Explainer: SEC climate disclosure rules & compliance — what it is, why it matters, and how to evaluate options

The U.S. Securities and Exchange Commission's climate disclosure rules, adopted in March 2024 and partially stayed pending litigation, represent the most significant expansion of mandatory environmental reporting for U.S. public companies in decades. According to a 2025 survey by Deloitte, over 70% of Fortune 500 companies had already begun investing in compliance infrastructure by Q3 2025, despite ongoing legal uncertainty around the final scope of requirements. For sustainability professionals and compliance teams at publicly listed companies, understanding the structure, timeline, and practical implementation requirements of these rules is now a core competency: even in a scenario where the SEC rules are scaled back, state-level mandates in California and convergence with international frameworks like the ISSB and EU CSRD ensure that climate disclosure obligations for U.S. companies will only expand through 2030.

Why It Matters

The SEC's climate disclosure rules matter because they shift climate reporting from a voluntary, reputationally driven exercise to a legally enforceable obligation subject to the same audit standards, liability frameworks, and investor scrutiny as financial statements. Prior to these rules, roughly 90% of S&P 500 companies published some form of sustainability or ESG report, but fewer than 30% subjected their climate data to third-party assurance equivalent to financial audit standards (Center for Audit Quality, 2025). The SEC rules close that gap by requiring specific, standardized disclosures integrated into annual reports (Form 10-K) and registration statements.

The financial stakes are substantial. Companies that fail to comply face SEC enforcement actions, shareholder lawsuits, and potential securities fraud liability if material climate risks are omitted or misstated. Analysis by Ceres estimates that the annual cost of non-compliance, including litigation exposure, regulatory penalties, and investor discount rates applied to companies with inadequate disclosure, ranges from $5 million to $50 million for large accelerated filers. Conversely, companies with robust climate disclosure frameworks have demonstrated a 15 to 20 basis point reduction in cost of capital compared to peers with limited disclosure, according to a 2025 study by the Network for Greening the Financial System.

Beyond the SEC, the regulatory landscape is compounding. California's Climate Corporate Data Accountability Act (SB 253) requires companies with annual revenues exceeding $1 billion doing business in California to report Scope 1, 2, and 3 greenhouse gas emissions beginning in 2026. California's Climate-Related Financial Risk Act (SB 261) mandates biennial climate risk disclosures aligned with TCFD for companies with revenues above $500 million. The EU's Corporate Sustainability Reporting Directive (CSRD) applies to U.S. companies with significant EU operations or subsidiaries. For sustainability teams, these overlapping mandates mean that a single, comprehensive disclosure system designed to meet the SEC's requirements can serve as the foundation for multi-jurisdictional compliance.

Key Concepts

Scope 1 and Scope 2 emissions disclosure: The SEC rules require all registrants to disclose direct greenhouse gas emissions (Scope 1) from owned or controlled sources and indirect emissions (Scope 2) from purchased electricity, steam, heating, and cooling. These disclosures must be disaggregated and presented in CO2-equivalent units using GHG Protocol methodologies. Large accelerated filers (market capitalization above $700 million) face the earliest compliance deadlines, with phased-in assurance requirements beginning with limited assurance and escalating to reasonable assurance.

Scope 3 emissions and the litigation stay: The original SEC proposal included mandatory Scope 3 disclosure (indirect emissions from a company's value chain, including suppliers and customers) when deemed material. This provision was the most contested element and was stayed by the SEC itself in April 2024 pending legal challenges in the Eighth Circuit. As of early 2026, Scope 3 remains voluntarily disclosed by approximately 45% of S&P 500 companies, but is not currently required under the final SEC rule. However, California's SB 253 does mandate Scope 3 reporting, creating a parallel compliance obligation for many of the same companies.

Material climate-related risks: The rules require registrants to disclose climate-related risks that have had, or are reasonably likely to have, a material impact on business strategy, results of operations, or financial condition. This includes both physical risks (extreme weather events, chronic temperature changes, water stress) and transition risks (regulatory changes, shifts in consumer preferences, technology disruption, reputational impacts). Disclosures must describe actual and potential impacts and how the company manages these risks.

