Skip to content
6 min read

EU Omnibus Package 2026: Simplifying CSRD Reporting for SMEs & Large Companies

Featured Image

Directive (EU) 2026/470, the "Omnibus I" directive, was published in the Official Journal on 26 February 2026 and has been in force since 18 March 2026. It is settled law, not a proposal, and it amends the CSRD, the Accounting Directive and the CSDDD in a single act. Legal status reviewed on 4 September 2026.

What Directive (EU) 2026/470 Actually Changed

The directive redraws the scope of sustainability reporting rather than postponing it. Around 80 per cent of the companies previously covered by the CSRD fall outside the directive altogether, the wave structure that shaped every implementation plan written before 2026 is gone, and sector-specific ESRS are dropped from the standard set. The adopted text is on EUR-Lex; the revised standards themselves come from EFRAG.

MilestoneDate
Commission proposal, Omnibus I2025
Adopted by European Parliament and CouncilFebruary 2026
Published in the Official Journal26 February 2026
Entry into force18 March 2026
First CSRD financial years under the new scopefrom 1 January 2027

Limited assurance stays. What shrinks is the volume of what gets assured: fewer datapoints, no sector standards, and the Commission still has to adopt the limited assurance standard.

The practical effect is easiest to see in a company that had already started. An automotive supplier with 400 employees in southern Germany had a double materiality analysis, a Scope 1 and 2 inventory and a draft ESRS datapoint list finished by the end of 2025. It is now out of scope, and none of that work is legally required. It is also the only structured environmental dataset the company owns.

Who Must Still Report: Thresholds, Dates and Who Falls Out

Company typeWhat applies
EU companiesMore than 1,000 employees and more than 450 million euro net turnover, cumulatively. Financial years from 1 January 2027, first reports in 2028.
Listed SMEsFully exempt.
Non-EU companies200 million euro turnover of the EU branch or subsidiary, plus 450 million euro EU-wide turnover.
Fewer than 1,000 employeesNo reporting obligation. In the value chain, no more can be demanded than the Voluntary Standard, built on the VSME, provides, apart from other EU legal obligations such as the EUDR and the requesting company's own risk management.

Who actually dropped out is worth a number. In my own corpus of 1,401 extracted European sustainability reports, only about one in eight comes from a company with fewer than 1,000 employees. The reporting population was already concentrated at the top. What the directive mainly cancelled was not published reporting practice but the preparation work of companies that had not published yet.

CSDDD: The Due Diligence Changes in the Same Package

The same directive scales the Corporate Sustainability Due Diligence Directive back. Due diligence starts at more than 5,000 employees and more than 1.5 billion euro worldwide net turnover, and for non-EU companies at more than 1.5 billion euro of EU turnover. Member states transpose by 26 July 2028, the rules apply from 26 July 2029, and website disclosure begins with financial years starting 1 January 2030.

Two changes weigh more than the thresholds. Article 22, the obligation to adopt a climate transition plan, is deleted. And member states may not go beyond the directive when they transpose it, so the national-law surprises many companies had budgeted for will not arrive.

The obligation is risk-based rather than exhaustive: due diligence follows where the risk sits, not down every tier of every supplier list. For a mid-sized supplier that changes the source of the pressure without removing it. It now comes from fewer and larger customers, and it arrives through contracts rather than through law.

What the Simplification Saves, and What Is Worth Keeping Anyway

The relief is structural: no sector standards, a reduced datapoint set, assurance limited in both level and volume, and for most previously covered companies no report at all. What disappears is less the report than the machinery around it, data collection across entities, assurance fees, and the internal time to run both.

CSRD compliance is not sustainability. Compliance-first programmes produce conforming reports on thin data, and the real value of sustainability data sits in internal steering. That use case did not change on 18 March 2026. Energy consumption, Scope 1 and 2 emissions, waste and water feed cost decisions, not only disclosures.

There is a second reason to keep measuring. The Voluntary Standard uses a basic module, B1 to B11, that most CSRD preparation work already covers, so carrying data over is a mapping exercise rather than a new data model. The comprehensive module, C1 to C9, is where extra effort would sit, and it is optional.

Five Steps for the 2026 Reporting Cycle

  1. Run the scope test. More than 1,000 employees and more than 450 million euro net turnover, both at once, for financial years from 2027. If one leg fails, the CSRD does not apply.
  2. Retire what you no longer owe. Sector-specific ESRS preparation and datapoints outside the reduced set can be stopped now instead of maintained in case.
  3. Separate report data from steering data. Decide which figures you collected for a disclosure and which ones you actually use to run the business.
  4. Map the remainder onto the Voluntary Standard. The basic module is the cheapest home for data that already exists.
  5. Fix your position in someone else's value chain. Know what a customer may lawfully request from you and where you can decline, before the next questionnaire arrives.

FAQ

Is Omnibus I now law, and from which date does it apply?

Directive (EU) 2026/470 was published in the Official Journal on 26 February 2026 and entered into force on 18 March 2026. The CSRD scope it sets applies to financial years starting on or after 1 January 2027, with the first reports due in 2028.

By when must member states transpose it into national law?

For the due diligence part, the transposition deadline is 26 July 2028 and the rules apply from 26 July 2029. The CSRD thresholds apply to financial years from 1 January 2027 in any case, and member states may exempt companies leaving the scope for the 2025 and 2026 financial years.

Does limited assurance still apply, and to whom?

Yes, for the companies still in scope. Limited assurance remains the required level and the directive does not step up to reasonable assurance. The Commission still has to adopt the limited assurance standard.

What happens to companies that already prepared for the CSRD but now fall below the threshold?

The legal obligation ends, the data does not have to be discarded. The basic module of the Voluntary Standard covers most of what a CSRD preparation project collected, and value chain requests from large customers are capped at that level. Where to start is covered in my guide to implementing ESG criteria.

Johannes Fiegenbaum

Johannes Fiegenbaum

ESG and sustainability consultant based in Hamburg, specialised in VSME reporting and climate risk analysis. Has supported 300+ projects for companies and financial institutions, from mid-sized manufacturers to major banks and insurers.

More about