I spend most of my time helping companies track physical assets and environmental conditions across global supply chains. Increasingly, those same clients ask me about CSRD. Specifically: does the CSRD apply to the UK, and what does it mean for their operations?
The honest answer: most of what you’ll find online is describing a law that no longer exists in its original form. The EU’s Corporate Sustainability Reporting Directive went through a fundamental rewrite in 2026. Thresholds tripled. Listed SMEs were removed. The population of affected companies shrank by an estimated 75% to 82%. If your CSRD analysis is based on a guide published before mid-2026, you’re working from the wrong blueprint.
Here’s what the current framework actually says, who it catches, and what UK companies should do about it.
CSRD Is Not UK Law
The Corporate Sustainability Reporting Directive is an EU legal framework requiring companies above specified thresholds to disclose sustainability risks, opportunities, and impacts under the European Sustainability Reporting Standards (ESRS). The UK left the EU. It did not transpose CSRD into domestic legislation. No UK statute compels a UK company to file an ESRS report simply because it operates in Britain.
The UK has its own sustainability reporting path. UK SRS S1 and S2 are based on IFRS standards and are currently available for voluntary use only. Mandatory UK SRS reporting would require future legislation or regulation that hasn’t been enacted yet.
But “not UK law” does not mean “doesn’t affect UK companies.” That gap is where the real question lives.
Three Routes CSRD Reaches a UK Company
A UK-headquartered group can fall within CSRD scope through three paths. Only three. If none applies, the directive doesn’t reach you directly.
Route 1: Your EU subsidiary is independently in scope
If your group has an EU subsidiary that exceeds 1,000 average employees and EUR 450 million in turnover, that subsidiary carries its own CSRD obligation. The UK parent doesn’t need to be in scope at all. The subsidiary reports under the national law of the EU Member State where it’s incorporated. Reporting for financial year 2027 is expected to be published in 2028 under the amended timetable.
Route 2: Article 40a (the non-EU parent route)
This is the one that keeps CFOs up at night. Under the current framework, a UK parent triggers Article 40a when it meets both conditions simultaneously:
- More than EUR 450 million of EU net turnover in each of the previous two consecutive financial years
- An EU subsidiary exceeding EUR 200 million of turnover, or an EU branch exceeding EUR 200 million of turnover
Both limbs. Not either/or. And there is no employee test for the non-EU parent under this route. The test is EU turnover plus EU presence through a qualifying subsidiary or branch.
First reports under Article 40a cover FY2028 data, published in 2029. The detailed ESRS-40a standard is still an EFRAG Exposure Draft, so the legal trigger is clearer than the final reporting requirements.
Route 3: Securities on an EU regulated market
If a UK company has securities formally listed on an EU regulated market (not merely traded), it can fall within scope through that listing. This path affects a narrow group, but it’s worth checking if your company holds EU market listings alongside a London listing.
No other route exists. Selling into the EU, having EU customers, employing EU citizens: none of these alone creates a direct CSRD filing obligation.
The Thresholds That Changed Everything
This is the part most guides get wrong, because they’re citing numbers from a law that was substantially rewritten.
The Omnibus I amendments and subsequent legislation raised CSRD thresholds so dramatically that the European Commission’s own impact assessment estimated a 75% to 82% reduction in the number of companies in scope. That’s not a technical tweak. That’s a different regulation.
| Test | Pre-Omnibus (what most guides still cite) | Current post-2026 framework |
|---|---|---|
| Core EU company threshold | Large undertakings (250+ employees), plus listed SMEs | 1,000+ employees and EUR 450M turnover |
| Non-EU parent EU turnover | EUR 150 million | EUR 450 million in each of two consecutive years |
| Non-EU subsidiary/branch test | EUR 40M (branch) or subsidiary meeting old thresholds | EUR 200 million turnover (subsidiary or branch) |
| Listed SMEs | Included in mandatory scope | Removed from mandatory scope |
A UK group comfortably inside the old EUR 150 million EU turnover threshold may now be well outside the EUR 450 million line. That’s good news for many. But the reverse matters too: relying on a pre-Omnibus “you’re fine” analysis is risky if your EU revenue is climbing, because the two-consecutive-year test means FY2026 and FY2027 EU revenue determines whether you report for FY2028.
For context, PwC’s 2024 Global CSRD Survey of 547 executives across 30+ countries found that 63% were confident about readiness. They were answering about a different regime. The rules underneath them moved.
UK SRS and CSRD Solve Different Problems
A common assumption: “We’re preparing for UK SRS, so CSRD is handled.” It isn’t. These frameworks address different aspects of ESG compliance and require distinct approaches.
UK SRS S1 and S2 are based on IFRS sustainability disclosure standards. They focus on enterprise value and investor decision-usefulness. CSRD uses ESRS, which applies double materiality: both the financial impact on the company and the company’s impact on people and the environment. These are structurally different frameworks.
The FCA has proposed making UK SRS S2 climate disclosures mandatory for listed entities, excluding Scope 3 from the mandatory core and using comply-or-explain for broader sustainability matters. ESRS, by contrast, covers Scope 1, 2, and 3 emissions, workforce conditions, biodiversity, pollution, resource use, and circular economy topics when they’re material.
