The EU's Omnibus I Directive fundamentally rewrote the Corporate Sustainability Due Diligence Directive, cutting the number of companies in scope by roughly 70 percent and pushing mandatory compliance to July 2029. With the original transposition deadline now passed and member states still designating supervisory authorities, mineral supply chain actors face a period of genuine regulatory uncertainty. The framework that remains is weaker than the one originally enacted, but it still carries real obligations for large companies sourcing from high-risk regions including the DRC.
Introduction
On 26 July 2026, the original transposition deadline for the EU's Corporate Sustainability Due Diligence Directive passed quietly. There were no enforcement actions, no company disclosures, and no supervisory authority decisions. That is because the directive that deadline was attached to no longer exists in its original form. The Omnibus I Directive, published as Directive (EU) 2026/470 in February 2026, rewrote the CSDDD so substantially that the original timeline became irrelevant almost immediately after it was set.
The new transposition deadline for member states is 26 July 2028. Mandatory compliance for in-scope companies arrives 26 July 2029. That sounds like breathing room. But for procurement teams, sustainability officers, and mineral suppliers operating in high-risk regions, the practical implications of the amended framework are immediate and consequential.
This article explains what changed, what remains in force, why critics argue the amendments go too far, and what the live consultation on implementation guidelines means for companies trying to build compliant supply chain systems right now. The focus throughout is on the extractive sector, where the gap between the directive's original ambition and its amended reality is most visible.
What the Omnibus I Directive Actually Changed
Start with the most important number: the employee threshold doubled from 1,000 to 5,000, and the turnover threshold more than tripled from EUR 450 million to EUR 1.5 billion. The practical consequence is that the directive's scope shrank from approximately 13,000 companies to roughly 6,000. Companies with between 1,000 and 4,999 employees are no longer in scope at any phase. The original staggered application dates covering smaller firms have been eliminated entirely.
The Omnibus I also removed two provisions that attracted significant attention during the original legislative process. First, mandatory climate transition plans compatible with the Paris Agreement are gone. In-scope companies are no longer required to prepare or publish such plans. Second, the harmonised EU-wide civil liability regime has been deleted. Companies facing enforcement action will now be subject to national liability frameworks, which vary considerably across member states. A review clause in Article 36 allows the Commission to revisit harmonised civil liability by July 2031, but that is a future possibility rather than a current obligation.
The penalty framework has also been revised downward. The original directive set a minimum floor for maximum penalties at 5 percent of global net turnover. The amended directive caps maximum penalties at 3 percent of global net turnover. The Commission is responsible for issuing guidance to supervisory authorities on how to set penalties in practice, and that guidance has not yet been published.
On the due diligence process itself, the Omnibus I introduced a scoping-first approach. Companies are no longer required to conduct comprehensive mapping of their entire supply chain. Instead, they carry out a scoping exercise to identify where adverse impacts are most likely and most severe, then focus their deeper due diligence on those areas. In-depth assessment of indirect business partners is only triggered when there is objective, verifiable information indicating a concrete risk at that level. The default focus is on direct, Tier 1 suppliers.
The Transposition Gap: Where Member States Stand Right Now
The timeline confusion around the CSDDD is real and worth untangling carefully. The original Directive (2024/1760) set 26 July 2026 as the deadline for member states to transpose its provisions into national law. A Stop-the-Clock Directive published in April 2025 pushed that deadline to 26 July 2027. The Omnibus I then reset it again to 26 July 2028. So the deadline that just passed was, in a formal legal sense, already superseded before it arrived.
Nevertheless, the original deadline's passage matters for one concrete reason: the original CSDDD required member states to designate supervisory authorities as part of transposition. Those authorities were supposed to be operational by 26 July 2026. As of mid-July, that process has not advanced in any meaningful way across the EU. Member states must still designate national bodies with powers to investigate companies, demand corrective action, publish non-compliance findings, and impose penalties. The European Commission is expected to establish a European Network of Supervisory Authorities to coordinate across member states, but that network cannot function until national authorities are named.
For companies in the mineral sector, this enforcement gap creates a specific kind of risk: regulatory transition risk. As one analysis from the EST Think Tank put it in June 2026, firms must invest in governance systems while the governing architecture itself is still being politically renegotiated. The legal text is settled, but the institutions that will apply it are not yet in place, and the Commission guidelines that will shape those institutions' approach are not due until the first quarter of 2027 at the earliest.
