Finrep at Society for Corporate Governance National Conference
Gana Misra
By Gana MisraCEO, Finrep
Fri Jul 03 2026

CSRD Reporting Requirements for US Companies with EU Operations: 2026 Guide

Share
CSRD Reporting Requirements for US Companies with EU Operations: 2026 Guide

CSRD Reporting Requirements for US Companies with EU Operations: 2026 Guide

If your US company generates more than €150 million in EU revenue and has at least one substantial EU subsidiary or branch, the EU's Corporate Sustainability Reporting Directive applies to you directly, regardless of where you're headquartered. This guide is for CFOs, ESG leads, and compliance officers who need to know exactly who is in scope, what the post-Omnibus rules actually require, and what the revised timeline means for planning.

Key takeaway: The Omnibus reforms pushed the TCU first-report deadline from 2029 to 2031, but EFRAG's N-ESRS Exposure Draft lands in mid-July 2026. Companies that wait for final standards before starting will not have enough time to build the data infrastructure, governance structures, and assurance readiness the rules demand.

Does CSRD Apply to US Companies?

Yes, and the scope is broader than most US teams assume. The CSRD captures US companies through two distinct pathways, and either one can trigger a mandatory filing obligation.

Pathway 1: The Third-Country Undertaking (TCU) route. A US parent company must file a consolidated sustainability report covering its entire global group if it meets all of the following, per Deloitte's CSRD FAQ:

  • More than €150 million net turnover generated in the EU in each of the last two consecutive financial years, AND
  • At least one of: a large EU subsidiary, a listed EU SME subsidiary, or an EU branch with more than €40 million net turnover

Pathway 2: The EU subsidiary route. Even if the US parent does not cross the TCU threshold, any EU subsidiary that meets two of the following three criteria in two consecutive years must file its own CSRD report independently:

  • Balance sheet total above €25 million
  • Net turnover above €50 million
  • More than 250 employees on average

A frequently overlooked trigger: if a US parent has securities listed on an EU-regulated market, even a small EU subsidiary that would otherwise fall below the large-undertaking thresholds may still be in scope as a listed SME.

As SEC Commissioner Hester Peirce warned at Eurofi in April 2023, the CSRD "will capture a whole host of companies that previously were not" subject to such requirements. That observation has only become more relevant as US multinationals audit their EU footprints.

What Changed Under the Omnibus Package?

Three legislative instruments now govern CSRD, and most competing guidance still cites the pre-Omnibus rules. US compliance teams need to track all three, as confirmed by KPMG's 2026 sustainability reporting reference library:

InstrumentWhat It DoesStatus
Stop-the-Clock Directive (EU 2025/794)Delayed Wave 2 and Wave 3 reporting by two yearsIn force
Content Directive (EU 2026/470)Narrowed scope, raised employee threshold, simplified ESRSIn force
Quick Fix Delegated Act (EU 2025/1416)Reduced certain ESRS data-point obligations for Wave 1In force

The combined effect for US parent-level TCU filers is significant: the original start date of financial years beginning 1 January 2028 (first reports due 2029) has been pushed to financial years beginning 1 January 2030, with first reports now due in 2031. That is a two-year extension, but it is not a green light to pause.

The Content Directive also raised the employee threshold for mandatory CSRD reporting, concentrating obligations on the largest companies. The exact thresholds for the revised scope are still being operationalized through the ESRS revision process, but the policy direction is clear: the EU is narrowing the net while keeping large non-EU multinationals firmly inside it.

What US Companies Must Actually Report Under ESRS

In-scope companies report under the European Sustainability Reporting Standards (ESRS) Set 1, adopted as Commission Delegated Regulation (EU) 2023/2772 and published in the Official Journal on 22 December 2023. ESRS Set 1 contains 12 sector-agnostic standards:

  • 2 cross-cutting standards: ESRS 1 (General Requirements) and ESRS 2 (General Disclosures) are mandatory for all in-scope companies regardless of materiality
  • 10 topical standards: E1 (Climate Change), E2 (Pollution), E3 (Water), E4 (Biodiversity), E5 (Resource Use), S1 (Own Workforce), S2 (Workers in Value Chain), S3 (Affected Communities), S4 (Consumers), and G1 (Business Conduct)

The topical standards are subject to a double materiality assessment. A topic is material, and therefore reportable, if it is material from either an impact or financial perspective. Companies only report on topics that clear that bar.

Across the 12 standards, ESRS Set 1 contains roughly 80 disclosure requirements and hundreds of individual data points, both quantitative and qualitative. Phase-in options exist for all companies; companies with fewer than 750 employees receive additional relief on certain data points in early reporting years.

What Is Double Materiality, and Why Does It Matter for US Companies?

