{"id":4565,"date":"2026-11-06T11:29:49","date_gmt":"2026-11-06T11:29:49","guid":{"rendered":"https:\/\/sawaryn.com\/?p=4565"},"modified":"2026-11-06T11:37:45","modified_gmt":"2026-11-06T11:37:45","slug":"esg-data-without-reporting-obligation-poland","status":"publish","type":"post","link":"https:\/\/sawaryn.com\/en\/publikacje\/esg-data-without-reporting-obligation-poland\/","title":{"rendered":"ESG without a reporting obligation. Why the market will still ask you for data &#8211; and what to prepare now"},"content":{"rendered":"<p>You will find out that ESG affects you not from the Journal of Laws, but from an email from your largest client: \u201cPlease complete the ESG questionnaire by Friday; this is a condition for renewing the contract&#8221;. And then it will turn out that the data is spread across four departments, the policies are buried in emails, and no one knows who is authorised to sign it.<\/p>\n<p>The question \u201cdo we have to report on ESG?&#8221; is the wrong one to ask. Even if your company is not subject to the sustainability reporting obligation under the CSRD, a major business partner, bank, investor or corporate group will still request ESG data from you \u2014 for its own reporting, a tender or due diligence. And being unprepared means delayed responses, lost contracts, a lower valuation and chaos within the organisation.<\/p>\n<p>In this article, I explain who is formally subject to the <a href=\"https:\/\/sawaryn.com\/publikacje\/esg-co-to-jest-i-kogo-dotyczy\/\"><strong>ESG reporting obligation<\/strong><\/a> in Poland, why companies outside its scope still need to prepare, what risks are associated with a lack of ESG data \u2014 and what to do step by step to avoid the trap of doing either too little or overinvesting in a reporting project your company does not need.<\/p>\n<h2>Key terms before you continue<\/h2>\n<p>Before we go into detail \u2014 here are a few terms that will appear throughout the article. I will explain them once so that you do not have to stop along the way.<\/p>\n<table>\n<thead>\n<tr>\n<th style=\"text-align: left;\">Term<\/th>\n<th style=\"text-align: left;\">Meaning<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"text-align: left;\"><strong>CSRD<\/strong><\/td>\n<td style=\"text-align: left;\">The EU Corporate Sustainability Reporting Directive. In Poland, it was implemented by the <a href=\"https:\/\/www.gov.pl\/web\/finanse\/ustawa-csrd\" target=\"_blank\" rel=\"noopener\">Act of 6 December 2024<\/a> amending the Accounting Act. It imposes ESG reporting obligations on specific groups of companies.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>ESRS<\/strong><\/td>\n<td style=\"text-align: left;\">European Sustainability Reporting Standards \u2014 they specify what data a company must disclose in its ESG report and in what format.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>Omnibus I<\/strong><\/td>\n<td style=\"text-align: left;\"><a href=\"https:\/\/eur-lex.europa.eu\/eli\/dir\/2026\/470\/oj?locale=pl\" target=\"_blank\" rel=\"noopener\">Directive (EU) 2026\/470<\/a>, which narrowed the scope of the CSRD and postponed deadlines for some companies. Poland must implement it by 19 March 2027.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>CSDDD<\/strong><\/td>\n<td style=\"text-align: left;\"><a href=\"https:\/\/eur-lex.europa.eu\/eli\/dir\/2024\/1760\/oj\/pol\" target=\"_blank\" rel=\"noopener\">Directive (EU) 2024\/1760<\/a> on due diligence in the value chain \u2014 concerning human rights and the environment. Application date following the amendments: 26 July 2029.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>VSME<\/strong><\/td>\n<td style=\"text-align: left;\">A voluntary ESG reporting standard for small and medium-sized companies \u2014 <a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/PL\/ALL\/?uri=CELEX:32025H1710\" target=\"_blank\" rel=\"noopener\">European Commission Recommendation 2025\/1710<\/a>. It is not mandatory, but serves as a reference point for business partner questionnaires.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>Assurance (limited assurance)<\/strong><\/td>\n<td style=\"text-align: left;\">Verification of an ESG report by a statutory auditor \u2014 it provides limited assurance as to the accuracy of the data. It is not equivalent to a full audit of financial statements.