CSRD After the Omnibus: What Actually Applies Now — and for Whom

Update, 11 October 2026: The omnibus is now law. Directive (EU) 2026/470, published on 26 February 2026 and in force since 18 March 2026, limits CSRD reporting to undertakings and groups with more than 1,000 employees and a net turnover above €450 million; member states must transpose it by 19 March 2027. The practical guidance below still holds commercially — customers keep asking. The directive does cap the pull, though: once it is transposed into national law, undertakings with up to 1,000 employees may decline requests from reporting customers that go beyond the voluntary standard, which the Commission published as Delegated Regulation (EU) 2026/1560 on 21 September 2026.

Sustainability reporting achieved something rare in EU law: it was reformed before most companies ever filed a report under it. The Corporate Sustainability Reporting Directive entered its rollout, collided with a competitiveness backlash, and met the Commission's omnibus package of February 2025 — which paused, narrowed, and reopened the framework in one move. Anyone giving confident one-sentence answers about CSRD in 2026 has not read the file.

The sober status: wave one — large listed companies already under the old NFRD — reports under CSRD using the European Sustainability Reporting Standards. For the following waves, the “stop-the-clock” directive adopted in spring 2025 postponed first-time reporting by two years. The substantive Omnibus Directive (EU) 2026/470 then narrowed the scope: only undertakings and groups with more than 1,000 employees and a net turnover above €450 million remain in scope; listed SMEs drop out altogether, the remaining second-wave companies report for the first time on financial year 2027, and member states may exempt first-wave companies below the new thresholds for financial years 2025 and 2026. The slimmer ESRS are final as well: Delegated Regulation (EU) 2026/1563 was published on 21 September 2026 and applies to financial years starting in 2027. Direction: fewer companies, lighter standards; what remains open is transposition into national law by 19 March 2027.

Germany added its own subplot: it missed the transposition deadline, and as of October 2026 the CSRD has still not been written into the Commercial Code — which leaves first-wave companies navigating between directive, national draft law, and auditor pragmatism. The episode is a useful reminder for market entrants: in sustainability reporting, the operative question is rarely “what does the directive say” and often “what does my auditor accept this year”.

Why Fintechs Should Care Despite the Retreat

• The value-chain pull survives. Banks and insurers report under CSRD wave one, banks additionally under Pillar-3 ESG rules — and they satisfy their data needs by questionnaire. Vendors and portfolio companies feel CSRD through their customers, whatever their own threshold status.
• SFDR and taxonomy keep running. Fund-level disclosure and taxonomy-alignment logic did not pause; fintechs in wealth, lending, or ESG data remain in a regulated data business.
• The voluntary standard became strategic. The VSME standard for companies below the thresholds has been anchored as a voluntary EU standard since September 2026 (Delegated Regulation (EU) 2026/1560) and is turning into the lingua franca of supply-chain ESG requests — one questionnaire instead of forty bespoke ones.
• Greenwashing enforcement is decoupled. Marketing claims about sustainability are policed under consumer and financial-supervision law regardless of reporting thresholds.

“

The omnibus changed who must report — it barely changed who gets asked. In the DACH supply chain, ESG data requests outrun legal obligations by years.

A Pragmatic 2026 Posture

For most fintechs and SaaS firms entering the DACH market, the rational programme has three lines. First, know your classification under the new thresholds — and document the analysis, because customers and investors will ask. Second, build a minimal, honest ESG data set aligned with VSME logic: energy, emissions where measurable, workforce basics, governance facts. Third, treat bank and enterprise questionnaires as a product surface — fast, consistent, evidence-backed answers shorten procurement measurably. Everything beyond that can wait for national transposition; nothing below that survives contact with a German procurement department.

The Double-Materiality Idea, Kept Simple

Even with the higher thresholds, CSRD's conceptual core survives the omnibus: double materiality — reporting both how sustainability issues affect the company and how the company affects environment and society. For practitioners, the discipline it forces is genuinely useful even below any threshold: a structured look at climate exposure in the supply chain, energy dependency, and workforce risks reads like risk management because it is. The firms that treat the materiality analysis as a strategy exercise extract value from it; the firms that treat it as a form produce forty pages nobody reads — including, eventually, their own board.

The assurance layer completes the picture: CSRD reports carry auditor assurance, which is precisely why auditors have become the operative interpreters of the framework during the transposition mess. Whoever your audit firm is, their sustainability practice's current reading of the rules is, functionally, your rulebook this year.

Conclusion

CSRD in 2026 is a framework in mid-correction: smaller scope, delayed waves, unchanged direction. The winners in the DACH market are not the firms with the thickest sustainability reports, but those whose data answers arrive quickly and credibly when the value chain asks. Aegiron Capital Group helps market entrants position their ESG readiness pragmatically; legal advice and audits come from the law firm and auditors you engage.