← Sustainability & ESG
Module 4 Free 5 min

ESG Reporting & Regulations

How companies disclose ESG, the new rules like CSRD and ISSB, and why greenwashing is now a real legal risk.

What you'll learn

  • Tell voluntary reporting apart from mandatory rules
  • Recognise CSRD, ESRS and ISSB at a high level
  • Explain assurance, ratings and greenwashing risk

For years, ESG reporting was a bit like homework with no grade: companies wrote sustainability brochures, chose their own metrics, and graded themselves. That era is ending. Around the world, ESG disclosure is shifting from voluntary glossy reports toward mandatory, audited information that sits much closer to financial reporting. You do not need to be a lawyer to follow it — you just need the map of who has to report what, and why getting it wrong now carries real consequences.

Voluntary vs mandatory: the big shift

Voluntary reporting is what most companies did historically: publish a sustainability report using whatever framework they liked, highlighting the good news. It built awareness, but it also made comparison almost impossible and invited cherry-picking.

Mandatory reporting flips this. Governments and standard-setters now require specific companies to disclose specific things, in a comparable way, often checked by an outside party. The motivation is simple: investors and the public want ESG numbers they can trust and compare, the same way they trust audited accounts.

Voluntaryself-chosenunaudited brochureMandatoryCSRD / ISSBcomparable, requiredAssurancechecked

ESG disclosure is moving from self-graded brochures toward required, audited reporting.

The rules you will actually hear about

CSRD — the EU’s Corporate Sustainability Reporting Directive — is the heavyweight. It requires a large and growing set of companies (including many non-EU firms with significant EU business) to report detailed sustainability information using a common rulebook called the ESRS (European Sustainability Reporting Standards), and to apply double materiality — both how sustainability affects the company and how the company affects the world. The rollout has been bumpy: in 2025 the EU’s “Omnibus” proposals moved to simplify the rules and delay or narrow who is caught, so the exact scope and timing keep shifting. The direction, though, is clearly toward mandatory, standardised disclosure.

ISSB — the International Sustainability Standards Board — created global baseline standards known as IFRS S1 (general sustainability disclosures) and IFRS S2 (climate-specific). Think of these as the sustainability cousins of international accounting standards, designed so a company in one country reports in a way an investor in another can understand. Many countries are adopting or building on them.

In the United States, the picture is the messiest. The SEC adopted climate-disclosure rules in 2024, but they were quickly tangled in legal challenges and, under the new administration, the SEC stepped back from defending them in 2025 — so federal climate disclosure is uncertain. Meanwhile California passed its own laws requiring large companies doing business there to report emissions, keeping pressure on regardless of Washington.

Ratings, assurance and the greenwashing trap

Alongside the rules sit ESG ratings — scores from agencies like MSCI or Sustainalytics that try to summarise a company’s ESG quality in a grade. They are influential but inconsistent: the same company can score well with one agency and poorly with another, because each weighs the letters differently. Treat a rating as one opinion, not gospel.

Assurance is the ESG version of an audit: an independent firm checks the disclosures. Early rules often require “limited” assurance (a lighter check) moving toward “reasonable” assurance (closer to a full financial audit) over time. Assurance is what turns a claim into something you can lean on.

All of this raises the stakes on greenwashing — making a company’s environmental or social record look better than it is. With mandatory rules and assurance, greenwashing is no longer just a reputational embarrassment; it can mean regulatory penalties and lawsuits. Vague claims like “eco-friendly” or “net zero” without evidence are exactly what regulators are now hunting.

Rule of thumb: if a sustainability claim cannot survive an audit, do not publish it. The era of unprovable green slogans is closing fast.

How to use it

When a sustainability report lands, ask whether it is voluntary or required, and whether anyone has checked it. When someone cites an ESG rating, remember it is one agency’s opinion among several. And when marketing wants to call something “green,” ask for the evidence before it goes out. Useful phrases: “Is this voluntary or under CSRD/ISSB?” “Has this been assured, and to what level?” “Whose rating is that, and what do others say?” “Can we actually back that green claim up?” Those questions keep your company on the right side of both the rules and the truth.

Spot it: Reporting and risk

Read each statement and decide whether it describes voluntary reporting, mandatory rules, or a greenwashing risk. Tap a card to flip it and check your answer.

Sort the reporting moves

Drag each action or statement into the bucket it belongs to — Voluntary reporting (old model), Moving to mandatory (rules shift), or Assurance & governance (controls). Tap an item, then tap a bucket, or drag it there. Hit Check placement when you’re done.

VoluntarySelf-chosen metrics
Mandatory RulesCSRD, ISSB, SEC
AssuranceThird-party checks

Tip: drag with a mouse, or tap an item then tap a bucket on touch screens. Get one wrong and the answer key appears.

Quick check

1. The EU's main mandatory sustainability reporting rule is known as…

2. ESG "assurance" means…

3. Why is greenwashing riskier now than it used to be?