Your climate data strategy can't wait for Washington

Executive Summary: The SEC has stepped back from enforcing its climate disclosure rules. But state governments aren't waiting. California's SB 200s package and New York's SB 9072A are creating real compliance deadlines for thousands of companies, with the first Scope 1 and 2 reporting due in California by August 2026. The EU just simplified its own rules through an Omnibus directive. For sustainability leaders, the result is a patchwork that demands action now. This piece covers what's changing, who's affected, and how to build a climate data strategy that holds up across jurisdictions.

The federal vacuum is real, and states are filling it

In March 2026, the SEC opened a formal consultation on climate-related disclosures. But let's be honest about what that means: the original SEC Climate Disclosure Rules are stayed, undefended, and unlikely to take effect in their current form. Federal corporate climate disclosure in the United States remains governed by general securities-law materiality and voluntary frameworks.

That might sound like a reprieve. It isn't.

While Washington debates whether climate risk belongs in financial filings, state legislatures have decided the answer is yes. California was first. Other states are following.

California's SB 200s: the August 2026 deadline is real

California's Climate Accountability Package (SB 253, SB 261, and their amendments under SB 219) has survived legal challenges and is moving forward. In early 2026, the California Air Resources Board (CARB) voted to approve the initial regulation implementing these laws.

The timeline matters. By August 10, 2026, companies that "do business" in California and meet the revenue thresholds must begin reporting Scope 1 and Scope 2 greenhouse gas emissions under SB 253. That's less than five months away.

SB 261, which requires climate-related financial risk reports, faced a temporary injunction from the Ninth Circuit. But CARB opened its public docket for voluntary reporting anyway, and a number of companies have already filed. Voluntary today, mandatory soon.

If your company does business in California, and if you're a large U.S. enterprise you almost certainly do, this applies to you.

New York is next

On February 10, 2026, the New York Senate passed SB 9072A, a companion to the Climate Corporate Data Accountability Act that has been introduced in various forms since 2022. A matching bill (AB 4282A) is moving through the Assembly.

If enacted, New York would become the second state with emissions tracking and disclosure requirements similar to California's SB 253. Colorado (HB 25-1119), New Jersey (SB 679), and Illinois (HB 3673) have all proposed their own versions. Some failed in committee. Others will come back.

The pattern is straightforward: absent federal rules, states are writing their own. And each one defines scope, thresholds, and timelines differently.

The EU just simplified, but it's still mandatory

On February 24, 2026, the EU adopted Directive (EU) 2026/470, the so-called Omnibus package. It raises applicability thresholds, extends timelines, and simplifies requirements under both the Corporate Sustainability Reporting Directive (CSRD) and the Corporate Sustainability Due Diligence Directive (CSDDD).

Good news for mid-sized companies that were dreading immediate compliance. But the direction hasn't changed. The EU is still building mandatory sustainability disclosure into law. Companies just have more runway to get there.

For U.S. multinationals with European operations, the Omnibus doesn't eliminate obligations. It recalibrates them. You still need to know whether your European entities meet the new thresholds, and you still need a compliance strategy.

The UK is adding another layer

The UK's Financial Conduct Authority is aligning its disclosure rules with the new Sustainability Reporting Standards (SRS), including SRS S2 for climate-related risks and opportunities. This builds on the existing TCFD-based framework but adds more specificity.

Companies listed in the UK, or with significant UK operations, need to factor this into their reporting infrastructure. The requirements converge in some areas with CSRD and diverge in others. One more thread in the patchwork.

Why this fragmentation matters, practically

Here's what the patchwork means on the ground:

• A company headquartered in Texas with operations in California, customers in New York, subsidiaries in Germany, and a London listing could face four or five different climate disclosure regimes. Each with different scopes. Different metrics. Different deadlines.

• The data you collect for California's Scope 1 and 2 requirements won't automatically satisfy CSRD's double materiality assessment or the UK's SRS S2 framework.

• Waiting for a single federal standard isn't a strategy. It's a bet, and one that gets more expensive every quarter you delay building your data collection systems.

Greenwashing risk is growing alongside disclosure requirements

There's a related problem. As disclosure requirements multiply, so does the risk of getting your claims wrong. In 2025, state attorneys general launched investigations into corporate sustainability claims, and private greenwashing litigation picked up. Apple recently won a U.S. greenwashing case, but the EU is tightening scrutiny on carbon-neutral claims at the same time.

