2024). LkSG Implementation Report: First Year Findings. Eschborn: BAFA.
• NYU Stern Center for Business and Human Rights. (2024). Beyond Auditing: Rethinking Social Compliance in Global Supply Chains. New York: NYU.
• Business and Human Rights Resource Centre. (2025). Purchasing Practices and Human Rights: An Analysis of Buyer Behavior in the Garment Sector. London: BHRRC.
• Issara Institute. (2025). Worker Voice in Practice: Five Years of Technology-Enabled Grievance Mechanisms in Southeast Asian Supply Chains. Bangkok: Issara Institute.
• CDP. (2025). Supply Chain Disclosure Report: Multi-Tier Visibility and Human Rights Due Diligence in European Companies. London: CDP.
• Deloitte. (2025). European Procurement Leader Survey: ESG Integration in Supplier Management. London: Deloitte LLP.