The New EU Reporting Reality: A Guide to the CSRD Threshold Overhaul and the Omnibus I Directive

Fifty thousand companies were preparing to overhaul their data infrastructure for the European Union's Corporate Sustainability Reporting Directive (CSRD). Today, that number is closer to 5,000. With the publication of the Omnibus I Directive (Directive (EU) 2026/470) in the Official Journal, the EU has fundamentally rewritten the rules of global environmental, social, and governance (ESG) reporting. The legislation drastically raises the thresholds for mandatory compliance, effectively removing 90 percent of previously captured businesses from the directive's scope. For corporate boards and compliance officers, the immediate takeaway is a massive reduction in regulatory burden, but the new reality requires a precise understanding of who remains caught in the net.[3][4]

The original CSRD, adopted in 2022, was designed as a universal standard. It captured any large undertaking meeting two of three criteria: 250 employees, €50 million in net turnover, or a €25 million balance sheet total. The Omnibus I Directive discards that "two-of-three" framework. Under the revised rules, an EU company is only in scope if it meets two cumulative thresholds simultaneously: more than 1,000 employees on average during the financial year, and more than €450 million in net annual turnover.[1][3][5]

This threshold increase is not a mere adjustment; it is a structural transformation of the EU's ESG strategy. By raising the employee count requirement fourfold and the revenue requirement ninefold, the European Commission has shifted the compliance burden away from mid-market enterprises and squarely onto ultra-large multinationals. Listed small and medium-sized enterprises (SMEs), which were originally slated to begin reporting later in the decade, have been removed from the mandatory scope entirely.[3][6]

For non-EU companies, particularly those headquartered in the United States or Asia, the jurisdictional triggers have also been recalibrated. Under the original text, a third-country group was captured if it generated €150 million in the EU. The Omnibus I Directive triples that baseline. A non-EU parent company now only falls into scope if it generates more than €450 million in EU net turnover for two consecutive financial years, provided it also has an EU subsidiary or branch generating more than €200 million in annual turnover.[3][5]

The reduction in scope is paired with a severe reduction in the actual reporting workload for those still captured. The European Financial Reporting Advisory Group (EFRAG) has revised the European Sustainability Reporting Standards (ESRS), cutting the number of mandatory datapoints from approximately 1,073 down to roughly 320. This 61 percent reduction eliminates all voluntary datapoints from the mandatory framework, stripping the disclosure requirements down to essential quantitative metrics.[3]

The concept of "double materiality" remains the methodological core of the CSRD. Companies must still assess and report on both how sustainability issues affect their financial performance (financial materiality) and how their operations impact people and the environment (impact materiality). However, the removal of sector-specific standards and the abandonment of a planned upgrade to "reasonable assurance" means that companies will only need to secure "limited assurance" from third-party auditors for their disclosures.[1][3]

A critical mechanism introduced by the Omnibus I Directive is the "value chain cap," designed to protect smaller businesses from the regulatory gravity of their larger partners. Previously, SMEs feared they would be crushed by extensive data requests from in-scope customers needing to map their Scope 3 emissions and supply chain impacts. The new directive explicitly caps the information that reporting companies can demand from value chain partners with fewer than 1,000 employees.[3][5]

Under this protection, smaller suppliers can refuse data requests that exceed the parameters of the Voluntary SME Standard (VSME). The European Commission is finalizing this voluntary standard to serve as a definitive ceiling, ensuring that the reporting burden does not simply trickle down the supply chain to businesses that the Omnibus I Directive explicitly intended to exempt.[3]

The timeline for compliance has also been restructured. The Omnibus I Directive abolishes the complex "wave" system that dictated staggered entry dates. For the roughly 5,000 ultra-large enterprises that meet the new 1,000-employee and €450 million turnover thresholds, the first application of the revised CSRD will cover financial years starting on or after January 1, 2027, with the first reports published in 2028.[3][4]

Companies that were part of the original "Wave 1" (those already subject to the predecessor Non-Financial Reporting Directive) face a unique transitional period. If they fall below the new thresholds, they may be exempted from reporting for the 2025 and 2026 financial years, provided their specific EU member state transposes the exemption into national law. Member states have until March 2027 to fully integrate the CSRD amendments into their domestic legal frameworks.[4][5]

The Omnibus package did not stop at reporting; it also overhauled the Corporate Sustainability Due Diligence Directive (CSDDD). While the CSRD dictates what companies must disclose, the CSDDD dictates how they must actively identify and mitigate human rights and environmental abuses in their supply chains. Like its reporting counterpart, the CSDDD saw its scope drastically narrowed before final implementation.[2][6]

The CSDDD now applies only to companies with more than 5,000 employees and a net worldwide turnover exceeding €1.5 billion. This is a massive leap from the initially proposed threshold of 1,000 employees and €450 million. The directive's application has been delayed until July 2029, giving the largest global corporations an extended runway to map their supply chains and establish grievance mechanisms.[2][6]

Crucially, the Omnibus I revisions stripped the CSDDD of its most controversial enforcement mechanisms. The proposed harmonized EU-wide civil liability regime, which would have allowed victims of supply chain abuses to sue parent companies directly in European courts, was removed. Furthermore, regulatory penalties imposed by national authorities are now strictly capped at three percent of a company's net worldwide turnover.[4][6]

The mandate for companies to adopt and implement a climate transition plan aligned with the Paris Agreement's 1.5°C target was also dropped from the CSDDD's binding requirements. While companies must still report on their climate strategies under the CSRD, the legal liability for failing to execute those transition plans has been neutralized, shifting the enforcement mechanism from legal penalty to market transparency.[2][6]

For the thousands of companies that have suddenly found themselves outside the mandatory scope of both directives, the strategic calculus shifts from compliance to market positioning. While regulatory pressure has evaporated, expectations from institutional investors, asset managers, and major B2B customers have not. Voluntary reporting using the VSME standard will likely become a baseline requirement for securing capital and winning procurement contracts in Europe.[3][8]

The Omnibus I Directive represents a pragmatic recalibration of the European Green Deal. By concentrating regulatory firepower on the absolute largest actors in the global economy, the EU has traded universal coverage for enforceable depth. For the 5,000 companies still in scope, the requirements remain rigorous and the data infrastructure demands remain high. For everyone else, the era of mandatory EU sustainability reporting has ended before it truly began.[3][8]