ESG Reporting and Disclosure Requirements

The global landscape of ESG (environmental, social, and governance) reporting has undergone a fundamental transformation over the 2021–2026 period: what was once a voluntary, framework-optional corporate communications exercise has become a mandatory, legally enforceable, externally assured disclosure regime in the European Union, and increasingly in major economies worldwide. For multinational companies, listed issuers, and their supply chain partners, understanding the architecture of global ESG disclosure requirements — who is covered, what must be disclosed, how materiality is assessed, and what assurance is required — is now a core legal and governance competency.

The three pillars of the global ESG disclosure framework are: the EU's Corporate Sustainability Reporting Directive (CSRD) and European Sustainability Reporting Standards (ESRS), which impose the most comprehensive mandatory requirements globally; the International Sustainability Standards Board's (ISSB) IFRS S1 and S2 standards, which provide the investor-focused global baseline being adopted across 60+ jurisdictions; and jurisdiction-specific requirements including the US SEC Climate Disclosure Rule, India's Business Responsibility and Sustainability Report (BRSR), and Singapore, Japan, and Australia equivalents. Understanding the architecture, differences, and convergence between these frameworks is essential for building an efficient, compliant, multi-jurisdictional ESG reporting program.

This topic covers the CSRD's scope, ESRS structure, and double materiality principle; the ISSB standards and their global adoption trajectory; the US SEC Climate Rule and Scope 3 controversy; India's BRSR framework; materiality assessment methodology; assurance requirements; and practical guidance for building an ESG disclosure program that is compliant, credible, and efficient across multiple frameworks.

The Corporate Sustainability Reporting Directive (CSRD, Directive 2022/2464/EU) represents the most comprehensive mandatory ESG disclosure regime globally. It replaces the Non-Financial Reporting Directive (NFRD), dramatically expanding the scope of companies required to report, the content required to be disclosed, and — critically — the assurance standard to which disclosures must be independently verified.

The CSRD's phased scope covers approximately 50,000 companies, including: large EU companies (meeting two of three criteria: 250+ employees, €40M+ turnover, €20M+ balance sheet) from financial year 2024 (reports due 2025); listed SMEs from FY2026 (with opt-out until 2028); and non-EU companies with EU revenue exceeding €150M from FY2028. This last category is particularly significant — it brings major US, Asian, and other non-EU multinationals into the CSRD regime if they have sufficient EU market presence.

The European Sustainability Reporting Standards (ESRS) — 12 mandatory standards developed by EFRAG and adopted by the European Commission — define precisely what must be disclosed. The ESRS architecture includes two cross-cutting standards (ESRS 1 on general requirements and ESRS 2 on general disclosures), five environmental standards (E1 climate change, E2 pollution, E3 water, E4 biodiversity, E5 resource use), four social standards (S1 own workforce, S2 workers in value chain, S3 affected communities, S4 consumers), and one governance standard (G1 business conduct). Subject to a materiality assessment, companies report on the standards relevant to their material impacts, risks, and opportunities.

The CSRD's defining conceptual innovation is double materiality: companies must assess and report both impact materiality (the company's actual and potential impacts on people and the environment, including through its value chain — consistent with the GRI approach) and financial materiality (how ESG matters create financial risks and opportunities for the company — consistent with the ISSB approach). A topic is material under CSRD if it meets either threshold. This dual lens is significantly more demanding than single-materiality approaches and requires structured stakeholder engagement, impact mapping, and financial risk assessment processes.

The International Sustainability Standards Board (ISSB), established by the IFRS Foundation in 2021, issued its inaugural standards IFRS S1 (General Requirements for Disclosure of Sustainability-related Financial Information) and IFRS S2 (Climate-related Disclosures) in June 2023. These standards represent the most significant development in global sustainability reporting standardization since the GRI Guidelines — they aim to create a coherent, globally adopted baseline for investor-focused sustainability information comparable to financial statements under IFRS.

IFRS S1 requires companies to disclose material information about sustainability-related risks and opportunities across all sustainability topics (not just climate) that could reasonably affect the company's cash flows, access to finance, or cost of capital over the short, medium, and long term. It incorporates requirements from the Task Force on Climate-related Financial Disclosures (TCFD), integrates the Sustainability Accounting Standards Board (SASB) industry-based metrics, and requires disclosure across the four pillars: governance (board oversight, management roles), strategy (risks and opportunities, business model impact, scenario analysis), risk management (identification, assessment, mitigation processes), and metrics and targets.

IFRS S2 is climate-specific, requiring disclosure of: governance processes for climate-related risks; climate-related physical risks (acute: extreme weather events; chronic: sea-level rise, temperature change) and transition risks (policy, technology, market, reputational); climate scenario analysis using at least two scenarios including a 1.5°C scenario; Scope 1, Scope 2, and Scope 3 GHG emissions measured per the GHG Protocol; and any climate-related targets. Over 60 jurisdictions had announced plans to adopt or build upon IFRS S1/S2 by mid-2026, including Australia, Canada, Japan, Singapore, Brazil, and the United Kingdom.

