JULY 17, 2026

Legal ESG — 2026-07-17

This week's ESG story is about the accelerating divergence between simplification and enforcement — and the compliance gap that opens in between. The EU finalized its Omnibus I simplification package, with revised ESRS cutting mandatory data points by more than 60% and total data points by more than 70%, reducing per-company reporting costs by an estimated 30%. France simultaneously had two Paris Judicial Court rulings in the same week — Volvic ordered to pay €75,000 for "carbon neutral" and "100% recycled" claims, TotalEnergies ordered to include Scope 3 emissions in its vigilance plan risk mapping — demonstrating that simplification of the standard-setting layer is running in parallel with, not instead of, a sharpening enforcement layer. In the US, California pushed its SB 253 Scope 1/2 reporting deadline three months to November 10, while New York imposed an immediate statewide moratorium on data centers above 50 megawatts and CBP's 79-page forced labor guidance formally expanded UFLPA, CAATSA, and §1307 enforcement into a unified operational framework covering 69,415 shipments and $3.94 billion in forced labor actions since 2022. For ESG practice leaders and sustainability counsel advising clients this week, the operational lesson is consistent: the governance and disclosure frameworks are simplifying just as the enforcement intensity is increasing.

Regulation & Disclosure

EU Adopts Revised ESRS — 70% Data Point Reduction, 30% Cost Savings, Voluntary Standard for Smaller Companies

On July 3, 2026, the European Commission adopted the revised European Sustainability Reporting Standards and a parallel voluntary standard for companies outside the CSRD's scope. The revised ESRS reduces mandatory data points by over 60%, total data points (including voluntary) by over 70%, and is projected to reduce per-company reporting costs by over 30%. Wave 1 companies — those with more than 1,000 employees and over €450 million in turnover — may choose to adopt the simplified standards, continue reporting under the existing ESRS, or apply a hybrid approach during the transition period. Critically, the voluntary standard introduces a "value-chain cap" preventing CSRD-in-scope companies from requiring value-chain partners (suppliers, customers) to provide information beyond what the voluntary standard covers — a provision directly relevant to the large number of mid-sized firms currently receiving CSRD-driven questionnaires from their larger clients. Both the revised ESRS and the voluntary standard are now in a two-month Parliamentary and Council scrutiny period (extendable by two further months) before entering into force. For sustainability counsel advising in-scope clients, the transition period option is material: firms that have invested in full-ESRS reporting infrastructure may elect to continue under the original standards rather than restructuring their reporting approach mid-cycle.

Source: Simpson Thacher ESG Regulatory Update — July 2026 · Jones Day Trending Now in ESG: EU Commission Adopts Revised ESRS · ESG Book Policy Digest — July 2026

EU Adopts Revised ESRS: 70% Data Point Reduction, 30% Cost Savings — Value-Chain Cap Protects Supplier Reporting from Upstream Demands — Regulation & Disclosure

Simpson Thacher ↗ · article: articles/2026-07-17-esrs-revised-omnibus.md · tags: Legal ESG, Legal Risk, Legal Operations

California SB 253 Scope 1/2 Deadline Pushed to November 10 — CARB Workshop July 21 on Scope 3 Architecture

The California Air Resources Board announced on June 24 a three-month delay to the initial reporting deadline under SB 253, the Climate Corporate Data Accountability Act. The deadline for in-scope entities to report Scope 1 and Scope 2 GHG emissions relating to 2025 shifts from August 10, 2026 to November 10, 2026, with CARB stating that limited regulatory changes are intended. Scope 3 reporting remains on its existing track to begin in 2027. CARB is holding a virtual public workshop on July 21 to discuss regulatory concepts for Scope 1 and Scope 2 reporting requirements for 2027 and beyond, including data assurance methodology and CARB's proposed approach to Scope 3 emissions reporting. For sustainability counsel advising in-scope companies — those with revenues over $1 billion operating in California — the three-month delay is a compliance reprieve and a data quality opportunity: the period through November 10 should be used to audit GHG data collection systems, finalize boundary decisions, and stress-test Scope 1/2 inventories against the verification standards CARB is expected to propose. The July 21 workshop is the primary signal channel for what Scope 3 architecture will look like in practice.

