EU CSDDD Compliance for Apparel Suppliers: A Buyer’s Guide

EU CSDDD Compliance for Apparel Suppliers: A Buyer’s Guide

Most European brands reading about EU CSDDD compliance for apparel suppliers conclude they are out of scope and move on. That is usually correct about the legal obligation and usually wrong about the commercial one. The directive binds very large companies, but it works by making them responsible for what happens in their supply chains — and the fastest way for them to discharge that is to push obligations down their contracts.

If you sell to a large retailer, supply a department-store group, or share a Tier 1 factory with one, the requirements arrive as clauses and questionnaires rather than as legislation. That is the version most mid-sized brands will meet first.

This article covers the human-rights and environmental due diligence side only. Product-level data sits with the Digital Product Passport, and waste obligations sit with textile EPR.

What CSDDD actually asks for

The Corporate Sustainability Due Diligence Directive requires in-scope companies to run a risk-based due diligence process across their own operations and their chain of activities. In practice that means six linked duties: embedding due diligence in policy, identifying adverse impacts, preventing or mitigating them, monitoring effectiveness, communicating publicly, and providing a complaints mechanism.

Two features make it different from the reporting rules brands already know. First, it is about conduct, not disclosure — you must act on what you find, not just describe it. Second, it is risk-based and prioritised, so a company is expected to concentrate on severe and likely impacts rather than paper over every tier equally.

For apparel, the severe-and-likely list is well established: freedom of association, wage and hour compliance, forced and child labour in upstream cotton and spinning, building and fire safety, and chemical and effluent management at wet-processing stages.

Scope after the Omnibus revision

The scope was materially narrowed. It matters for planning, because the population of directly obligated companies is now small and concentrated.

InstrumentWho is caughtFirst complianceWhat it produces
CSDDD5,000+ employees and €1.5bn+ turnover2029, covering 2028 activitiesDue diligence conduct obligations
CSRD1,000+ employees and €450m+ net turnover2028, covering FY2027Standardised ESG disclosure

A brand with 300 staff is in neither. But the group it supplies, or the retailer that owns 40% of its wholesale book, may be in both — and their auditors will want traceable evidence, not assurances.

Why the obligation reaches suppliers years before 2029

First compliance covers 2028 activities. To report credibly on 2028, a large company has to have mapped its supply chain, run risk assessments and started remediation well before 2028 begins. In apparel, where a factory relationship takes two to three seasons to mature, that means supplier engagement in 2026 and 2027.

There is a second reason. CSDDD expects companies to seek contractual assurances from direct partners, and cascading assurances further upstream. Those clauses are already appearing in European buying terms. They typically carry three things: a code of conduct, a right to verify, and a remediation obligation with a timeline.

The realistic sequence for a mid-sized brand is therefore: your customer’s clause reaches you, your clause reaches the factory, and the factory needs documentation it may never have been asked for in that format before. Building that upstream is slower than signing the clause.

EU CSDDD compliance for apparel suppliers: the evidence pack

Ask for these as standing documents per factory, refreshed at a set interval, not as a one-off onboarding exercise.

  • Full legal identity of the production site — name, address, and confirmation that it is the unit that will actually cut and sew, not a head office or a trading entity.
  • A current social audit — amfori BSCI with its grade and validity date, Sedex SMETA (state 2-pillar or 4-pillar), or an SLCP verified assessment. Ask for the report, not the certificate.
  • The corrective action plan and its closure status. An open CAP is not a failure; an open CAP with no dated closure evidence is.
  • Structural, fire and electrical safety status under the International Accord or the RMG Sustainability Council, with remediation percentage and outstanding items.
  • Worker voice mechanism — how a grievance is raised, who receives it, how long resolution takes, and evidence that it has been used.
  • Wage and working-hours records in whatever form the factory can share, plus its overtime policy against local law.
  • Subcontracting declaration — named units for any outsourced process (printing, embroidery, washing, hand embellishment), which is where undeclared work most often sits.
  • Wet-processing and chemical management evidence for dyeing and washing units, including effluent treatment status.

Two practical notes. A certificate proves an audit happened on a date; it proves nothing about the period since. And declared subcontractors are the single highest-value item on this list, because an unmapped washing or embroidery unit is exactly the kind of gap a due diligence review is designed to find. Our guide to reading amfori BSCI audit results covers what the grades do and do not tell you.

Why smaller brands get pulled in anyway

Three routes, in rough order of frequency:

  1. Contractual cascade. Your customer is in scope; their clause becomes your obligation, with audit rights attached.
  2. Shared factories. If a large in-scope buyer uses the same Dhaka unit, that unit’s remediation programme and disclosure obligations apply regardless of your size — and its capacity may be prioritised toward the buyer asking the harder questions.
  3. Finance and insurance. Lenders and trade-credit providers increasingly ask for supply-chain risk documentation using the same categories.

The defensible position for a smaller brand is not to claim exemption. It is to hold a documented, dated evidence pack for each production site and a short written statement of how you assess and act on risk. That answers the questionnaire without pretending to run a large-company programme.

Where due diligence and factory choice meet

Due diligence is easier at factories that already carry the reporting burden for other buyers, which is one of the arguments for consolidating rather than spreading a small programme across many units. Bangladesh’s compliance base is deeper than its reputation suggests — 258 LEED-certified green garment factories as of August 2025, more than any other country — and those units generally hold the documentation set above in usable form.

The trade-off is real: consolidated, well-documented factories are rarely the cheapest quote in the market. If your programme is priced to the last cent, expect the evidence pack to be thinner. See what compliance and green certification actually cover for where the lines sit, and why BGMEA membership is worth verifying before you rely on a supplier’s own description of itself.

Verifiable membership matters here for a narrow reason: it confirms the counterparty is a registered manufacturer or buying house rather than an intermediary, which is the first question any due diligence review asks about a named site.

Working with a buying house on this

Collecting audit reports, CAP closure evidence and subcontractor declarations from Dhaka is a job for someone in the country. NAK Fashion Group is a BGMEA member working with audited, compliant factories across knitwear and woven categories at MOQ 1,000 pcs per style, and can assemble a per-factory documentation pack alongside sampling and production. If you need supplier evidence ready before your customer asks, contact us.

Garment Categories
Source Garments from Bangladesh
MOQ 1,000 pcs · BSCI & SEDEX certified · 48hr FOB costing · Est. 1998

Frequently Asked Questions

Directly, no. Post-Omnibus scope is 5,000+ employees and €1.5bn+ turnover, with first compliance in 2029 covering 2028 activities. Indirectly, very likely yes — through contractual clauses from larger customers, shared factory relationships and lender questionnaires. Prepare the supplier evidence, not a full corporate programme.

No. Audits are inputs to due diligence, not a substitute for it. An in-scope buyer will want the underlying report, the corrective action plan, closure evidence and a description of how you act when findings appear. A certificate alone shows a snapshot on one date and says nothing about the months since.

Not directly — the directive binds EU-scope companies. Suppliers experience it as buyer requirements: codes of conduct, audit access, disclosure of subcontractors, and remediation timelines written into purchase terms. Factories accustomed to European buyers usually have most of this already; the gap is typically subcontractor mapping and upstream fibre traceability.

Map production sites you actually use, including subcontracted processes, before you sign anything. Then collect current audits and CAP status for each. Signing an assurance clause you cannot evidence upstream converts a supply-chain risk into a contractual one, which is worse.

Nak Fashion
Author — Nak Fashion Group