Brussels narrowed CSRD so sharply that many declared sustainability reporting dead. For the companies still in scope, the opposite happened. Carbon moved onto the CFO's books, with audit-grade rigor attached.
When the EU's Omnibus package landed, the corporate reaction was relief bordering on celebration. Scope slashed. Deadlines pushed. Thousands of companies waved out of the regime entirely. The trade press wrote the obituary for European sustainability reporting, and a lot of executives quietly closed the file.
That reading is wrong in a way that will cost some companies dearly. The Omnibus did not kill ESG reporting. For the firms still captured by it, the package did something more consequential. It stripped away the soft, narrative, voluntary edges of the regime and left a smaller, harder core, and it moved that core out of the sustainability team's slide deck and onto finance's books.
Narrowing the scope while raising the rigor is not a reprieve. It is a transfer of ownership.
What actually changed
The numbers are dramatic, which is why everyone fixated on them. The 2025 Omnibus changes cut CSRD's scope by roughly 80 percent. Mandatory datapoints fell about 61 percent, from somewhere near 1,100 to around 430. Voluntary disclosures were eliminated outright. Companies that were due to report in 2026 saw their obligations postponed to 2028. SMEs were lifted out. What remains applies to entities with more than 1,000 employees and net turnover above roughly 450 million euros.
Read those figures quickly and you get the obituary. Read them carefully and you get the real story. The cuts fell hardest on the qualitative, the voluntary, and the smaller player. What survived is the quantitative, mandatory core, owed by the largest companies, the ones with the most emissions and the most scrutiny. Fewer firms report. The ones that do report something harder.
Carbon is an accounting problem now
Strip away the voluntary narrative and what is left is not a values statement. It is data. Emissions reporting under the surviving rules means transforming raw activity data into auditable figures using the GHG Protocol's definitions of Scope 1, Scope 2, and Scope 3. That is not the language of a corporate responsibility brochure. It is the language of a ledger.
Scope 1 and 2 are demanding enough, requiring you to convert fuel burn, electricity draw, and facility activity into defensible tonnage. Scope 3 is where the work becomes genuinely industrial, pulling emissions data across a supply chain you do not directly control and assembling it into a number you will have to stand behind. This is granular, data-intensive, methodologically exacting work. It looks far more like a consolidation than a campaign.
Which is precisely why it cannot stay with the sustainability team. The people who built brand narratives around climate goals are not the people equipped to produce a number that survives an audit. Producing auditable figures from messy operational data is what finance does for a living.
Sustainability is becoming a fourth factor for finance to weigh, sitting alongside revenue, cost, and capital, with carbon emerging as a genuine input to business risk.
The quiet reclassification of risk
Here is the contrarian heart of it. Everyone read the Omnibus as a step back from ESG. What it actually did was reclassify ESG. By narrowing scope to the largest firms and raising the bar to audit-grade scrutiny, it converted sustainability disclosure from a reputational exercise into a financial-controls exercise.
That changes the nature of a mistake. When ESG lived in the sustainability deck, a bad disclosure was a public relations problem, awkward and survivable. Now that carbon numbers face the same assurance scrutiny as financial statements, a misstatement is a controls failure. It is the kind of thing that lands on the audit committee's agenda and the CFO's signature line, not the comms team's. The stakes did not soften when the scope shrank. They hardened.
Before and After Omnibus
Dimension | Before Omnibus | After Omnibus |
|---|---|---|
Scope | Broad; wide swath of EU companies | Narrowed ~80%; 1,000+ employees, >~€450M turnover |
Datapoints | ~1,100 mandatory | ~430 mandatory; voluntary disclosures eliminated |
Deadline | Many due to report in 2026 | Postponed to 2028 for affected cohort |
Owner | Sustainability / CSR function | Finance: CFO, controllers, audit committee |
Rigor level | Narrative, partly voluntary | Audit-grade scrutiny on quantitative core |
How to read it: The package shrank every dimension except the last. As scope and datapoints fell, ownership and rigor moved up, which is the whole point that the headline cuts obscure.
Why the delay is a trap, not a gift
The 2028 postponement feels like breathing room. For in-scope companies, it is the opposite of a reason to relax. Building auditable Scope 3 data infrastructure across a supply chain is a multi-year program, not a reporting-season scramble. The firms that treat the delay as permission to wait will arrive at 2028 with two years of ungathered data and no time to fix it.
The ones that treat the delay as runway will spend it doing the unglamorous work, instrumenting their data flows, aligning carbon accounting to financial controls, and dry-running the assurance process before it counts. The deadline moved. The amount of work did not.
What this means for leaders
Move ownership to finance now, not in 2028. If carbon reporting still reports into sustainability, you have a controls gap dressed up as an org chart. Put the numbers under the same people and processes that own the financial close, because that is the standard they will be held to.
Treat carbon data as a controls build, not a reporting task. Auditable Scope 3 figures require instrumented, governed data pipelines that take years to stand up. Start the build against the 2028 date today, and budget it like the financial-systems project it actually is.
Reprice the risk of getting it wrong. A carbon misstatement is no longer a PR stumble. It is a financial-controls failure with audit-committee consequences. Govern it accordingly, with the same rigor you apply to any number that carries your signature.
The companies that celebrated the Omnibus and closed the file made an understandable mistake. They confused a smaller obligation with a lighter one. For those still in scope, the regime did not get easier. It got quieter, harder, and far more clearly the CFO's problem. The slide deck is gone. The ledger remains.
A BusinessInfomatics original. Drawn from EU Commission Omnibus updates and 2026 CSRD analyses by The CFO, BDO, and the Harvard corporate-governance forum.
