The Implementation Gap That Carries Legal Consequences
Human rights are no longer peripheral to business — they are fundamental to operational legitimacy and legal survival. The UN Guiding Principles on Business and Human Rights (UNGPs) establish that companies have a responsibility to respect human rights throughout their operations, yet 80% of the world’s 2,000 largest companies score zero on implementing human rights due diligence (HRDD). This implementation failure now carries severe consequences: the EU’s Corporate Sustainability Due Diligence Directive (CSDDD) mandates fines up to 5% of global net turnover, plus civil liability for damages.
The UNGPs Framework: From Voluntary to Mandatory
The UNGPs provide three pillars: the state’s duty to protect human rights, the corporate responsibility to respect them, and access to remedy for victims. For businesses, Pillar II concentrates legal exposure. This requires HRDD — a systematic process to identify, prevent, mitigate, and account for impacts on human rights. HRDD must evolve continuously as operations and context change, assessing not only direct impacts but also those the company contributes to through business relationships.
Most organisations fail here: they assess their own operations but ignore value chains, where severe human rights abuses typically occur. This gap has become legally indefensible.
Legislative Reality: CSDDD Enforcement
The CSDDD transforms voluntary HRDD into mandatory legal obligation for large EU and non-EU companies. Supervisory authorities designated by Member States can conduct investigations, require information disclosure, and impose penalties. Financial penalties are based on global net turnover, with maximum fines of at least 5% — double the 2% maximum under Germany’s Supply Chain Due Diligence Act (LkSG). Beyond fines, penalty decisions are published and remain publicly available for at least five years. This publication period matches the minimum limitation period for civil liability claims, deliberately facilitating third-party lawsuits. Companies also face potential exclusion from public procurement, temporary operation bans, and compliance orders.
The civil liability regime is particularly significant: if a company fails to prevent or mitigate adverse human rights or environmental impacts, it can be held liable for damages. Injured parties can be represented by trade unions, NGOs, and human rights institutions — creating exposure to strategic litigation that goes well beyond regulatory fines.
Why Implementation Fails: Three Structural Barriers
Research shows 80% of assessed companies score zero on initial HRDD steps. Three barriers consistently emerge:
Organisational misalignment: HRDD sits in sustainability or compliance without integration into procurement, product development, or operational decision-making. It becomes a reporting exercise rather than risk management.
Supply chain opacity: Companies lack visibility beyond Tier 1 suppliers. Severe human rights impacts occur deep in supply chains, remaining invisible without proactive mapping and engagement.
Resource constraints vs. regulatory demands: High-impact sectors — textiles, minerals, agriculture — employ 160 million workers. Systematic HRDD across these value chains requires sustained investment, but many companies deprioritise the work without external accountability pressure.
Making HRDD Operational: Four Dimensions
Successful embedding requires four interconnected dimensions — not sequential steps, but simultaneous integration across the organisation:
- Governance structures that give board-level oversight of HRDD effectiveness — not just reporting on activities completed, but testing whether the process is identifying and reducing actual risk to people. This means assigning named accountability at C-suite level and building HRDD into board agendas, not sub-committee minutes.
- Procurement processes with enforceable human rights clauses — supplier contracts that require HRDD compliance, with audit rights and escalation pathways for identified risks. Procurement incentives must reward human rights alignment, not just cost reduction.
- Risk assessment methodologies that identify risks to people, not just risks to the business. Most corporate risk frameworks invert this — they ask “what is the risk to us?” rather than “what harm are we causing or enabling?” The UNGPs require the latter. This distinction is not semantic; it determines what gets measured and therefore what gets managed.
- Operational-level grievance mechanisms that workers, communities, and supply chain partners can access safely and confidentially — without fear of retaliation. The OECD Guidelines for Multinational Enterprises set the benchmark for what effective non-judicial grievance mechanisms look like in practice.
Strategic Positioning
Companies proactively integrating HRDD position themselves ahead of legislation, avoid cascading legal liability, maintain investor access, and secure supply chain relationships as larger partners mandate compliance. Those that delay face reactive compliance retrofitted onto incompatible systems — at significantly higher cost and under regulatory scrutiny rather than on their own terms.
The UNGPs provide the roadmap. The CSDDD provides enforcement. The 80% implementation failure rate proves the gap remains. Your competitive advantage lies in closing it first.
EquiGlobal Solutions works with organisations across sectors to build human rights due diligence frameworks, governance structures, and operational tools that meet CSDDD requirements and international standards. Explore our services.