The EU’s Proposed Omnibus Package—Sustainability Reporting Simplified

On February 26, 2025, the European Commission proposed a long-awaited, and much-discussed, “Omnibus Package” in an attempt to streamline the CSRD, the CSDDD, and two other regulations — the Carbon Border Adjustment Mechanism (“CBAM”) and the EU Taxonomy. These regulations have been criticized by many parties as being extremely cumbersome, lacking clarity, and having an unreasonable extraterritorial reach on multinational companies, some of which do not primarily operate in the EU. The purported aim of the Omnibus Package is to reduce the regulatory burden on businesses as they work toward their sustainability goals and operate in an environment with heightened regulatory and voluntary demands on ESG topics; specifically, to “reduce complexity of EU requirements for all businesses [and] focus [the] regulatory framework on the largest companies which are likely to have a bigger impact on the climate and the environment, while still enabling companies to access sustainable finance for their clean transition.”¹ The Omnibus Package is actually two proposals — one that amends the various regulations and another that postpones reporting requirements and transposition deadlines for the CSRD and CSDDD, respectively.

The Omnibus Package is only a legislative proposal at this time — it is still subject to negotiations and changes at various stages as it proceeds to the European Parliament and European Council. However, for U.S. companies potentially subject to the CSRD and the CSDDD, it is important to understand how the proposals could affect the scope of these regulations and the timing of their impacts. In short, the Omnibus Package could significantly limit the number of enterprises impacted by the regulations, could notably lessen the reporting burden on companies, and could push back the deadlines for reporting entities.

The Corporate Sustainability Reporting Directive

The CSRD entered in force in 2023, with a deadline for transposition into national law by each EU member state of July 6, 2024. Although some countries missed that deadline, for the most part, the current text of the CSRD has now been implemented in most member states. To that end, many U.S. companies subject to the CSRD² have already begun preparations for compliance. However, the proposed changes introduce some uncertainty as to scope, applicability, and reporting obligations.

Reporting Thresholds

The Omnibus Package proposes to raise the reporting thresholds of the CSRD, which could result in many U.S.-based companies no longer finding themselves within the scope of the Directive. In fact, the drafters of the Omnibus Package expect that it would reduce the number of undertakings currently subject to the CSRD’s reporting requirements by about 80%.

Many U.S.-based multinational companies find themselves currently phased into the CSRD based on one of two coverage categories: as a “large undertaking” or as a “non-EU parent” (also known as a “third-country undertaking”). The Omnibus Package would change the thresholds for these categories as follows:

	Current CSRD	Omnibus Revision
Large Undertaking	EU entities meeting two of the following: Turnover over €50 million Balance sheet above €25 million More than 250 employees	EU entities with 1,000 employees and either: Turnover over €50 million, or Balance sheet above €25 million
Third-Country Undertaking	Any entities with net EU turnover of at least €150 million and either A subsidiary in the EU within scope of CSRD, or An EU branch with turnover of at least €40 million	Any entities with net EU turnover of at least €450 million and either An EU subsidiary that qualifies as a large undertaking, or An EU branch with turnover of at least €50 million

Other Changes

In addition to the paring back of companies subject to CSRD reporting, the Omnibus Package also proposes adjusting the timeline for compliance with the Directive’s reporting requirements. “Wave II” entities, which include large undertakings, are currently expected to submit reports beginning in 2026, reporting on Fiscal Year 2025 activities. The Omnibus Package proposes pushing back the Wave II requirements two years to begin with reports on Fiscal Year 2027, which would be due beginning in 2028. Companies meeting the qualifications for large undertakings should note the significantly extended window of time afforded to get into compliance with CSRD requirements.

The Omnibus Package would also affect the scope of data reporting along supply chains. As it stands, the CSRD requires companies to seek data from all stakeholders that are up- and downstream of their value chains for reporting. The Omnibus Package proposes limiting value chain reporting only to sizeable suppliers — those with at least 1,000 employees. Beyond this, covered entities are encouraged to seek information already disclosed in certain voluntary reporting standards, as well as any sustainability information that is commonly shared in the relevant business sector.