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Who is formally required to report on ESG in Poland<\/h2>\n<p>The sustainability reporting obligation does not apply to every company. To determine whether your company is directly subject to it, check two things: the size thresholds and its status on a regulated market.<\/p>\n<h3>\u201cLarge undertaking&#8221; thresholds under Polish law<\/h3>\n<p>The Polish act implementing the CSRD uses a <strong>2-out-of-3 criteria test<\/strong>. If your company exceeds at least two of the following thresholds, it may be subject to the reporting obligation:<\/p>\n<table>\n<thead>\n<tr>\n<th style=\"text-align: left;\">Criterion<\/th>\n<th style=\"text-align: left;\">Threshold<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"text-align: left;\">Total assets<\/td>\n<td style=\"text-align: left;\">25 million z\u0142<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\">Net revenue<\/td>\n<td style=\"text-align: left;\">50 million z\u0142<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\">Average annual number of employees<\/td>\n<td style=\"text-align: left;\">250 people<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>The obligation applies in three waves: first to entities that were already required to report non-financial information, then to other large entities and groups, and finally to SMEs listed on a regulated market (<a href=\"https:\/\/www.gov.pl\/web\/finanse\/sprawozdawczosc-esg--nowe-przepisy-wdrazajace-csrd\" target=\"_blank\" rel=\"noopener\">Source: Ministry of Finance<\/a>).<\/p>\n<h3>Changes introduced by Omnibus I<\/h3>\n<p><a href=\"https:\/\/www.gov.pl\/web\/finanse\/dyrektywa-omnibus-i-dokonujaca-zmian-merytorycznych-w-sprawozdawczosci-zrownowazonego-rozwoju-zostala-opublikowana\" target=\"_blank\" rel=\"noopener\">The Omnibus I Directive<\/a> narrowed the scope of the CSRD at EU level to entities employing <strong>more than 1000 employees<\/strong> and generating <strong>more than EUR 450 million<\/strong> in annual net revenue. Poland must implement these changes by <strong>19 March 2027<\/strong> \u2014 until then, the existing national thresholds remain in force.<\/p>\n<p>What does this mean? If your company falls between the Polish thresholds and the new EU thresholds, its status is uncertain. The obligation may change once Omnibus I is implemented. But that is no reason to wait.<\/p>\n<h3>If you do not meet the thresholds \u2014 can you simply do nothing?<\/h3>\n<p>Formally, you are not subject to the reporting obligation. But that does not mean ESG does not affect you. Today, the real enforcer of these requirements is not a supervisory authority \u2014 it is your largest client, bank or investor.<\/p>\n<h2>Why the market requires ESG data from companies not subject to reporting obligations<\/h2>\n<p>Pressure to provide ESG data does not arise solely from legislation. It stems from the fact that companies subject to reporting obligations must disclose information about their <strong>value chain<\/strong> \u2014 which includes you if you are their supplier, subcontractor or business partner.<\/p>\n<h3>Four situations in which a lack of ESG data harms your business<\/h3>\n<table>\n<thead>\n<tr>\n<th style=\"text-align: left;\">Situation<\/th>\n<th style=\"text-align: left;\">What happens<\/th>\n<th style=\"text-align: left;\">Consequence<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"text-align: left;\"><strong>ESG questionnaire from a business partner<\/strong><\/td>\n<td style=\"text-align: left;\">A major client sends an ESG questionnaire as a condition for renewing the contract. The data must be collected from HR, procurement, compliance and management within a few days.<\/td>\n<td style=\"text-align: left;\">No response or an inconsistent response = risk of losing the contract.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>Tender with environmental requirements<\/strong><\/td>\n<td style=\"text-align: left;\">The contracting authority requires environmental, social or supply-chain policies. The company does not have the necessary documents ready.<\/td>\n<td style=\"text-align: left;\">Exclusion from the procedure or a weaker bidding position.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>Investor due diligence<\/strong><\/td>\n<td style=\"text-align: left;\">An investor or fund asks about governance, employment policies, supplier relationships and environmental risks. The documentation is inconsistent or incomplete.