This tracker is under development. Confirm anything here against the primary source before relying on it for your sustainability activities.

Report an issue →
US-DF-1502SEC final rule adopted 22 August 2012 and still in effect; under the Division of Corporation Finance's 7 April 2017 statement, staff will not recommend enforcement if companies file only Item 1.01(a) and (b) disclosure on Form SD

Dodd-Frank Wall Street Reform and Consumer Protection Act, Section 1502 (Conflict Minerals); SEC Rule 17 CFR Parts 240 and 249b

United States · U.S. Securities and Exchange Commission (SEC), Division of Corporation Finance

Issuers must run a reasonable country of origin inquiry and file an annual Form SD. Where minerals may come from the Democratic Republic of the Congo or an adjoining country and are not from recycled or scrap sources, the rule also calls for OECD-based supply chain due diligence and a Conflict Minerals Report under Item 1.01(c). Since April 2017, SEC staff has said it will not recommend enforcement against companies that file only the Item 1.01(a) and (b) disclosure.

Category
Mandatory due diligence
Enforcement
Mandatory
Effective date
First reports for calendar year 2013 (Form SD filed by 31 May 2014); Form SD due 31 May each year (1 June 2026 for calendar year 2025 because 31 May fell on a Sunday)
Covered entities
SEC-registered issuers (domestic and foreign private issuers) for which conflict minerals (tantalum, tin, tungsten, gold) are necessary to the functionality or production of a product they manufacture or contract to manufacture.
Notes
U.S. Court of Appeals (D.C. Cir.) in 2014 and 2015 invalidated the rule's compelled 'not found to be DRC conflict free' description on First Amendment grounds, prompting the 2017 staff guidance. Form SD filing remains required.

Sources

Related regulations

Current 2012 version in force; revision proposed via Federal Register notice on 20 December 2022, public comment closed April 2023, no final revisions as of 23 September 2026

The Green Guides set out how the FTC will interpret Section 5 of the FTC Act when reviewing environmental marketing claims, covering general principles such as substantiation and qualification, plus specific claim types including recyclable, compostable, degradable, carbon offsets and renewable energy. Marketers who do not follow the Guides risk deception findings.

Enforcement
Guidance (interpreting Section 5 of the FTC Act)
Effective date
Current text issued October 2012; revision date TBD
Covered entities
Any marketer making environmental claims about a product, package or service in US commerce
Primary source ↗Verified 2026-09-23
US-UFLPA

Uyghur Forced Labor Prevention Act, Public Law No. 117-78

United States · U.S. Customs and Border Protection (CBP); Forced Labor Enforcement Task Force (FLETF) chaired by the Department of Homeland Security
Enacted 23 December 2021; rebuttable presumption in effect from 21 June 2022

Importers must rebut the presumption by clear and convincing evidence that goods were not made wholly or in part with forced labour, including full supply chain tracing, due diligence, and responses to CBP requests for information. CBP detains, excludes, or seizes non-compliant shipments and publishes operational guidance and the FLETF strategy.

Enforcement
Mandatory
Effective date
23 December 2021 (enacted); 21 June 2022 (rebuttable presumption); UFLPA Entity List updated periodically (latest: 43 entities added effective 3 August 2026, 187 entities listed)
Covered entities
Any importer of record bringing goods into the United States. Goods mined, produced, or manufactured wholly or in part in the Xinjiang Uyghur Autonomous Region, or by entities on the UFLPA Entity List, are presumed to be made with forced labour and barred under 19 U.S.C. § 1307.
Primary source ↗Verified 2026-09-23
EU-CSDDD

Corporate Sustainability Due Diligence Directive (CSDDD) – Directive (EU) 2024/1760

European Union · European Commission / Member State authorities
Adopted; amended by Directive (EU) 2025/794 and Directive (EU) 2026/470 (Omnibus I, in force 18 March 2026). Transposition due 26 July 2028.

Directive requiring very large EU and non-EU companies to identify, prevent and address adverse human rights and environmental impacts in their own operations, their subsidiaries' operations and their chains of activities. Omnibus I (Directive (EU) 2026/470) raised the thresholds, deleted the climate transition plan obligation, removed the EU-wide civil liability rule (liability now rests on national law), and capped fines at 3% of net worldwide turnover.

Enforcement
Mandatory once transposed
Effective date
Member State transposition deadline 26 July 2028. National measures apply to all in-scope companies from 26 July 2029; Article 16 reporting applies for financial years starting on or after 1 January 2030.
Covered entities
EU companies with more than 5,000 employees on average and more than EUR 1.5 billion net worldwide turnover, or ultimate parents of groups reaching those thresholds. Non-EU companies with more than EUR 1.5 billion net turnover in the EU in the financial year before the last. Separate thresholds apply to franchising and licensing groups (royalties above EUR 75 million plus turnover above EUR 275 million).
Primary source ↗Verified 2026-09-23
In force since 1 January 2023; scope extended to companies with 1,000+ employees in Germany from 1 January 2024. The government bill to abolish the reporting duty retroactively and limit fines to serious violations (BT-Drs. 21/2474, cabinet decision 3 September 2025) had its first Bundestag reading on 15 January 2026 and remains in committee as of 23 September 2026. Since 1 October 2025 BAFA no longer reviews company reports under §§ 12 and 13 LkSG and imposes fines only for serious violations.

Companies in scope must identify, prevent, and remediate human rights and environmental risks in their own operations and direct suppliers, with risk-based duties extending to indirect suppliers when substantiated knowledge arises. BAFA monitors compliance, can issue orders, and impose fines up to EUR 8 million or 2 percent of average annual turnover (where turnover exceeds EUR 400 million).

Enforcement
Mandatory
Effective date
1 January 2023 (companies with 3,000+ employees in Germany); 1 January 2024 (1,000+ employees in Germany)
Covered entities
Companies with their head office, principal place of business, administrative seat, or registered branch in Germany and at least 1,000 employees in Germany (3,000+ in 2023). Includes German branches of foreign companies.
Primary source ↗Verified 2026-09-23
In force from 1 July 2022

Covered enterprises must conduct human rights and decent working conditions due diligence aligned with the OECD Guidelines, publish an annual account of their efforts by 30 June, and respond in writing within three weeks to public information requests. The Consumer Authority supervises through guidance, decisions, and enforcement penalties.

Enforcement
Mandatory
Effective date
1 July 2022; first annual due diligence accounts due by 30 June 2023
Covered entities
Larger Norwegian enterprises and foreign enterprises selling goods or services in Norway that are tax-liable in Norway. Companies must meet two of three thresholds: NOK 70 million sales revenue, NOK 35 million balance sheet total, 50 FTE employees.
Primary source ↗Verified 2026-09-23
In force since 28 March 2017 (day after promulgation 27 March 2017)

In-scope parent and ordering companies must establish, publish, and effectively implement a vigilance plan covering risk mapping, supplier and subcontractor assessment, mitigation actions, an alert mechanism, and a monitoring scheme addressing human rights, health and safety, and environmental harm across the group and established business relationships. Any party with standing can give formal notice and, after three months of non-compliance, seek a court injunction and damages.

Enforcement
Mandatory
Effective date
27 March 2017; first vigilance plans required for FY2017
Covered entities
French-headquartered companies that, for two consecutive years, employ at least 5,000 employees in France (parent and direct/indirect subsidiaries) or at least 10,000 employees worldwide.
Primary source ↗Verified 2026-09-23