Thresholds and Timing (Confirm CARB Updates)

Law Revenue test Report
SB-253 >$1b US, doing business in CA Scope 1-3 GHG, assurance phased
SB-261 >$500m US, doing business in CA TCFD-style risk, biennial

CARB rulemaking and litigation affect dates. Minute your applicability memo and watchlist.

Pair with CSRD Omnibus, IFRS S1/S2, Scope 3, and Carbon Basics.

Build Once, File Thrice

  1. One GHG inventory aligned to GHGP.
  2. One TCFD/ISSB risk memo covering governance, strategy, and targets.
  3. Jurisdiction views: CA, EU (ESRS), investor (ISSB).

Link targets to CapEx vs OpEx and Cash-Flow Analysis.

Controls Auditors Expect

  • Boundary memo and doing-business analysis.
  • Factor vintage log, recalculation files, reviewer sign — see Month-End Close.
  • Management review precision for estimates — see SOX 404.

60-Day Starter

Days 0-30: applicability memo, Scope 1-2 inventory, owner assignments. Days 31-60: Scope 3 screen of top 3 categories, TCFD gap draft, pre-assurance scoping.

SB-261 Risk Report: What “TCFD-Style” Actually Requires

SB-261 follows the four TCFD pillars. For each, what reviewers expect:

  1. Governance. Board committee with climate oversight named in charter, management owner with reporting line, and meeting cadence. Vague “the board oversees ESG” fails — name names, dates, and materials reviewed, mirroring Board and Audit Committee discipline.
  2. Strategy. Transition risks (policy, technology, market shifts) and physical risks (acute events, chronic shifts) mapped to business lines and time horizons, plus resilience under scenarios. Borrow the scenario structure from IFRS S1/S2 rather than inventing a parallel one.
  3. Risk management. How climate risk enters ERM: identification, scoring, prioritization against other enterprise risks — see ERM. A standalone climate memo disconnected from ERM reads as decorative.
  4. Metrics and targets. Scope 1–3 totals, intensity metrics, targets with base years, and capex alignment — linked to CapEx vs OpEx plans, not floating aspirations.

Biennial cadence tempts teams to start late; the first report’s data year is already running. Begin governance minutes and inventory now — backfilled narratives don’t survive assurance.

Doing-Business-in-California Test (Don’t Assume)

“Doing business” follows California’s broad franchise-tax standard: sales over ~$690k (indexed), property/payroll over thresholds, or active engagement — not just incorporation or a registered agent. Remote employees, warehouses, and regular in-state solicitation each independently trigger it — see Foreign Qualification and Multi-State. Document the analysis with revenue-by-state, headcount-by-state, and property schedules, signed by counsel; the applicability memo is the first document CARB or a plaintiff asks for, and “we assumed we were out of scope” is not a defense.

Interplay Playbook: One Dictionary, Three Filings

Element CA (SB-253/261) EU (CSRD/ESRS) Investor (ISSB)
Boundary Operational control typical Financial control + value chain Enterprise value lens
Scope 3 Phased, GHGP Full value chain, double materiality Where material to value
Assurance Limited → reasonable Limited → reasonable Jurisdiction-driven
TCFD narrative Core of SB-261 Subset of ESRS Core of S2

Build one metric dictionary (definitions, sources, owners, versions) and render three views — see CSRD Omnibus and Scope 3. Teams running three separate spreadsheets reconcile none of them under assurance pressure.

FAQ

Do private companies file?

Yes if thresholds and doing-business tests are met — entity type does not shield.

What is the fastest penalty shield?

Documented applicability analysis plus active inventory build, even before final CARB dates lock.

Next Steps

  1. Minute SB-253/261 applicability with counsel.
  2. Assign Scope 1-3 owners with assurance-grade evidence.
  3. Align to ISSB/CSRD dictionary to avoid rework.