Corporate Sustainable Due Diligence: A Practical Guide for Businesses
Corporate sustainable due diligence is the process of identifying, preventing, mitigating and addressing the actual or potential effects a business may have on people and the environment. It looks beyond a company’s own operations to consider relevant impacts across its supply chain and wider business relationships.
For businesses, this is more than a reporting exercise. A thoughtful due diligence approach can help identify risks early, improve supplier relationships and support better-informed decisions. It can also help organisations respond to changing laws, customer expectations and investor scrutiny.
What does sustainable due diligence cover?
The term brings together two connected areas:
- Human rights: for example, risks relating to working conditions, forced labour, child labour, discrimination, health and safety, and the rights of affected communities.
- Environmental impacts: for example, pollution, greenhouse gas emissions, biodiversity loss, deforestation, water use and waste.
The relevant issues will depend on the business, its location and the activities of its suppliers and other business partners. A company does not need to treat every risk as equally significant. It should prioritise the most serious and likely impacts, while keeping its assessment under review.
Due diligence is an ongoing process
Effective due diligence is not simply a questionnaire sent to suppliers or a policy published on a website. It involves a cycle of assessment, action, monitoring and communication. A typical process includes the following steps.
- Set clear commitments. Establish policies that explain the organisation’s expectations on human rights and environmental conduct. Make responsibilities clear across relevant teams and, where appropriate, communicate expectations to suppliers.
- Identify and assess risks. Examine where the business may be connected to harm through its operations, products, services or business relationships. Use proportionate research, supplier information and engagement with affected stakeholders where appropriate.
- Prioritise the most serious impacts. Consider factors such as the severity and likelihood of harm, how many people or places may be affected and whether the impact could be difficult to reverse.
- Prevent or reduce harm. Take practical steps to address risks. These might include changing purchasing practices, improving supplier standards, providing training or working with business partners on an improvement plan.
- Monitor progress. Check whether actions are effective using suitable measures and regular reviews. A signed supplier code alone is unlikely to show whether conditions have improved in practice.
- Provide or support remedy. Where the business has caused or contributed to harm, it should consider appropriate ways to address it. Where it is directly linked to harm through a business relationship, it should consider what influence it can use to help prevent or mitigate further impacts.
- Communicate appropriately. Explain the organisation’s approach and progress clearly, taking care not to make claims that are broader or stronger than the available evidence supports.
Why it matters to UK businesses
UK organisations may face expectations from customers, investors, lenders, employees and business partners to demonstrate responsible practices. They may also be affected by laws in the UK and other countries where they operate or sell products. The requirements depend on factors such as the organisation’s size, activities, location and supply-chain links.
The European Union’s Corporate Sustainability Due Diligence Directive (CSDDD) is one example of legislation in this area. Its scope and implementation timetable have been subject to changes and further legal detail. UK businesses with relevant EU connections should check the current requirements and obtain advice on whether they are in scope. Other reporting and supply-chain rules may apply independently.
Even where a particular due diligence law does not apply, a structured approach can help a business understand its exposure, meet contractual expectations and make sustainability commitments more credible.
Common challenges
Supply chains can be complex, and businesses may have limited visibility beyond their direct suppliers. Information may be incomplete, difficult to verify or collected in inconsistent formats. Smaller suppliers may also lack the resources to meet extensive reporting demands.
These challenges are best addressed through a proportionate, risk-based approach. Businesses can begin with the parts of their operations and supply chains where the risk of serious harm is greatest, then improve data and processes over time. Supplier engagement should focus on meaningful progress rather than paperwork alone.
Another common risk is over-reliance on audits. Audits can provide useful evidence, but they are only one tool. They may miss problems, particularly where workers or communities do not feel safe speaking openly. Combining different sources of information and making space for genuine feedback can provide a more complete picture.
Building a practical programme
A business starting out can begin by mapping its activities and key business relationships, reviewing existing policies and identifying the most significant potential impacts. It should assign clear responsibility for the work and involve relevant teams, such as procurement, legal, compliance, operations and sustainability.
From there, the organisation can create a prioritised action plan, set realistic measures of progress and establish a process for raising and responding to concerns. The approach should be reviewed regularly, especially when the business enters a new market, changes suppliers or becomes aware of a serious incident.
