How do you design due diligence systems that meet legal expectations and work in practice?
What the law requires
Human rights and environmental due diligence laws — including the EU Corporate Sustainability Due Diligence Directive (CSDDD), the EU Forced Labour Regulation and national Modern Slavery Acts — require organisations to demonstrate structured, risk-based processes across their operations and value chains.
These regimes generally establish obligations of means, not outcomes. Organisations are expected to take reasonable, proportionate steps to identify, prevent, mitigate and address adverse impacts — and to be able to demonstrate how those steps are designed, applied and reviewed over time.
Where implementation typically breaks down
For legal, risk and compliance teams, the main concern is usually how these standards are translated into operating reality.
This typically centers around:
- how risks are identified and prioritised across complex value chains,
- how responsibilities are embedded in procurement and other business processes,
- how actions are documented and monitored, and
- how persistent issues are escalated through governance structures.
When these elements are designed in isolation, due diligence becomes fragmented. Effort and documentation increase, but ownership weakens, risk insight remains limited, and systems become difficult to defend, maintain or scale.
Human Rights and Environmental Due Diligence
Designing due diligence that works in practice
We support organisations in designing and implementing due diligence systems that align legal requirements with existing governance, risk management, procurement and operational processes.
Our approach is grounded in the OECD Guidelines for Multinational Enterprises and the UN Guiding Principles on Business and Human Rights, which underpin most human rights and environmental due diligence legislation.
The focus is on pragmatic, proportionate and risk-based systems that function within day-to-day decision-making — not parallel compliance structures.
This means working through existing business processes, clarifying how risks are identified, prioritised and addressed, and ensuring documentation, monitoring and escalation are built into established controls.
The result is due diligence systems that are designed to operate consistently over time and under real business and regulatory pressure, without relying on theoretical compliance or standalone structures.
More on Human Rights and Environmental Due Diligence