Company Law vs Product Law

DPP vs CSDDD — What's the Difference?

Different layers of the same push. The Corporate Sustainability Due Diligence Directive (CSDDD, 2024/1760) is company-level conduct law: very large companies must identify, prevent and remedy human-rights and environmental harms across their chains of activities. The Digital Product Passport (ESPR, 2024/1781) is product-level data law: a verifiable record per product. A garment factory is rarely in CSDDD scope itself — but its buyers are, and they discharge their duties through the supply chain.

Written by Nazrul Islam, Founder, DPPLive · Last updated: 16 July 2026

CSDDD

Who it binds

EU companies with >1,000 employees and >€450M worldwide turnover — and non-EU companies with >€450M EU turnover (Article 2, as adopted; scope narrowed by the 2026 Omnibus). It is a directive: 27 national laws will implement it, unlike the directly-applicable ESPR.

Dir (EU) 2024/1760

The Duties

Due diligence, codified

Articles 5–16 codify the cycle: integrate due diligence into policy, identify and assess adverse impacts (Art. 8), prevent potential ones (Art. 10), bring actual ones to an end (Art. 11), remediate, engage stakeholders, run complaint channels, monitor and report. Penalties are national, with pecuniary fines anchored to worldwide turnover (Art. 27, as adopted).

Arts 5–16

Softened

What the Omnibus changed

The 2025 stop-the-clock directive and Omnibus I (Dir. 2026/470) pushed transposition to 2028 and application to 2029, removed the standalone climate-transition-plan duty, and dropped the EU-wide civil-liability regime. The cascade through buyer contracts — the part factories feel — survived intact.

2028 / 2029

Where the two laws meet is evidence. A buyer under CSDDD must show it knows its chain; a product under ESPR must carry its own verified data. The factory that runs one clean data pipeline — materials, origin, substances, certifications, footprint — hands its buyer due-diligence evidence and hands the product its passport, from the same records. Commission-backed model contractual clauses (Article 18) mean supplier contracts will keep formalising exactly these data flows; see our guide to DPP clauses in buyer contracts.

DPP vs CSDDD FAQ

Quick Answers

Is my factory in scope of the CSDDD?

Almost certainly not directly. The directive targets very large companies — EU companies above 1,000 employees and €450 million worldwide turnover, and non-EU companies above €450 million turnover generated in the EU. Factories meet it indirectly: in-scope buyers must manage risks across their chain of activities, and they do it through supplier contracts and audits.

What does the CSDDD actually require from suppliers?

The buyer's duties — identifying, preventing and ending adverse human-rights and environmental impacts (Articles 8, 10 and 11) — cascade down as codes of conduct, data requests, audits and contractual clauses, with Commission-backed model contractual clauses under Article 18.

Has the CSDDD been delayed or weakened?

Yes. Following the 2025 stop-the-clock directive and the 2026 Omnibus I amendments, transposition moved to 2028 with application from 2029, the standalone climate-transition-plan duty was removed, and the EU-harmonised civil-liability regime was dropped in favour of national law. Verify the current consolidated text before relying on any single provision.

How does the DPP relate to CSDDD compliance?

They meet in the data. The DPP structures verified product-level information — materials, origin, substances, footprint — which is precisely the evidence an in-scope buyer needs to demonstrate due diligence over its supply chain. One factory data pipeline feeds both.

Keep Reading

Go Deeper

DPP Clauses in Buyer Contracts →

What EU brands are writing into vendor manuals — and how to respond.

Four EU Laws, One Pipeline →

ESPR, EUDR, CSDDD and CBAM mapped together.

Who Is Responsible for the DPP? →

Role-by-role duties under ESPR Articles 27–35.

Certifications & the DPP →

How GOTS, OEKO-TEX and audits feed passport data.

Sources & official references

Directive (EU) 2024/1760 (CSDDD) — full text on EUR-Lex — Articles 2, 5–16, 18, 27 (as amended by the 2025–2026 Omnibus package)
Regulation (EU) 2024/1781 (ESPR) — full text on EUR-Lex
European Commission — Corporate sustainability due diligence

DPPLive’s Take

Your Buyer's Law. Your Data.

CSDDD never names your factory — it names your buyer, and your buyer names you in the contract. The factories that thrive under due-diligence law are the ones whose data answers questions before auditors ask them. That data layer is what DPPLive operates.

DPP vs CSDDD — What's the Difference?

Quick Answers

Go Deeper

Your Buyer's Law. Your Data.

Get in Touch.We Respond Within 24 Hours.

Get in Touch.
We Respond Within 24 Hours.