What is ESRS?

Status, September 2026: The EU's Omnibus I directive (in force March 18, 2026) narrows the CSRD to companies with more than 1,000 employees and more than €450 million in net turnover. The amendments apply from financial year 2027, with first reports in 2028, and member states must transpose them by March 2027. Source: Council of the EU.

What are the ESRS?

The European Sustainability Reporting Standards (ESRS) are a comprehensive set of mandatory sustainability disclosure standards developed by the European Financial Reporting Advisory Group (EFRAG) and adopted by the European Commission under the Corporate Sustainability Reporting Directive (CSRD). The first set of 12 sector-agnostic standards was finalized in July 2023, covering cross-cutting requirements (ESRS 1 and ESRS 2) and ten topical standards spanning environment (E1–E5), social (S1–S4), and governance (G1). They require double materiality assessment, detailed quantitative metrics, and disclosure of any climate transition plan, representing the most prescriptive sustainability reporting regime globally. A simplified set, adopted by the Commission in July 2026 and published in September 2026 as Delegated Regulation (EU) 2026/1563, keeps the 12-standard structure, cuts mandatory datapoints by 61%, and applies from financial year 2027 (companies may use it for 2026).

Why It Matters

ESRS fundamentally changes the economics and expectations of corporate sustainability disclosure. The CSRD as adopted in 2022 would have covered nearly 50,000 companies. After the Omnibus I directive (in force March 18, 2026), it covers companies with more than 1,000 employees and more than €450 million in net turnover (around 90% fewer companies), plus non-EU groups with more than €450 million in EU turnover, which still makes ESRS a key standard for large companies operating in European markets. The standards are not voluntary guidelines; they carry the same legal weight as financial reporting requirements, with penalties for non-compliance set by each EU member state.

The scope of required disclosure is unprecedented. ESRS E1 (Climate Change) alone requires disclosure of Scope 1, 2, and 3 GHG emissions, any transition plan and whether its targets are compatible with limiting warming to 1.5°C, internal carbon pricing, energy consumption by source, and climate-related financial impacts. ESRS S1 (Own Workforce) requires data on working conditions, equal treatment, collective bargaining coverage, health and safety incidents, adequate wages, and training. Companies accustomed to selecting their own metrics and narrative framing face a standardized, auditable disclosure regime.

The double materiality requirement under ESRS distinguishes it from the ISSB's approach. Companies must assess each sustainability topic from two perspectives: whether it creates financial risks or opportunities for the company (financial materiality), and whether the company's activities create significant impacts on people and the environment (impact materiality). A topic is reportable if it's material under either lens, resulting in broader disclosure scope than financially focused frameworks.

Assurance requirements escalate the stakes further. CSRD mandates limited assurance from the first reporting year; the Omnibus I directive dropped the planned move to reasonable assurance, and EU limited-assurance standards are due by July 1, 2027. This means sustainability disclosures are independently verified, though at a lower level of assurance than financial audits. Companies must establish internal controls, documentation, and data governance sufficient to withstand external audit.

How It Works / Key Components

The ESRS architecture consists of two cross-cutting standards and ten topical standards. ESRS 1 establishes general principles—double materiality methodology, reporting boundaries, time horizons, and data quality requirements. ESRS 2 sets out general disclosures that the 2023 standards required of all companies regardless of materiality (the 2026 revision treats them as likely material for all), including governance structures for sustainability, strategy and business model descriptions, impact/risk/opportunity management processes, and metrics and targets.

The five environmental standards cover: E1 (Climate Change), E2 (Pollution), E3 (Water and Marine Resources), E4 (Biodiversity and Ecosystems), and E5 (Resource Use and Circular Economy). The four social standards address: S1 (Own Workforce), S2 (Workers in the Value Chain), S3 (Affected Communities), and S4 (Consumers and End-Users). G1 covers Business Conduct including anti-corruption, lobbying, and payment practices. Omnibus I dropped the planned sector-specific standards.

Each topical standard contains both disclosure requirements (DRs) and application requirements (ARs). Disclosure requirements specify the metrics, narrative descriptions, and data points that must be reported. Application requirements provide detailed guidance on how to measure and present those disclosures. The total number of individual datapoints across all ESRS runs into the hundreds: EFRAG's datapoint list (May 2024) counted 161 required regardless of materiality, 622 more that apply only when a topic is material, and 269 voluntary ones. The simplified ESRS adopted in July 2026 cut mandatory datapoints by 61%.

Phased implementation provides some relief. Large public-interest entities (>500 employees, already under the NFRD) reported under ESRS starting in fiscal year 2024. After a 2025 postponement and the Omnibus I directive, other companies with more than 1,000 employees and more than €450 million in net turnover first report for fiscal year 2027, listed SMEs are out of scope, and first-wave companies below the new thresholds drop out from fiscal year 2027. Non-EU groups meeting the revenue threshold begin in fiscal year 2028. This staggered timeline gives companies time to build reporting capabilities, but early movers gain competitive advantage in investor relations and data infrastructure.

Council Fire's Approach

Council Fire supports clients through every phase of ESRS implementation—from double materiality assessment and gap analysis against current reporting, through data architecture design and internal controls development, to first-year reporting and assurance preparation. We help companies treat ESRS compliance as a strategic capability build rather than a compliance checkbox, extracting management insights from the reporting process itself.

Frequently Asked Questions

Do non-EU companies need to comply with ESRS?

Yes, if they meet the CSRD's third-country thresholds as amended by Omnibus I: more than €450 million in EU net turnover and an EU subsidiary or branch with more than €200 million in turnover. These groups report from fiscal year 2028 (in 2029) under a dedicated standard for non-EU groups, which EFRAG put out for consultation in July 2026; the Commission is expected to adopt it in 2027. Additionally, non-EU companies within the value chains of ESRS-reporting entities will face data requests—ESRS S2 covers value chain workers when material, so EU companies may push data demands upstream and downstream to non-EU suppliers and partners. Omnibus I lets value-chain partners with up to 1,000 employees limit what they provide to the voluntary SME standard (VSME).

How does ESRS relate to GRI, ISSB, and other frameworks?

ESRS was developed with high interoperability in mind. The standards share significant DNA with GRI—EFRAG and GRI collaborated during development, and most GRI-aligned disclosures map to corresponding ESRS requirements. EFRAG has published detailed interoperability guidance mapping ESRS to ISSB (IFRS S1 and S2), enabling companies to produce ISSB-compliant outputs from ESRS data with limited incremental effort. The key difference remains materiality: ESRS uses double materiality while ISSB uses single materiality, so ESRS disclosures are typically a superset of what ISSB requires.

What are the penalties for ESRS non-compliance?

Penalties are set by individual EU member states, but the CSRD requires them to be "effective, proportionate, and dissuasive." France's original transposition set fines of up to €75,000 and prison terms for obstructing the sustainability auditor, but a 2025 law (Law 2025-391) removed those criminal penalties. Germany's implementing bill, which had not passed as of mid-2026, would set penalties through its commercial code (HGB). The more significant enforcement mechanism may be market-based: non-compliant companies face investor divestment, exclusion from ESG indices, and reputational damage. Auditors issuing opinions on annual reports that include sustainability information have professional liability if they fail to flag material misstatements—creating an additional accountability layer.