Source: Simpson Thacher ESG Regulatory Update — July 2026

California SB 253: Scope 1/2 Deadline Extended to November 10 — CARB Workshop July 21 Sets the Stage for Scope 3 Architecture — Regulation & Disclosure

Simpson Thacher ↗ · article: articles/2026-07-17-california-sb253-delay.md · tags: Legal ESG, Legal Risk, Legal Operations

South Korea Finalizes Mandatory ESG Disclosure Roadmap — KRW10 Trillion Threshold from 2028, Safe Harbor for Three Years

South Korea's Financial Services Commission published the final roadmap for mandatory sustainability disclosure on July 8. The requirement applies first to KOSPI-listed companies with KRW10 trillion or more in consolidated assets from 2028 (based on FY2027), expands to KRW5 trillion or more from 2029, and may expand further to KRW2 trillion from 2030. ESG disclosures will be filed as legal disclosures in corporate business reports under the Financial Investment Services and Capital Markets Act — bypassing any exchange-stage process — with reports due by end of March, aligned with financial statements. The three-year safe harbor is commercially significant: civil, administrative, and criminal liability for sustainability disclosures is broadly suspended for the first three years of each company's mandatory disclosure, except for intentional greenwashing. Scope 3 emissions disclosure is deferred by three years for each category. For law firms advising Korean-listed clients or multinationals with Korean subsidiaries, the 2028 first-wave threshold and March reporting deadline are the immediate calendar entries; the safe harbor design should inform how clients approach voluntary disclosure in 2026–2027 in advance of their mandatory entry date.

Source: Simpson Thacher ESG Regulatory Update — July 2026

South Korea: Mandatory ESG Disclosure from 2028 — KRW10T Threshold First, Three-Year Civil/Criminal Safe Harbor, Intentional Greenwashing Excluded — Regulation & Disclosure

Climate & Litigation

Paris Courts Issue Back-to-Back Rulings: Volvic Liable for "Carbon Neutral" Claims, TotalEnergies Ordered to Include Scope 3 in Vigilance Plan

Two Paris Judicial Court decisions issued in the same week represent the sharpest European climate litigation signal of 2026. In the first, the Paris Judicial Court found Volvic liable for "misleading commercial practices" and ordered the company to pay €75,000 in damages and €10,000 in legal costs to a consumer protection association, holding that the claims "carbon neutral" and "100% recycled" were scientifically inaccurate and therefore misleading. In the second, the Paris Judicial Court found TotalEnergies in breach of its duty of vigilance and ordered it to include Scope 3 emissions — specifically those generated by the combustion of products sold to customers — in its risk mapping, with a hearing scheduled for January 21, 2027 at which the court may issue further orders if the measures are deemed insufficient. Together, the two rulings define the current litigation frontier: product-level climate claims must be scientifically defensible and material claims like "carbon neutral" require substantiated scope and verification; and the duty of vigilance extends to Scope 3 emissions as a matter of French law, not merely best practice. For in-house counsel and ESG practice leaders, the TotalEnergies ruling is the more structurally significant: it establishes that a company's vigilance plan — required under France's Loi de Vigilance — must address the downstream emissions generated by the use of its products, not merely upstream supply chain risks.

Source: Simpson Thacher ESG Regulatory Update — July 2026 · Jones Day Trending Now in ESG — July 2026

Paris Courts: Volvic Pays €75K for "Carbon Neutral" Claims, TotalEnergies Ordered to Add Scope 3 to Vigilance Plan — Climate & Litigation

Simpson Thacher ↗ · article: articles/2026-07-17-paris-climate-litigation-volvic-total.md · tags: Legal ESG, Legal Risk, Legal Operations

New York Imposes Immediate Statewide Data Center Moratorium — 50MW Threshold, Energy and Water Impact Assessment Required

On July 14, New York Governor Kathy Hochul signed an executive order imposing the nation's first statewide moratorium on large-scale data center construction. The order takes effect immediately and directs the Department of Environmental Conservation not to issue discretionary permits for new data centers with a power demand of 50 megawatts or more for up to one year, while state regulators develop a comprehensive regulatory framework. The Department of Public Service will prepare a Generic Environmental Impact Statement to establish consistent standards for evaluating proposed data centers' effects on energy demand, water use and quality, and air quality. Projects that have already received permits are not affected. A separate one-year moratorium bill passed by the state legislature in June, targeting data centers above 20 megawatts, has not yet been signed into law — meaning a further expansion of the threshold may follow. For environmental counsel and real estate lawyers advising data center clients, the immediate effective date makes this a live compliance constraint today: any client with a pending 50MW+ data center in New York that lacks a final permit needs to assess its development timeline, financing contingencies, and contract structures against the moratorium's duration and potential extension. The water use and air quality dimensions of the GEIS signal that the eventual regulatory framework will address environmental impact holistically, not only energy demand.

