Regulators, investors and civil society are all looking at global supply chains with a far greater degree of scrutiny. Companies now have to have in place robust due diligence, ESG reporting and sanctions compliance systems to manage the operational, reputational and legal risks that come with it. If you don't meet those standards, you can face massive fines, business interruptions, and brand damage. A good example of this was a major apparel company in 2023 who were hit with a significant fine from the European authorities for failing to identify labour abuses in its second tier suppliers. That clearly illustrates the need for end-to-end supply chain transparency. New regulations now also require companies to look beyond their first-tier suppliers and manage risk across their entire value chain.
EU and German Supply Chain Regulations
In the EU, the Corporate Sustainability Due Diligence Directive (CSDDD; Directive (EU) 2024/1760) has created mandatory obligations for large companies. It applies to companies with 1000 or more employees and/or significant turnover and requires them to identify, prevent, and mitigate adverse human rights and environmental impacts in their supply chains. They must embed risk analyses into their corporate policies and produce annual reports on their due diligence. There is also a civil liability regime for violations of due diligence obligations in the supply chain (European Parliament, 2024).
Germany's Lieferkettensorgfaltspflichtengesetz (LkSG) introduces national rules for large companies in addition to the EU directive. Since 2023, it has required companies to conduct comprehensive assessments, maintain due diligence, and report annually on their human rights and environmental practices in their supply chains. It first applied to companies with over 3,000 employees and then to those with over 1,000. Non-compliance may result in fines and exclusion from public contracts, so it is clearly in a company's interest to align with EU due diligence frameworks (Federal Ministry for Economic Affairs and Climate Action, 2023).
U.S. SEC ESG and Climate-Related Disclosure Rules
The US SEC's climate disclosure rule (effective 2024) requires public companies to disclose material ESG and climate-related risks that can influence their business, financial and governance performance. While the rules are primarily for investors, they do affect supply chain management. Companies will be required to assess and report on the indirect emissions and ESG risks of their suppliers. For example, a US-listed electronics company sourcing components from a high-risk region would be required to measure and report on the relevant ESG impacts as part of its SEC disclosure (SEC, 2024).
Integrating ESG Risks and Reporting
ESG compliance is now a major part of supply chain management. The appropriate frameworks to follow include the UN Guiding Principles on Business and Human Rights (UNGPs), the OECD Due Diligence Guidance, and reporting standards such as TCFD and ISSB (IFRS S1/S2). These frameworks help companies recognise and mitigate environmental and social risks and report them in a way that is meaningful to investors and regulators (United Nations, 2011; OECD, 2023; IFRS Foundation, 2023).
Organisations can put ESG compliance into practice by assessing suppliers for risk, checking that they meet the requisite environmental and labour standards, and keeping records of any corrective actions. They can use a range of criteria to prioritise suppliers for assessment, such as country of operation, sector risk, business size, and past compliance history, to focus on those in high-risk countries and/or sectors. Corrective actions will usually involve working with the supplier to resolve the issue in question (e.g. developing an action plan, providing training, monitoring progress, etc.) and, where appropriate, the suspension or termination of the relationship. Including these steps in procurement and governance will help meet regulatory requirements and build stakeholder assurance.
Sanctions and Export Controls
Beyond the ESG requirements, there are also rules on sanctions and export controls. In the US, the Office of Foreign Assets Control (OFAC) and the Bureau of Industry and Security (BIS) handle transactions involving sanctioned parties and dual-use items, respectively. Good compliance requires management commitment, risk assessment, and strong controls, monitoring, and training (U.S. Department of the Treasury, 2024).
The EU and UK have sanctions regimes that companies doing business internationally must comply with. Conducting sanctions checks when onboarding new suppliers and as part of regular reviews is a key way to uphold compliance, minimise risk, and keep your processes in line with your ESG standards. It helps reduce the likelihood of regulatory penalties and enhances accountability.
Operationalising Compliance: Practical Guidance
To build a strong supply chain compliance function, you need a clear, risk-based approach. Map the supply chain to identify your suppliers, subcontractors, and areas of risk. You then need to assess human rights, environmental, and sanctions-related risks, using OECD and UNGPs guidance. You then need to put in place appropriate internal controls (supplier codes of conduct, contracts, automated checks, etc.). For multinationals in particular, coordinating compliance across jurisdictions is a major challenge, as laws, disclosure requirements, and enforcement approaches can vary dramatically from one jurisdiction to another. You need global compliance teams, a global set of policies fully aligned to the highest common standard, and local experts. You need to be monitoring and auditing, and you need to be meeting your disclosure obligations under CSDDD, LkSG, SEC and ISSB. You also need a way to fix any compliance issues that arise.
For instance, a multinational consumer goods company uses a central compliance dashboard to track its ESG, sanctions, and regulatory risk. That way, they can monitor in real time and produce the reports for their various country audits.
Emerging Trends and Future Outlook
Regulators now expect ESG, human rights, and sanctions to be governed as one. Investors want clear ESG reporting and evidence of due diligence. New analytics and AI tools are available to help identify risks and monitor suppliers (e.g. Refinitiv World-Check, Dow Jones Risk & Compliance, LexisNexis and the AI-based SupplyShift and Prewave). There's also a move towards greater global harmonisation of the rules in the EU, Germany, and the US, which helps close compliance gaps and allows more consistent reporting.
Organisations that embed these frameworks into their day-to-day operations show they are ready for regulation and improve their standing with stakeholders, investors, and regulators.
Conclusion
Today's global supply chain compliance covers regulations, ESG and sanctions. You need a strong due diligence, monitoring, reporting, and remediation process in place to keep up with the ever-changing regulatory and stakeholder landscape. The CSDDD, LkSG, SEC rules and a host of other international ESG standards provide a good framework. Embedding compliance in your governance is key to avoiding both legal and business risk and showing a genuine commitment to responsible and ethical business.