Climate-related financial statement metrics: Companies must include a note in their audited financial statements quantifying the financial impact of severe weather events and other natural conditions if those costs exceed 1% of the relevant financial statement line item. This provision subjects climate data to the same audit standards as all other financial disclosures, significantly raising the bar for data quality and internal controls.

Attestation and assurance requirements: The rules phase in third-party assurance requirements for Scope 1 and Scope 2 data. Large accelerated filers must obtain limited assurance beginning with fiscal years starting in 2025 (for the largest companies) and reasonable assurance by fiscal years starting in 2029. Assurance must be provided by an independent attestation provider registered with the PCAOB or meeting equivalent standards.

What's Working

Early movers building integrated reporting systems. Companies that began aligning their climate disclosure with TCFD recommendations before the SEC rule have a significant compliance advantage. Microsoft, for example, has reported Scope 1, 2, and 3 emissions with third-party assurance since 2021 and integrated climate scenario analysis into its annual report. The company's internal carbon fee of $100 per tonne of CO2e, applied to all business divisions since 2020, created the data infrastructure and accountability mechanisms that directly map to the SEC's required disclosures (Microsoft, 2025). Similarly, Salesforce implemented an enterprise-wide carbon accounting platform in 2023 that automated data collection from over 400 sources, reducing the quarterly close cycle for emissions data from 12 weeks to 3 weeks.

Software platforms accelerating compliance readiness. The market for climate disclosure and compliance software has matured rapidly. Persefoni, Watershed, and Sphera each process emissions data for hundreds of enterprise clients and have built SEC-specific compliance modules that map data fields directly to Form 10-K disclosure requirements. Persefoni reported that its platform processed over 15 million data points for 200+ enterprise clients in 2025, with automated XBRL tagging for SEC filings. Workiva, already widely used for SEC financial filings, integrated climate disclosure capabilities that allow teams to prepare climate data within the same workflow as traditional financial reporting (Workiva, 2025).

Cross-framework alignment reducing duplication. The International Sustainability Standards Board (ISSB) standards (IFRS S1 and S2), effective for reporting periods beginning January 2024, share substantial overlap with the SEC's disclosure framework. Both require climate-related risk identification, governance disclosure, strategy discussion, and metrics including greenhouse gas emissions. Companies that build compliance systems around the ISSB framework can satisfy roughly 80% of SEC requirements and 70% of CSRD requirements with the same underlying data, according to analysis by PwC (2025). This convergence is particularly valuable for multinational companies managing disclosure obligations across the U.S., EU, and jurisdictions adopting ISSB standards.

What's Not Working

Data quality gaps in emissions measurement persist. Despite advances in software platforms, many companies still rely on spend-based estimation methods for Scope 2 and Scope 3 emissions that carry uncertainty ranges of 30 to 50%. The SEC's requirement for audited financial statement integration demands a level of precision that most companies have not achieved. A 2025 survey by EY found that 62% of large accelerated filers rated their current Scope 1 data quality as "audit-ready," but only 28% said the same for Scope 2, and less than 15% for Scope 3.

Legal uncertainty creating compliance paralysis. The Eighth Circuit's consideration of challenges to the SEC rules, combined with potential changes in enforcement posture under different presidential administrations, has caused some companies to adopt a wait-and-see approach. This is risky: California's SB 253 and SB 261 proceed on their own timelines regardless of federal outcomes, and European regulations apply to U.S. companies with qualifying EU operations. Companies that delay building compliance infrastructure face compressed timelines and higher implementation costs when deadlines arrive.

Internal controls for climate data are immature. Financial reporting benefits from decades of established internal controls, audit procedures, and SOX compliance frameworks. Climate data lacks equivalent maturity. Most companies do not have formal internal controls over emissions calculations, data validation procedures for supplier-reported data, or segregation of duties in their climate reporting processes. This gap exposes companies to material weakness findings by auditors when climate data is integrated into financial statements.

