● Explainer
By Environment+Energy Leader Editorial Staff · Updated July 2026
Definition
Corporate Sustainability Disclosure
Corporate sustainability disclosure refers to the laws, regulations, and standards requiring companies to publicly report sustainability-related information — most commonly greenhouse gas emissions and climate-related financial risk, and under some regimes social, workforce, biodiversity, and governance matters. In 2026, no single rule covers everyone: what a company must disclose depends on where it operates, how large it is, and who buys from it.
In This Explainer
Executive takeaway · The sixty-second version · The 2026 disclosure map · The SEC rule · California · Other states · The EU after Omnibus · The ISSB bloc · Voluntary regimes · What to do in practice · Underplayed risks · Readiness checklist · FAQ · Glossary
Sustainability Disclosure in 2026: The Executive Takeaway
The U.S. federal climate disclosure rule is functionally dead — never enforced, and now formally proposed for rescission. That does not mean disclosure obligations disappeared. For most large companies, the binding requirements now come from three directions: California state law, the European Union's narrowed but very much alive CSRD, and a growing bloc of countries that have adopted the ISSB's global baseline standards.
The mistake to avoid is treating regulatory retreat in Washington as permission to dismantle emissions accounting. The data infrastructure built for one regime is largely what every other regime demands — and what large customers increasingly require by contract. Disclosure pressure is consolidating, not disappearing.
Two years ago, the question was how to comply with everything arriving at once: a sweeping SEC mandate, a broader European directive, California legislation, and a new set of international standards. The problem was volume. The problem in 2026 is subtraction — the SEC rule is being rescinded, the EU cut most companies out of its regime, and one of California's two laws is enjoined while the other advances toward a deadline that has moved twice this year.
This explainer is for the sustainability lead who needs to tell a CFO, accurately and without hedging into uselessness, what the company is actually required to disclose, to whom, and by when. Anyone working from a 2024 compliance memo is planning against a map that no longer describes the territory.
It focuses on the cross-sector regimes with the broadest reach. Sector-specific, product-level, and voluntary-carbon-market disclosure requirements — California's AB 1305 claims and offset disclosures, EU Taxonomy reporting, and industry-specific rules — are outside its scope.
Sustainability disclosure covers two distinct kinds of reporting, often run through one program but demanding different systems. Emissions accounting means measuring and reporting greenhouse gases as Scope 1 (direct), Scope 2 (purchased energy), and Scope 3 (value chain) under the GHG Protocol. Climate-risk narrative disclosure means describing how climate change could affect the business financially and how management governs that risk, in the four-pillar structure — governance, strategy, risk management, metrics and targets — inherited from the TCFD.
Nearly every regime below combines those two building blocks, applied to companies above a revenue or headcount threshold on a particular timeline. California split them into two laws; the EU merged them — and added social and governance topics — into one directive; the ISSB standardized the risk narrative and made emissions a required metric within it. Our Scope 3 explainer covers the emissions half in depth.
The whole landscape in one table, current as of late July 2026. Every row is expanded in its own section below.
Major Corporate Sustainability Disclosure Regimes at a Glance
| Regime | Who's Covered | What's Required | First Reports | Status |
|---|---|---|---|---|
| SEC Climate Rule (U.S. federal) | Virtually all U.S. public companies | Climate risk + Scope 1 & 2 if material | Never took effect | Rescission proposed |
| California SB 253 | U.S. entities, >$1B revenue, doing business in CA | Scope 1 & 2 emissions (Scope 3 from 2027) | Nov. 10, 2026 (proposed deferral) | In effect |
| California SB 261 | U.S. entities, >$500M revenue, doing business in CA | Biennial climate-risk report (TCFD-style) | Was Jan. 1, 2026; new date TBD | Enjoined, pending appeal |
| New York CCDAA | >$1B revenue, doing business in NY | Scope 1, 2 & 3 emissions | 2027 (if enacted) | Passed Senate; not law |
| EU CSRD (post-Omnibus) | >1,000 employees + >€450M turnover; large non-EU groups | Full sustainability reporting (ESRS, double materiality) | Underway; new scope from FY2027 | In effect, narrowed |
| ISSB bloc (IFRS S1/S2) | Varies by country; typically listed/large entities | Climate-risk disclosure + GHG emissions | Phasing in 2025–2028 | Expanding |
| Voluntary (CDP, SBTi, customer mandates) | Anyone in a large company's supply chain | Emissions data, targets, questionnaires | Ongoing | Growing |
The short version: the federal climate disclosure rule for public companies was adopted in March 2024, immediately challenged in court, stayed by the SEC itself a month later, and never enforced against a single company. In May 2026, the Commission formally proposed rescinding it in its entirety.
