European Union and Germany: Supply chain due diligence - Navigating the evolving landscape

In brief

The EU economy is linked to millions of workers worldwide through global supply chains. This imposes both a responsibility and an opportunity for EU companies to positively impact workers' rights and environmental standards. In early 2023, Germany took a step towards responsible supply chains with the new Act on Corporate Due Diligence Obligations in Supply Chains (Lieferkettensorgfaltspflichtengesetz - "LkSG"), as covered in our earlier post. On Friday 9 February 2024, EU Member States will vote in Coreper on the adoption of the Corporate Sustainability Due Diligence Directive (CSDDD), which aims to harmonize corporate human rights and environmental due diligence across the EU.

The CSDDD has been provisionally agreed on a political basis in December 2023. Now the final text of CSDDD must be formally adopted by the European Parliament and the Council of Ministers before it will enter into force. Once ratified, EU member states will have two years to transpose the directive into their domestic law. In Germany, this will likely necessitate modifications and expansions to the LkSG.


Contents

The CSDDD, when compared to Germany's LkSG, introduces further requirements, which we will explore in this blog post. Key distinctions in the final agreement of the CSDD include:

  • Broadening the scope of affected entities
  • Extension of the covered supply chain
  • Enhanced liability paired with stricter sanctions
  • Further focus on climate considerations

Delineating the Changes Between CSDDD and LkSG

Scope Expansion Under CSDDD

Many more businesses will be covered by the CSDDD than by the German LkSG. The CSDDD encompasses both EU-based companies and companies from third countries, provided certain thresholds of employees and turnover are met.

For companies constituted under the laws of EU member states, the directive applies if the company falls under one of the following Groups:

Group 1 - "very large companies" Companies that had:
  • More than 500 employees on average
  • More than EUR 150 million of net worldwide turnover in their last financial year
Group 2 – "ultimate parent company of very large groups" Groups that had a consolidated basis of:
  • More than 500 employees on average
  • More than EUR 150 million of net worldwide turnover in their last financial year
Group 3 – "companies with a franchising or licensing business model"  Companies that entered into a franchising or licensing agreement in the EU in return for royalties, provided:
  • These royalties amounted for more than EUR 7.5 million
  • The company generated, individually or on a consolidated basis as the ultimate parent company of a group, a net worldwide turnover of more than EUR 40 million in their last financial year
Group 4 Companies in "high-impact sectors" Companies that had:
  • More than 250 employees on average
  • More than EUR 40 million of net worldwide turnover, of which at least EUR 20 million were generated in a "high-impact sector" in their last financial year

 

In contrast, the German LkSG has no turnover threshold and has applied to companies with at least 3,000 employees in 2023 and applies to companies with at least 1,000 employees since 1 January 2024.

Both the LkSG and CSDDD address non-EU companies. The LkSG applies to non-EU companies with a German branch employing at least 1,000 employees. In contrast, the CSDDD targets companies even without an EU presence, provided they meet the relevant turnover thresholds within the EU:

Group 1 - "very large companies"  Companies that had:
  • More than EUR 150 million of net worldwide turnover in their last financial year
Group 2 – "ultimate parent company of very large groups" Groups that had a consolidated basis of:
  • More than EUR 150 million of net worldwide turnover in their last financial year
Group 3 – "Companies with a franchising or licensing business model"  Companies that entered into a franchising or licensing agreement in the EU in return for royalties, provided:
  • These royalties amounted for more than EUR 7.5 million
  • They generated, individually or on a consolidated basis as the ultimate parent company of a group, a net worldwide turnover of more than EUR 40 million in their last financial year
Group 4 Companies in "high-impact sectors"  Companies that had:
  • More than EUR 40 million but not exceeding EUR 150 million of net worldwide turnover, of which at least EUR 20 million were generated in a "high-impact sector" in their last financial year


From Supply Chain to Chain of Activities

Also in its scope of examination, the CSDDD goes beyond the LkSG. The term supply chain as defined in the LkSG is limited to due diligence measures within the company's own business area and its suppliers. However, the CSDDD broadens this scope to the chain of activities. This means due diligence requirements will cover a company's own business activities, as well as those of its subsidiaries, extending to both the upstream and certain downstream sections of the chain of activities.

  • The upstream chain of activities includes all activities of a company related to product manufacturing, such as raw material extraction, and provision of services.
  • The downstream chain of activities includes activities conducted by business partners regarding distribution, transportation, storage, and disposal but excludes disposal of products by consumers. The distribution, storage, and disposal of products subject to export controls are also excluded.

