Penalties for ESG Non-Compliance in 2026: Fines, Legal Risks, and Business Consequences

Many business owners approach ESG as a reputational issue rather than a legal one. In 2026, that framing is dangerously outdated. ESG non-compliance now carries specific financial penalties, legal liabilities, and commercial consequences. In many cases, these exceed the cost of compliance itself. Understand exactly what is at stake. This is the first step to make a rational decision about how seriously to take ESG requirements.

This guide covers all categories of ESG non-compliance penalties as of October 27, 2026. These include the regulatory fines and the legal liabilities. There are also commercial consequences. Additionally, there are less visible but often more financially significant indirect penalties. Most businesses do not see these coming until it is too late.

What Qualifies as ESG Non-Compliance?

ESG non-compliance occurs when a business fails to meet one or more of its applicable legal or contractual ESG obligations. The most common forms of ESG non-compliance include:

• Failing to publish a required sustainability or ESG report within the regulatory deadline
• Publishing an ESG report that is materially incomplete, inaccurate, or not aligned with the required reporting framework
• Failing to obtain the required third-party assurance for ESG disclosures
• Making environmental marketing claims that are unsubstantiated or misleading (greenwashing)
• Failing to conduct required supply chain due diligence on human rights or environmental impacts
• Failing to meet environmental permit conditions related to emissions, waste, or water
• Not publishing a modern slavery statement when required by UK law, or a forced labour report when required by Canadian law
• Failing to disclose climate-related financial risks where required by securities law

Regulatory Fines by Jurisdiction: The Numbers

European Union: CSRD and CSDDD Penalties

The EU CSRD does not set a single EU-wide fine. It requires Member States to establish effective, proportionate, and dissuasive penalties through national law, so amounts differ by country. Since Omnibus I, Directive (EU) 2026/470, entered into force on March 18, 2026, the CSRD covers only EU companies with more than 1,000 employees and more than EUR 450 million in net turnover. Check your national transposition, which is due by March 19, 2027.

The CSDDD now applies only to companies with more than 5,000 employees and more than EUR 1.5 billion in net worldwide turnover. Its rules apply from July 26, 2029. Member States must cap their maximum pecuniary penalties at 3% of net worldwide turnover, and the Omnibus removed the directive’s harmonised civil liability regime, so liability follows national law.

United States: California SB 253 and SB 261

California’s climate disclosure laws carry some of the clearest financial penalties in the world, although one of them is on hold:

• SB 253 (Climate Corporate Data Accountability Act): Penalties of up to $500,000 per reporting year for failure to disclose Scope 1 and 2 emissions. The first reports are due November 10, 2026. CARB administers enforcement and has said it will use enforcement discretion for good-faith first-year filers. From 2027 to 2030, Scope 3 penalties apply only to non-filing
• SB 261 (Climate-Related Financial Risk Act): The statute allows penalties of up to $50,000 per reporting year, but the Ninth Circuit enjoined the law on November 18, 2025, and CARB will not enforce it while the injunction stands

A critical detail: paying a fine does not remove your reporting obligation. Companies that pay SB 253 penalties still carry the underlying obligation to report in subsequent years. Non-payment compounds the penalty exposure.

United States: New York Bill S9072A and the SEC Climate Rule

Two US rules that many guides list as live penalties are not law today:

• New York S9072A: The Climate Corporate Data Accountability Act passed the State Senate on February 10, 2026 but has not been enacted. If it becomes law, the bill text would allow penalties of up to $100,000 per day for willful failure, capped at $500,000 per reporting year, enforced by the New York Attorney General
• SEC climate rule: Stayed during litigation. The SEC stopped defending it in March 2025 and has sent a rescission proposal for review, so it carries no filing penalty today

United Kingdom: SECR, UK SRS, and Other Requirements

The UK’s mandatory SECR enforcement has historically been through audit qualification and regulatory naming rather than direct financial penalties. However, the broader UK legal framework creates real financial risks:

• Companies Act 2006 liability: Directors who sign off on materially misleading strategic reports (which include SECR disclosures) face personal liability
• Modern Slavery Act: No financial penalty for failure to publish a statement, but the Home Secretary can obtain an injunction requiring compliance, and naming and shaming enforcement has real commercial impact
• Financial Conduct Authority (FCA): UK-listed companies that fail to meet TCFD disclosure requirements face FCA enforcement action including public censure and financial penalties. The FCA has proposed replacing TCFD with UK SRS for listed companies from accounting periods starting on or after January 1, 2027
• Competition and Markets Authority (CMA): Since April 6, 2025, the CMA can fine up to GBP 300,000 or 10% of global turnover, whichever is higher, for misleading environmental claims, without going to court

Canada: S-211 and the Competition Act

Canada imposes penalties through two routes:

• Forced labour reporting (S-211): Failure to file the annual report due May 31, or filing false information, is an offence punishable by a fine of up to C$250,000. Directors and officers who directed or acquiesced in the offence can face the same fine
• Greenwashing (Competition Act): Penalties reach C$10 million for a first corporate violation and C$15 million after that, or three times the benefit gained, or 3% of worldwide revenue, whichever is higher. Private parties have been able to bring cases since June 20, 2025

India: BRSR and Carbon Market Non-Compliance

SEBI (Securities and Exchange Board of India) enforces BRSR compliance for listed companies. Penalties for non-compliance with SEBI disclosure requirements include:

• Fines starting at INR 1 lakh (approximately $1,200) per day of non-compliance
• Escalating penalties for continued violations
• Public regulatory action and listing consequences for persistent failure

Under India’s Carbon Credit Trading Scheme, about 490 obligated entities in energy-intensive sectors must meet binding emission intensity targets. Entities that miss them must surrender certificates for the shortfall, and reports describe a penalty of twice the market price of the shortfall.

