CSRD Reporting Requirements: Scope, Timeline & Datapoints

CSRD reporting requirements: who reports, when and whatCSRD requires in-scope EU undertakings to report sustainability information under the ESRS, inside the management report, tagged in digital format and subject to at least limited assurance. Scope follows size thresholds and listing status, with non-EU parents captured through a separate regime, and the phase-in has been rescheduled by the Omnibus package. What you report is set by your double materiality assessment; how fast you can report it is set by your data architecture.CSRD replaced the Non-Financial Reporting Directive and moved sustainability reporting into the same regime as financial reporting: in the management report, in a machine-readable format, and assured. The 2025 Omnibus package then reopened both scope and timing, so a group's obligation date is now a function of its size class and wave.For finance leaders the practical question is not the legal text. It is which datapoints apply, which systems hold them, and whether the numbers can survive an assurance provider tracing them back to source. That work takes at least one full reporting cycle to build.Who is in scope

Large EU undertakings meeting two of three criteria in two consecutive years: balance sheet total, net turnover and average employees — with the thresholds raised by the Omnibus revisions

EU parent undertakings of large groups, reporting on a consolidated basis; subsidiaries are generally exempt where consolidated reporting covers them

Listed SMEs on EU regulated markets, under a lighter standard and with an opt-out for the first years

Non-EU parents above the EU turnover threshold with a qualifying EU subsidiary or branch, under a separate third-country regime and standard

Groups outside scope that still receive ESRS-style data requests from customers, banks and insurers — commercially in scope even where legally out

Timeline and phase-inThe Omnibus package postponed reporting for later waves and reduced the population caught by the first waves. Confirm your own wave against the current directive text and the Dutch implementing legislation before you plan the build — the dates have moved more than once.

Wave 1: large public-interest entities already reporting, continuing under ESRS

Later waves: postponed by two years under the Omnibus 'stop-the-clock' directive, with revised scope thresholds

Value-chain cap: limits on the sustainability information large undertakings may demand from smaller suppliers

Assurance: limited assurance required, with the move to reasonable assurance no longer automatic

Digital tagging: sustainability statements tagged under the ESEF regime once the taxonomy applies to your wave

What actually gets reportedThe report follows ESRS structure regardless of size. Two cross-cutting standards always apply; the topical standards apply only where your materiality assessment says they do.

ESRS 1 and ESRS 2: general requirements and general disclosures — always applicable, including governance, strategy, impacts-risks-opportunities and the materiality process itself

Environment: climate change (E1), pollution, water and marine resources, biodiversity, resource use and circular economy

Social: own workforce, workers in the value chain, affected communities, consumers and end-users

Governance: business conduct, including anti-corruption, political influence and payment practices

EU Taxonomy: turnover, CapEx and OpEx alignment ratios, which sit alongside ESRS and use financial data directly

Datapoints per material topic — commonly several hundred once E1 and own-workforce are material

The data work behind each disclosureSustainability data behaves like financial data under assurance: it needs a defined source, a calculation, a boundary and an owner. Most groups discover that half their datapoints have none of these.

Build a datapoint inventory from the material matters: definition, unit, boundary, source system, owner, frequency

Reconcile the reporting boundary to the consolidation scope — the same entity list, or a documented difference

Take Scope 1 and 2 emissions from metered and invoiced data where possible; document estimation methods and factors where not

Treat emission factors as controlled reference data with a version and an effective date

Align Taxonomy ratios with audited financial figures, using the same ledger data, not a parallel extract

Retain evidence per datapoint the way you retain audit evidence — retrievable, dated, with a preparer and a reviewer

What assurance providers test first

The double materiality assessment: methodology, thresholds, inputs and approval

Boundary consistency between the sustainability statement and the consolidated financial statements

Emission factor sources and versioning, and the arithmetic behind conversions

Estimated versus measured data, and whether estimation is disclosed as such

Controls over the spreadsheets that still sit between source systems and the report

Consistency between narrative claims and the underlying figures — targets, policies and actions must match the data

CSRD readiness checklist

Scope conclusion documented: wave, thresholds tested, first reporting year

Double materiality assessment completed and approved

Datapoint inventory derived from material matters, with owners and source systems

Reporting boundary reconciled to consolidation scope

Emission factor register with versions and effective dates

Estimation methods documented where measured data is unavailable

EU Taxonomy ratios built from the same ledger data as the financial statements

Controls documented for every spreadsheet in the reporting chain

Evidence retention policy for sustainability data, aligned with financial evidence

Digital tagging capability confirmed with your reporting tool

Dry run performed on a prior period before the first reporting year

Assurance provider engaged early, with a scoping walkthrough completed

How we would approach this

We turn the material matters into a datapoint inventory with owners and systems, which is the artefact most groups are missing.

We reconcile the sustainability boundary to the consolidation scope so the two reports cannot drift apart.

We put the same evidence discipline on sustainability data as on financial data, because the assurance provider will.

Which companies must report under CSRD?Scope depends on the transposition in each member state and on the phase-in as amended, but it is built on size thresholds for large undertakings and listed SMEs, plus separate rules for certain non-EU parent groups. Confirm the current national scope before concluding a group is out.What standards apply to the report?The European Sustainability Reporting Standards (ESRS), adopted as a Commission Delegated Regulation, with ESRS 1 and ESRS 2 setting the general requirements and disclosures.Primary sources

Directive (EU) 2022/2464 (CSRD) — https://eur-lex.europa.eu/eli/dir/2022/2464/oj

Delegated Regulation (EU) 2023/2772 — ESRS — https://eur-lex.europa.eu/eli/reg_del/2023/2772/oj

European Commission — sustainability reporting — https://finance.ec.europa.eu/capital-markets-union-and-financial-markets/company-reporting-and-auditing/company-reporting/corporate-sustainability-reporting_en