CSRD, VSME, EUDR, PPWR and Friends: The EU Sustainability Acronym Salad, Decoded
Last verified: 29 September 2026. Brussels changes the rules faster than we change our passwords, so we update this page when things move.
We’re pretty sure that somewhere in Brussels, there is a person whose full-time job is inventing the next sustainability acronym. That’s why we wrote this piece.
So if you’ve recently been asked whether you’re “CSRD-ready,” “VSME-aligned,” “EUDR-compliant,” or “PPWR-proof,” and you nodded before quietly opening a new tab to search what any of it means, you’re in good company. Acronym fatigue is a thing.
Here’s the good news. These seven terms are not seven versions of the same problem. They’re different kinds of things, and once you know which kind you’re dealing with, most of the fog lifts. Some are laws. One is a voluntary standard, one is a classification system. One is just a company with a clipboard, and another has already been retired.
The cheat sheet
| Acronym | What it actually is | Legal status | Who it hits | The date that matters |
|---|---|---|---|---|
| CSRD | Sustainability reporting law | Mandatory (for a much smaller group now) | EU companies with 1,000+ employees and €450m+ turnover | Amended by the Omnibus in 2026 |
| VSME | Voluntary reporting standard for small businesses | Voluntary | SMEs, often asked for by bigger customers | Available now |
| EU Taxonomy | A “what counts as green” classification system | Mandatory for in-scope reporters | Companies in CSRD scope | Phased in; simplified for 2026 |
| EcoVadis | Private sustainability rating | Not a law | Suppliers, when a customer asks | Whenever your customer says so |
| EUDR | Anti-deforestation product law | Mandatory | Companies placing 7 commodity groups and derived products on the EU market | 30 Dec 2026 (large/medium) |
| EUTR | The EUDR’s predecessor, for timber | Being repealed | Timber importers and traders | Phasing out with the EUDR |
| PPWR | EU packaging law | Mandatory, directly applicable | Anyone placing packaging on the EU market | In force since 12 Aug 2026 |
Now the details, in the order they’ll probably find you.
CSRD: the big one (that got smaller)
The Corporate Sustainability Reporting Directive is the EU law that tells companies to publish detailed sustainability reports, following the European Sustainability Reporting Standards (ESRS), with external assurance on top.
The plot twist is that it’s now much smaller than originally planned. The Omnibus simplification directive was published in the Official Journal on 26 February 2026 and came into force on 18 March 2026. For EU companies, the scope is now 1,000+ employees and €450 million in net turnover, where the original test was a two-out-of-three mix of 250 employees, €50 million turnover, or €25 million balance sheet. Commission analysis, as reported by secondary sources, suggests roughly 80% of the companies previously in scope are now out.
There’s also a “value chain cap”. Companies in the value chain with fewer than 1,000 employees can only be asked for the information contained in the voluntary reporting standard. In other words, a large customer can’t hand a small supplier a 400-question spreadsheet and call it compliance. That leads directly to the next acronym. accountancyeurope
Does this apply to me? Only if you clear both thresholds. If you don’t, you may still feel CSRD indirectly through customer requests.
VSME: CSRD’s friendly little cousin
The Voluntary SME Sustainability Reporting Standard was developed by EFRAG, the body that also drafts the ESRS. It’s a lighter, simpler way for smaller companies to report sustainability data, with a Basic Module and a Comprehensive Module for those who want to go deeper.
The key word is voluntary, and that’s also where it gets interesting. Nobody in the EU is legally forced to use VSME, but with the value chain cap pointing big companies to it, it is quickly becoming the standard way to answer customers’ sustainability questions. Voluntary on paper, practically expected in a growing number of supply chains.
Note the attribution: EFRAG developed the standard, and the European Commission has recommended it (Commission Recommendation (EU) 2025/1710). It’s not “an EU law,” and it’s not a CSRD lite version you have to file somewhere.
Does this apply to me? If you’re a small or mid-sized business selling to larger companies, probably yes in spirit, even if not in law. Start with our What Is VSME? guide.
The EU Taxonomy: the “is it green?” dictionary
The EU Taxonomy (Regulation (EU) 2020/852) is a classification system that defines which economic activities count as environmentally sustainable, measured against six environmental objectives. It isn’t a report. It’s the rulebook that reports use.
Companies in scope disclose how much of their turnover, CapEx and OpEx is eligible (the activity is described in the Taxonomy) and aligned (it also meets the technical criteria and do-no-significant-harm tests). Eligible is “you’re on the list.” Aligned is “you passed the exam.”
Simplification has come here too. The disclosure rules were streamlined, and Omnibus ties Taxonomy reporting to the narrower CSRD scope.
Does this apply to me? Only if you’re in CSRD scope (and even then, the simplified rules apply). If you’re not, you might still meet it through banks and investors using Taxonomy data to classify their portfolios. [Verify: current status of the simplified Taxonomy delegated act and materiality threshold, and exact alignment with the Omnibus scope.]
