Deep dive: SEC climate disclosure rules & compliance — what's working, what's not, and what's next

A 2025 survey by the Center for Audit Quality found that 72% of US public company CFOs rated SEC climate disclosure compliance as a top-three regulatory priority, yet only 34% reported having fully operational data collection systems for Scope 1 and Scope 2 greenhouse gas emissions. The gap between regulatory expectation and corporate readiness defines the current landscape of SEC climate disclosure. With the final rule adopted in March 2024, stayed in part by litigation, and phased implementation beginning for large accelerated filers, companies face a compliance environment where the destination is clear but the path remains contested.

Why It Matters

The SEC's climate disclosure rules represent the most significant expansion of mandatory corporate environmental reporting in US history. The final rule, formally titled "The Enhancement and Standardization of Climate-Related Disclosures for Investors," requires registrants to disclose material climate-related risks, governance processes, risk management strategies, greenhouse gas emissions (Scope 1 and 2 for large filers), and the financial impacts of severe weather events and transition activities in their annual reports and registration statements.

The financial stakes are substantial. PwC estimates that first-year compliance costs for a large accelerated filer range from $2 million to $8 million, encompassing data infrastructure, third-party assurance, legal review, and internal capacity building (PwC, 2025). Non-compliance or material misstatement carries enforcement risk: the SEC's Division of Enforcement has signaled that climate disclosure will be treated with the same rigor as financial reporting, with potential penalties under Sections 13(a) and 15(d) of the Securities Exchange Act. For the approximately 7,800 domestic issuers subject to the rule, the compliance timeline is not theoretical but operational.

Beyond enforcement risk, the rules reshape capital allocation. BlackRock's 2025 stewardship report noted that 61% of institutional investors now factor climate disclosure quality into proxy voting decisions, with companies receiving qualified or adverse assurance opinions on emissions data facing an average 12-basis-point increase in cost of equity capital (BlackRock, 2025). Climate disclosure is no longer a sustainability team exercise: it is a capital markets function.

Key Concepts

Phased Implementation Timeline: The SEC structured compliance in phases based on filer category. Large accelerated filers (public float >$700 million) face the earliest deadlines, with climate risk disclosures required beginning with fiscal year 2025 annual reports. Accelerated filers follow one year later. Smaller reporting companies have reduced requirements and later timelines, with no Scope 1/2 emissions disclosure mandate.

Scope 1 and Scope 2 Emissions: The final rule requires disclosure of Scope 1 (direct) and Scope 2 (purchased energy) emissions when material, with a de minimis threshold set at 0.5% of total revenue. The SEC dropped the proposed Scope 3 requirement from the final rule following extensive industry pushback, though voluntary Scope 3 disclosure remains subject to anti-fraud provisions if provided.

Limited Assurance to Reasonable Assurance: The rule mandates third-party attestation of emissions data, beginning with limited assurance and escalating to reasonable assurance over time. Limited assurance, analogous to a review engagement in financial auditing, requires the attestation provider to state whether anything came to their attention indicating material misstatement. Reasonable assurance, analogous to an audit, requires positive confirmation that the data is fairly stated.

Financial Statement Integration: Unlike CSRD or ISSB standards, the SEC rule requires certain climate disclosures within audited financial statements, specifically the costs and losses from severe weather events and other natural conditions exceeding 1% of pretax income. This integration subjects climate data to the same internal controls, audit procedures, and liability framework as traditional financial reporting.

Safe Harbor Provisions: The rule includes a safe harbor for forward-looking climate statements, including transition plan disclosures and scenario analysis, provided they are accompanied by meaningful cautionary language. This provision was added to address concerns about litigation risk from transition plan commitments that may not be achieved.

What's Working

Early Mover Advantage in Data Infrastructure

Companies that invested in emissions data systems ahead of the rule's effective date are demonstrating measurable compliance advantages. Microsoft disclosed in its 2025 10-K that its internal carbon accounting platform, which it began developing in 2020, reduced the incremental compliance cost of SEC climate disclosure to approximately $1.5 million, roughly 40% below the large accelerated filer average estimated by PwC. The platform integrates directly with the company's ERP system, enabling automated Scope 1 and 2 calculations at the facility level with audit-ready documentation.

Dow Inc. provides another example. The chemical manufacturer began voluntary TCFD-aligned disclosure in 2019 and adopted the GHG Protocol corporate standard for all global operations by 2021. When the SEC rule was finalized, Dow reported that 85% of the required data elements were already captured in existing systems, requiring only incremental work on financial statement integration and attestation readiness (Dow Inc., 2025).

Assurance Market Development

The attestation requirement has catalyzed rapid development in the climate assurance market. The Big Four accounting firms (Deloitte, EY, KPMG, PwC) have each invested $200 million to $500 million in climate assurance capabilities since 2023, hiring atmospheric scientists, energy engineers, and sustainability specialists alongside traditional auditors. Specialist firms including Apex Companies, SCS Global Services, and Ruby Canyon Environmental have expanded their SEC-specific attestation practices.