The practical consequence: a UK SRS report does not substitute for an ESRS filing. An ESRS report does not automatically satisfy UK disclosure rules. If you’re caught by both (a London-listed group with a large EU subsidiary, for example), you need two outputs from the same underlying data. One does not discharge the other.
The Exposure Nobody Puts in the Headline
Most CSRD guides stop at scope: you’re in or you’re out. They don’t explain what happens when you’re technically outside scope but your largest EU customer is inside it.
An in-scope EU company reporting under ESRS needs supply-chain data. Scope 3 emissions. Value-chain workforce conditions. Environmental impacts of purchased goods and services. That data comes from suppliers. Many of those suppliers are UK companies with no direct CSRD filing obligation.
The questionnaires are already landing. Hundreds of data points. Carbon intensity per product line. Water usage by facility. Worker safety statistics by site. A UK supplier can refuse. But when the alternative is losing a contract with a major European manufacturer, the distinction between “legally mandatory” and “commercially required” evaporates fast.
KPMG’s analysis of 50 first-wave sustainability statements found that climate change, pollution, resource use, own workforce, and value-chain workers were among the most commonly reported material topics. Those topics don’t stop at the reporting entity’s legal borders. They flow upstream to every supplier in the chain.
The companies handling this well aren’t the ones with better lawyers. They’re the ones that already have auditable environmental and operational data. When a customer questionnaire arrives, they pull the numbers from real systems instead of assembling estimates in a spreadsheet over a painful quarter.
What UK Companies Should Do Now
Whether you’re in direct CSRD scope or facing it indirectly through customer pressure, the practical steps overlap. The difference is urgency.
1. Map your EU footprint by legal entity. Every subsidiary, branch, and joint venture in EU Member States. Record turnover, employee count, and whether each entity files statutory accounts locally. This is the foundation for every threshold test.
2. Test against current thresholds. Not the 2024 thresholds. The current Directive (EU) 2026/470 thresholds. EUR 450 million and 1,000 employees for the large-company test. EUR 450 million EU turnover plus EUR 200 million subsidiary/branch for Article 40a. Both conditions, not one.
3. Identify indirect exposure. Which of your top EU customers are in scope? What data requests have you already received? What gaps exist in your ability to respond?
4. Build the data layer before you need the report. This is where I have a strong opinion, because it’s what I see every day. The hardest part of sustainability reporting is not understanding the rules. It’s having trustworthy, auditable data. Emissions, energy consumption, waste, water usage, asset utilization, supply-chain traceability: these need to come from operational systems running continuously, not from annual collection exercises.
Environmental tracking devices that log temperature, humidity, and conditions in real time. Asset tracking infrastructure that gives you supply-chain visibility from origin through delivery and return. IoT systems that produce timestamped, auditable records rather than estimates. The gap between “we think our emissions are X” and “here’s the sensor data proving it” is the gap between surviving an audit and failing one.
5. Don’t freeze because thresholds moved. KPMG’s survey found that 62% of companies were continuing ESRS implementation after Omnibus, and 75% of those continuing planned to use ESRS before it was mandatory for them. A joint investor statement from 214 signatories representing approximately EUR 6.6 trillion in assets argued that comparable sustainability data remains necessary for investment decisions. The market wants this data whether the law requires it from you personally or not.
If your organization needs help building the operational data infrastructure that sustainability reporting demands, talk to our team. We work at the intersection of IoT, asset visibility, and environmental monitoring, exactly where raw operational reality turns into reportable evidence.
Frequently Asked Questions
Does CSRD apply to a UK company with no EU presence?
Not directly. Without an EU subsidiary, branch, or EU-regulated-market listing that meets the relevant thresholds, a UK company has no CSRD filing obligation. It can still face supply-chain data requests from in-scope EU customers, but those are commercial requirements, not a legal CSRD obligation.
Do EU sales alone trigger CSRD for a UK company?
No. Under Article 40a, the non-EU parent must exceed EUR 450 million in EU net turnover in each of two consecutive years and have a qualifying EU subsidiary or branch above EUR 200 million. Revenue without EU legal-entity presence does not meet the test.
Does UK SRS compliance satisfy a CSRD obligation?
No. UK SRS S1 and S2 are based on IFRS standards and are currently voluntary. They use a different materiality concept than ESRS. A UK SRS report does not substitute for an ESRS filing, and CSRD compliance does not discharge UK reporting requirements.
When would a qualifying UK parent first report under Article 40a?
Article 40a reporting covers financial years starting on or after January 1, 2028. First statements would cover FY2028 data and be published in 2029. The detailed ESRS-40a standard remains under EFRAG consultation, so final data-point requirements may still change.
Why do different websites show different CSRD thresholds?
Most guides describe the original CSRD or pre-Omnibus proposals. Earlier materials cite EUR 150 million EU turnover, EUR 40 million branches, and 250-employee thresholds. The 2026 amendments raised these substantially. Always verify which version of the directive a guide references before relying on its numbers.
Should UK companies outside scope still collect sustainability data?
Yes. Investors, lenders, and in-scope EU customers increasingly require comparable sustainability data regardless of your direct reporting obligations. Building auditable data infrastructure now costs less than retrofitting it under deadline pressure. The companies that treat data collection as optional today tend to be the ones scrambling hardest tomorrow.
+1 508 292 2210
2 Responses