Market map: Regulation watch (EU/US/Global) — the categories that will matter next

The global sustainability regulation landscape expanded from approximately 300 active policy instruments in 2020 to more than 1,200 by late 2025, according to the Grantham Research Institute on Climate Change and the Environment. Yet regulatory tracking remains fragmented: a 2025 survey by PwC found that only 29% of multinational companies feel confident they have full visibility into the sustainability regulations affecting their operations across jurisdictions. As the EU, the US, and major emerging economies accelerate regulatory timelines simultaneously, the categories of regulation that shape corporate strategy are shifting rapidly. This market map identifies the regulatory domains gaining enforcement weight, the organizations defining each segment, and the whitespace opportunities sustainability professionals should track over the next two to three years.

Why It Matters

Sustainability regulation has moved from voluntary disclosure frameworks to enforceable mandates with financial penalties. For sustainability professionals, the regulatory landscape now determines reporting timelines, capital allocation decisions, supply chain requirements, and product design constraints.

Three structural forces make regulatory tracking a strategic imperative. First, jurisdictional convergence and divergence are happening simultaneously. The EU leads with prescriptive regulations like the Corporate Sustainability Reporting Directive (CSRD) and the Carbon Border Adjustment Mechanism (CBAM), while the US takes a more market-driven approach through SEC climate disclosure rules and state-level mandates like California's SB 253 and SB 261. Companies operating across both need parallel compliance architectures. Second, enforcement timelines are compressing. The EU's CSRD applies to approximately 11,700 companies starting with fiscal year 2024 reports, CBAM enters its definitive phase in 2026, and the EU Deforestation Regulation (EUDR) enforcement begins in December 2025. Third, supply chain regulations are creating cascading obligations. The EU's Corporate Sustainability Due Diligence Directive (CSDDD) extends liability beyond direct operations to upstream and downstream value chains, meaning companies that are not directly regulated still face compliance pressure through their customers and trading partners.

For sustainability teams, this means regulation is no longer a compliance function bolted onto operations. It shapes procurement policies, capital expenditure decisions, data infrastructure, and competitive positioning.

Key Concepts

Climate disclosure mandates require companies to report greenhouse gas emissions, climate risks, and transition plans using standardized frameworks. The EU's CSRD with European Sustainability Reporting Standards (ESRS) and the US SEC's climate disclosure rules represent the two major approaches, distinguished by double materiality versus financial materiality frameworks.

Carbon border adjustment mechanisms impose carbon costs on imports to prevent carbon leakage, where production shifts to jurisdictions with weaker climate policies. The EU CBAM covers cement, iron and steel, aluminum, fertilizers, electricity, and hydrogen, with the definitive mechanism starting January 2026. The UK is developing its own CBAM for implementation by 2027.

Supply chain due diligence legislation requires companies to identify, prevent, and mitigate adverse human rights and environmental impacts across their value chains. The EU CSDDD, Germany's Supply Chain Due Diligence Act (LkSG), and France's Devoir de Vigilance law establish enforceable obligations with civil liability provisions.

Product-level environmental regulation sets mandatory performance and information requirements for goods sold in specific markets. The EU Ecodesign for Sustainable Products Regulation (ESPR) introduces digital product passports and performance criteria for batteries, textiles, electronics, and construction products.

Nature and biodiversity regulation is an emerging category targeting corporate impacts on ecosystems beyond carbon. The EU Biodiversity Strategy for 2030, the Kunming-Montreal Global Biodiversity Framework, and EUDR are translating biodiversity commitments into binding legal requirements for the first time at scale.

What's Working

EU CSRD is creating a reporting infrastructure baseline. The CSRD represents the most comprehensive mandatory sustainability disclosure regime globally. By requiring reports aligned with ESRS across environmental, social, and governance topics, it forces companies to build data collection systems that serve multiple regulatory purposes. Danone adopted CSRD-aligned reporting across its global operations in 2025, using the exercise to consolidate fragmented reporting across 15 previously separate frameworks into a single data architecture. The company reported a 25% reduction in total reporting costs within the first year despite broader disclosure scope.

CBAM is driving decarbonization incentives for importers. During its transitional phase (October 2023 to December 2025), the EU CBAM required importers to report embedded emissions for covered goods. This created an immediate incentive for non-EU producers to measure and reduce emissions. Turkish steel producer Erdemir invested $180 million in electric arc furnace upgrades in 2024, explicitly citing CBAM-driven demand from European customers requiring lower-carbon products. ArcelorMittal similarly accelerated its hydrogen-based steelmaking pilot in Spain, targeting CBAM-competitive carbon intensities by 2027.