<\/td>\n<td style=\"text-align: left;\">A prolonged process, a lower valuation and the use of ESG gaps as leverage in negotiations.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>Reporting to a corporate group<\/strong><\/td>\n<td style=\"text-align: left;\">The parent company needs ESG data from its subsidiaries for a consolidated report.<\/td>\n<td style=\"text-align: left;\">Chaotic data flows, no process owner and delays in group reporting.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>Where do these requirements come from?<\/h3>\n<ol>\n<li><strong>CSRD and ESRS<\/strong> \u2014 companies subject to reporting obligations must disclose data about their value chain, including suppliers and subcontractors.<\/li>\n<li><strong>CSDDD<\/strong> \u2014 large companies are building due diligence systems and requesting data from suppliers as part of their own procedures, even though the directive\u2019s application date has been postponed to 26 July 2029 (<a href=\"https:\/\/eur-lex.europa.eu\/eli\/dir\/2024\/1760\/oj\/pol\" target=\"_blank\" rel=\"noopener\">Source: EUR-Lex<\/a>).<\/li>\n<li><strong>Banks and financial institutions<\/strong> \u2014 they request ESG data for their own disclosures under the CSRD, the Taxonomy Regulation and the SFDR. This includes Scope 1\u20133 emissions, transition plans, taxonomy-related data, workforce metrics and supply-chain data (<a href=\"https:\/\/ps.stat.gov.pl\/PS\/2025\/4\/gus_ps_2025_04_maria_aluchna_maria_krawczynska-kaczmarek_demand_for_esg_data_evidence_from_the_polish_banking_sector.pdf\" target=\"_blank\" rel=\"noopener\">Source: Statistics Poland\u2019s Statistical Review<\/a>).<\/li>\n<li><strong>Market tools<\/strong> \u2014 platforms such as EcoVadis and CDP have become the standard for supplier assessments in many industries. They are not legislation, but their scores influence business partners\u2019 purchasing decisions.<\/li>\n<\/ol>\n<p>There is no single statutory ESG questionnaire \u2014 its scope depends on the purpose: credit, sustainability-linked financing, supplier assessment or portfolio reporting. Your company must therefore be prepared for different types of requests.<\/p>\n<p><a href=\"https:\/\/sawaryn.com\/en\/contact\/\">Contact us<\/a> \u2014 we will help you determine which ESG requirements apply to your company and what to prepare first.<\/p>\n<aside class=\"blog-article__inline-newsletter blog-article__inline-form flow\" aria-label=\"Article form\">\r\n                    <div class=\"blog-article__inline-newsletter-head flow\">\r\n                                    <h2>Let\u2019s talk about your case<\/h2>\r\n                                                    <p>Leave your contact details. We\u2019ll call you back to discuss the details.<\/p>\r\n                            <\/div>\r\n                <div class=\"form form--cf7 blog-article__newsletter-form blog-article__inline-form-form\">\r\n            \n<div class=\"wpcf7 no-js\" id=\"wpcf7-f769-o1\" lang=\"pl-PL\" dir=\"ltr\" data-wpcf7-id=\"769\">\n<div class=\"screen-reader-response\"><p role=\"status\" aria-live=\"polite\" aria-atomic=\"true\"><\/p> <ul><\/ul><\/div>\n<form action=\"\/en\/wp-json\/wp\/v2\/posts\/4565#wpcf7-f769-o1\" method=\"post\" class=\"wpcf7-form init\" aria-label=\"Contact form\" novalidate=\"novalidate\" data-status=\"init\">\n<fieldset class=\"hidden-fields-container\"><input type=\"hidden\" name=\"_wpcf7\" value=\"769\" \/><input type=\"hidden\" name=\"_wpcf7_version\" value=\"6.1.7\" \/><input type=\"hidden\" name=\"_wpcf7_locale\" value=\"pl_PL\" \/><input type=\"hidden\" name=\"_wpcf7_unit_tag\" value=\"wpcf7-f769-o1\" \/><input type=\"hidden\" name=\"_wpcf7_container_post\" value=\"0\" \/><input type=\"hidden\" name=\"_wpcf7_posted_data_hash\" value=\"\" \/>\n<\/fieldset>\n<p><label class=\"contact__field contact__field--wide\"><br \/>\n<span class=\"contact__label\">Imi\u0119 i\/lub nazwisko<\/span><br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"contact-name\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required contact__input\" autocomplete=\"name\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Jan Kowalski\" value=\"\" type=\"text\" name=\"contact-name\" \/><\/span><br \/>\n<\/label>\n<\/p>\n<div class=\"contact__field-grid\">\n\t<p><label class=\"contact__field\"><br \/>\n<span class=\"contact__label\">Telefon<\/span><br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"contact-phone\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-tel