The CSRD also sought to utilize all European Sustainability Reporting Standards (“ESRS”) in its framework requirements. The ESRS have already developed extensive, uniform reporting standards to apply across the EU, and initially intended to develop mandatory, sector-specific reporting standards in the future for utilization in the CSRD. The Omnibus Package proposes to end the incorporation of sector-specific standards into the CSRD, and further reduce the number of mandatory data points required in uniform ESRS disclosures. These changes would reduce the regulatory burden on covered entities and eliminate the uncertainty created by the looming development of additional sector-specific standards.

Double Materiality Remains

The most noteworthy aspect of the CSRD that is not touched by the Omnibus Package is the double materiality³ standard. Covered entities would still be required to report both on the potential financial impacts such companies face from sustainability matters as well as the outward impacts of their business on stakeholders, including communities and the planet. There are also minimal changes proposed to the assurance requirements on CSRD reports. The current CSRD requires covered entities to obtain limited assurance on their reports, with plans to transition to a reasonable assurance standard in the future. The Omnibus Package proposes retaining the limited assurance standard indefinitely. These consistencies should inform covered entities to continue to pursue double materiality assessments in anticipation of the CSRD rollout, even if timelines are deferred and the scope of reporting is pared back.

The Corporate Sustainability Due Diligence Directive

Whereas the CSRD focuses on requiring entities to report information about sustainability risks and impacts, the CSDDD is meant to encourage companies to implement due diligence procedures in order to take action within their own business activities to mitigate risks along their supply chains. The CSDDD is narrower in scope with regard to the entities it applies to — already focusing solely on larger companies — but requires a deeper analysis into covered businesses, as it lacks a materiality threshold like the CSRD.

Timelines

The CSDDD entered into force on July 25, 2024, with EU member states obliged to transpose it into national law within two years. The earliest compliance date for the current CSDDD is July 26, 2027 (applying to its large company subcategory). However, the Omnibus Package proposes extending this application date by one year. This would compress the CSDDD’s phase-in to two application waves, as follows:

• Wave 1: EU entities with at least 3,000 employees and greater than €900 million in worldwide net turnover, as well as non-EU entities with EU net turnover greater than €900 million, are covered by CSDDD beginning July 2028. Their first reports, covering FY2029 activities, are due in 2030.
• Wave 2: EU entities with at least 1,000 employees and greater than €450 million in worldwide net turnover, as well as non-EU entities with EU net turnover greater than €450 million, are covered by CSDDD beginning July 2029. Their first reports, covering FY2030 activities, are due in 2031.

This change simplifies the phase-in schedule of the CSDDD and provides some additional time for large corporations to prepare for compliance with the Directive.

Other Changes

Like the CSRD, the Omnibus Package proposes limiting value chain reporting obligations for the CSDDD. Currently, covered entities must perform in-depth risk assessments on all of their business partners; the Omnibus Package proposes limiting the scope of assessment to direct suppliers only. There are also proposals to reduce the frequency of required supplier monitoring reports from the current annual basis to a five-year basis. These changes would reduce the data collection burden on covered companies, particularly in situations where the data may be difficult to access due to a distant relation through the value chain.

The Omnibus Package would also ease the CSDDD’s requirement that entities adopt climate transition plans aligned with the Paris Agreement. Instead of requiring companies to “put [the plans] into effect,” the companies would be asked to outline “implementing actions” that aim to achieve the goals of their plans. This offers companies more breathing room in the commitments included in their climate transition plans but may reduce the “teeth” of plans to enforce change in business activities.

If covered entities fail to conduct the required due diligence, the current CSDDD imposes a uniform scheme for civil liability and mandates that any administrative penalties issued must be set at no less than 5 percent of the violating company’s worldwide turnover. The Omnibus Package proposes removing the 5 percent “floor” for penalty amounts and dismantling several of the CSDDD’s harmonizing features for civil liability, allowing for member states to develop their own structures for addressing violations. These changes would create an enforcement structure that is less uniform across the EU, but potentially more flexible in meeting the needs of individual member states.