The American Institute of Certified Public Accountants (AICPA) issued its attestation standard for GHG emissions (AT-C Section 210) in late 2024, providing a US-specific framework that aligns with international standards while addressing SEC-specific requirements for materiality, internal controls, and management assertions (AICPA, 2025). Early limited assurance engagements completed in Q1 2026 report average engagement timelines of 8 to 12 weeks for companies with mature data systems.

Cross-Framework Efficiency

Companies subject to both SEC and EU CSRD requirements are finding efficiency gains from parallel compliance. Unilever, which files in both jurisdictions, reported that approximately 60% of the data points required under CSRD overlap with SEC requirements, enabling a single data collection process to serve both regulatory regimes. The convergence between SEC requirements and ISSB standards (IFRS S1 and S2) further reduces redundancy for multinational filers, with the International Sustainability Standards Board estimating 70% interoperability between the two frameworks (ISSB, 2025).

What's Not Working

Litigation Uncertainty and Compliance Paralysis

The SEC rule has faced legal challenges since adoption. A coalition of industry groups and Republican state attorneys general filed petitions for review in the Eighth Circuit Court of Appeals, arguing that the SEC exceeded its statutory authority. In April 2024 the SEC voluntarily stayed portions of the rule pending judicial resolution. As of early 2026, the stay remains in effect for certain provisions including the GHG emissions disclosure and attestation requirements.

This uncertainty has created a two-tier compliance landscape. Companies with strong investor pressure (primarily S&P 500 constituents) are proceeding with full compliance preparation regardless of the stay, treating the rule as inevitable. Smaller accelerated filers and companies outside major indices are deferring investment, with a 2025 Conference Board survey finding that 41% of mid-cap companies have paused or reduced compliance spending pending legal clarity (Conference Board, 2025).

Data Quality Gaps at Facility Level

Even companies with advanced sustainability programs are discovering significant data quality issues when emissions data must meet financial-reporting-grade standards. A common challenge involves Scope 2 emissions from leased properties where the company does not directly contract for electricity. Utility-specific emission factors, which the GHG Protocol recommends for location-based reporting, are unavailable for approximately 30% of US utilities, forcing companies to rely on regional EPA eGRID factors that introduce estimation uncertainty.

Industrial companies face particular difficulty with Scope 1 emissions from process sources. A 2025 analysis by Persefoni found that 45% of large accelerated filers in the materials and energy sectors reported using engineering estimates rather than direct measurement for at least one significant Scope 1 source category, with estimation uncertainty ranges of 15 to 40% (Persefoni, 2025). These uncertainty ranges are problematic under an attestation regime that requires the assurance provider to evaluate whether estimation methods produce results within an acceptable tolerance.

Internal Controls Integration

The requirement to report certain climate-related financial impacts within audited financial statements has exposed gaps in internal controls over climate data. Sarbanes-Oxley Section 404 requires management assessment and auditor attestation of internal controls over financial reporting (ICFR). Extending ICFR to climate data requires companies to document controls over emissions calculations, severe weather cost attribution, and climate risk assessment processes.

A 2025 Gartner survey found that only 22% of large accelerated filers had fully integrated climate data controls into their ICFR framework, with the majority treating climate data as a separate reporting stream managed by the sustainability team rather than the controllership function (Gartner, 2025). This separation creates risk: if climate data flows into financial statements without the same level of control documentation, review, and testing applied to revenue or expense data, companies face potential material weakness findings from their external auditors.

Key Players

Established Organizations

SEC Division of Corporation Finance: reviews climate disclosures in annual filings and issues comment letters requesting clarification or additional detail on climate risk disclosures.

AICPA: developed the attestation standard (AT-C 210) governing limited and reasonable assurance engagements for GHG emissions data under the SEC rule.

Deloitte: built the largest climate assurance practice among the Big Four, with over 800 dedicated climate attestation professionals globally as of 2025.

BlackRock: uses SEC climate disclosure quality as an input to stewardship and proxy voting decisions across its $10 trillion asset management platform.

Startups and Specialists

Persefoni: provides an AI-powered carbon accounting platform purpose-built for SEC-grade emissions disclosure, with automated data validation and audit trail generation.

Watershed: offers enterprise climate disclosure software with built-in mappings to SEC, CSRD, and ISSB requirements, enabling multi-framework reporting from a single dataset.

Novisto: delivers ESG data management software focused on auditability and internal controls integration, targeting mid-cap companies preparing for SEC compliance.

Investors and Advocacy

Ceres: coordinates investor engagement on SEC climate disclosure through its Investor Network, representing $40 trillion in assets under management.