From compliance to better business practice
Corporate sustainable due diligence is most effective when it is part of everyday decision-making. It can help organisations spot problems before they escalate, strengthen relationships with suppliers and respond more responsibly when harm occurs. By focusing on the most significant impacts and taking practical steps to address them, businesses can make their sustainability commitments more meaningful and resilient.
This article provides general information, not legal advice. Organisations should seek advice on the specific laws and obligations that apply to their circumstances.
Corporate Sustainable Due Diligence: Seven Frequently Asked Questions
- What is corporate sustainable due diligence?
- Which human rights and environmental issues does sustainable due diligence cover?
- Which businesses need to carry out sustainable due diligence?
- What are the main steps in a sustainable due diligence process?
- How should a business assess risks across its supply chain?
- What should a company do if it identifies harm or a serious risk?
- How can a business monitor and report on the effectiveness of its due diligence?
What is corporate sustainable due diligence?
Corporate sustainable due diligence is the ongoing process a business uses to identify, prevent, reduce and address the negative effects its activities and business relationships may have on people and the environment. This can include issues such as working conditions, human rights, pollution, climate impacts and biodiversity. It involves assessing risks across the company’s operations and supply chain, taking proportionate action and checking whether that action is effective.
Which human rights and environmental issues does sustainable due diligence cover?
Sustainable due diligence can cover a wide range of human rights and environmental issues, depending on a company’s activities and business relationships. Human rights risks may include forced or child labour, unsafe working conditions, discrimination, restrictions on workers’ rights and harm to local communities. Environmental issues may include pollution, greenhouse gas emissions, deforestation, biodiversity loss, excessive water use and waste. Businesses should assess which impacts are most serious and relevant across their own operations and supply chains, and review those risks as circumstances change.
Which businesses need to carry out sustainable due diligence?
Any business can have impacts on people and the environment, so sustainable due diligence is relevant to organisations of all sizes. However, specific legal duties usually apply only to businesses that meet criteria such as size, turnover, sector or location, and may also affect companies operating in or supplying markets with their own rules. Smaller businesses may be indirectly asked to provide information or meet standards by customers and larger suppliers. The requirements vary and can change, so businesses should check which rules apply to their activities and supply chains.
What are the main steps in a sustainable due diligence process?
A sustainable due diligence process typically involves setting clear policies and responsibilities; identifying and assessing actual and potential human rights and environmental impacts across the business and its supply chain; prioritising the most serious risks; taking steps to prevent, mitigate or address harm; monitoring whether those actions are effective; providing or supporting remedy where appropriate; and communicating progress transparently. It should be ongoing and proportionate to the nature of the business and the severity of the risks.
How should a business assess risks across its supply chain?
A business should assess supply-chain risks by mapping its suppliers and other business relationships, then identifying where its activities, products or services could be linked to harm to people or the environment. Consider factors such as location, industry, working conditions and the nature of the goods or services supplied, using credible information from suppliers, independent sources and, where appropriate, workers or affected communities. Prioritise the most severe and likely risks, take proportionate steps to prevent or reduce them, and review the assessment regularly as circumstances change. Supplier questionnaires and audits can help, but should form part of a wider process rather than being treated as proof that risks have been addressed.
What should a company do if it identifies harm or a serious risk?
If a company identifies actual harm or a serious risk, it should act promptly and proportionately: assess the severity and urgency, take steps to prevent or stop the harm, and reduce any remaining impact. It should engage with affected people and relevant business partners where safe and appropriate, and use its influence to secure improvements. If the company has caused or contributed to harm, it should provide for or co-operate in remedy. It should also record its actions, monitor whether they are effective and review its approach to prevent the issue recurring.
How can a business monitor and report on the effectiveness of its due diligence?
A business can monitor the effectiveness of its due diligence by setting clear measures and baselines, then reviewing them regularly against the actions taken and outcomes achieved. Useful evidence may include supplier assessments, site visits, worker or community feedback, grievance data, incident trends and progress against improvement plans; audits can help, but should not be the only source. The business should use findings to adjust its approach, explain its progress and any remaining challenges in clear, evidence-based reports, while protecting confidential or personal information.