The Commission opened a public consultation on those guidelines on 12 June 2026. The consultation closes on 24 July 2026, giving any company or civil society group with a stake in how the guidelines are drafted a narrow remaining window to submit views.
What the Amendments Mean for Mineral Supply Chains Specifically
The CSDDD's chain of activities concept covers upstream business partners tied to extraction, sourcing, manufacturing, transport, and storage. That means miners, processors, and logistics providers in mineral supply chains remain within the directive's conceptual scope, even after the Omnibus amendments. The question is how deep that coverage runs in practice.
For companies sourcing cobalt from the Democratic Republic of Congo, the amended framework creates an asymmetry that critics find troubling. A June 2026 peer-reviewed study published in ScienceDirect, examining the implications of Omnibus I for responsible mineral sourcing from Africa, concluded that the changes undermine responsible production in the DRC and Rwanda, with potentially severe environmental and human rights consequences. The EU has signed strategic partnerships with the DRC, Zambia, Rwanda, and Namibia specifically premised on responsible sourcing commitments. The Omnibus amendments, the authors argue, weaken the legal instrument those commitments were supposed to support.
The practical mechanism for this weakening is the shift from a genuinely risk-based approach covering the full value chain to a default Tier 1 focus. In mineral supply chains, the highest human rights and environmental risks typically do not sit at Tier 1. They sit upstream, at the extraction and primary processing stages, often in jurisdictions with limited regulatory capacity. A company sourcing cobalt through a trading intermediary technically satisfies its Tier 1 obligations by engaging with that intermediary. The conditions in the artisanal or small-scale mines further up the chain fall outside mandatory due diligence unless specific red-flag information triggers a deeper assessment.
Global Witness has flagged this dynamic specifically in relation to the Lobito Corridor infrastructure project in the DRC, which is designed to move minerals from inland mining regions to export terminals. The organisation notes that once the CSDDD takes effect, EU-linked companies with investments in mines connected to the Corridor could be required to respond to concerns about human rights practices at those sites, depending on how the chain of activities and business partner definitions are applied in practice. The amended directive's Tier 1 default weakens that accountability pathway, though it does not eliminate it entirely.
The Omnibus I also removed stakeholder consultation requirements at two specific stages: when a company is considering suspension or termination of a business relationship, and when developing monitoring indicators. The Danish Institute for Human Rights described this as turning due diligence into a checkbox exercise, arguing that removing engagement with affected communities undermines the entire purpose of the process. For suppliers operating in the DRC or other conflict-affected regions, this matters practically: the people most affected by extraction activities have fewer formal entry points into the due diligence process under the amended rules.
The Case For and Against the Amendments
The amendments have genuine defenders, and their arguments deserve fair consideration. The European institutions justified Omnibus I as a response to the competitiveness concerns raised by the Draghi and Letta reports, the Budapest Declaration of November 2024, and the Budapest Declaration's call for a simplification revolution. The core argument is that the original CSDDD imposed administrative burdens disproportionate to the capacity of smaller companies, and that concentrating obligations on the largest firms, those with the biggest influence on their value chains, is a more efficient allocation of compliance resources.
The Commission estimates that the package delivers over EUR 6 billion in administrative relief. Forty-six European CEOs, led by TotalEnergies and Siemens, wrote to President Macron and Chancellor Merz in October 2025 urging that the CSDDD be abolished outright. The amendments represent a middle path: maintaining the framework's existence while substantially reducing its reach.
Opponents of the amendments span civil society, institutional investors, and some companies. A coalition of 211 investors managing EUR 6.6 trillion in assets urged the Commission to preserve the integrity of the EU's sustainable finance framework. Deutsche Bank, KfW, Allianz, and Amundi all confirmed continued support for the original CSDDD. The Business and Human Rights Resource Centre acknowledged that the post-Omnibus directive remains a landmark shift for corporate accountability, while also noting it was caught in a false dichotomy between sustainability and competitiveness.