The procedural history matters mainly because it explains why the rule can't simply spring back to life. Challenges from states and business groups were consolidated in the Eighth Circuit as Iowa v. SEC; the Commission stayed the rule in April 2024, voted in March 2025 to stop defending it, and the court then held the case pending the agency's reconsideration. On May 29, 2026, the Commission voted to propose complete rescission, arguing the rule exceeded its statutory authority and departed from its traditional materiality-based framework. The proposal was published in the Federal Register on June 3, 2026, opening a 60-day comment period that closes August 3, 2026. A final vote is expected later in the year.
Three practical points. Nothing about the rescission changes the SEC's long-standing 2010 guidance that climate matters must be disclosed when material under existing securities law — materiality-based disclosure in 10-Ks was never contingent on the 2024 rule. The rescission removes a federal floor, not the state and international regimes described below; for many large U.S. companies, the binding obligations were never going to be federal anyway. And notice-and-comment rulemaking is a process, not a formality: the agency must respond to significant comments, and litigation over the rescission itself is possible. The rule is functionally dead; it is not yet formally buried.
With the federal rule dying, California's 2023 Climate Accountability Package is the most consequential U.S. corporate climate-disclosure regime still in play: SB 253 remains in effect, while SB 261 is temporarily enjoined pending appeal. Both apply to companies "doing business in California" above revenue thresholds, regardless of where the company is headquartered and regardless of whether it is publicly traded. That last part deserves emphasis: thousands of private companies are in scope, many of which have never produced an emissions inventory.
The Climate Corporate Data Accountability Act covers U.S.-organized entities with more than $1 billion in annual revenue that do business in California. It requires annual disclosure of Scope 1 and Scope 2 greenhouse gas emissions beginning in 2026, with Scope 3 value-chain emissions added in 2027, reported in conformance with the GHG Protocol. The California Air Resources Board (CARB) approved its initial implementing regulation on February 26, 2026 — then withdrew it from final administrative review in June to make limited clarifying changes. Alongside that withdrawal, CARB announced on June 24, 2026 that it intends to defer the first reporting deadline from August 10 to November 10, 2026. Treat November 10 as the working target rather than a settled date: the deferral still has to clear a 15-day comment period and Office of Administrative Law approval, and the substance of the obligation — the threshold, the GHG Protocol methodology, the 2027 Scope 3 start — has not changed.
CARB has kept moving in the meantime. At a public workshop on July 21, 2026, staff confirmed the agency is working to issue its revised proposal in time for the November 10 deadline, and committed to publishing additional 2026 reporting guidance by September 1 — including a voluntary online intake platform, a guidance document, and instructional materials — with sector-specific listening sessions running from August 5 through September 9.
The same workshop previewed a separate rulemaking for the 2027 reporting year, and the staff presentation is worth reading early. Staff proposed phasing in Scope 3 with five required categories — purchased goods and services, fuel- and energy-related activities, waste generated in operations, business travel, and employee commuting — leaving the remaining ten GHG Protocol categories voluntary for now. Staff also proposed limited third-party assurance requirements for Scope 1 and 2 beginning with reports submitted in 2027, and emphasized interoperability with IFRS S2 and the CSRD as a design goal.
CARB has signaled a good-faith enforcement posture for the first reporting cycle, and first-year reports cover the prior fiscal year — meaning the emissions data in question is largely already historical. Companies waiting for perfect regulatory clarity before starting their inventory are, at this point, waiting to be late; our Industry Voices contributors have made the practical case for continuing to prepare through the pause.
The Climate-Related Financial Risk Act covers a wider set of companies — more than $500 million in revenue, doing business in California — and requires a biennial, publicly posted report on climate-related financial risk in the familiar TCFD-style structure. Its first deadline was January 1, 2026. That deadline never bit: on November 18, 2025, the Ninth Circuit granted an injunction blocking enforcement of SB 261 (and only SB 261) while it hears a First Amendment challenge brought by a coalition led by the U.S. Chamber of Commerce. CARB responded with an enforcement advisory confirming it will not penalize companies that missed the statutory deadline while the injunction stands, opened a voluntary submission docket, and committed to setting an alternate reporting date once the appeal resolves.
The Ninth Circuit heard oral argument on the consolidated challenge to both laws on January 9, 2026. As of this writing, no decision has issued. The panel's earlier choice to enjoin only SB 261 is widely read as signaling that the court sees stronger compelled-speech concerns in SB 261's narrative-style disclosures than in SB 253's data-driven reporting — but reading injunction tea leaves is not legal advice, and the eventual ruling could touch both laws. This is the single most important pending decision in U.S. corporate sustainability disclosure. When it lands, this page will be updated.