Double materiality is the single biggest conceptual shift for US reporting teams. Under ESRS, companies must assess two distinct dimensions:

  1. Impact materiality: the company's actual and potential impacts on people and the environment (outward-looking)
  2. Financial materiality: sustainability-related risks and opportunities that affect the company's financial performance (inward-looking)

A topic is material if it clears either bar. This is fundamentally different from the SEC's single, investor-focused materiality standard, where the question is only whether information would affect a reasonable investor's decision. Under ESRS, a company could have no financially material climate exposure but still be required to report on its climate impacts if those impacts are significant.

The double materiality assessment also requires formal stakeholder engagement with both "affected stakeholders" (those whose interests are affected by the company's activities) and "users of sustainability statements" (investors, lenders, NGOs, governments). That engagement requirement goes well beyond anything in SEC disclosure rules.

Value-Chain Reporting: The Operational Burden

ESRS requires disclosure on the upstream and downstream value chain, not just direct operations. In practice, this means asking suppliers, subcontractors, and in some cases customers for ESG data they may not currently collect. This is one of the most operationally demanding aspects for US companies, particularly those with complex global supply chains.

Phase-in relief applies to value-chain data in early reporting years, but the expectation is that companies build toward full value-chain coverage. US companies should start supplier engagement programs now, even if formal reporting is years away.

XBRL Tagging: A Technical Layer US Teams Often Miss

CSRD reports must be filed in XBRL/iXBRL digital format, tagged against the ESRS XBRL taxonomy published by EFRAG (corrigendum published 18 April 2024). This is entirely separate from the XBRL tagging US companies do for SEC filings. The ESRS taxonomy is different, the filing system is different, and the technical infrastructure needs to be built from scratch. US teams that assume their existing SEC XBRL workflows transfer will be caught short.

Assurance Requirements

CSRD requires third-party assurance on the sustainability report. The phased approach starts with limited assurance and includes a pathway to reasonable assurance in later years. Limited assurance is a lower bar than a financial statement audit but still requires engaging a qualified assurance provider and having systems that can withstand scrutiny. Building assurance-readiness typically takes two to three years, which is why companies preparing for a 2031 first report need to start engaging assurance providers now.

ESRS vs. N-ESRS: The Distinction Almost No One Is Explaining

This is the most important distinction for US CFOs and ESG teams, and it is almost entirely absent from current guidance.

ESRS Set 1 governs what EU subsidiaries file in their own CSRD reports. But for the US parent filing a consolidated TCU report, a separate set of standards is being developed: the Non-EU ESRS (N-ESRS).

EFRAG has been mandated by the European Commission to develop N-ESRS specifically for non-EU companies. According to EFRAG's May 2026 call for tender, the timeline is:

  • Mid-July 2026: N-ESRS Exposure Draft published for public consultation
  • Late September 2026: Preliminary Cost and Benefit Analysis due
  • January 2027: EFRAG Technical Advice on N-ESRS approved; final CBA due 20 January 2027

EFRAG has stated that N-ESRS is intended to ensure a "level playing field" and "accountability and transparency of non-EU companies doing business in the EU market." That language signals the EU intends N-ESRS to be substantively rigorous, not a watered-down alternative.

What this means practically: US companies cannot simply apply ESRS Set 1 to their consolidated TCU report and assume compliance. The N-ESRS may differ in scope, structure, or data-point requirements. The Exposure Draft in July 2026 will be the first concrete signal of what those differences are.

One open question that N-ESRS must resolve: whether a US parent's EU subsidiary report must include the activities of that subsidiary's own non-EU sub-subsidiaries. Samsung Electronics raised this directly at the EFRAG Conference in December 2024, noting that "financial reporting has kept those non-EU subsidiaries out of scope, and we would like this to be applied to CSRD reporting as well." That question remains unresolved.

CSRD vs. SEC Climate Disclosure: The Dual-Reporting Challenge

US companies face a genuine strategic decision about data architecture, not just a compliance checklist. The SEC adopted its climate disclosure rule in March 2024, then stayed and substantially scaled it back in 2025. The result is a US domestic climate disclosure regime that is narrower in scope, financially-materiality-focused, and less demanding than CSRD in almost every dimension.

DimensionCSRD / ESRSSEC Climate Rule (post-2025)
Materiality standardDouble materiality (impact + financial)Financial materiality only
Topics coveredFull ESG spectrum (E, S, G)Climate-related risks and financial impacts
Companies in scopeLarge public and private companiesPrimarily US-listed public companies
AssuranceRequired (limited, then reasonable)Not currently mandated
Digital taggingXBRL/iXBRL (ESRS taxonomy)XBRL (SEC taxonomy)
Value-chain reportingRequired (upstream and downstream)Not required

The practical question for US CFOs is whether to build a unified global ESG data platform that satisfies both regimes, or run parallel tracks. The unified approach costs more upfront but avoids duplication and inconsistency. The parallel-track approach is simpler initially but creates long-term data governance problems and risks contradictory disclosures.

