For three years, the Corporate Sustainability Reporting Directive (CSRD) was the most expansive corporate disclosure mandate in the world — a regime projected to pull roughly 50,000 companies into detailed, audited sustainability reporting against the European Sustainability Reporting Standards (ESRS), including thousands of non-EU companies caught by their European operations. Compliance teams built programs, hired sustainability staff, and mapped over a thousand data points in anticipation.

In 2026, the European Union sharply reversed course. As part of the same simplification drive that reshaped the AI Act and GDPR through the Digital Omnibus, Brussels took a knife to the CSRD — and the cut was deep enough to change the compliance calculus for the overwhelming majority of companies that thought they were in scope.

What the Omnibus did

The Omnibus directive was adopted by the Council on February 24, 2026, published in the Official Journal on February 26, 2026, and entered into force on March 18, 2026. It made three structural changes that every affected organization needs to understand.

1. A ~90% scope reduction. Mandatory ESRS and EU Taxonomy reporting now applies only to EU entities with more than 1,000 employees and a net turnover exceeding €450 million. The original CSRD swept in companies far below those thresholds. Concentrating the obligation on the largest enterprises drops the in-scope population by approximately 90% — from roughly 50,000 companies to a few thousand. The vast middle market that scrambled to prepare is, in most cases, now out.

2. “Stop the Clock” — a two-year delay. A separate measure, Directive (EU) 2025/7942, the “Stop-the-Clock” directive, postponed by two years the application of reporting requirements for the so-called Wave 2 and Wave 3 entities still in scope, including the EU Taxonomy disclosures tied to the CSRD. First-time application for the entities that remain in scope is now generally pushed to financial years beginning on or after January 1, 2027.

3. A 61% datapoint cut. EFRAG — the body that drafts the ESRS — delivered a streamlined set of Amended ESRS that reduce the number of datapoints by 61% compared to the original standards, with a much greater emphasis on materiality and judgment rather than exhaustive box-checking. The reporting that remains is meaningfully lighter than what the original standards demanded.

EU member states have 12 months to transpose the CSRD-related provisions into national law, so the precise national contours will continue to firm up through 2026 and into 2027.

Why the EU reversed itself

The retreat was driven by a competitiveness argument. EU policymakers — responding to the Draghi report on European competitiveness and sustained pressure from industry — concluded that the original CSRD imposed a reporting burden disproportionate to its benefit, particularly on mid-sized companies and on non-EU firms weighing whether the European market was worth the compliance cost. The Omnibus is explicitly a simplification and burden-reduction measure, not a strengthening of environmental ambition. That framing matters, because it signals the political direction: the EU is, for now, prioritizing reducing compliance friction over expanding disclosure.

The trap: “out of scope” is not “nothing to do”

Here is where compliance and finance teams can make an expensive mistake. The relief is real, but it is not absolute, and treating “we fell below the threshold” as “we can dismantle our ESG reporting program” is a strategic error for several reasons.

The value-chain reach persists. Large in-scope companies still must report on their value chains. If you sell to, or are financed by, a company above the 1,000-employee / €450M threshold, you will continue to face data requests flowing down the supply chain — even though you have no direct CSRD obligation. The Omnibus includes a “value-chain cap” intended to limit what large companies can demand of smaller partners, but the demand does not vanish.

Voluntary reporting is becoming the norm for the excluded. EFRAG has developed a voluntary standard for SMEs (the VSME), and many companies dropped from mandatory scope will find that investors, lenders, and customers expect a baseline of standardized sustainability disclosure regardless of the legal requirement. The market may sustain a reporting expectation the law no longer imposes.

Other regimes still bite. The CSRD is not the only sustainability-disclosure framework. Companies may remain subject to the EU Taxonomy in some respects, to member-state requirements, to the separate Corporate Sustainability Due Diligence Directive (CSDDD) — itself amended by the Omnibus — and, for those with U.S. or other international footprints, to a patchwork of other ESG disclosure rules (California’s climate-disclosure statutes among them). Falling out of CSRD scope does not clear the broader field.

Re-entry risk. Thresholds are political and can move again. A company that fully dismantles its data-collection infrastructure may face a costly rebuild if scope expands, if it grows past the threshold, or if value-chain demands intensify.

What to do now

  1. Re-run your scoping against the new thresholds. Confirm whether you exceed 1,000 employees and €450M net turnover. The “and” matters — both must be met for mandatory ESRS reporting. Many previously in-scope companies are now out.
  2. If you remain in scope, re-baseline to the amended ESRS and the new timeline. Work to the 61%-reduced datapoint set and the Stop-the-Clock deadlines (generally FY2027 first application for remaining waves). Re-scope your materiality assessment around the standards’ renewed emphasis on judgment.
  3. If you fell out of scope, don’t dismantle — downshift. Preserve your core data-collection capability. Evaluate the EFRAG VSME voluntary standard as a proportionate way to meet investor, lender, and customer expectations without the full CSRD apparatus.
  4. Map your value-chain exposure. Identify which of your large customers and financiers remain in scope and will push data requests down to you. Use the Omnibus value-chain cap as a shield, but be ready to respond.
  5. Track national transposition. Member states have 12 months to implement; the precise obligations in each jurisdiction where you operate will continue to evolve. Assign ownership for monitoring transposition.
  6. Don’t conflate CSRD relief with ESG relief. EU Taxonomy, CSDDD, California climate disclosure, and member-state rules continue to apply. Maintain an integrated view of your total sustainability-disclosure obligations, not just the CSRD line.

The CSRD Omnibus is one of the largest single reductions in corporate compliance scope the EU has ever enacted — a genuine, material easing for tens of thousands of companies. But the smart compliance posture is not celebration; it is recalibration. The reporting obligation contracted; the reporting expectation — from markets, supply chains, and adjacent regulations — did not contract nearly as far.

This article is provided for informational purposes only and does not constitute legal advice.