ESG Penalty Summary Table

Greenwashing Penalties: A Growing and Underestimated Risk

ESG non-compliance is not only about failing to report. Making inaccurate or misleading sustainability claims carries serious penalties that are independent of reporting obligations:

• EU EmpCo Directive (applies since September 27, 2026): Bans generic environmental claims like “eco-friendly” and offset-based “climate neutral” claims without recognized proof. Penalties are set by each Member State. The separate Green Claims Directive was withdrawn in June 2025 and has not been adopted
• UK CMA: Can fine up to 10% of global turnover and order claims removed. It has taken action against multiple fashion retailers for unsubstantiated sustainability marketing
• US FTC: Green Guides enforcement runs through Section 5 of the FTC Act and can produce consent orders. The FTC generally cannot seek money penalties for a first Green Guides violation, but state laws and class actions add exposure
• Litigation risk: NGOs, competitors, and activist investors are increasingly using consumer protection and securities law to litigate against companies that make ESG claims unsupported by underlying performance data

For the rules behind these penalties, see our guide to ESG compliance requirements in 2026.

The Hidden Penalties: Commercial Consequences That Often Exceed Fines

For most businesses, the financial penalties from regulators are not the largest risk from ESG non-compliance. The commercial consequences are:

Supply Chain Exclusion

Large companies that remain subject to the CSRD and CSDDD must report on and take responsibility for their supply chain ESG performance. Omnibus I lets companies under 1,000 employees decline information requests that go beyond the voluntary SME standard, known as VSME. Even so, buyers still drop suppliers who cannot provide verified ESG data. Losing one major customer relationship can eliminate millions in annual revenue, far exceeding any regulatory fine.

Investor and Lender Consequences

ESG non-compliance is increasingly a material risk factor for investors and lenders. The consequences include:

• ESG-screened funds divesting from non-compliant companies, reducing share price and increasing cost of equity capital
• Banks applying ESG covenants to credit facilities, with higher interest rates or credit withdrawal for non-compliant borrowers
• Private equity and venture capital firms are declining to invest in companies without credible ESG programmes, particularly for businesses targeting European or institutional buyers

Market Access Loss

The EU Deforestation Regulation (EUDR) applies from December 30, 2026 for large and medium companies and from June 30, 2027 for micro and small ones. It prevents products linked to deforestation from entering the EU market. Non-compliant companies face product seizure and import bans. For businesses dependent on EU market access, this represents potential catastrophic revenue loss rather than a manageable regulatory fine.

How to Reduce Your ESG Penalty Risk: Immediate Steps

• Step 1: Map your obligations. Identify every ESG regulation that applies to your business size, jurisdiction, and industry. This is the only way to know what you are at risk of violating
• Step 2: Check your deadlines. Create a compliance calendar. Many penalties attach at specific filing dates, such as November 10, 2026 for SB 253 and May 31 each year for S-211. Missing a deadline is often treated as a violation even if the underlying data exists
• Step 3: Review your marketing claims. Audit every sustainability claim in your marketing materials, website, product labelling, and investor communications. Remove or substantiate every claim before regulatory action begins
• Step 4: Engage your supply chain. If you supply large companies under CSRD or CSDDD scope, proactively engage with their sustainability teams to understand what data they require from you and by when
• Step 5: Document your efforts. Regulators and courts assess good faith efforts. A documented compliance programme, even if imperfect, significantly reduces penalty risk compared to no programme at all
• Step 6: Seek legal advice for high-stakes jurisdictions. If you operate in multiple jurisdictions or face significant regulatory exposure, a legal review of your ESG compliance position is far cheaper than the penalties it prevents

ESG Non-Compliance Risk Checklist

• Have you identified all ESG regulations that apply to your business?
• Have you mapped the specific reporting deadlines under each applicable regulation?
• Have you audited your environmental marketing claims for substantiation?
• Have you assessed whether you supply any companies within CSRD or CSDDD scope?
• Have you reviewed your investor and lender agreements for ESG covenants or conditions?
• Have you published a modern slavery statement if required by UK law?
• Have you filed your S-211 report if you meet the Canadian thresholds?
• Have you assessed whether your products face EUDR compliance requirements?
• Do you have a documented ESG compliance programme that demonstrates good faith effort?
• Have you obtained third-party assurance where required by regulation or customer contract?
• Have you briefed your board and directors on their personal liability exposure for ESG failures?

The penalties for ESG non-compliance in 2026 are real and specific. California’s $500,000 per year. The UK’s 10% of global turnover for greenwashing. Canada’s C$10 million for a first greenwashing violation. National penalties across the EU, and a 3% cap under the CSDDD from 2029. These are current law or adopted law with active enforcement mechanisms. And they sit alongside commercial consequences from supply chain exclusion and investor withdrawal that in most cases represent even greater financial exposure.

Businesses can avoid penalties by taking compliance seriously now rather than waiting for a fine. Begin by understanding which regulations apply to you, and act accordingly.

---

Frequently Asked Questions