New York is furthest along. Its Climate Corporate Data Accountability Act — modeled on SB 253, down to the name — passed the State Senate 40–22 on February 10, 2026 and now sits with the Assembly Codes Committee. As passed, it would cover companies with more than $1 billion in revenue doing business in New York, require Scope 1 and 2 reporting in 2027 and Scope 3 in 2028, and allow companies to satisfy it with reports prepared for other jurisdictions using ISSB-aligned standards. It is not law: it needs Assembly passage and the Governor's signature, and if enacted should be expected to draw the same constitutional challenge California is now defending.
Similar emissions-disclosure proposals have been introduced in New Jersey and other states, most in early legislative stages. One clarification worth making, because the two get conflated: state climate superfund laws — like those enacted in New York and Vermont, which seek retroactive damages from fossil fuel producers — are liability statutes, not disclosure statutes. They are being litigated on entirely different grounds and do not create reporting obligations for the broad corporate population this explainer addresses.
The strategic picture: if California's laws survive the Ninth Circuit, other states would have a clearer path for pursuing similar disclosure mandates, and companies should plan for a patchwork that rewards a single, consistent reporting backbone. If California loses on First Amendment grounds, the ruling could significantly complicate similar state proposals and shift more of the disclosure burden toward international and customer-driven regimes.
For a year, the most common question about the EU's Corporate Sustainability Reporting Directive was whether it was still happening. It now has a definitive answer. The Omnibus I Directive — amending both the CSRD and the Corporate Sustainability Due Diligence Directive — was published in the Official Journal on February 26, 2026 as Directive (EU) 2026/470 and entered into force on March 18, 2026. The CSRD survived; it just covers far fewer companies than originally planned.
The new scope removed the large majority of previously covered companies: only large undertakings with more than 1,000 employees and net annual turnover above €450 million are required to report. Listed small and mid-size companies — the original "wave 3" — are out entirely. For non-EU parent companies, including U.S. multinationals, the trigger is now €450 million of net turnover generated in the EU for two consecutive years, plus an EU subsidiary or a branch with more than €200 million in net turnover. The amended thresholds apply to financial years starting January 1, 2027, with first reports under the new scope due in 2028.
The transition is awkward for one group: the original "wave 1" companies that have been reporting since the 2024 financial year but fall below the new thresholds. Omnibus lets member states exempt them for financial years beginning in 2025 and 2026; where a member state doesn't act, they keep reporting until the new scope takes effect, with a separate "quick fix" measure lightening what they must disclose in the meantime. Companies that fall out of scope entirely can report voluntarily under a simplified small-company standard (the VSME) — which matters because, as we'll see below, being legally out of scope does not mean being left alone.
Two features still distinguish the CSRD from everything else here. It is built on double materiality — companies report both how sustainability issues affect the business and how the business affects people and the environment — where every other major regime asks only the first question. And it extends well beyond climate into biodiversity, workforce, value-chain social standards, governance, and physical climate risks such as worker heat exposure under ESRS E1. Even narrowed, it remains the most demanding disclosure regime in force anywhere.
While the U.S. rule was being litigated to death and the EU was renegotiating its own, the International Sustainability Standards Board's two standards — IFRS S1 (general sustainability-related financial disclosure) and IFRS S2 (climate) — have emerged as the leading global baseline outside the EU. As of April 22, 2026, 28 jurisdictions had adopted the standards on a voluntary or mandatory basis, with another 12 planning adoption.
The headline adoptions: Australia mandated climate-related financial disclosure for large entities under 2024 legislation, and the first group's reports — covering financial years beginning January 1, 2025 — have now been lodged. Japan's Financial Services Agency finalized its framework in February 2026, requiring SSBJ-based sustainability disclosures from large Prime Market-listed companies, phased in by market capitalization; the SSBJ standards are substantially aligned with the ISSB's. The UK finalized its ISSB-based UK SRS S1 and S2 in February 2026; the standards are currently voluntary while the Financial Conduct Authority considers mandatory UK SRS-based requirements for listed companies. Canada is the notable exception — its securities regulators paused work on a broad mandatory climate rule, leaving the Canadian standards voluntary for now. Brazil, Singapore, Hong Kong, Malaysia, South Korea, and others have mandates phasing in between 2025 and 2028.