Small and mid-cap companies face disproportionate burden. While large accelerated filers have dedicated sustainability teams and budgets, smaller reporting companies and emerging growth companies often lack the resources to implement comprehensive climate disclosure systems. Implementation costs for a mid-cap company range from $500,000 to $2 million in the first year, including software licensing, consultant fees, assurance provider costs, and staff training (Deloitte, 2025). The SEC provided extended phase-in periods for smaller filers, but the eventual compliance requirements are substantively identical.

Key Players

Established Companies

• Persefoni: carbon accounting and climate disclosure platform serving 200+ enterprise clients with SEC-specific compliance modules and automated XBRL tagging
• Workiva: enterprise reporting platform integrating climate disclosure with existing SEC financial filing workflows used by over 5,000 public companies
• Sphera: environmental data management platform providing Scope 1, 2, and 3 calculation engines with audit-trail capabilities for regulatory compliance
• Deloitte: provides SEC climate disclosure readiness assessments and assurance services as a PCAOB-registered firm

Startups

• Watershed: raised $100 million Series C in 2024 to scale its enterprise carbon accounting platform with automated data pipelines and multi-framework reporting
• Novisto: Montreal-based ESG data management platform specializing in audit-ready data collection and regulatory mapping across SEC, CSRD, and ISSB frameworks
• Sweep: Paris-based carbon and ESG management platform offering automated Scope 3 data collection through supplier engagement portals
• Greenly: climate accounting platform that expanded to the U.S. market in 2025, targeting mid-cap companies with lower-cost compliance solutions

Investors and Funders

• Ceres: nonprofit investor network coordinating over 220 institutional investors managing $60 trillion in assets to advocate for consistent, comparable climate disclosure
• Climate Action 100+: global investor engagement initiative with 700+ signatories pressing the world's largest emitters for enhanced climate disclosure and governance
• BlackRock: the world's largest asset manager, has publicly stated that consistent climate disclosure is essential for portfolio risk management and capital allocation decisions

Key Metrics

Metric	Current State	Target (2029)	Unit
S&P 500 companies with assured Scope 1 data	~35%	100% (LAFs)	% of companies
Average Scope 2 data accuracy (spend-based)	50-70%	90%+	% accuracy vs. activity-based
Climate disclosure compliance software market	$2.1B	$6.5B	USD
Average first-year implementation cost (large filer)	$1.5M-$4M	$500K-$1.5M	USD
Companies with climate internal controls	~25%	80%+	% of registrants
Assurance standard required (LAFs by 2029)	Limited	Reasonable	Assurance level

Action Checklist

• Conduct a gap assessment comparing your current climate disclosures against the SEC's final rule requirements, mapping each required data element to existing data sources
• Establish formal internal controls over climate data equivalent to SOX-level rigor, including data validation, segregation of duties, and documentation of calculation methodologies
• Select and implement a climate disclosure software platform that supports SEC Form 10-K integration, XBRL tagging, and multi-framework reporting (ISSB, CSRD, California SB 253)
• Engage a PCAOB-registered or equivalent assurance provider for a readiness assessment at least 12 months before your first mandatory assurance deadline
• Build a cross-functional disclosure committee including finance, legal, sustainability, operations, and investor relations to coordinate climate reporting
• Inventory all jurisdictions where disclosure obligations apply, including California (SB 253, SB 261), EU (CSRD), and any ISSB-adopting jurisdictions
• Develop a Scope 3 measurement capability even if not currently required by the SEC, as California mandates and investor expectations make this data essential
• Train finance and accounting teams on GHG Protocol methodologies, emissions factor databases, and the integration of climate data into audited financial statements

FAQ

Q: When do the SEC climate disclosure rules take effect, and who must comply first? A: The phase-in schedule begins with large accelerated filers (companies with a public float above $700 million). For fiscal years beginning in 2025, large accelerated filers must include climate-related risk disclosures and Scope 1 and Scope 2 emissions data in their annual reports. Limited assurance of emissions data is required starting with fiscal years beginning in 2026, escalating to reasonable assurance for fiscal years beginning in 2029. Accelerated filers follow two years behind, and smaller reporting companies have the longest phase-in period. However, these timelines remain subject to judicial review, and companies should monitor Eighth Circuit rulings for potential modifications.