Source: Simpson Thacher ESG Regulatory Update — July 2026

New York Data Center Moratorium: Immediate for 50MW+ Projects — Energy, Water, and Air Quality GEIS to Define the Permanent Framework — Climate & Litigation

Simpson Thacher ↗ · article: articles/2026-07-17-new-york-data-center-moratorium.md · tags: Legal ESG, Legal Risk, Legal Operations

Supply Chain & Human Rights

CBP Publishes 79-Page Unified Forced Labor Guidance — UFLPA, CAATSA, and §1307 Now Consolidated, $3.94B in Enforcement Since 2022

U.S. Customs and Border Protection issued comprehensive Forced Labor Enforcement Operational Guidance for Importers on June 12, superseding the prior 2022 UFLPA guidance. The 79-page document consolidates CBP's enforcement framework under three legal authorities — the Uyghur Forced Labor Prevention Act, the Countering America's Adversaries Through Sanctions Act, and the general forced labor import prohibition under 19 U.S.C. § 1307 — and provides step-by-step instructions on responding to detentions, exclusions, and seizures. Recommended supply chain documentation for high-priority sectors includes cotton, tomatoes, polysilicon, apparel, aluminum, and seafood. As of early 2026, 69,415 shipments valued at $3.94 billion have been subjected to forced labor enforcement actions since the UFLPA took effect in 2022. For trade counsel and supply chain compliance teams advising importers, the consolidated 79-page guidance is the most comprehensive public articulation of CBP's enforcement expectations to date: the consolidation of three legal authorities under a single operational document means that importers who previously understood their UFLPA obligations as the full scope of their exposure are now on notice that CAATSA and §1307 carry parallel and potentially broader enforcement reach. The documentation recommendations for high-priority sectors are the due diligence floor, not a ceiling.

Source: Simpson Thacher ESG Regulatory Update — July 2026

CBP 79-Page Forced Labor Guidance: UFLPA, CAATSA, and §1307 Unified — $3.94B in Enforcement Actions Since 2022, Six Priority Sectors — Supply Chain & Human Rights

Simpson Thacher ↗ · article: articles/2026-07-17-cbp-forced-labor-guidance.md · tags: Legal ESG, Legal Risk, Legal Operations

EU CSDDD Consultation on Implementation Guidance — Revised Scope (5,000 Employees, €1.5B Turnover) and Tier-1 Supplier Focus

The European Commission launched a consultation on draft implementation guidance for the Corporate Sustainability Due Diligence Directive this week, following the Omnibus I amendments that fundamentally reshaped the directive's scope and obligations. The Omnibus I package, which entered into force on March 18, 2026, reduced the CSDDD's scope by approximately 70% — to companies with over 5,000 employees and €1.5 billion in turnover — and narrowed the due diligence obligation from the full "chain of activities" to direct (Tier 1) suppliers, with a risk-based exception allowing firms to go beyond Tier 1 where risks are identified. The mandatory climate transition plan obligation was deleted, as was the EU-wide harmonised civil liability norm. For ESG practice leaders and supply chain counsel advising companies in or near the revised CSDDD threshold, the Commission's draft guidance is the operative implementation document: firms that scoped their due diligence programs under the pre-Omnibus CSDDD should now reassess both their in-scope determination and the depth of their supplier engagement obligations, given that the Tier 1 focus materially changes the documentation and engagement requirements for suppliers beyond the first tier. National transposition is due by July 26, 2028.

Source: Business and Human Rights Centre: CSDDD Omnibus Update — July 2026 · ESG Book Policy Digest — July 2026

EU CSDDD Guidance Consultation: Revised Scope (5,000 Employees, €1.5B Turnover) and Tier-1 Focus — Re-Scope Programs Before July 2028 Transposition — Supply Chain & Human Rights

Business and Human Rights Centre ↗ · article: articles/2026-07-17-csddd-implementation-guidance.md · tags: Legal ESG, Legal Risk, Legal Operations

Governance

EU Pay Transparency Directive Now in Force — First Reports Due 2027, 5% Gap Threshold Triggers Mandatory Audit

The EU Pay Transparency Directive (EU 2023/970) entered into force on June 6, 2026, with transposition required by all Member States by June 7, 2026, and first gender pay gap reports due in 2027 covering calendar year 2026. Companies with more than 250 employees must report annually; companies with 100–250 employees must report every three years. Employers must disclose salary ranges in all job advertisements, cannot ask candidates about salary history, and must provide employees with information on average pay levels by sex upon request. Where a reported gender pay gap exceeds 5% and cannot be explained by objective, gender-neutral criteria, companies must conduct a joint pay assessment with workers' representatives. Non-compliance consequences are structurally significant: a reversed burden of proof, employee entitlement to full compensation, and financial penalties. For law firm employment counsel and in-house HR legal teams, the June 6 entry-into-force date means that 2026 pay data is now being collected under the Directive's framework — the companies whose first report is due in 2027 are in their reporting year now. The salary transparency requirement in job advertisements is immediately operative, and firms that have not yet updated their EU recruitment processes are already out of compliance.

