Human Rights Due Diligence under CSDDD: Operationalizing the Social Pillar

Why It Matters

The introduction of the CSDDD marks the end of the era of "greenwashing" and "social washing" through high-level policy statements that lack operational teeth. For the first time, a major economic bloc has codified the United Nations Guiding Principles on Business and Human Rights (UNGPs) into binding law with significant financial and legal consequences.

For investors, the CSDDD provides a standardized level of risk management. Human rights violations in the supply chain—such as forced labor or unsafe working conditions—are no longer just ethical concerns; they are material financial risks. A failure to manage these risks can lead to massive fines (up to 5% of global net turnover), exclusion from public procurement, and protracted litigation.

Furthermore, the CSDDD addresses the "governance gap" in global supply chains. By holding lead firms responsible for the conduct of their business partners, the directive incentivizes a shift from transactional, price-driven procurement to long-term, partnership-based sourcing. This shift is essential for ensuring the resilience of global trade in an era of increasing geopolitical instability and social scrutiny.

Key takeaway

"The CSDDD transforms human rights due diligence from a corporate social responsibility exercise into a core fiduciary duty, where the failure to mitigate systemic social risks carries the same weight as financial negligence."

The Standard / Framework in Detail

The CSDDD is built upon the six steps of the OECD Due Diligence Guidance for Responsible Business Conduct. It applies to EU companies with more than 1,000 employees and a net worldwide turnover of more than €450 million, as well as non-EU companies with significant turnover generated within the Union.

The Six Pillars of CSDDD Compliance

1. Integrating Due Diligence: Companies must embed due diligence into their corporate policies and have a due diligence policy in place that is updated annually.
2. Identifying Adverse Impacts: This involves mapping the entire chain of activities to identify where human rights and environmental risks are most likely to occur.
3. Prevention and Mitigation: Where potential impacts are identified, companies must take preventive measures. If impacts have already occurred, they must be mitigated or brought to an end.
4. Complaints Procedure: Companies must establish a grievance mechanism that is accessible to stakeholders, including workers in the supply chain and civil society organizations.
5. Monitoring Effectiveness: The effectiveness of the due diligence measures must be periodically assessed through qualitative and quantitative indicators.
6. Public Communication: While the CSRD handles the bulk of reporting, the CSDDD requires an annual statement on the company's due diligence processes for those not already covered by CSRD reporting requirements.

Comparison: CSDDD vs. German Supply Chain Act (LkSG)

The "Chain of Activities" Concept

The CSDDD uses the term "chain of activities" rather than "value chain" to define the scope of responsibility. This includes:

• Upstream: All activities related to the production of goods or the provision of services, including the design, extraction, manufacture, and transport of raw materials.
• Downstream (Limited): Activities carried out by business partners regarding the distribution, transport, and storage of the product. Notably, the disposal of the product by consumers is currently excluded from the mandatory due diligence scope, though it remains a best-practice consideration under GRI.

Practical Applications

Implementing CSDDD requires a cross-functional approach involving Legal, Procurement, Sustainability, and Risk Management departments.

1. Risk Mapping and Prioritization

Companies cannot address every risk simultaneously. The CSDDD allows for prioritization based on the "severity" and "likelihood" of the impact. Professionals should use heat maps to identify high-risk geographies (e.g., regions with weak labor laws) and high-risk commodities (e.g., cobalt, palm oil, or textiles).

2. Contractual Assurances and "Cascading"

A primary tool for compliance is the use of "model contractual clauses." Companies will require their direct business partners to comply with their code of conduct and to "cascade" these requirements down to their own suppliers. However, the CSDDD warns that companies cannot simply shift all responsibility onto suppliers; they must provide support, particularly to Small and Medium Enterprises (SMEs), to help them meet these standards.

3. Meaningful Stakeholder Engagement

Due diligence is not a desk-based exercise. It requires engaging with "affected stakeholders"—the people whose rights are at risk. This includes workers, local communities, and indigenous peoples. Practical application involves:

• On-site audits by independent third parties.
• Worker voice surveys via mobile technology.
• Regular consultations with local NGOs and trade unions.

4. Remediation Mechanisms

If a company discovers it has caused or contributed to an adverse impact (e.g., wage theft in a subsidiary), it must provide remediation. This could involve financial compensation, reinstatement of workers, or a formal apology. The CSDDD emphasizes that the goal is to "neutralize" the adverse impact.

Industry Examples

Example 1: The Electronics Sector (Upstream Focus)

A major European consumer electronics manufacturer (Archetype: Global Tech Co) historically focused its audits on Tier 1 assembly plants. Under CSDDD, they expanded their due diligence to Tier 3 and Tier 4, specifically targeting artisanal cobalt mines in the Democratic Republic of Congo.

• Action: They joined the Responsible Minerals Initiative (RMI) and implemented blockchain-based traceability to track the chain of custody.
• Lesson: Compliance requires industry-wide collaboration; individual companies rarely have the leverage to change systemic issues in raw material extraction alone.

Example 2: The Apparel Industry (Purchasing Practices)

A large fashion retailer (Archetype: Fast Fashion Group) identified that its own purchasing practices—specifically short lead times and aggressive price negotiations—were a root cause of forced overtime and unauthorized subcontracting in Southeast Asia.

• Action: The company revised its procurement KPIs to include "social performance" alongside "price" and "quality." They moved to long-term contracts (3+ years) with "strategic suppliers" to provide them with the financial stability needed to invest in safe working conditions.
• Lesson: CSDDD requires looking inward at corporate behavior, not just outward at supplier behavior.

Example 3: Unilever (Real-World Leader)

Unilever has long been a proponent of mandatory due diligence. They have integrated the UNGPs into their "Responsible Sourcing Policy" and provide detailed disclosures on how they address "salient human rights issues."

• Action: Unilever uses a "Human Rights Ambassador" program to train local managers on identifying risks in real-time.
• Lesson: Early adoption of voluntary standards (GRI, UNGPs) makes the transition to mandatory CSDDD compliance significantly less disruptive.

Regulatory Implications

The CSDDD does not exist in a vacuum; it is the "action" component of a broader European and global regulatory ecosystem.

• CSRD & ESRS: The Corporate Sustainability Reporting Directive (CSRD) and the accompanying European Sustainability Reporting Standards (ESRS) provide the disclosure framework. Specifically, ESRS S1 (Own Workforce), S2 (Workers in the Value Chain), S3 (Affected Communities), and S4 (Consumers and End-users) are the reporting mirrors of CSDDD actions. EU CSRD Overview
• IFRS & ISSB: While ISSB (S1 and S2) focuses primarily on financial materiality and climate, the CSDDD’s requirement for climate transition plans aligns with the disclosure recommendations of IFRS S2. ISSB Standards
• GRI: The Global Reporting Initiative remains the most widely used standard for impact materiality. CSDDD’s focus on "adverse impacts" is fundamentally aligned with GRI’s definition of impact. GRI Standards
• UN Guiding Principles (UNGPs): The CSDDD is the legal codification of the "Protect, Respect, and Remedy" framework established by the UN. UN Guiding Principles
• OECD Guidelines: The CSDDD explicitly references the OECD Guidelines for Multinational Enterprises on Responsible Business Conduct as the methodological basis for due diligence. OECD Guidelines
• EU Taxonomy: The "Minimum Safeguards" of the EU Taxonomy require companies to align with the OECD Guidelines and UNGPs. CSDDD compliance will effectively serve as the evidence for meeting these safeguards.