California's climate disclosure laws are establishing a US benchmark. SB 253 (Climate Corporate Data Accountability Act) and SB 261 (Climate-Related Financial Risk Act) require large companies doing business in California to report Scope 1, 2, and 3 emissions and climate risk disclosures. Despite legal challenges, these laws have set a de facto standard for US corporate climate reporting. Microsoft, Salesforce, and Apple all expanded their emissions reporting programs in 2025 in anticipation of SB 253 requirements, with Microsoft publishing its first fully audited Scope 3 inventory covering more than 95% of its supply chain emissions.

Digital product passport regulations are catalyzing data standardization. The EU Battery Regulation, which requires DPPs for all industrial and EV batteries placed on the EU market from February 2027, has spurred development of interoperable data formats. The Global Battery Alliance's Battery Passport framework, already adopted by more than 100 companies including BASF, Umicore, and BMW, provides a template that is being extended to textiles and electronics under the ESPR umbrella.

What's Not Working

Regulatory fragmentation between jurisdictions increases compliance costs. Despite efforts at convergence, the EU (double materiality, prescriptive ESRS), the US (financial materiality, principles-based SEC rules), and other jurisdictions (ISSB-aligned frameworks in the UK, Japan, and Australia) maintain fundamentally different approaches. A 2025 report from the International Chamber of Commerce estimated that multinational companies spend an average of $3.1 million annually managing cross-jurisdictional sustainability compliance, with significant duplication across reporting systems.

Implementation timelines outpace organizational readiness. The CSRD's phased rollout requires the first wave of companies (large public interest entities with more than 500 employees) to file reports in 2025 for fiscal year 2024. Yet an EFRAG survey in late 2024 found that 45% of in-scope companies had not yet completed gap analyses against ESRS requirements. Similar readiness gaps exist for CBAM definitive compliance, EUDR due diligence systems, and CSDDD planning obligations.

Scope 3 regulatory requirements lack mature measurement infrastructure. Both CSRD and California's SB 253 require reporting of value chain emissions, but the methodological tools and supplier data systems needed for reliable Scope 3 measurement remain underdeveloped. Companies report estimation uncertainty ranges of 30 to 50% for Scope 3 figures, which undermines the usefulness of mandated disclosures and creates legal risk around reported numbers.

Enforcement mechanisms vary widely. While the EU has established clear penalty frameworks (CSRD non-compliance can trigger fines up to 10% of net turnover in some member states), enforcement capacity varies significantly between member states. In the US, the SEC's climate disclosure rules face ongoing litigation, creating uncertainty about final requirements and timelines. This enforcement inconsistency reduces the regulatory signal that companies use for investment planning.

Developing country regulatory capacity lags behind. Supply chain due diligence legislation from the EU and member states creates obligations that cascade to suppliers in developing countries. However, regulatory infrastructure, technical capacity, and verification systems in these jurisdictions are often insufficient to support the compliance demands of EU-based buyers, creating implementation gaps and potential trade barriers.

Key Players

Established Regulatory Bodies

• European Commission: The primary rulemaker for EU sustainability regulation including CSRD, CBAM, ESPR, CSDDD, and EUDR. Responsible for delegated acts and technical screening criteria that define implementation requirements.
• US Securities and Exchange Commission (SEC): Developer of US federal climate disclosure requirements for public companies. Final rules adopted in March 2024 face judicial challenges but establish a baseline framework for investor-oriented climate reporting.
• EFRAG (European Financial Reporting Advisory Group): The technical body responsible for developing ESRS standards underpinning CSRD. Produces implementation guidance, sector-specific standards, and proportionate standards for SMEs.
• International Sustainability Standards Board (ISSB): Publisher of IFRS S1 and S2 global baseline standards, now adopted or referenced by more than 20 jurisdictions including the UK, Japan, Singapore, and Australia.
• California Air Resources Board (CARB): Oversees implementation of California's SB 253 and SB 261, establishing reporting requirements that influence US corporate climate disclosure practice nationally.

Compliance and Advisory Platforms

• Watershed: Carbon accounting and climate disclosure platform used by over 500 companies for CSRD, SEC, and SBTi-aligned reporting. Raised $100 million in Series C funding in 2024.
• Persefoni: AI-powered carbon management platform supporting regulatory reporting across CSRD, SEC, ISSB, and CDP frameworks. Partnered with Deloitte for enterprise-scale deployment.
• Novata: ESG data management platform focused on private markets, helping private equity firms and portfolio companies meet regulatory reporting requirements across jurisdictions.
• Prewave: Supply chain risk monitoring platform using AI to track regulatory compliance risks across CSDDD, EUDR, and forced labor regulations in real time.

