The most important points in brief:
In 2026, the Supply Chain Due Diligence Act the central regulatory foundation for all companies with at least 1,000 employees. The ongoing implementation of the EU Directive (CSDDD) significantly tightens liability rules and makes climate protection goals an integral part of due diligence obligations. Companies wishing to avoid penalties of up to 2% of global revenue must switch from manual lists to AI-powered risk analyses now.
Key Facts on the Supply Chain Act 2026
- Scope: Companies with headquarters or a branch in Germany and at least 1,000 employees.
- Core obligations: risk analysis, appointing a representative, complaints procedure, and documentation.
- Update 2026: Focus on EU CSDDD Implementation (Climate Protection Plans & Civil Liability).
- Sanctions: Fines of up to €8 million or exclusion from public contracts.
- Regulatory authority: Federal Office for Economic Affairs and Export Control (BAFA).
1. Definition: What is the Supply Chain Act?
The aim of the law is to improve the protection of fundamental human rights—such as the prohibition of child labour and forced labour—as well as environmental protection along the entire global value chain. In doing so, companies must ensure that no violations of these standards occur, not only within their own business operations but also among their direct (and in certain circumstances indirect) suppliers.
2. Status Quo 2026: Who is affected?
Since January 2024, the limit of 1,000 employees has applied. In 2026, BAFA's auditing practice has noticeably intensified.
„Responsibility does not end at one's own factory gate, but is the foundation of a just global economic order.“
Important for SMEs: Even if you employ fewer than 1,000 people, the law indirectly requires you to act. Large contracting partners will demand complete proof of working conditions and environmental standards in 2026. Without this „compliance capability“, SMEs risk losing their market position.
3. The 9 Core Obligations at a Glance
The law requires a systematic effort („duty of care“) in these areas:
- Risk managementIntegrating due diligence into all business processes.
- Responsible Person: Clear internal responsibility (Human Rights Officer).
- Risk analysis: Annual screening of own works and direct suppliers.
- Policy Statement: A Public Commitment by Management.
- Prevention: Training of purchasing teams and adjustment of contracts.
- Corrective actions: Drafting of corrective action plans for identified violations.
- Complaints procedure: A secure channel for whistleblowers worldwide.
- Indirect suppliers: Acting on reasonable suspicion (substantive knowledge).
- Documentation: Annual record of all measures (for 7 years).
Would you like a brief consultation on this?
4. LkSG vs. CSDDD: The Great Transformation 2026
The EU Directive (CSDDD) will be gradually integrated into German law in 2026.
- Civil liability: In future, injured parties will be able to sue for damages directly before EU courts.
- Upstream & Downstream: The focus expands beyond direct suppliers to include parts of the value chain.
5. Deep Dive: Climate Transition Plan & Liability Risks
A key focus in 2026 will be the Climate Transition Plan. Companies will need to demonstrate that their business model is compatible with the 1.5-degree target of the Paris Agreement. In 2026, missing or inadequate plans will not only lead to fines but, due to CSDDD requirements, will significantly increase the risk of civil lawsuits by NGOs or affected groups.
6. Practical example: Implementation at „TechCore GmbH“
TechCore GmbH (1,200 employees, electronics) shows how compliance will work in 2026:
- Scenario: An AI monitoring tool reports suspected wage theft by a Tier 2 supplier in Southeast Asia.
- Measure: As „substantial knowledge“ exists, TechCore is initiating a risk analysis and developing a corrective action plan with the Tier 1 supplier.
- Result: The shortcomings will be rectified, TechCore will document the success for the BAFA, thereby securing its status as a „Preferred Supplier“ with large clients.
7. Strategic Risk Analysis: Practical Tips for Implementation
To meet the E-E-A-T (Expertise, Experience, Authoritativeness, Trustworthiness) claims, pioneers rely on:
- AI automation: Use software that compares supplier data with global news databases in real time.
- Supplier enablement: Support suppliers through training, rather than just applying pressure.
- Transparency: Actively use your compliance successes for your ESG communications.
„Transparency is no longer an optional extra in the modern trading world, but rather the prerequisite for trust and market access.“
8. How to safely avoid sanctions and liability risks
Failures in handling the LkSG will be costly in 2026:
- Fines: Up to 2% of global annual turnover for serious infringements.
- Procurement freeze: exclusion of public contracts for up to three years.
- Rating effects: ESG scores fall on violations, increasing the cost of capital for new loans.
9. Conclusion: The Supply Chain Act as a Strategic Competitive Advantage
The Supply Chain Due Diligence Act By 2026, it will have evolved from a bureaucratic burden to a genuine quality feature for resilient companies. Those who proactively create transparency today not only minimise their liability risks but also strengthen their brand and secure long-term access to sustainably oriented capital markets. In 2026, it will no longer be solely about „no harm done,“ but about understanding the supply chain as a strategic asset for global transformation. Companies that embody this due diligence as part of their DNA will position themselves as market leaders in an economy where ethics and profitability are inextricably intertwined.
10. FAQ: Frequently Asked Questions about the Supply Chain Due Diligence Act
Does the LkSG also apply to pure services?
Yes. The law does not differentiate between goods and services. IT outsourcing or logistics services must also be examined.
Must the LkSG report be accessible to everyone?
Yes. The report must be made freely available on the company website for at least seven years, no later than four months after the end of the financial year.
Können NGOs Unternehmen verklagen?
With the integration of the EU-CSDDD in 2026, civil litigation for qualified groups will become a reality before European courts.
What happens if a supplier refuses to cooperate?
You must demonstrate that you have made all reasonable efforts (warning, support). As a last resort, termination of the business relationship may be necessary.