ESG disclosure is moving from voluntary practice to legal requirement in jurisdictions that collectively represent the majority of global commerce. For most mid-market organizations, the question is no longer whether disclosure frameworks will apply — it's how to prepare before compliance becomes urgent.
Key Takeaways
- The EU's CSRD is the most consequential ESG disclosure development for global supply chains.
- US disclosure requirements remain contested but are advancing at the state level regardless of federal action.
- Scope 3 emissions — supply chain-generated — are the most technically demanding disclosure requirement.
- Early preparers tend to incur lower compliance costs and fewer operational disruptions.
- ESG disclosure is also becoming a customer and partner expectation, independent of regulation.
The Regulatory Landscape as of 2026
Several major regulatory frameworks are now in effect or in final implementation stages. The most important for organizations with international operations or investor relationships:
| Framework | Jurisdiction | Who It Affects | Status in 2026 |
|---|---|---|---|
| EU Corporate Sustainability Reporting Directive (CSRD) | European Union | Large EU companies + non-EU companies with significant EU revenue | In force; phased in by company size |
| SEC Climate Disclosure Rules | United States | US public companies | Contested; state-level rules advancing independently |
| ISSB Standards (IFRS S1 & S2) | Global (voluntary adoption) | Jurisdictions adopting IFRS sustainability standards | Adopted by growing list of jurisdictions |
| California Climate Accountability Package | California, US | Companies with >$1B revenue doing business in California | SB 253 (Scope 1-3) and SB 261 (climate risk) in implementation |
What CSRD Means for Non-EU Organizations
The CSRD's most significant reach-through effect is on supply chains. Large EU companies subject to CSRD must report Scope 3 emissions, which include emissions from their suppliers. This means that a manufacturer or service provider without EU operations may still face disclosure requests from EU customers who are trying to complete their own CSRD filings.
Organizations that supply to EU companies, particularly in manufacturing, logistics, or professional services, should anticipate data requests covering energy use, emissions intensity, labor practices, and governance. The European Financial Reporting Advisory Group's CSRD resources provide authoritative guidance on what the standard requires.
The Scope 3 Challenge
Scope 3 emissions are upstream and downstream emissions generated by a company's supply chain and customers — not the company's own direct operations. They are, for most organizations, the largest portion of total emissions, and the most difficult to measure.
Calculating Scope 3 emissions requires data from suppliers, customers, and logistics partners that most organizations have not previously collected in a standardized form. The Greenhouse Gas Protocol's corporate accounting standards, which most major frameworks reference, provide a methodology — but applying it requires supply chain engagement, data collection processes, and, in many cases, industry-average emission factors as proxies where supplier-specific data isn't available.
Where Disclosure Is Heading: Durable Trends vs. Current Uncertainty
Several trends appear durable regardless of short-term regulatory developments:
- Mandatory climate risk disclosure is expanding, not contracting. The California requirements alone affect thousands of companies globally that do meaningful business in that state.
- Standardization is increasing. The convergence of major frameworks toward ISSB as a global baseline is reducing the risk that organizations need to comply with entirely different requirements in each jurisdiction.
- Verification requirements are tightening. Self-reported ESG data is transitioning toward third-party verification for larger disclosers.
- Customer and investor expectations are advancing independently of regulation. Large institutional investors and procurement teams at major corporations increasingly request ESG data as a standard part of supplier qualification.
What Remains Genuinely Uncertain
The US federal regulatory environment remains contested. SEC rules have faced legal challenges, and the regulatory posture of federal agencies is subject to political change. Organizations relying on the US federal regulatory calendar as a planning input should note that state-level requirements — particularly California's — are proceeding on their own timeline and affect a large share of the US economy.
There is also genuine methodological uncertainty around Scope 3 measurement. Different calculation methodologies can produce significantly different emissions figures for the same organization. Reporting under the current standards requires methodological disclosure, so consistency and transparency in approach matters more than achieving a particular number.
Practical Preparation Steps for Mid-Market Organizations
For organizations that are early in their ESG disclosure journey, the practical sequence is:
- Determine which frameworks are likely to apply, based on revenue, geographic operations, customer relationships, and investor requirements.
- Identify your largest Scope 1 and Scope 2 emission sources — these are the most straightforward to measure and the starting point for most frameworks.
- Begin supplier engagement to understand whether you will face data requests from EU customers, or need to make requests of your own suppliers.
- Choose a reporting methodology and document it. Consistency year-over-year is more important than precision in early periods.
- Engage legal and compliance counsel with specific ESG expertise before making public disclosures.
Organizations that are also working on broader resilience — managing how regulatory and environmental trends intersect with operational risk — will find that ESG preparation overlaps with building resilience against the most common business gaps. Regulatory non-compliance is itself a resilience risk, and preparing early is structurally similar to other forms of risk mitigation.
For organizations managing vendor and supply chain relationships in this context, how to manage vendor risk in a lean organization provides a framework for incorporating ESG data requests into existing vendor management practices without adding significant overhead.
The Non-Regulatory Case for ESG Disclosure
Beyond compliance, early and transparent ESG disclosure has demonstrable commercial value. In B2B markets, procurement teams at large enterprises are increasingly including ESG assessments in vendor qualification. In capital markets, ESG scores influence cost of capital for publicly traded organizations.
An organization that treats ESG disclosure as a compliance exercise will do the minimum and bear the cost. One that treats it as a business practice will build operational data that also improves supply chain management, energy cost visibility, and stakeholder communication — and bear a similar cost for substantially more benefit.
