Global Supply Chain Due Diligence: EU CSDDD, US UFLPA, and What Buyers Must Know

New mandatory due diligence laws in the EU, US, and Germany are reshaping buyer obligations. This guide maps the regulatory landscape and explains how certification data creates compliance evidence.

Voluntary ESG commitments are becoming legal requirements. The EU Corporate Sustainability Due Diligence Directive (CSDDD), Germany's Supply Chain Due Diligence Act (LkSG), the US Uyghur Forced Labor Prevention Act (UFLPA), and emerging rules in France, Norway, and the UK create a compliance mosaic that buyers cannot ignore.

The Regulatory Timeline

CSDDD entered into force in July 2024 with phased application: companies with >1,000 employees and €450M turnover must comply by 2027; smaller in-scope companies by 2028. The LkSG has applied since 2023 to companies with >3,000 employees (1,000 from 2024). UFLPA enforcement began June 2022 with a rebuttable presumption that goods from Xinjiang are made with forced labor.

What the Laws Require

• Risk identification: Map adverse human rights and environmental impacts across the value chain (CSDDD Art. 7, LkSG §4)
• Prevention and mitigation: Implement measures to cease or minimize identified risks (CSDDD Art. 10–11, LkSG §6–7)
• Grievance mechanisms: Establish accessible complaint channels for affected stakeholders (CSDDD Art. 13, LkSG §8)
• Monitoring and reporting: Annual public reporting on due diligence activities (CSDDD Art. 15, LkSG §10)

Certification as Compliance Evidence

Third-party certifications provide auditable, standardized evidence that supports due diligence obligations:

• LEED: Building-level environmental and worker safety verification (structural integrity, indoor air quality, energy/water management)
• GOTS: End-to-end organic fiber verification plus ILO-based social criteria across the supply chain
• WRAP/BSCI/amfori: Social compliance audits covering forced labor, child labor, freedom of association, working hours, and OHS
• OEKO-TEX: Chemical safety verification for product-level compliance with REACH, Proposition 65, and restricted substance lists

Practical Steps for Buyers

1. Map your supply chain to the facility level — not just tier 1. 2. Collect current certificates for every facility with validity dates and scope. 3. Flag expiring certificates 90 days before renewal. 4. Cross-reference facilities against sanctioned entity lists (UFLPA entity list, EU sanctions). 5. Document your due diligence process: risk assessment methodology, mitigation actions taken, and monitoring frequency.

Platforms that centralize certificate data, track validity, and alert on expirations transform due diligence from a manual audit exercise into a continuous, auditable process.