From Voluntary to Mandatory: How British Businesses Should Be Preparing for the CSRD Right Now

A Regulatory Wave That Reaches British Shores

When the European Union's Corporate Sustainability Reporting Directive came into force in January 2023, it was tempting for many British business leaders to file it under 'continental concern' and move on. That instinct, understandable in the immediate post-Brexit period, is now proving costly for those who acted on it. The CSRD does not stop at Calais.

Any UK company with significant operations, subsidiaries, or listed securities within the EU may fall within the directive's scope. Beyond direct legal obligations, the supply chain implications are profound: large European corporates subject to CSRD are already requesting sustainability data from their UK suppliers as part of their own reporting obligations. For British enterprises, the choice is not whether to engage with CSRD — it is whether to engage proactively or reactively.

Understanding the Directive's Architecture

The CSRD replaces the earlier Non-Financial Reporting Directive (NFRD) and expands its scope dramatically — from approximately 11,000 companies under the old regime to an estimated 50,000 under the new one. The directive mandates reporting against the European Sustainability Reporting Standards (ESRS), a comprehensive framework covering environmental, social, and governance dimensions.

A concept central to CSRD that distinguishes it from most voluntary frameworks is double materiality. Companies are required to assess and disclose not only how sustainability risks affect their financial performance (the familiar 'outside-in' perspective), but also how their operations affect people and the planet (the 'inside-out' perspective). This dual lens demands a fundamentally different approach to data collection and strategic thinking than most UK organisations have historically applied.

The ESRS covers twelve thematic standards spanning climate change, pollution, biodiversity, water use, workers' rights, community impact, and governance conduct. Reporting must be independently assured — initially at a limited assurance level, with the expectation of reasonable assurance as the framework matures.

Who Is Affected and When

The CSRD is being introduced in phased waves, and understanding where your organisation sits within that timeline is the starting point for any credible preparation strategy.

Wave One (reporting from 2025, for financial year 2024): Large EU public-interest entities already subject to the NFRD — including EU-listed companies with more than 500 employees. Most UK-headquartered businesses will not fall directly into this wave unless they have qualifying EU-listed entities.

Wave Two (reporting from 2026, for financial year 2025): Large EU companies not previously subject to NFRD — those meeting two of three criteria: more than 250 employees, turnover exceeding €40 million, or total assets above €20 million. UK companies with EU subsidiaries meeting these thresholds will be captured here.

Wave Three (reporting from 2027, for financial year 2026): Listed SMEs on EU-regulated markets, with a voluntary opt-out available until 2028. Smaller UK businesses with EU listings should begin scoping requirements now.

Third-country parent companies: UK-domiciled parent groups with net EU turnover exceeding €150 million and at least one large EU subsidiary or EU-listed entity will be required to produce group-level sustainability reports under CSRD from 2029 (for financial year 2028). This is a significant provision that catches many British multinationals.

The Data Challenge: Why Starting Late Is Expensive

The most consistent finding from organisations already deep in CSRD preparation is that the data challenge is larger than anticipated. Unlike financial reporting, where well-established systems and processes exist, sustainability data is often fragmented across operational teams, supply chain partners, HR functions, and facilities management. Pulling it together into a coherent, auditable dataset takes time — typically twelve to eighteen months of serious effort before a first compliant report can be produced.

For UK businesses, several data categories present particular difficulty. Scope 3 greenhouse gas emissions — those occurring in the value chain rather than directly within the organisation's operations — require engagement with suppliers who may themselves lack robust measurement capabilities. Social data relating to workforce conditions, pay equity, and training investment is often held in disparate HR systems that were never designed for external reporting. Biodiversity impact, a requirement under ESRS E4, is an area where most UK businesses have effectively no baseline data.

The practical implication is straightforward: companies that begin their data infrastructure work now will produce better first reports, at lower cost, with fewer last-minute surprises. Those that wait until the year before their first reporting deadline will face compressed timelines, higher consultancy costs, and the reputational risk of a materially deficient submission.

The UK Regulatory Context: Convergence or Divergence?

A legitimate question for British business leaders is how CSRD relates to the UK's own sustainability reporting trajectory. The UK has been developing its own framework through the Sustainability Disclosure Standards (SDS), drawing heavily on the International Sustainability Standards Board (ISSB) standards published in 2023. The Financial Reporting Council and the Department for Business and Trade have signalled an intention to introduce mandatory climate-related disclosures for large UK companies, building on the existing Task Force on Climate-related Financial Disclosures (TCFD) requirements.

While the UK and EU frameworks share common intellectual heritage — both draw on TCFD and the Global Reporting Initiative — they are not identical. Double materiality, for instance, is central to CSRD but not to the ISSB standards underpinning the UK's approach. UK companies with EU exposure will therefore need to navigate two distinct but overlapping regimes.

The prudent approach is to build a sustainability reporting infrastructure flexible enough to serve both frameworks. Investing in systems and processes aligned to the more demanding CSRD standard will, in most cases, satisfy UK requirements as they develop. The reverse is not reliably true.

Competitive Advantage Through Early Adoption

Amidst the compliance narrative, it is worth pausing on the strategic opportunity that CSRD presents. The directive is, at its core, a mechanism for making sustainability performance legible to capital markets. Companies that can demonstrate credible, assured sustainability data will have advantages in accessing green finance, attracting institutional investors with ESG mandates, and differentiating themselves in procurement processes where large EU buyers are increasingly required to evidence supply chain sustainability.

Several British professional services firms, manufacturers, and technology companies have already begun positioning CSRD readiness as a commercial differentiator — particularly in pitches to European clients for whom supply chain due diligence is now a regulatory obligation rather than a preference.

A Practical Preparation Roadmap

For UK business leaders seeking to move from awareness to action, a phased approach is advisable.

Phase one — scoping and gap analysis. Determine whether your organisation falls within CSRD scope directly or indirectly through supply chain obligations. Map current sustainability data against ESRS requirements to identify material gaps.

Phase two — governance and ownership. Assign clear internal ownership for sustainability reporting, ideally with board-level sponsorship. The quality of CSRD reporting will ultimately reflect the seriousness with which the board treats it.

Phase three — data infrastructure. Invest in the systems, processes, and supplier engagement programmes needed to collect reliable sustainability data at the required granularity. This is the most time-intensive phase and should begin immediately for companies in waves two and three.

Phase four — assurance readiness. Engage with your external auditor early. The assurance requirements under CSRD are more demanding than anything most UK companies have previously navigated in a non-financial context, and auditors are themselves building capacity in this area.

Phase five — narrative and strategy integration. The most effective CSRD reports will not be compliance documents; they will be strategic communications that connect sustainability performance to long-term business value. British enterprises that master this integration will find that mandatory disclosure becomes, over time, a genuine asset.