Navigating the Corporate Sustainability Reporting Directive (CSRD) often presents unique edge cases, particularly following the February 2026 Omnibus updates. Use this guide to address complex strategic questions and clarify the trickiest aspects of the revised European regulations.
Scope and Threshold Dilemmas
We were in scope, but the Omnibus thresholds removed us. Should we cancel our project?
Legally, if your company no longer meets the new threshold (exceeding both €450 million in worldwide net turnover and 1, 000 employees), you are not mandated to submit a full CSRD report. However, canceling your project entirely carries severe strategic risks.
Stakeholder Pressure: Large B2B clients, investors, and banks will likely still demand institutional-grade ESG data to fulfill their own Scope 3 and portfolio reporting obligations.
The Strategic Pivot: Instead of canceling, you should pivot your project. Leverage the data you have already collected to comply with the Voluntary SME (VSME) standard or use it to proactively secure enterprise contracts where ESG maturity is a purchasing criteria.
Our ultimate parent is non-EU, but we have a large EU subsidiary. Who reports and when?
This is one of the most complex areas of the CSRD. You must evaluate the thresholds at both the subsidiary and the parent level.
The Subsidiary: If your EU subsidiary independently exceeds the €450 million/1, 000 employee threshold, it is legally required to report at its own local level starting in financial year 2027.
The Parent: If the non-EU ultimate parent generates more than €450 million in EU-based turnover, it must publish a consolidated report covering its EU impacts starting in financial year 2028.
The Exemption: If the non-EU parent voluntarily publishes a global consolidated report that complies with ESRS equivalent standards early, the EU subsidiary is usually exempt from publishing its own separate local report.
Value Chain and Double Materiality
How does the new "Value Chain Cap" impact our Scope 3 data collection?
The 2026 Omnibus Directive strictly limits the reporting burden large companies can push down onto their smaller suppliers. You can no longer send exhaustive, 100-page ESRS questionnaires to small and medium enterprises (SMEs) in your supply chain.
Accepting VSME: If your supplier provides a basic Voluntary SME (VSME) report, you must accept it as sufficient primary data.
Using Proxies: If primary data cannot be reasonably obtained without overburdening the supplier, the regulation now explicitly encourages you to use secondary proxy data (industry averages and spend-based emission factors) to calculate your Scope 3 impacts.
Sector-specific standards are now voluntary. Can we ignore our industry's unique impacts?
No. While the EU Commission downgraded the upcoming sector-specific standards to "voluntary guidance," your Double Materiality Assessment (DMA) remains the ultimate judge of what you must report.
If a specific environmental or social issue is highly material to your unique business model (e.g., heavy water usage for a beverage manufacturer), you are still legally required to create an Entity-Specific Disclosure for it. You must outline your own metrics and policies to manage that risk, even if the EU hasn't provided a standardized template for your sector.
Audit and Evidence Gathering
The Omnibus permanently set audits to "limited assurance." What does this mean for our data?
Originally, the CSRD planned to eventually force companies into "reasonable assurance"—a grueling, forensic audit level similar to deep financial accounting. The Omnibus scrapped this, permanently capping the requirement at "limited assurance."
What it means: The auditor is looking for "negative proof." They will review your processes, check your data for obvious anomalies, and conclude that nothing came to their attention to suggest the report is materially misstated.
How it affects your workflow: You do not need to obsess over mathematically proving every single estimated decimal point in your Scope 3 emissions. However, you must still maintain a flawless Audit Trail in the platform, proving exactly who entered the data, how it was calculated, and providing the primary source documents (like utility bills) for your direct Scope 1 and 2 impacts.