Why a U.S. reader should care: the ISSB standards require Scope 1, 2, and 3 emissions disclosure and TCFD-style risk reporting — the same building blocks as everything else — and they are increasingly the interoperability layer between regimes. New York's pending bill explicitly accepts ISSB-aligned reports, the EU has published ESRS–ISSB interoperability guidance, and CARB cited interoperability with IFRS S2 as a design goal for its 2027 rules. For multinational companies seeking a common internal reporting backbone, ISSB alignment currently offers the broadest interoperability across major regimes.
If your company falls below every threshold in the table above, you may still face the most persistent disclosure demands of all — the ones that arrive as customer requirements. Large companies with science-based targets or CSRD obligations need value-chain emissions data, and they get it by requiring suppliers to complete CDP questionnaires, respond to procurement-platform data requests, or commit to targets of their own as a condition of contract renewal. No statute compels any of it, and none of it is optional in practice — increasingly, these expectations are written into procurement terms and supplier governance, where sustainability data becomes contractually binding regardless of whether a disclosure law applies.
This is the trickle-down dynamic covered in our Scope 3 explainer: every regulated company's Scope 3 obligation becomes its suppliers' de facto Scope 1 and 2 reporting requirement. The EU's Omnibus reforms added a partial shield — companies below 1,000 employees generally can't be asked for more than the voluntary small-company standard requires — but that cap governs what CSRD reporters may demand for compliance purposes, not what a customer may write into a commercial contract. The practical consequence: mid-market companies that will never appear in a regulator's database are building emissions inventories anyway, because their three biggest customers asked in the same quarter.
The large U.S. multinational (over $1 billion revenue, EU and Asia-Pacific operations) is in scope for California SB 253 now, likely SB 261 once the litigation resolves, the post-Omnibus CSRD if its EU footprint clears the €450 million/€200 million tests, and ISSB-based mandates wherever it has listed entities. The rational response is one consolidated, GHG Protocol-based inventory and one ISSB-aligned risk narrative, mapped once to each regime's specific requirements. Running separate processes per jurisdiction is how reporting budgets triple.
The U.S. private company above $1 billion is the profile most likely to be caught off guard. No SEC obligation ever applied, but SB 253 does — "doing business in California" is a low bar that reaches companies with no California headquarters, offices, or particular affection for the state. First reports cover historical fiscal-year data, and the working deadline is November 10, 2026. A company in this profile that has not started a Scope 1 and 2 inventory is behind, full stop.
The mid-market company below every threshold has no mandatory obligations — and a growing stack of customer questionnaires. The right-sized response is a defensible Scope 1 and 2 inventory, a considered position on targets, and the EU's voluntary small-company standard as a ceiling on what to provide, rather than answering every bespoke request from scratch. Disclosure here is a commercial capability, not a compliance function.
Data debt. Every regime in this explainer reports on the prior fiscal year. A deadline deferred by three months does not defer the reporting period by three months — the emissions already happened. Companies that treat deadline extensions as permission to pause data collection are converting a process problem into an evidence problem.
Assurance is the sleeper cost. California, the CSRD, and most ISSB-bloc mandates phase in third-party assurance, moving over time from limited to reasonable assurance — and CARB's July 2026 proposal calls for limited assurance of Scope 1 and 2 beginning with 2027 reports. Assurance-ready means documented methodologies, controls, and audit trails, a substantially higher bar than producing a number, and a significant source of first-cycle cost and implementation complexity.
Inaccurate or inconsistent public claims. Mandates are in flux; accuracy obligations are not. Environmental marketing claims remain subject to ordinary advertising, consumer-protection, and securities laws, while state and private climate-related litigation continues — and the gap between stated commitments and documented performance now carries governance exposure that did not exist five years ago. Marketing claims, investor materials, and regulatory filings drifting out of alignment with each other is a live risk: saying less is a defensible posture; saying inaccurate things never was.
Capability attrition. Some companies are reading federal retreat as a reason to wind down reporting capability. California deadlines are live, in-scope EU obligations continue, and customer data requests keep arriving on their own schedule — capability that takes two years to rebuild is worth more than the federal signal alone suggests.
✓ Run the scoping tests: California's revenue and "doing business" thresholds, the CSRD's post-Omnibus employee/turnover tests for your EU footprint, and ISSB-bloc mandates for every jurisdiction where you have listed or large entities.
✓ Confirm which fiscal year your first report in each regime covers — the reporting period, not the deadline, drives your data timeline.
✓ Build one GHG Protocol-based inventory as the master dataset; map it outward to each regime rather than building per-regime processes.
✓ For risk-narrative disclosure, consider ISSB alignment as the internal backbone; it currently offers the broadest interoperability across major regimes.