wpcf7-text wpcf7-validates-as-tel contact__input\" autocomplete=\"tel\" aria-invalid=\"false\" placeholder=\"+48 123 456 789\" value=\"\" type=\"tel\" name=\"contact-phone\" \/><\/span><br \/>\n<\/label>\n\t<\/p>\n\t<p><label class=\"contact__field\"><br \/>\n<span class=\"contact__label\">E-mail<\/span><br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"contact-email\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-email wpcf7-validates-as-required wpcf7-text wpcf7-validates-as-email contact__input\" autocomplete=\"email\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"jankowalski@xyz.com\" value=\"\" type=\"email\" name=\"contact-email\" \/><\/span><br \/>\n<\/label>\n\t<\/p>\n<\/div>\n<p><label class=\"contact__field contact__field--wide\"><br \/>\n<span class=\"contact__label\">Houston, mam problem...<\/span><br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"contact-message\"><textarea cols=\"40\" rows=\"10\" maxlength=\"2000\" class=\"wpcf7-form-control wpcf7-textarea contact__textarea\" aria-invalid=\"false\" placeholder=\"Chcia\u0142bym...\" name=\"contact-message\"><\/textarea><\/span><br \/>\n<\/label>\n<\/p>\n<div class=\"contact__privacy form__legal-notice\">\n\t<p>By submitting this form, you acknowledge that the personal data you provide will be processed by Kancelaria Prawna Sawaryn i Partnerzy sp.k. to handle your enquiry and contact you about it. Details are available in our <a href=\"https:\/\/sawaryn.com\/app\/uploads\/2026\/11\/Sawaryn-i-Partnerzy-Privacy-Policy-v1.0-en-GB.pdf\" target=\"_blank\" rel=\"noopener noreferrer\">Privacy Policy<\/a>. The rules governing the use of this website are set out in the <a href=\"https:\/\/sawaryn.com\/app\/uploads\/2026\/05\/regulamin-serwisu-S-P.pdf\" target=\"_blank\" rel=\"noopener noreferrer\">Terms and Conditions<\/a>.\n\t<\/p>\n<\/div>\n<p class=\"contact__submit-row\"><button type=\"submit\" class=\"button blog-article__newsletter-submit\">\r\n    <span class=\"button__label\">Submit<\/span>\r\n            <span class=\"button__icon\" aria-hidden=\"true\">\r\n                <span class=\"icon\" data-icon-size=\"sm\">\n        <img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/sawaryn.com\/app\/uploads\/2026\/05\/arrow-01.svg\" alt=\"\" class=\"icon__image\" aria-hidden=\"true\" width=\"11\" height=\"13\">\n    <\/span>\n            <\/span>\r\n    <\/button>\n<\/p><div hidden aria-hidden=\"true\"><label>Leave this field blank<input type=\"text\" name=\"asl_website\" value=\"\" tabindex=\"-1\" autocomplete=\"off\"><\/label><\/div><input type=\"hidden\" name=\"asl_started_at\" value=\"1794016472.ba51229e22282e2bd5df9a0faea5f8d72f765257adbdc9a00e0c52e2f02285cb\"><div id=\"sawaryn-turnstile-1\" class=\"cf-turnstile\" data-sitekey=\"0x4AAAAAAEM6UD_FpW1mXB2Y\" data-theme=\"light\" data-action=\"contact\"><\/div><div class=\"wpcf7-response-output\" aria-hidden=\"true\"><\/div>\n<\/form>\n<\/div>\n        <\/div>\r\n    <\/aside>\n<h2>Risks associated with being unprepared<\/h2>\n<p>A lack of ESG data is not an abstract \u201cregulatory risk&#8221;. It has tangible consequences that may affect your company in the coming months.<\/p>\n<h3>Financial and contractual risk<\/h3>\n<ol>\n<li><strong>Loss of a contract<\/strong> \u2014 a major client makes continued cooperation conditional on completing an ESG questionnaire. No response or an inconsistent response closes the door.<\/li>\n<li><strong>Exclusion from a tender<\/strong> \u2014 the contracting authority requires environmental or supply-chain policies. <a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/PL\/TXT\/?uri=OJ:C_202504412\" target=\"_blank\" rel=\"noopener\">The EU Committee of the Regions has confirmed<\/a> that public procurement may be used to pursue sustainable development objectives under existing legislation.<\/li>\n<li><strong>Lower transaction valuation<\/strong> \u2014 ESG gaps identified during due diligence may become grounds for reducing the price or prolonging the transaction process.<\/li>\n<li><strong>Restricted access to financing<\/strong> \u2014 banks are requesting ESG data on an increasingly broad basis, and failure to provide it may affect lending terms.<\/li>\n<\/ol>\n<h3>Operational risk<\/h3>\n<ol>\n<li><strong>No one owns the issue<\/strong> \u2014 ESG affects HR, procurement, sales, compliance, governance, communications, operations and finance. Without a designated person responsible, the issue \u201cfalls between departments&#8221;.