Q: How do the SEC rules interact with California's SB 253 and SB 261? A: California's laws operate independently of the SEC rules and apply based on revenue thresholds rather than SEC registrant status. SB 253 requires companies with over $1 billion in annual revenue doing business in California to report Scope 1, 2, and 3 emissions to a state-designated reporting organization beginning in 2026 (Scope 1 and 2) and 2027 (Scope 3). SB 261 requires companies with over $500 million in revenue to publish biennial climate risk reports aligned with TCFD. Many companies subject to the SEC rules will also be subject to California requirements. Building a single data infrastructure that meets both sets of requirements is the most cost-effective approach.

Q: What level of assurance is required, and who can provide it? A: The SEC rules require attestation from an independent provider. For large accelerated filers, limited assurance (a lower standard involving inquiry and analytical procedures) is required first, escalating to reasonable assurance (the same standard used for financial audits) over time. Attestation providers must be registered with the PCAOB or meet comparable independence and competence standards. The Big Four accounting firms (Deloitte, EY, PwC, KPMG) and several specialized sustainability assurance firms (Bureau Veritas, SGS, DNV) are positioning to provide these services. Companies should engage providers early, as capacity constraints in the assurance market are expected through 2028.

Q: What happens if the SEC rules are struck down or significantly modified by the courts? A: Even if the federal SEC rules are narrowed or delayed, companies face climate disclosure obligations from multiple other sources. California's SB 253 and SB 261 proceed independently. The EU CSRD applies to U.S. companies with qualifying European operations or subsidiaries above certain revenue thresholds. Over 20 jurisdictions globally have adopted or are adopting ISSB-aligned standards. Institutional investors representing over $60 trillion in assets (coordinated through Ceres and Climate Action 100+) continue to demand climate data through shareholder proposals and engagement. Companies that build robust disclosure systems now protect themselves against regulatory convergence regardless of the SEC outcome.

Q: How much does compliance cost, and how should teams budget? A: First-year implementation costs vary significantly by company size and existing capability maturity. For large accelerated filers, expect $1.5 million to $4 million covering software licensing ($200,000 to $600,000 annually), consulting and gap assessment ($300,000 to $800,000), assurance provider fees ($200,000 to $500,000 annually), and internal staffing (2 to 5 FTEs at $100,000 to $200,000 each). Ongoing annual costs typically decrease to 40 to 60% of first-year expenses as systems mature and processes are automated. Mid-cap companies can expect first-year costs of $500,000 to $2 million. These costs should be benchmarked against the estimated $5 million to $50 million exposure from non-compliance, including litigation risk and investor discount.

Sources

• Center for Audit Quality. (2025). Climate Disclosure Assurance Readiness: Survey of S&P 500 Companies. Washington, DC: CAQ.
• Ceres. (2025). The Cost of Inaction: Financial Exposure from Inadequate Climate Disclosure. Boston: Ceres.
• Deloitte. (2025). SEC Climate Disclosure Readiness Survey: Fortune 500 Implementation Progress. New York: Deloitte Touche Tohmatsu.
• EY. (2025). Global Climate Reporting Survey: Data Quality and Audit Readiness Across Jurisdictions. London: Ernst & Young.
• Network for Greening the Financial System. (2025). Climate Disclosure and Cost of Capital: Evidence from Mandatory Reporting Regimes. Paris: NGFS.
• PwC. (2025). Cross-Framework Alignment: SEC, ISSB, and CSRD Disclosure Overlap Analysis. London: PricewaterhouseCoopers.
• Workiva. (2025). Integrated Climate and Financial Reporting: Platform Adoption and Compliance Trends. Ames, IA: Workiva.