✓ Document methodology and controls as if assurance applied today, even where it doesn't yet.
✓ Assign someone to track four dates: the SEC's final rescission vote, the Ninth Circuit's decision, OAL approval of CARB's revised regulation, and New York Assembly action.
✓ Review public climate statements — marketing included — against what your data can actually support. Mandates are in flux; accuracy obligations are not.
Is the SEC climate disclosure rule dead?
Functionally, yes; formally, almost. The rule was stayed in April 2024 and never enforced. The SEC proposed rescinding it entirely on May 29, 2026, the public comment period closes August 3, 2026, and a final rescission vote is expected later in the year. Materiality-based climate disclosure under ordinary securities law, including the SEC's 2010 guidance, is unaffected.
Do California's laws apply to companies headquartered outside California?
Yes. Both laws apply to U.S. entities that meet the revenue threshold and are "doing business in California" — a test based on transacting for financial gain in the state, not on headquarters location. Private companies are covered alongside public ones.
What's the difference between SB 253 and SB 261?
SB 253 is emissions accounting: annual Scope 1 and 2 reports (Scope 3 from 2027) for companies over $1 billion in revenue, currently in effect with a working first deadline of November 10, 2026. SB 261 is narrative climate-risk reporting: a biennial TCFD-style report for companies over $500 million, currently enjoined by the Ninth Circuit with a replacement deadline to be set after the appeal resolves.
Did the EU cancel the CSRD?
No — it narrowed it. The Omnibus I Directive, in force since March 18, 2026, raised the scope to companies with more than 1,000 employees and €450 million in turnover, removed listed SMEs entirely, and simplified the reporting standards. The companies that remain in scope still face the most comprehensive disclosure regime in the world, including double materiality.
What is the ISSB, and do its standards apply to U.S. companies?
The International Sustainability Standards Board publishes IFRS S1 and S2, global baseline standards for sustainability and climate disclosure. They bind companies only where a jurisdiction adopts them — 28 had done so as of April 2026 — and the U.S. has not. U.S. companies encounter them through foreign listed subsidiaries, foreign operations, and counterparties that report against them.
What does "double materiality" mean?
It means reporting in both directions: how sustainability issues financially affect the company (financial materiality) and how the company's activities affect people and the environment (impact materiality). The CSRD requires both. The SEC's approach, California's laws, and the ISSB standards are built on financial materiality or defined data requirements only.
If no mandate applies to my company, why are we still being asked for emissions data?
Because your customers have obligations. Companies subject to Scope 3 reporting or holding science-based targets need supplier data, and they collect it through CDP questionnaires, procurement platforms, and contract terms. These requests carry no statutory penalty and considerable commercial weight.
What happens if the Ninth Circuit strikes down California's laws?
It depends on the scope of the ruling. A decision against SB 261 alone would leave emissions reporting under SB 253 in place. A broad First Amendment ruling against both could significantly complicate similar state proposals — while leaving the CSRD, the ISSB bloc, and customer-driven demands untouched. Further appeal, including a petition to the Supreme Court, would be likely in either direction.
Can one report satisfy multiple regimes?
Increasingly, yes — by design. The regimes share the GHG Protocol for emissions and the TCFD architecture for risk narrative, the EU has published ESRS–ISSB interoperability guidance, and New York's pending bill would accept ISSB-aligned reports outright. One well-documented master dataset, mapped to each regime's specifics, is the standard approach; a literal single document usually is not.
What should a company do right now, in mid-2026?
Scope yourself against California, the post-Omnibus CSRD, and applicable ISSB-bloc mandates; keep building the emissions inventory regardless of deadline movement, because reports cover historical periods; document for future assurance; and track the four pending decision points — the SEC's final vote, the Ninth Circuit ruling, CARB's revised regulation, and New York — rather than reacting to each headline.
Sources and methodology: This explainer draws on primary sources including the SEC's proposed rescission release and Federal Register publication, California Air Resources Board regulatory announcements and enforcement advisories, the Omnibus I Directive as published in the Official Journal of the European Union, Ninth Circuit filings in Chamber of Commerce v. Sanchez, CARB's July 21, 2026 staff workshop presentation, the New York State Senate's passed text of S9072A, and ISSB jurisdictional adoption trackers. Status statements reflect the regulatory landscape as of late July 2026. Environment+Energy Leader has covered corporate sustainability and environmental compliance since 2007. This explainer is updated periodically to reflect regulatory, legislative, and litigation developments — several of which are pending as of the last review. Last reviewed: July 23, 2026.