New Liability Risks and Stricter Sanctions

A glaring divergence between the two legislations arises in civil liability. While the LkSG explicitly excludes civil liability, it is included in the CSDDD. The idea behind it: ensuring an even more effective enforcement of due diligence obligations. The CSDDD enables affected parties to directly file claims against companies for damages stemming from intentional or negligent violations of obligations under the CSDDD. A company cannot be held liable if the damage was caused solely by its business partners in the chain of activities.
Sanctions in case of violations of due diligence obligations have already been the case under the LkSG in Germany. However, with the CSDDD, these penalties extend further. They may include fines of up to 5% of the annual group turnover and public disclosure of the violation naming the company ("naming and shaming").

An Intensified Climate Mandate

Both law texts aim to protect human rights and the environment. Yet, the CSDDD adopts a more holistic approach with regard to climate protection due diligence. It requires all companies, except those of Group 4, to adopt and put into effect a transition plan aligning their business strategies with sustainability and limiting global warming to 1.5 degrees Celsius (Paris Climate Agreement). The CSDDD further obliges these companies to align their transition plan with the EU's goal of climate neutrality by 2050 and a 55% emission reduction by 2030. Notably, such requirements are absent in the LkSG.

Management's Role

The role of company management is absent in the final agreement of the CSDDD. While earlier versions included personal and direct liability for putting in place and overseeing due diligence obligations as well as variable compensation tied to meeting certain goals, these were all cut from the final agreement.

Practical Takeaway

As we await the European overhaul, Germany's LkSG has been in force since the beginning of 2023. The LkSG serves as a valuable practice to prepare for the new CSDDD. Companies already compliant with the LkSG's provisions are well on their way to tackling the CSDDD's new challenges.

For companies potentially falling within the scope of the new CSDDD, we recommend the following checklist to assess alignment with the most important LkSG requirements and readiness for the CSDDD:

  • Has your company established a risk management system that allows for regular risk analyses within the company's own business area and among its suppliers? With the new CSDDD, risk analysis becomes even more important, serving as the linchpin of supply chain due diligence.
  • Has your company designated a Human Rights Officer or an equivalent to oversee risk management? Are these individuals adequately trained?
  • Does your company have an internal complaint procedure for disclosing human rights and environment-related risks and violations?
  • Has your company issued a policy statement addressing its strategy on human rights and environmental matters?

Time to Make a Move

While the CSDDD and LkSG share foundational similarities, the former introduces noteworthy alterations and tightened standards. These changes span from broadened applicability to comprehensive due diligence obligations, and the introduction of civil liability and heightened environmental obligations. For companies, this shift is a call to action, drawing on lessons already learned from LkSG compliance. With the adoption of the CSDDD on the horizon, Baker McKenzie is here to help. As experts in the field of ESG, compliance, and investigations, we are committed to guiding clients through the evolving landscape of corporate accountability in supply chain management.


Copyright © 2025 Baker & McKenzie. All rights reserved. Ownership: This documentation and content (Content) is a proprietary resource owned exclusively by Baker McKenzie (meaning Baker & McKenzie International and its member firms). The Content is protected under international copyright conventions. Use of this Content does not of itself create a contractual relationship, nor any attorney/client relationship, between Baker McKenzie and any person. Non-reliance and exclusion: All Content is for informational purposes only and may not reflect the most current legal and regulatory developments. All summaries of the laws, regulations and practice are subject to change. The Content is not offered as legal or professional advice for any specific matter. It is not intended to be a substitute for reference to (and compliance with) the detailed provisions of applicable laws, rules, regulations or forms. Legal advice should always be sought before taking any action or refraining from taking any action based on any Content. Baker McKenzie and the editors and the contributing authors do not guarantee the accuracy of the Content and expressly disclaim any and all liability to any person in respect of the consequences of anything done or permitted to be done or omitted to be done wholly or partly in reliance upon the whole or any part of the Content. The Content may contain links to external websites and external websites may link to the Content. Baker McKenzie is not responsible for the content or operation of any such external sites and disclaims all liability, howsoever occurring, in respect of the content or operation of any such external websites. Attorney Advertising: This Content may qualify as “Attorney Advertising” requiring notice in some jurisdictions. To the extent that this Content may qualify as Attorney Advertising, PRIOR RESULTS DO NOT GUARANTEE A SIMILAR OUTCOME. Reproduction: Reproduction of reasonable portions of the Content is permitted provided that (i) such reproductions are made available free of charge and for non-commercial purposes, (ii) such reproductions are properly attributed to Baker McKenzie, (iii) the portion of the Content being reproduced is not altered or made available in a manner that modifies the Content or presents the Content being reproduced in a false light and (iv) notice is made to the disclaimers included on the Content. The permission to re-copy does not allow for incorporation of any substantial portion of the Content in any work or publication, whether in hard copy, electronic or any other form or for commercial purposes.