Source: Simpson Thacher ESG Regulatory Update — July 2026

EU Pay Transparency Directive In Force — First Reports 2027, 5% Gap Triggers Mandatory Joint Audit, Salary Ranges in Job Ads Now Required — Governance

Simpson Thacher ↗ · article: articles/2026-07-17-eu-pay-transparency-directive.md · tags: Legal ESG, Legal Risk, Legal Operations

EEOC Rescinds Affirmative Action Guidelines — Safe Harbor for DEI Programs Eliminated, Enforcement Targeting Intensifies

The U.S. Equal Employment Opportunity Commission voted on June 30, 2026 to rescind its Affirmative Action Interpretive Guidelines and the related Compliance Manual on Affirmative Action — guidance established in 1979 that provided the framework for evaluating voluntary affirmative action plans and a good-faith compliance safe harbor for employers implementing such plans. The EEOC stated that the guidelines were inconsistent with the text of Title VII and contradicted Supreme Court precedent developed in the decades since their adoption. The rescission follows the EEOC's recently announced Enforcement Plan and is explicitly consistent with the agency's current enforcement priorities targeting DEI programs in the private sector. For employment counsel advising US clients on DEI program governance, the rescission removes the primary safe harbor framework that employers used to structure voluntary affirmative action plans — meaning that DEI initiatives previously designed in good-faith reliance on the 1979 guidelines now lack the regulatory architecture that justified them. The combination of rescission, active enforcement plan, and the broader executive-branch posture toward DEI means that the risk profile for DEI-adjacent employment practices has materially increased, and any client maintaining programs designed under the prior guidance should conduct a legal review.

Source: Simpson Thacher ESG Regulatory Update — July 2026 · Harvard Law Corporate Governance Forum — July 2026

EEOC Rescinds Affirmative Action Guidelines — Safe Harbor for DEI Programs Gone, Active Enforcement Plan Targeting Private Sector Now In Effect — Governance

Simpson Thacher ↗ · article: articles/2026-07-17-eeoc-affirmative-action-rescission.md · tags: Legal ESG, Legal Risk, Legal Operations

Enforcement & Greenwashing

Senken / Max Planck: 68% of DAX40 Carbon Credits Had No Real Climate Impact — €8M+ Average Cost Per Greenwashing Case

Senken's July 13 analysis of corporate greenwashing risk in carbon credit markets — citing Max Planck Institute research — found that more than 68% of DAX40 companies that purchased carbon credits ended up supporting projects with no real climate impact. The Max Planck Institute separately found that 84% of carbon credits across the broader market are high-risk. The enforcement consequence is already materializing: the average cost per greenwashing case for German companies is now €8 million or more, a figure that substantially exceeds the cost of pre-purchase due diligence on carbon credit quality. For ESG practice leaders and in-house sustainability counsel advising clients on carbon credit strategies, the Senken data is an operational risk quantification: firms that purchase carbon credits without conducting quality due diligence — assessing additionality, permanence, verification methodology, and project-level integrity — are, on the current market evidence, more likely than not to be holding credits that do not represent real climate impact. The legal exposure flows from the claims built on those credits: a "carbon neutral" or "net zero" assertion backed by high-risk credits is the factual basis for the greenwashing liability the French courts imposed on Volvic this week.