The US Securities and Exchange Commission (SEC) adopted final climate disclosure rules in March 2024, requiring all US-listed public companies to disclose climate-related information in annual reports and registration statements. The rule follows the TCFD framework structure: governance (board oversight, management roles in climate risk assessment); strategy (material climate-related risks and opportunities, scenario analysis for large accelerated filers); risk management (identification and management processes); and metrics and targets (Scope 1 and Scope 2 GHG emissions for large accelerated filers, climate-related targets, carbon offsets).

The most contentious element of the SEC rule is Scope 3 emissions (value chain emissions — from purchased goods and services upstream, and product use and disposal downstream). The SEC's proposed rule would have required Scope 3 disclosure if material or if the company has set a Scope 3 reduction target. The final rule significantly walked this back: Scope 3 disclosure is required only if material or if the company sets Scope 3 targets. Given the significant measurement challenges, litigation risk, and SEC's subsequent stay of the rule pending court challenges, many large US public companies are taking a cautious approach to Scope 3 measurement and disclosure.

Several US states and the EU's supply chain due diligence requirements create additional disclosure obligations for companies operating in those jurisdictions. California's Climate Corporate Data Accountability Act (SB 253) requires companies with over $1 billion in annual revenues doing business in California to publicly disclose Scope 1, 2, and 3 GHG emissions — potentially affecting thousands of companies that were not within the SEC rule's Scope 3 requirements. This state-level action illustrates the multi-jurisdictional complexity facing large US companies operating across state lines.

India's Business Responsibility and Sustainability Report (BRSR) was mandated by SEBI for the top 1,000 listed companies by market capitalization from FY 2022-23. The BRSR framework is structured around nine principles derived from the National Guidelines for Responsible Business Conduct (NGRBC): governance and ethics; product sustainability; employee wellbeing; stakeholder engagement; human rights; environment; responsible policy influence; inclusive growth; and consumer engagement. Importantly, India adopted double materiality as its conceptual foundation — aligned with CSRD rather than the ISSB's financial materiality-only approach.

SEBI subsequently introduced BRSR Core (from FY 2023-24), defining a set of Key Performance Indicators (KPIs) within each principle that are subject to mandatory reasonable assurance — making India one of the first jurisdictions globally to require independently verified ESG metrics at scale. BRSR Core covers 49 specific KPIs including greenhouse gas emissions intensity, water intensity, waste generation and management, employee diversity ratios, occupational health and safety metrics, and supply chain sustainability assessments.

Across Asia-Pacific, sustainability disclosure requirements are rapidly proliferating: Singapore's SGX requires mandatory climate reporting based on TCFD for all listed companies from FY2023; Japan's Financial Services Agency mandates sustainability disclosures (TCFD-aligned, moving to ISSB) in securities reports for major listed companies from FY2023; Australia mandated ISSB-aligned climate disclosures for large companies from FY2025 under the Treasury Laws Amendment Act. This regional spread means that multinational companies headquartered in or with significant operations in Asia-Pacific face a complex, overlapping web of disclosure obligations.

The double materiality assessment is the foundational analytical exercise for CSRD compliance — it determines which ESRS topics are material for the company and therefore must be reported. EFRAG has published detailed guidance on conducting double materiality assessments, and the quality of this assessment will be a primary focus for CSRD assurance providers and regulators.

The impact materiality assessment involves: identifying the company's actual and potential positive and negative impacts on people (employees, workers in the value chain, communities, consumers) and the environment (climate, biodiversity, water, pollution, resource use) across the full value chain; assessing the severity of negative impacts (scale, scope, irremediability) and the significance of positive impacts; and ranking topics by impact significance. Stakeholder engagement — with employees, investors, suppliers, communities, and civil society — is an integral part of this assessment, not optional.

The financial materiality assessment involves: identifying ESG topics that generate or may generate material financial effects on the company (revenues, costs, assets, liabilities, capital, cost of capital); distinguishing between physical risks (acute: extreme weather, flooding; chronic: temperature rise, sea-level change), transition risks (policy and regulation, technology, market, reputation), and systemic risks; and opportunities (new markets, products, efficient processes). Financial materiality under CSRD aligns with the ISSB standard, facilitating interoperability between CSRD and ISSB reporting.

External assurance of ESG disclosures is one of the most significant governance innovations embedded in the CSRD. The Directive requires limited assurance on CSRD reports from FY2024, with a phased transition to reasonable assurance expected from FY2028, subject to European Commission review. This requirement places ESG assurance on a trajectory toward the same level of credibility demanded of financial statement audits — a transformative development for corporate accountability.

The CSRD allows assurance to be provided by statutory auditors (the financial statement audit firm) or by independent assurance providers. The European Commission is developing specific European Sustainability Assurance Standards (ESAS) — until these are finalized, assurance providers use their own methodologies based on ISAE 3000 (General Assurance) and ISAE 3410 (GHG Emissions). The practical challenge for companies is establishing the data governance, internal controls, and documentation required to support external assurance — many ESG metrics that have historically been reported without verification now need to be subject to the same control rigor as financial data.