One bridge worth considering: the ISSB's IFRS S1 and S2 standards (issued June 2023) are designed to be interoperable with ESRS, and the IFRS Foundation and EFRAG have published interoperability guidance. US companies that align with IFRS S1/S2 now will have a meaningful head start on CSRD compliance, since ESRS is more extensive but shares significant structural overlap with IFRS S2 on climate.

Enforcement: Which Regulator, Which Penalties?

CSRD operates through member-state transposition, which means enforcement varies by EU jurisdiction. The directive amended the EU Accounting Directive (2013/34/EU), and each member state writes its own penalties into national law. A US company with subsidiaries in Germany, France, and the Netherlands faces three different enforcement regimes with potentially different penalty structures.

For TCU filers, the filing obligation sits with the EU subsidiary or branch in the relevant member state. Choosing which member state to designate as the TCU filing jurisdiction is therefore a real strategic decision, not just an administrative one. Legal counsel familiar with the national transposition laws in each relevant jurisdiction should be involved in that choice.

Samsung Electronics, which is preparing 17 European subsidiaries for CSRD reporting starting from 2026, described the compliance burden candidly at the EFRAG Conference in December 2024: "It is a resource-intensive endeavor. It takes time. It's costly and requires additional staff time. Actually, lots of staff time!"

2026 to 2031 Readiness Checklist

Given the revised TCU deadline, here is a practical milestone map for US companies:

Now through end of 2026

  1. Confirm scope: apply the €150M EU turnover test and EU presence test to determine TCU exposure; separately assess each EU subsidiary against the large-undertaking thresholds
  2. Monitor the N-ESRS Exposure Draft (expected mid-July 2026) and submit comments during the consultation period
  3. Conduct a preliminary double materiality assessment to identify which ESRS topical standards are likely material
  4. Assess the gap between current ESG data collection and ESRS data-point requirements
  5. Identify the EU member state(s) relevant for TCU filing and engage local legal counsel on national transposition

2027 6. Review EFRAG's final N-ESRS Technical Advice (expected January 2027) and update compliance scope accordingly 7. Begin building or procuring an ESG data platform capable of collecting, validating, and tagging ESRS data points 8. Engage an assurance provider to assess current data quality and build an assurance-readiness roadmap 9. Establish a value-chain data collection program for upstream suppliers

2028 to 2029 10. Run a dry-run sustainability report against N-ESRS requirements 11. Complete XBRL/iXBRL taxonomy mapping for ESRS digital tagging 12. Finalize governance structures: board oversight of sustainability reporting, internal controls over non-financial information

2030 (first reporting year) 13. Collect data for the financial year starting 1 January 2030 14. Engage assurance provider for limited assurance engagement

2031 15. File first TCU sustainability report in the designated EU member state

Key takeaway: KPMG's 2025 analysis found that most leading US and non-EU companies operating in the EU have already assessed their CSRD compliance scope. Companies that have not started that assessment are already behind the curve, even with the extended timeline.

FAQ

Which framework specifies the reporting requirements for EU CSRD? The ESRS, adopted as Commission Delegated Regulation (EU) 2023/2772 on 22 December 2023, are the operative standards. For EU subsidiaries, ESRS Set 1 applies directly. For US parent-level TCU reports, EFRAG is developing a separate N-ESRS framework, with a Technical Advice expected in January 2027.

Does CSRD apply to non-EU companies? Yes. US companies that generate more than €150 million net turnover in the EU in each of the last two consecutive financial years and have at least one large EU subsidiary, listed EU SME subsidiary, or EU branch with more than €40 million turnover must file a consolidated sustainability report under the TCU pathway. EU subsidiaries of US parents may also be independently in scope.

Can our EU subsidiary's CSRD report satisfy the US parent's TCU obligation? Not automatically. The TCU report must cover the entire consolidated global group, not just EU operations. The EU subsidiary's standalone report covers only that entity. The two obligations are separate, though data collected for the subsidiary report will feed into the parent-level TCU report.

What makes CSRD different from the SEC's climate disclosure rule? CSRD uses double materiality, covers the full ESG spectrum across 12 ESRS standards, applies to large private as well as public companies, requires third-party assurance, and mandates XBRL digital tagging. The SEC's scaled-back climate rule uses financial materiality only, focuses on climate-related risks, and applies primarily to US-listed public companies. The two regimes are not substitutes for each other.

Can we use IFRS S1/S2 alignment as a bridge to CSRD compliance? Partially. ESRS and IFRS S2 share structural overlap, particularly on climate, and the IFRS Foundation and EFRAG have published interoperability guidance. Aligning with IFRS S1/S2 now provides a meaningful head start, but ESRS is more extensive, particularly on social and governance topics and value-chain reporting.

What are the penalties for non-compliance? Penalties are set at the member-state level through national transposition of the EU Accounting Directive. They vary by jurisdiction, which is one reason choosing the right TCU filing jurisdiction matters. US companies with subsidiaries across multiple EU countries should obtain jurisdiction-specific legal advice on penalty exposure.

Run your SEC filing cycle on Finrep