The legal risk cuts both ways. Say too little, and you may violate disclosure mandates. Say too much, or say it imprecisely, and you invite greenwashing claims. Getting your data right protects you on both fronts.

How to build a climate data strategy that works across jurisdictions

We work with companies dealing with this right now. Here's what we're seeing work:

Start with your exposure map. Before you worry about data systems, map which jurisdictions apply to your organization. Do you "do business" in California under CARB's definition? Do your European entities meet the new CSRD thresholds? Are you listed in the UK? The answers determine your obligations.

Build for the strictest standard. If you're subject to multiple regimes, don't build separate reporting systems for each one. Collect data at the granularity required by the most demanding standard you face, then tailor your outputs. California's Scope 1 and 2 requirements are a reasonable starting point for U.S. companies. CSRD's double materiality framework is the benchmark for those with EU exposure.

Invest in data infrastructure, not just reports. The companies handling this well aren't treating disclosure as a once-a-year exercise. They're building systems (internal data platforms, supply chain tracking tools, third-party verification processes) that produce reliable numbers continuously. The report is an output. The system is the asset.

Get your claims reviewed before you publish them. Every sustainability report and investor presentation should go through a legal and technical review. The gap between what your marketing team wants to say and what your data actually supports is where greenwashing lawsuits live.

Don't wait for perfect clarity. The rules will keep shifting. California's regulations will be refined. New York's bill may pass or may not. The EU will transpose its Omnibus directive into 27 different national laws. If you wait for certainty, you'll be building your data systems under deadline pressure instead of ahead of it.

The business case beyond compliance

There's a straightforward business reason to do this now, beyond avoiding penalties. Investor demand for consistent ESG data keeps growing. The Net Zero Asset Managers initiative just reformed after a year-long suspension, with diluted pledges but renewed participation. Even with weaker commitments, the message from capital markets is that climate data matters to investment decisions.

Companies that can produce reliable, auditable climate data across jurisdictions will have an edge in fundraising and customer relationships. Companies that can't will spend the next three years catching up.

What Council Fire recommends

At Council Fire, we help organizations turn complex sustainability obligations into workable strategies. For companies facing the current disclosure patchwork, we recommend starting with a jurisdictional exposure assessment, then building a unified data collection framework that satisfies multiple regimes without overcommitting on claims you can't support.

California's first deadlines arrive in August. The next wave of state laws is in committee now. Your investors are already asking questions.

Related resources

• ESG Reporting and Compliance: The Complete 2026 Strategic Guide — A detailed breakdown of current ESG reporting requirements and how to build a compliance program.

• The CSO at a Crossroads: Four Paths Forward for Sustainability Leaders in 2026 — How Chief Sustainability Officers can position themselves during this period of regulatory uncertainty.

• Navigating CSRD and CSDDD: New Reporting Rules for 2025 — Background on the EU directives that the Omnibus package just simplified.

• The Complete Guide to Corporate Sustainability Strategy — How to build an integrated sustainability strategy that goes beyond checking regulatory boxes.

Frequently asked questions

Does the SEC's consultation mean federal climate disclosure rules are coming back?

Not necessarily. The SEC's current consultation is exploratory. The original Climate Disclosure Rules remain stayed and undefended. Companies should plan around state-level requirements, which have concrete timelines, rather than waiting for federal action.

What does "doing business in California" mean under SB 253?

CARB is still refining the exact definition, but it generally applies to companies with revenue from California customers, physical operations in the state, or certain activity thresholds. Most large U.S. companies will qualify.

Can I use the same data for California, CSRD, and UK SRS reporting?

Partially. Scope 1 and 2 emissions data is broadly comparable across frameworks. But CSRD requires a double materiality assessment and broader environmental topics, while the UK SRS has its own metrics. Build your data collection to the most granular standard, then adapt outputs per jurisdiction.

What happens if I don't comply with California's August 2026 deadline?

The enforcement mechanisms are still being developed, but CARB has the authority to impose penalties. More practically, non-compliance creates reputational risk and puts you at a disadvantage compared to peers who are already reporting.

Should we report voluntarily under SB 261 even though there's an injunction?

Several companies have. Voluntary reporting lets you test your processes and get ahead of the mandatory deadline. It also reduces the scramble when the injunction lifts.