BRSR Core's requirement for reasonable assurance makes India's framework particularly stringent by global standards. Reasonable assurance (equivalent to the assurance level for financial statements) is a much higher bar than limited assurance — it requires the assurance provider to obtain sufficient appropriate evidence to reduce the risk of material misstatement to an acceptably low level. For companies subject to BRSR Core, this means building robust data collection, validation, and governance processes for the 49 key KPIs before assurance engagement begins.

For multinational companies subject to multiple ESG disclosure requirements simultaneously — CSRD for EU operations, ISSB-aligned requirements in Singapore or Australia, SEC climate disclosures in the US, and BRSR in India — the risk of creating siloed, duplicative, and inconsistent reporting processes is significant. Building a coordinated multi-framework ESG reporting program requires a deliberate architecture that maximizes the interoperability between frameworks.

The ISSB and EFRAG published an interoperability guidance document confirming that ESRS disclosures, when prepared under CSRD, largely satisfy ISSB S1 and S2 requirements — though the converse is not true (ISSB disclosure alone does not satisfy CSRD). This means companies can use CSRD/ESRS as their primary reporting framework and derive ISSB-compatible disclosures from it, avoiding duplicative data collection. SEC climate disclosures overlap significantly with ESRS E1 (climate change) content, though specific formatting and calculation methodology requirements differ.

The practical implementation sequence for a company building its first CSRD-compliant report typically involves: (1) scoping (determine which ESRS topics are potentially relevant to the company based on sector, geography, business model); (2) double materiality assessment (assess impact and financial materiality through stakeholder engagement and internal analysis); (3) gap analysis (identify gaps between current reporting and ESRS requirements for material topics); (4) data collection system development (establish processes, tools, and internal controls for collecting ESG data across the organization and value chain); (5) report drafting and review (prepare the sustainability statement aligned with ESRS structure and content requirements); and (6) assurance engagement (engage the assurance provider and manage the limited assurance process).

Q: Which companies outside the EU are subject to CSRD? A: Non-EU companies are subject to CSRD from FY2028 if they have EU revenue exceeding €150 million AND either a large EU subsidiary (meeting size thresholds for large companies) OR EU-listed securities. This captures major US, Asian, and other non-EU multinationals with significant EU market presence. A separate Directive (the Corporate Sustainability Due Diligence Directive, CS3D) imposes additional value chain due diligence obligations on companies above a higher revenue threshold.

Q: What is the difference between CSRD double materiality and ISSB financial materiality? A: CSRD requires both impact materiality (does the company affect people/environment?) and financial materiality (does ESG affect company financials?). A topic is material if it meets either threshold. The ISSB uses financial materiality only — information is material if omitting or misstating it could reasonably be expected to influence the decisions of investors. This conceptual difference means CSRD typically results in broader disclosure scope than ISSB alone.

Q: Does reporting under CSRD/ESRS satisfy ISSB requirements? A: Yes, largely. The ISSB and EFRAG published joint interoperability guidance confirming that ESRS disclosures satisfy the ISSB S1 and S2 requirements in most areas. The primary gap areas relate to certain ISSB-specific industry-based metrics and the ISSB's requirement for GHG emissions to be disclosed for the reporting period (vs. CSRD's flexibility on reporting timing). Companies reporting under CSRD can generally produce ISSB-compatible reports from the same underlying data.

Q: What is the BRSR Core, and does it apply to companies outside the top 1,000 by market cap? A: BRSR Core is a subset of the full BRSR framework consisting of 49 Key Performance Indicators (KPIs) subject to mandatory reasonable assurance, applying to the top 150 listed companies from FY2023-24 and extending to the top 1,000 from FY2024-25. Voluntary adoption is encouraged for other companies. SEBI has also proposed extending BRSR Core requirements down the value chain — requiring top-listed companies to obtain BRSR disclosures from their value chain partners above a turnover threshold.

Q: What is Scope 3 emissions disclosure, and is it required under major frameworks? A: Scope 3 encompasses all indirect emissions in a company's value chain — both upstream (purchased goods, business travel, employee commuting) and downstream (product use, end-of-life treatment). Under CSRD/ESRS E1, Scope 3 disclosure is required for all in-scope companies from FY2024, with a one-year phase-in for value chain data. Under ISSB S2, Scope 3 disclosure is required if material. The US SEC Climate Rule requires Scope 3 only if material or if targets are set. Scope 3 measurement is technically challenging — the GHG Protocol Corporate Value Chain (Scope 3) Standard provides the primary methodology, with spend-based, activity-based, and supplier-specific data approaches available.

Q: What are the penalties for non-compliance with CSRD? A: CSRD penalties are set by each EU member state — the Directive requires effective, proportionate, and dissuasive penalties but does not prescribe specific amounts. Member state penalties for NFRD non-compliance have historically included fines, public disclosure of violations, and in some cases, personal liability for directors. CSRD non-compliance in the context of assurance failure may also trigger securities law consequences for listed companies. The reputational consequences — particularly given the investor and proxy advisor community's focus on ESG governance quality — may be as significant as formal penalties.