<\/li>\n<li><strong>Documentation chaos<\/strong> \u2014 some policies exist, some are outdated, some \u201clive in emails&#8221;, and some do not exist at all.<\/li>\n<li><strong>No centralised source of data<\/strong> \u2014 no one knows what data the company already collects, who updates it and who approves its external disclosure.<\/li>\n<\/ol>\n<h3>Reputational and personal risk<\/h3>\n<ol>\n<li><strong>Greenwashing<\/strong> \u2014 a discrepancy between external communications and the procedures actually implemented. <a href=\"https:\/\/uokik.gov.pl\/zielona-ocena-czerwone-swiatlo-zarzut-dla-loreal-polska\" target=\"_blank\" rel=\"noopener\">On 16 September 2026, UOKiK brought allegations against L&#8217;Or\u00e9al Polska<\/a> concerning environmental communications. Allegations had previously been brought against <a href=\"https:\/\/uokik.gov.pl\/public\/en\/greenwashing-bolt-tchibo-and-zara-face-allegations-from-the-president-of-uokik\" target=\"_blank\" rel=\"noopener\">Bolt, Tchibo and Zara<\/a>. The maximum fine in UOKiK proceedings is <strong>10% of turnover<\/strong>. The burden of proving that an environmental claim is truthful rests with the business.<\/li>\n<li><strong>Management board liability<\/strong> \u2014 Article 77(2) of the Accounting Act makes it an offence to allow a management report not to be prepared or to include unreliable data in it. The penalty is a fine, imprisonment for up to 2 years, or both. Since an ESG report forms part of the management report, this provision expressly covers sustainability reporting violations (<a href=\"https:\/\/www.gov.pl\/web\/finanse\/jakie-sankcje-sa-przewidziane-za-nieterminowe-lub-niezgodne-z-wymogami-raportowanie2\" target=\"_blank\" rel=\"noopener\">Source: Ministry of Finance<\/a>).<\/li>\n<\/ol>\n<h3>The opposite risk: overinvestment<\/h3>\n<p>Launching a months-long reporting project that the company does not need can be just as costly as taking no action. If you are not subject to the reporting obligation, you do not need to prepare a full ESG report under the ESRS. You do, however, need to have your data, policies and responsibilities in order \u2014 proportionately to the requirements of your business partners, banks and investors.<\/p>\n<h2>What to do step by step \u2014 a phased preparation plan<\/h2>\n<p>The plan below provides for three levels of involvement. Choose the one that reflects the size of your company and the pressure from its business environment.<\/p>\n<h3>Step 1: determine the company\u2019s status<\/h3>\n<p>Answer the following question: are you subject to ESG reporting obligations directly, indirectly (through a corporate group or supply chain), or only to market expectations? Record this decision and the reasons for it \u2014 in writing, signed by the management board.<\/p>\n<h3>Step 2: review contracts and tender documentation<\/h3>\n<p>Review contracts with your largest clients for ESG clauses, supplier codes and disclosure obligations. List what you have already signed and the commitments you have made.<\/p>\n<h3>Step 3: build a responsibility map<\/h3>\n<p>Assign specific people to the following areas: HR, procurement, compliance, governance, data and communications. Appoint a single owner for the entire ESG area. Without one, every questionnaire will be a project built from scratch.<\/p>\n<h3>Step 4: take stock of your data<\/h3>\n<p>Determine what ESG data your company already collects, which system it is stored in, who updates it and who approves its external disclosure.<\/p>\n<h3>Step 5: review policies and procedures<\/h3>\n<p>Identify what exists and is up to date, what needs updating, what is missing, and what is unnecessary and unused.<\/p>\n<h3>Step 6: prepare an ESG questionnaire response pack<\/h3>\n<p>Create standard responses and a list of attachments, designate an approver and set a response deadline. The next questionnaire should not be a project built from scratch.<\/p>\n<h3>Step 7: verify the consistency of external communications<\/h3>\n<p>Compare the content on your website, in proposals and in sales materials with the procedures actually implemented. Remove any claims that you cannot substantiate with evidence \u2014 this is the fastest way to reduce the risk of greenwashing allegations.