Brussels finalizes the ESRS and moves supply-chain data out of statute

The European Commission published the final revised European Sustainability Reporting Standards and the separate voluntary standard for smaller companies in the Official Journal on September 22, ESG Today reported, setting the rules for the companies that remain inside the CSRD while the 90% the Omnibus cut loose will answer a different document: the capped request their buyers can make. The regulation enters into force on November 10, 2026 and applies to financial years beginning on or after January 1, 2027, which puts the first reports built on the trimmed standards on a fiscal 2027 basis and a 2028 delivery date.

The publication closes a process the Commission opened in early 2025 under its Omnibus I initiative and which ran more than a year: the Commission adopted the revised ESRS and the voluntary standard in July, and the European Parliament and Council scrutiny period then ran out. The Omnibus package approved by EU lawmakers earlier this year removed companies with less than 450 million euros in revenue and 1,000 employees against the previous 250-employee threshold, reducing CSRD coverage by 90%; for the companies that remain, the Commission handed EFRAG, the body that drafted the original standards, the technical work of rewriting them.

EFRAG submitted its final revision in December 2025 proposing a 61% reduction in mandatory data points and the elimination of all voluntary disclosures, a combined cut of more than 70%, and the Commission released its own draft standards in May 2026 with minor modifications before adopting the final texts in July. Those percentages belong to EFRAG's advice rather than to the adopted annexes: the Journal publication does not state the final data point count, and a required metric added back into a smaller denominator moves a percentage quickly. Anyone sizing a compliance budget off the EFRAG number is working from a proposal until someone counts the published tables, because minor modifications do not reliably stay minor in a data point list.

The revision buys, on EFRAG's arithmetic, a smaller mandatory core and no voluntary layer at all. The second half matters more to allocators: voluntary disclosures were where issuers filed items that mattered to a particular sector, lender or counterparty without fitting the mandatory frame, and deleting the category pushes that information into whatever channel the other side can insist on. The likely result is cleaner comparison across companies at the headline metrics and less beneath them.

For the companies the carve-out removed, the Omnibus did something subtler than exempting them from scrutiny by their buyers: it capped the sustainability information larger companies can request, limiting those requests to information contained in a planned new voluntary reporting standard based on the VSME the Commission endorsed a year earlier. Value-chain data is why that clause carries weight, because a company still inside the CSRD needs supplier emissions and labour figures to complete its own statement, and the cap decides how far up the chain it can reach for them.

That is a relocation of the reporting obligation rather than a deletion of it, and it hands enforcement to whoever holds the commercial relationship. The CBAM mandate turned verifiable emissions data into something importers have to buy at the border, and Brussels' procurement rules attach a 30% minimum quality weighting to climate and supply-chain data, making it part of the bid file—below the CSRD threshold, the instruments become purchase orders and credit agreements, and the information shows up where the leverage is.

The source describes the standard that will govern those requests as planned, and separately reports the Journal publication of a voluntary standard for smaller companies; whether the two are the same instrument is not spelled out. If they are not, the cap currently sits on a template that does not yet exist, and the next twelve months of European value-chain disclosure get written by buyers rather than by regulators.

Allocators sit on both sides of the line, and the consequence differs by portfolio: managers holding in-scope European companies will work from shorter statements, and any supplier-level detail beyond the voluntary standard has to be gathered in diligence rather than cited from a filing. Funds holding mid-market businesses below the revenue and headcount line sit on the other side of the cap, where the requests their buyers can make are limited to the voluntary standard, so a fund's own ESG questionnaire becomes the binding instrument for its portfolio; private-credit lenders and sponsors with procurement-scale relationships will therefore end up with more usable data than the managers reading published reports, reversing the ordering the CSRD was designed to produce.

Allocators that treat sustainability as a reporting capability are the ones that hold mandates when the rules move, and the capability has just been redefined into two skills: reading a shorter standard for the companies inside the CSRD, and negotiating a data schedule for everyone else. The compliance teams that spent three years building CSRD-shaped reporting systems will find the largest part of the companies those systems were built to serve outside the regime that justified the spend.

The regulation takes effect on November 10, 2026, and the first reports under it cover fiscal 2027, arriving in 2028. Before then, the final mandatory data point count in the published annexes—which the coverage does not restate—will show whether the 61% cut EFRAG proposed survives in the adopted text, and the planned voluntary standard built on the VSME will either become the questionnaire European buyers actually use or be replaced by one they write themselves.