EcoVadis: not a law, but your customer may act like it is
EcoVadis is a commercial platform that rates companies on sustainability performance across themes such as environment, labour and human rights, ethics, and sustainable procurement, and awards medals based on the result.
Here’s the important bit, and the reason it’s in this list: EcoVadis is not a regulation. No directive requires it. It becomes “mandatory” when a large customer puts it in their supplier requirements, and this does happen a lot. Think of it as the sustainability equivalent of a credit check your customer runs on you.
It also lives in a different world from VSME. VSME is an open standard you can report against freely. EcoVadis is a paid, proprietary assessment with its own scorecard.
Does this apply to me? When a customer says it does. Check the contract, not the Official Journal.
EUDR: the “no deforestation in my coffee” law
The EU Deforestation Regulation (Regulation (EU) 2023/1115) says that certain commodities and the products made from them (cattle, cocoa, coffee, oil palm, rubber, soya, and wood) can only enter or leave the EU market if they’re not linked to deforestation after 31 December 2020 and were produced legally in the country of origin. Companies prove this through due diligence and a due diligence statement filed in the EU’s information system.
It has been postponed twice, which has made people understandably sceptical. This time, the Commission’s May 2026 simplification package confirmed that there will be no postponement of the application date.
- 30 December 2026 for large and medium-sized companies
- 30 June 2027 for micro and small operators outside the timber sector
The core legal text wasn’t reopened. What changed were guidance, FAQs, product scope and the IT system.
Does this apply to me? If you place those seven commodity groups, or products derived from them (chocolate, furniture, leather goods, tyres, and more), on the EU market, or export them, yes. Check the product list (Annex I) for your specific goods.
EUTR
The EU Timber Regulation (Regulation 995/2010) was the original rule against illegally harvested timber entering the EU. The EUDR replaces it, so the EUTR is repealed on 30 December 2026.
The twist: it doesn’t vanish overnight. The EUTR continues to apply to timber harvested before 29 June 2023 and placed on the market up to 31 December 2029, after which the EUDR applies regardless of harvest date. So if you deal in timber, the paperwork overlap is real. eustafor
Does this apply to me? If you import or trade timber, yes, at least until the transition ends.
PPWR: your packaging just became a regulated product
The Packaging and Packaging Waste Regulation (Regulation (EU) 2025/40) replaces a 30-year-old directive. The major difference: it’s a regulation, so it applies directly and identically across all 27 member states, with no national transposition. It’s been binding since 12 August 2026, with no grace period for stock placed on the market after that date. ecocomply
What it means in practice:
- Packaging now needs a conformity assessment and an EU Declaration of Conformity
- PFAS restrictions apply to food-contact packaging
- Producers must put their name and address on the packaging
And the rest comes later: harmonised labelling from 12 August 2028, and design for recyclability, minimum recycled content and single-use restrictions from 1 January 2030.
Does this apply to me? If you make, import or sell anything in packaging within the EU, which is nearly everyone selling physical goods, yes. It doesn’t exempt micro and small businesses from the core obligations.
Bonus round: the acronyms we didn’t have room for
Because the soup has a second helping:
- ESRS: the actual reporting standards CSRD companies follow
- CSDDD: the due diligence directive, now limited to companies with 5,000+ employees and €1.5 billion turnover after Omnibus globalpolicywatch
- CBAM: the EU’s carbon border adjustment mechanism, a carbon price on certain imports
- SFDR: disclosure rules for financial products (funds, not factories)
- GRI, ISSB, GHG Protocol: the global side of the soup, covering voluntary reporting frameworks and the emissions accounting rulebook
So which ones are actually yours?
A three-question shortcut:
- Are you a big company (1,000+ employees and €450m+)? Then CSRD and the Taxonomy are yours.
- Do you sell to bigger companies? Then expect VSME-style data requests, and maybe an EcoVadis ask.
- Do you put physical goods or packaging on the EU market? Then PPWR is live, and EUDR (and EUTR for timber) may be too.
Most small businesses will land on a mix of “VSME, PPWR, and maybe EcoVadis,” and can politely ignore the rest.
FAQ
Is VSME mandatory?
No. It’s voluntary, developed by EFRAG and recommended by the Commission. It’s increasingly requested in practice because of the CSRD value chain cap.
Does CSRD apply to SMEs after the Omnibus?
Not directly. The EU scope is now 1,000+ employees and €450m net turnover, and small companies in the value chain are protected by a cap on what they can be asked to provide.
Is the EUTR still in force?
Until 30 December 2026, yes. After that it’s repealed, except for a transition covering timber harvested before 29 June 2023, which runs to 31 December 2029.
Is EcoVadis a legal requirement?
No. It’s a private rating platform. It becomes a requirement only when a customer or contract asks for it.