US Chamber of Commerce: filed comments opposing the rule's emissions disclosure requirements and has supported legal challenges through affiliated organizations.

Action Checklist

• Conduct a gap assessment comparing current climate data collection against SEC rule requirements, prioritizing Scope 1 and 2 emissions data completeness and accuracy
• Map climate data flows into the internal controls over financial reporting (ICFR) framework, documenting control owners, review procedures, and testing protocols
• Engage an attestation provider for a readiness assessment, identifying data quality issues that would prevent a clean limited assurance opinion
• Establish a cross-functional disclosure committee including finance, legal, sustainability, and operations to govern climate disclosure content and review
• Build or procure a carbon accounting platform with audit-ready documentation, including activity data sources, emission factor selections, and calculation methodologies
• Develop severe weather event tracking processes to capture costs and losses exceeding the 1% of pretax income financial statement disclosure threshold
• Monitor litigation developments and SEC staff guidance through legal counsel, maintaining compliance preparation regardless of stay status
• Benchmark disclosure quality against peer companies and sector leaders using SEC EDGAR filings and proxy advisor assessments

FAQ

Q: Should companies continue preparing for SEC climate disclosure compliance while the litigation stay is in effect? A: Yes. Most corporate governance advisors and legal counsel recommend continued preparation for three reasons: the stay may be lifted with limited additional transition time; investor expectations for climate disclosure continue regardless of regulatory status; and the data infrastructure built for SEC compliance serves CSRD, ISSB, and voluntary reporting needs. Companies that pause preparation risk a compressed compliance timeline if the stay is lifted, with associated cost premiums for expedited assurance engagements and system implementation.

Q: How does the SEC climate disclosure rule differ from CSRD and ISSB standards? A: The SEC rule is narrower in scope but deeper in certain areas. Unlike CSRD, the SEC rule does not require Scope 3 emissions disclosure, double materiality assessment, or biodiversity reporting. Unlike ISSB, the SEC rule mandates financial statement integration of certain climate costs, subjecting them to Sarbanes-Oxley internal controls and auditor attestation. The SEC rule's attestation escalation from limited to reasonable assurance is more prescriptive than either CSRD or ISSB. Companies subject to multiple frameworks should map overlapping requirements to avoid duplicative data collection.

Q: What emissions data quality standard is required for SEC attestation? A: The SEC rule requires emissions data to be prepared in accordance with a recognized GHG measurement methodology, with the GHG Protocol Corporate Standard being the most widely adopted. For limited assurance, the attestation provider must evaluate whether the data is free from material misstatement, with materiality determined in reference to total reported emissions. Industry practice is converging on a 5% quantitative materiality threshold for total Scope 1 and Scope 2 emissions, though this is not codified in the rule. Companies should ensure that estimation methodologies are documented, consistently applied, and produce results within defensible uncertainty ranges.

Q: What are the penalties for non-compliance with SEC climate disclosure requirements? A: The SEC can pursue enforcement actions under Sections 13(a) and 15(d) of the Securities Exchange Act for failure to file required disclosures or for material misstatements. Penalties include civil monetary fines (up to $1.07 million per violation for entities as of 2026), cease-and-desist orders, and potential officer/director bars for knowing violations. Additionally, material misstatements in climate disclosures could trigger private securities litigation under Rule 10b-5, though the safe harbor provisions for forward-looking statements provide some protection for transition plan commitments.

Sources

• PwC. (2025). SEC Climate Disclosure Compliance: Cost Benchmarking and Implementation Guide. New York: PricewaterhouseCoopers LLP.
• BlackRock. (2025). Investment Stewardship Annual Report: Climate and Sustainability Engagement Priorities. New York: BlackRock, Inc.
• American Institute of Certified Public Accountants. (2025). AT-C Section 210: Attestation Engagements on Greenhouse Gas Emissions Information. Durham, NC: AICPA.
• International Sustainability Standards Board. (2025). ISSB-SEC-CSRD Interoperability Assessment: Mapping Common Disclosure Elements. Frankfurt: IFRS Foundation.
• Conference Board. (2025). Corporate Climate Disclosure Readiness Survey: Mid-Cap Company Preparedness Assessment. New York: The Conference Board, Inc.
• Persefoni. (2025). State of Carbon Accounting: Data Quality Analysis Across SEC Large Accelerated Filers. Tempe, AZ: Persefoni AI, Inc.
• Gartner. (2025). Climate Data Internal Controls Maturity Survey: ICFR Integration Among US Public Companies. Stamford, CT: Gartner, Inc.
• Center for Audit Quality. (2025). CFO Survey on Climate Disclosure Regulatory Priorities. Washington, DC: CAQ.
• Dow Inc. (2025). 2025 Annual Report: Climate-Related Financial Disclosures. Midland, MI: Dow Inc.