CSRD and EU Omnibus 2026: Who Must Report Now, What Changed, and How to Prepare
Why 2026 Is the Decision Year
CSRD did not disappear — it was rescoped and rescheduled. Companies that paused during the Omnibus debate now face data, control, and assurance gaps with little buffer.
This guide maps who reports when, what ESRS actually requires, and a readiness plan linked to ESG Reporting Frameworks, ESG Materiality, and Carbon Accounting.
Who Reports When (Post-Omnibus Planning View)
| Wave | Population | Planning assumption for 2026 |
|---|---|---|
| Wave 1 | NFRD large PIEs, FY2024 reports in 2025 | Already reporting, limited assurance underway |
| Wave 2 | Other large undertakings meeting 2 of 3 old thresholds | Proposed delay ~2 years; prepare FY2027-ready data in 2026 |
| Wave 3 | Listed SMEs | Proposed VSME-based, opt-out possible; monitor transposition |
| Non-EU | Net turnover >450m EUR with large EU subsidiary/branch | Confirm subsidiary thresholds; start gap assessment |
Planning view only. Confirm member-state transposition and final Omnibus adoption before locking disclosure dates with your auditor.
What Changed Under Omnibus
- Higher employee threshold signal: 1000 employees discussed vs 250/500.
- Value-chain cap: requests limited to VSME datapoints for smaller suppliers.
- ESRS simplification: fewer datapoints, clearer materiality guidance.
- Timing relief: Wave 2 delay buys data and control remediation time — not a pause.
Use the delay to fix the hard parts: Scope 3 evidence — see Scope 3 Guide — and IFRS S1/S2 interoperability.
ESRS in One Page
- ESRS 1-2: general requirements, double materiality, disclosure basis.
- Topical E1-E5, S1-S4, G1: climate, pollution, water, biodiversity, workforce, value-chain workers, affected communities, business conduct.
- Data: policies, actions, targets, metrics, value-chain coverage, assurance trail.
Minimum discipline: policy → action → target → metric → evidence → owner → control. No evidence, no disclosure.
Double Materiality in Practice
- Longlist topics by sector and value chain.
- Score impact (scale, scope, remediability) and financial (cash flow, cost of capital, viability).
- Set thresholds in writing; retain stakeholder inputs.
- Conclude per ESRS 2 IRO-1; link to Enterprise Risk and Financial Statement Analysis.
Assurance Readiness Checklist
- Materiality memo signed and versioned
- Data owners and source systems mapped
- Controls for each metric (who, when, review)
- Value-chain sampling plan with VSME cap applied
- Auditor dry run on 1-2 metrics this quarter
- Gap to Month-End Close discipline closed
Assurance tests process, not prose. If Bookkeeping Controls are weak, sustainability controls will fail too.
90-Day Plan
Days 0-30: confirm wave, freeze materiality, assign owners. Days 31-60: build E1/S1/G1 evidence packs, remediate gaps. Days 61-90: pre-assurance on climate + workforce, lock VSME data requests.
FAQ
Should US groups with EU subsidiaries prepare?
Yes if turnover and subsidiary tests are met. Start with scoping memo and ESRS vs IFRS S1/S2 mapping.
What is the fastest win?
Lock double materiality and E1 climate metrics first — they drive most assurance effort.
Next Steps
- Minute your wave assumption and transposition watchlist.
- Assign E1 and S1 owners with assurance-grade evidence standards.
- Schedule limited-assurance dry run before year-end.