Key Investors and Funders

• European Commission Horizon Europe Program: Funds regulatory implementation research and compliance tool development, with over EUR 500 million allocated to green transition digitalization between 2021 and 2027.
• Bloomberg Philanthropies: Major funder of climate disclosure infrastructure through support for the IFRS Foundation and ISSB adoption in developing economies.
• Sequoia Capital and Kleiner Perkins: Lead investors in regulatory technology platforms including Watershed and Persefoni, reflecting venture capital's growing interest in compliance infrastructure.

Action Checklist

1. Build a cross-jurisdictional regulatory calendar. Map all applicable sustainability regulations by jurisdiction, compliance timeline, and reporting scope. Include EU (CSRD, CBAM, CSDDD, EUDR, ESPR), US (SEC, California SB 253/261), and any additional jurisdictions where operations or supply chains are located.
2. Conduct a regulatory gap analysis. Compare current reporting capabilities, data collection systems, and governance structures against the specific requirements of each applicable regulation. Prioritize gaps with the nearest compliance deadlines.
3. Invest in unified data infrastructure. Select reporting platforms that generate data usable across multiple regulatory frameworks. ESRS-aligned data can often satisfy ISSB, GRI, and CDP requirements with limited additional effort, reducing duplicative data collection.
4. Prepare for CBAM definitive phase. If importing covered goods into the EU, establish systems for collecting verified embedded emissions data from non-EU suppliers. Engage with suppliers on measurement methodology and third-party verification requirements before January 2026 deadlines.
5. Map supply chain due diligence obligations. Under CSDDD and EUDR, identify high-risk commodities, geographies, and supplier tiers. Develop or procure traceability systems that can demonstrate compliance with deforestation-free and human rights due diligence requirements.
6. Engage legal counsel on cross-border liability. CSDDD introduces civil liability for environmental and human rights harms in value chains. Assess exposure and insurance coverage, and update supplier contracts to include appropriate compliance clauses.
7. Monitor US regulatory developments. Track SEC litigation outcomes and potential federal legislation. Regardless of federal outcomes, prepare for California requirements as a floor for US climate disclosure practice.

FAQ

Which sustainability regulations carry the largest financial penalties? The EU CSRD, through member state transposition, can impose fines of up to 10% of net turnover for non-compliance. EU CBAM penalties for under-reporting embedded emissions are set at EUR 50 per tonne of unreported CO2 equivalent. CSDDD penalties are determined by member states but include potential civil liability claims without a defined cap. California's SB 253 includes administrative penalties of up to $500,000 per year for non-reporting.

How do EU and US climate disclosure requirements differ? The EU's CSRD uses double materiality, requiring companies to report both how sustainability issues affect the business and how the business affects people and the environment. The US SEC rules focus on financial materiality, covering climate-related risks and emissions that are material to investors. CSRD applies to a broader set of companies (approximately 11,700) with more prescriptive standards (ESRS), while SEC rules target US-listed public companies with more principles-based disclosure requirements.

What is the timeline for CBAM full implementation? The CBAM transitional phase ran from October 2023 to December 2025, requiring quarterly emissions reporting. The definitive phase begins January 2026, requiring importers to purchase CBAM certificates corresponding to the embedded emissions of imported goods. Free allowances under the EU Emissions Trading System will be phased out gradually between 2026 and 2034, with full CBAM pricing applied by 2034.

How should companies prepare for supply chain due diligence regulations? Start with risk mapping: identify which suppliers, commodities, and geographies face the highest human rights and environmental risks. Implement traceability systems for high-risk supply chains. Establish grievance mechanisms accessible to affected stakeholders. Conduct regular due diligence assessments and document findings. The CSDDD requires companies to adopt transition plans aligned with the Paris Agreement's 1.5 degree C target.

What regulatory developments should companies watch in 2026 and 2027? Key milestones include the CBAM definitive phase start (January 2026), EUDR enforcement (June 2026), EU Battery Regulation DPP requirements (February 2027), CSDDD member state transposition (July 2027), GHG Protocol Scope 3 standard update (expected 2026), and potential UK CBAM implementation (2027). Additionally, monitor ISSB adoption decisions in major economies and the outcome of SEC disclosure rule litigation.

Sources

1. Grantham Research Institute on Climate Change and the Environment. "Climate Change Laws of the World Database: 2025 Update." London School of Economics, 2025.
2. European Commission. "Corporate Sustainability Reporting Directive: Implementation Status Report." EC, 2025.
3. PwC. "Global Sustainability Regulatory Readiness Survey 2025." PwC, 2025.
4. International Chamber of Commerce. "Cross-Jurisdictional Sustainability Compliance Cost Analysis." ICC, 2025.
5. European Financial Reporting Advisory Group. "ESRS Implementation Monitoring Report." EFRAG, 2025.
6. California Air Resources Board. "SB 253 and SB 261 Implementation Guidelines." CARB, 2025.
7. World Bank Group. "State and Trends of Carbon Pricing 2025." World Bank, 2025.