Twenty-one German companies, including Otto, Aldi Sud, Tchibo, and Ritter Sport, wrote to Chancellor Merz and Vice-Chancellor Klingbeil explicitly opposing abolition of the CSDDD, calling strong and reliable standards a business interest rather than a burden. ClientEarth's Amandine Van den Berghe put the civil society position plainly: what is a cornerstone of responsible business in Europe is being turned into a political bargaining chip. White and Case, taking a more measured analytical position, observed that the regulatory environment has not simplified in any absolute sense: thresholds have risen and timelines have extended, but the underlying obligations are crystallizing rather than retreating.
The review clause gives the framework's defenders some reason for longer-term optimism. The Commission must assess the effectiveness of enforcement mechanisms by July 2031 and may accompany that review with a legislative proposal. That creates a formal checkpoint at which scope, civil liability, and penalty levels could be revisited. Whether that review happens in a political environment more or less favourable to tightening depends on factors that are impossible to predict today.
The Complementary Framework: What Runs Alongside the CSDDD
One reason to resist treating the Omnibus amendments as a terminal weakening of EU supply chain accountability is that the CSDDD has never operated alone. As I covered in detail in my July 2026 analysis of the EU's Forced Labour Regulation, that instrument was left entirely untouched by the Omnibus process. It applies to every company placing products on the EU market, with no size thresholds and no sector carve-outs, and its enforcement clock runs to December 2027. For mineral importers, the FLR represents an obligation that runs in parallel with the CSDDD and cannot be narrowed away by threshold adjustments.
The EU Conflict Minerals Regulation, the Critical Raw Materials Act, the EU Batteries Regulation, and the EU Deforestation Regulation all add further layers to the framework. The Conflict Minerals Regulation, in particular, is directly relevant to DRC sourcing: the Commission's consultation on CSDDD implementation guidelines explicitly references due diligence in conflict-affected and high-risk areas as defined under that regulation. Companies building compliance systems for the CSDDD cannot ignore the overlapping obligations created by those instruments.
For companies outside the CSDDD's revised scope, there is a further indirect channel of obligation: contract. As the Omnibus itself acknowledges, in-scope companies will pass due diligence requirements through their supply chains via supplier codes and contractual conditions. The information cap protecting small suppliers from excessive data requests applies where the supplier has fewer than 5,000 employees, but it is permissive rather than absolute. It allows in-scope companies to request information from smaller suppliers where, based on reasonable judgement, that information cannot be obtained by other means. For miners and processors supplying into large European companies' chains, the formal carve-out from mandatory CSDDD scope does not translate into freedom from CSDDD-driven data requests.
What Comes Next
The most consequential near-term development is the closure of the Commission's implementation guidelines consultation on 24 July 2026. The guidelines are not legally binding, but they will shape how supervisory authorities investigate companies, how courts interpret due diligence obligations, and how market practice develops. The consultation questionnaire pays particular attention to conflict-affected and high-risk areas, responsible disengagement, model contractual clauses, and digital tools for compliance. Companies with operations or supplier relationships in the DRC and similar jurisdictions have a direct interest in how those sections are drafted.
The Commission has indicated it will adopt the first set of guidelines in the first quarter of 2027. A second tranche covering information sharing, third-party verifiers, and industry initiatives is due by 26 July 2028. Member states have until that same date to complete transposition. The full compliance date for in-scope companies is 26 July 2029, with financial year reporting obligations under Article 16 beginning for years starting on or after 1 January 2030.
For mineral supply chain actors planning governance investments, the realistic planning horizon is 2028 and 2029, not the original 2027 timeline. But the structural preparation required to meet those deadlines does not wait until 2028. Companies that begin mapping their direct supplier relationships, identifying high-risk geographies, and establishing stakeholder engagement mechanisms now will be better positioned than those who treat the extended timeline as permission to wait. The supervisory authorities that member states eventually designate will have powers to investigate retrospectively, and the pattern of what companies did during the implementation window will form part of any future compliance assessment.
Geopolitical context adds further pressure. As my earlier coverage of China's export controls and the IEA's processing gap analysis has explored, the strategic importance of minerals from regions like the DRC is rising, not falling. Demand for cobalt and copper is accelerating alongside the clean energy transition. The Omnibus amendments may have reduced the formal compliance population and softened some of the directive's harder edges, but they have done nothing to change the underlying conditions in the mines. A protest in Kolwezi remains an EU compliance event for any company whose supply chain runs through it. The rules have changed; the risks have not.