<\/p>\n<h3>Step 8: create a roadmap and establish a management cycle<\/h3>\n<p>Determine what you will implement in the current quarter, what you will implement in the next one, and what you are deliberately choosing not to do at this stage. Establish a quarterly ESG review at management board level.<\/p>\n<h3>Three levels of involvement<\/h3>\n<table>\n<thead>\n<tr>\n<th style=\"text-align: left;\">Option<\/th>\n<th style=\"text-align: left;\">Scope<\/th>\n<th style=\"text-align: left;\">Who it is for<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"text-align: left;\"><strong>Operational minimum<\/strong><\/td>\n<td style=\"text-align: left;\">Assessment of obligation status, gap map, list of priorities<\/td>\n<td style=\"text-align: left;\">Companies that are just getting started with ESG and want to know where to begin<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>Solid foundation<\/strong><\/td>\n<td style=\"text-align: left;\">As above + document review, data map, responsibility matrix<\/td>\n<td style=\"text-align: left;\">Companies facing pressure from business partners or preparing for due diligence<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>Full protection<\/strong><\/td>\n<td style=\"text-align: left;\">As above + a complete set of policies and procedures, a governance model, and support in responding to business partners and investors<\/td>\n<td style=\"text-align: left;\">Companies in the value chains of major corporations, preparing for a funding round or entering foreign markets<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>What you can require from your suppliers \u2014 and what they can require from you<\/h2>\n<p>This works both ways. If your business partners request ESG data from you, you can \u2014 and in some cases should \u2014 impose similar requirements on your suppliers.<\/p>\n<p>The reference point is <strong>VSME<\/strong> \u2014 a <a href=\"https:\/\/www.gov.pl\/web\/finanse\/dobrowolny-standard-sprawozdawczosci-zrownowazonego-rozwoju-dla-nienotowanych-msp-vsme\" target=\"_blank\" rel=\"noopener\">voluntary ESG reporting standard for SMEs<\/a> recommended by the European Commission. It is not mandatory, but defines a reasonable scope of data that a large company may expect from a smaller supplier.<\/p>\n<p>The \u201cvalue chain cap&#8221; concept in Omnibus I aims to limit data requests made by large entities to suppliers to the scope of the relevant simplified standard. Although a binding provision establishing a general prohibition on requesting data beyond the VSME has not yet been confirmed, the standard already provides a practical argument when negotiating the scope of questionnaires.<\/p>\n<p>What this means for you:<\/p>\n<ol>\n<li>If a business partner requests data that goes far beyond the VSME \u2014 you have grounds for negotiating the scope.<\/li>\n<li>If you request data from suppliers yourself \u2014 the VSME sets a reasonable proportionality limit.<\/li>\n<li>Preparing VSME-compliant responses makes it easier to handle multiple questionnaires in parallel \u2014 instead of building each response from scratch.<\/li>\n<\/ol>\n<h2>ESG, personal data protection and whistleblowers<\/h2>\n<p>Reporting ESG metrics \u2014 particularly social metrics \u2014 requires the processing of employee data. The GDPR does not contain a separate legal basis for \u201cESG&#8221;. Processing employee data for ESG metrics requires a legal basis under Article 6(1) of the GDPR and, for special categories of data, also under Article 9(2) of the GDPR.<\/p>\n<p>The ESG reporting obligation may provide a legal basis under Article 6(1)(c) of the GDPR (legal obligation) only where the specific entity is subject to a specific legal obligation. If your company is not covered by the CSRD \u2014 you cannot rely on this legal basis.<\/p>\n<p>Data from <a href=\"https:\/\/sawaryn.com\/en\/publikacje\/whistleblower-protection-esg-reporting\/\">whistleblowing investigations<\/a> may only be used for aggregated governance metrics \u2014 without disclosing anyone\u2019s identity or case details. <a href=\"https:\/\/uodo.gov.pl\/pl\/138\/3271\" target=\"_blank\" rel=\"noopener\">The Whistleblower Protection Act<\/a> prohibits disclosing a whistleblower\u2019s identity to unauthorised persons, while data from the reporting register must generally be retained for 3 years from the end of the calendar year in which the follow-up measures were completed (<a href=\"https:\/\/uodo.gov.pl\/pl\/501\/3485\" target=\"_blank\" rel=\"noopener\">Source: UODO<\/a>).