Other Frameworks

Taxonomy Reporting

Previously, all entities covered by the CSRD were to include EU Taxonomy disclosures with their CSRD reporting. The Omnibus Package proposes that only companies with more than 1,000 employees and a net EU turnover of more than €450 million will be required to report their alignment with the Taxonomy. The Omnibus Package further proposes a streamlining of Taxonomy reporting requirements, including reducing required data points by close to 70 percent and creating a materiality exemption from alignment reporting for activities that involve less than 10 percent of the firm’s total EU turnover, capital expenditures, or assets.

The Omnibus Package also proposes removing mandatory Taxonomy reporting for companies with more than 1,000 employees but an EU net turnover less than €450 million, and instead encouraging voluntary reporting for these entities. Voluntary reporting is also recommended for companies seeking to claim full or partial alignment with Taxonomy requirements. By lightening the burden of required reporting and adding a voluntary option for a wider range of entities, the Omnibus Package proposal may change the EU Taxonomy from a burden to a tool for companies who seek to highlight the sustainability of their business activities.

Carbon Border Adjustment Mechanism

The Omnibus Package also proposed several changes affecting the EU’s CBAM regulation, beginning with changes in its application timeline. Rollout of requiring CBAM certificates for covered goods would be delayed from 2026 to February 2027, while the schedule for filing annual CBAM declarations would be pushed back from May 31 to August 31. The Omnibus Package also suggests changes in the scope of CBAM, broadening the existing de minimis exemption to apply to all imported goods with an annual net mass of less than 50 tons. This change is in line with the Omnibus Package’s consistent theme of focusing on larger companies and would exclude many smaller entities from CBAM coverage.

The Omnibus Package also proposes relaxing specifications on the method of emissions calculation: whereas the current CBAM allows the use of standard values in place of actual emissions data only under limited circumstances, the Omnibus Package proposes allowing standard values by default. There are also certain sector-specific adjustments to these calculations; for example, entities engaged in electricity importation will now only have to consider carbon dioxide in performing CBAM emissions calculations. Additionally, whereas the current CBAM requires covered entities to directly submit their required reports, the Omnibus Package proposes allowing the entities to authorize third-party services as declarants that can submit reports on their behalf (though the covered entities, not the third parties, remain liable for these reports).

Finally, the Omnibus Package would modify how the CBAM incorporates carbon prices paid by covered entities in other countries. Under the proposal, the European Commission would develop a simplified scheme for declarants to adjust their CBAM certificate obligations by accounting for carbon prices paid in third-party countries. By harmonizing CBAM with other carbon pricing schemes, the Omnibus Package could reduce the net compliance burden on companies while enforcing emissions accountability in a more unified and effective manner.

What Does This Mean for U.S.-Based Companies?

The U.S. sustainability landscape remains dynamic, and, to that end, legislation has recently been proposed to formally curtail the effects of EU regulations on U.S. companies. On March 12, 2025, the PROTECT USA Act of 2025 was introduced in the U.S. Senate, aiming to prohibit certain U.S. entities from complying with non-domestic sustainability diligence regulations such as the CSDDD. Relatedly, on February 25, 2025, officials from 21 states sent a letter to President Donald Trump asking for an investigation into the CSRD, CSDDD, and the European Green Deal, and seeking consideration of the impact of these laws with respect to any federal EU trade initiatives.

Domestic developments notwithstanding, U.S.-based companies that are captured within the scope of the current CSRD and CSDDD should continue preparing for compliance until the Omnibus Package is adopted. Moreover, companies should stay cognizant of the current domestic frameworks that remain in place, such as the California climate disclosure rules, which, although facing a court challenge, are still in effect and require disclosures to be made soon.

We will continue monitoring developments in this space. Please reach out to your Vinson & Elkins team to discuss these matters and their implications for your business.

¹ European Commission, “Commission Simplifies Rules on Sustainability and EU Investments, Delivering over €6 Billion in Administrative Relief” (Feb. 26, 2025), https://ec.europa.eu/commission/presscorner/detail/en/ip_25_614.

² See “Current CSRD” in the table below for descriptions of what makes an entity subject to CSRD reporting.

³ The double materiality standard poses particular challenges for U.S. companies as the focus on external stakeholder impacts is seemingly at odds with traditional notions of financial materiality commonly seen in U.S. securities reporting contexts.