Source: Senken: Greenwashing and Carbon Credits — Corporate Claims, Enforcement and Integrity

Senken: 68% of DAX40 Carbon Credits Had No Real Climate Impact, €8M+ Average Greenwashing Case Cost — Due Diligence Is No Longer Optional — Enforcement & Greenwashing

Senken ↗ · article: articles/2026-07-17-dax40-carbon-credit-greenwashing-risk.md · tags: Legal ESG, Legal Risk, Legal Operations

FTI ESG+ Newsletter: SEC Activist Investor Disclosure Rule, SFDR 2.0 PAI Mandates, and EU ESRS Cost Savings

FTI Strategic Communications' July 16 ESG+ Newsletter synthesized three developments with direct ESG practice implications. First, the SEC issued new guidance requiring activist investors to disclose the identities of their clients in regulatory filings — a governance transparency measure that will affect the ESG activist engagement strategies clients use to engage portfolio companies on climate and social issues. Second, SFDR 2.0's final product categories introduce mandatory Principal Adverse Impact disclosures for Transition and Sustainable fund categories, while allowing limited fossil fuel investments within the Transition category — a structure that resolves one of the longest-running greenwashing risk debates in European sustainable finance but introduces new disclosure complexity for fund managers. Third, the Commission's simplified ESRS is projected to reduce reporting costs by more than 30% per company — a figure the Commission attributes primarily to the reduction in the standards' overall length of more than 70%. For ESG practice leaders tracking the intersection of securities regulation and sustainability disclosure, the SEC activist disclosure rule is the most operationally immediate development: clients that use coordinated activist engagement to advance ESG agendas at portfolio companies now face disclosure requirements that may deter the coordination strategies that have historically been most effective.

Source: FTI Communications: ESG+ Newsletter — 16 July 2026

FTI ESG+: SEC Activist Disclosure Rule, SFDR 2.0 PAI Mandates Live, ESRS 30% Cost Reduction Confirmed — Enforcement & Greenwashing

FTI Strategic Communications ↗ · article: articles/2026-07-17-fti-esg-sec-sfdr-esrs.md · tags: Legal ESG, Legal Risk, Legal Operations

Law Firm ESG Practice

Holland & Knight Adds Environmental Transactions Partner Jeff Salinger in New York — Law Firm ESG Investment Continues

Holland & Knight announced on July 16 the addition of Jeff Salinger as a partner in its New York office — a leading environmental transactions partner focused on project finance, M&A, and regulatory matters in the energy transition, renewable energy, and environmental remediation sectors. The lateral hire follows Holland & Knight's July announcement of the Colorado HB26-1421 guidance covering ABS and MSO structures, and its work on EU and US environmental regulatory developments. At the same time, Hunton Andrews Kurth announced the return of environmental policy and regulated industries advisor Elizabeth Horner to its Washington D.C. office. The two announcements in a single week signal continued law firm investment in environmental and ESG practice capacity — particularly at the intersection of regulatory, transactional, and project finance work where the energy transition is generating the most complex client advisory demand. For managing partners and practice group leaders evaluating ESG capability buildout, the regulatory bandwidth required to advise clients across NIS2, CSRD/ESRS, CSDDD, SFDR 2.0, California SB 253, New York moratorium, forced labor enforcement, and French duty of vigilance simultaneously is now substantial enough to justify dedicated practice infrastructure rather than coverage through general corporate or regulatory teams.

Source: Holland & Knight: Jeff Salinger joins as Partner · Business Insider: Hunton Andrews Kurth — Elizabeth Horner returns

Holland & Knight Adds ESG Transactions Partner, Hunton Rehires Environmental Policy Advisor — Law Firm ESG Capacity Investment Continues — Law Firm ESG Practice

Holland & Knight ↗ · article: articles/2026-07-17-law-firm-esg-lateral-hires.md · tags: Legal ESG, Legal Risk, Legal Operations

Upcoming Events

CARB Virtual Workshop — July 21, 2026: California Scope 1/2 regulatory concepts for 2027 and beyond, including Scope 3 approach. Critical for in-scope companies under SB 253. arb.ca.gov
EU Revised ESRS Scrutiny Period: Two-month Parliamentary and Council review underway (extendable by two months). Watch for entry-into-force date affecting Wave 1 transition period decisions. ec.europa.eu
EU Data Sovereignty Consultation — Open through September 8, 2026: Evidence submissions on cross-border data dependency, vendor lock-in, and third-country access risks. digital-strategy.ec.europa.eu
CSDDD National Transposition Deadline — July 26, 2028: Begin assessing in-scope determination under revised thresholds (5,000 employees, €1.5B turnover) and Tier 1 supplier focus now. business-humanrights.org
Inside Practice: Legal ESG — Tracking regulatory and litigation developments across ESG practice. insidepractice.com
ILTACON 2026 — August, Nashville. ESG technology, compliance infrastructure, and regulatory operations. iltanet.org
ACC Annual Meeting 2026 — October. GC-level ESG strategy, enforcement risk, and supply chain compliance. acc.com

Inside Practice · Legal ESG · Week of 2026-07-10 to 2026-07-17