<\/p>\n<p>Conclusion: before you begin collecting employee data for ESG purposes, determine the legal basis for processing and a scope of data proportionate to the purpose. Particularly if you are not subject to the reporting obligation, collecting excessive data may itself constitute a GDPR violation.<\/p>\n<h2>How we can help you<\/h2>\n<p>ESG is not a reporting project. It is about organising data, responsibilities and documentation \u2014 proportionately to what the market requires from you.<\/p>\n<p>We help technology, manufacturing and service companies navigate this process without overinvesting or leaving gaps. We combine corporate law, contract law and compliance into a single coherent model \u2014 tailored to the company\u2019s stage of development and business environment.<\/p>\n<p>Our support includes:<\/p>\n<ol>\n<li><strong>Assessment of obligation status<\/strong> \u2014 we determine whether your company is subject to the CSRD directly, indirectly or only through market pressure. We document the decision and the reasons for it.<\/li>\n<li><strong>Review of contracts and commitments<\/strong> \u2014 we check which ESG clauses you have already signed and what requirements your business environment imposes on you.<\/li>\n<li><strong>Responsibility and data map<\/strong> \u2014 we identify who in the company is responsible for each ESG area, where the data is stored and who approves it.<\/li>\n<li><strong>Review of policies and procedures<\/strong> \u2014 we identify what exists, what needs updating and what is missing.<\/li>\n<li><strong>ESG questionnaire response pack<\/strong> \u2014 we prepare standard responses, attachments and an approval procedure.<\/li>\n<li><strong>Communications review<\/strong> \u2014 we compare external claims with the procedures actually implemented and help eliminate the risk of greenwashing allegations.<\/li>\n<li><strong>Phased roadmap<\/strong> \u2014 we establish priorities: what you implement now, what you implement next quarter and what you deliberately choose not to do at this stage.<\/li>\n<\/ol>\n<p>We work across three levels \u2014 from assessment and prioritisation, through a review of documents and responsibilities, to full protection with a complete set of policies and procedures and support in responding to business partners and investors.<\/p>\n<h2>ESG affects your company \u2014 even if you are not required to report<\/h2>\n<p>The ESG reporting obligation has clear thresholds and phases. But market requirements are not waiting for changes under the simplification package. Major business partners, banks, investors and corporate groups are requesting ESG data now \u2014 including from companies that are not formally subject to the CSRD.<\/p>\n<p>Being unprepared means lost contracts, prolonged due diligence, a lower valuation and chaos within the organisation. Overinvestment means a months-long reporting project that the company does not need.<\/p>\n<p>The solution lies in the middle: determine your status, appoint an owner, take stock of your data, organise your documents and prepare a response pack \u2014 proportionately to the scale of your organisation and the requirements of its business environment.<\/p>\n<p>If you want to determine which ESG obligations apply to your company and what to prepare first \u2014 <a href=\"https:\/\/sawaryn.com\/en\/contact\/\">contact us<\/a>. We will help you complete the assessment, organise your documentation and build a phased action plan tailored to your business.<\/p>\n<h2>Frequently asked questions<\/h2>\n<p><strong>Does my company have to report on ESG if it does not meet the \u201clarge undertaking&#8221; thresholds?<\/strong><br \/>\nIf your company does not exceed at least 2 of the 3 thresholds (25 million z\u0142 in assets, 50 million z\u0142 in revenue, 250 employees) and is not listed on a regulated market \u2014 it is not formally subject to the sustainability reporting obligation. But this does not release you from the need to prepare ESG data if your business partners, banks or investors request it. Their reporting obligations cover the value chain \u2014 which includes you.<\/p>\n<p><strong>How should I respond to a major client that sends an ESG questionnaire with a one-week deadline?<\/strong><br \/>\nYou need a ready-made response pack: standard answers to typical questions, a list of attachments (policies, data, certificates), a designated approver and an agreed response deadline. Without this, every questionnaire becomes an emergency project involving HR, procurement, compliance and the management board. The VSME \u2014 the voluntary ESG reporting standard for SMEs \u2014 provides a reference point for the scope of the response.<\/p>\n<p><strong>Who should be responsible for ESG within the company?<\/strong><br \/>\nOne person should own the entire area \u2014 with a mandate from the management board. Depending on the company\u2019s structure, this may be someone from compliance, finance or operations. Reporting to that person should be those responsible for individual areas (HR for employee data, procurement for the supply chain, compliance for policies and governance). Without a designated owner, the issue \u201cfalls between departments&#8221; and no one controls data consistency or deadlines.<\/p>\n<p><strong>Do changes and simplifications to EU legislation (Omnibus I) mean that the obligations will not apply to me?<\/strong><br \/>\nOmnibus I narrowed the scope of the CSRD at EU level to companies employing more than 1000 employees and generating more than EUR 450 million in revenue. Poland must implement these changes by 19 March 2027 \u2014 until then, the existing national thresholds remain in force. Even after the changes, indirect obligations (business partner questionnaires, bank requirements and due diligence) will not disappear \u2014 they arise from your business partners\u2019 reporting obligations, not your own.<\/p>\n<p><strong>What risks do I face as a management board member if ESG data or claims turn out to be false?<\/strong><br \/>\nArticle 77(2) of the Accounting Act provides for a fine, imprisonment for up to 2 years, or both, for allowing a management report not to be prepared or to include unreliable data. An ESG report forms part of the management report. Independently of this, UOKiK may impose a fine of up to 10% of turnover for misleading environmental claims \u2014 and the burden of proving that a claim is truthful rests with the business.<\/p>\n<p><strong>Do I need a full ESG report, or is an organised set of data and policies enough?<\/strong><br \/>\nIf you are not subject to the reporting obligation \u2014 you do not need to prepare a full ESG report under the ESRS. You do, however, need organised data, up-to-date policies, a responsibility map and a ready-made questionnaire response pack. The scope depends on pressure from business partners, banks and investors \u2014 as well as the company\u2019s growth plans (a funding round, onboarding an enterprise client or expanding abroad).<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Even without a CSRD reporting duty, firms in Poland may face ESG data requests. Learn how to assess your status, organize records and answer questionnaires.<\/p>\n","protected":false},"author":13,"featured_media":4128,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":"","sip_alt_url":"","sip_en_pl_url":"","sip_pair_uuid":"824a2431-8200-436a-b8e3-89b38b822334","sip_pair_state":"partial"},"categories":[1580],"tags":[1555,1446,1531,1546,1532],"specialization":[1207],"practice_area":[],"class_list":["post-4565","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-compliance","tag-corporate-governance-en","tag-gdpr","tag-personal-data-protection","tag-risk-assessment","tag-whistleblowers","specialization-compliance"],"acf":[],"_links":{"self":[{"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/posts\/4565","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/comments?post=4565"}],"version-history":[{"count":6,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/posts\/4565\/revisions"}],"predecessor-version":[{"id":4931,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/posts\/4565\/revisions\/4931"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/media\/4128"}],"wp:attachment":[{"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/media?parent=4565"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/categories?post=4565"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/tags?post=4565"},{"taxonomy":"specialization","embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/specialization?post=4565"},{"taxonomy":"practice_area","embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/practice_area?post=4565"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}