LkSG compliance guide for Bangladesh garment sourcing — Germany brands
In brief: LkSG is enforced by what BAFA finds in your documentation — not by what your supplier's audit certificate says. Bangladesh sits at the top of Germany's country risk register.
1,000+
Employees in Germany
The 2024 LkSG mid-market threshold — down from 3,000 in 2023. Mid-market brands are now in scope.
BAFA
Who actually checks
The Bundesamt für Wirtschaft und Ausfuhrkontrolle reviews the documentation, not the certificates.
Annual
Public risk report
Published risk analysis and remedial action — between audit dates is what they read.
LkSG compliance for Bangladesh garment sourcing in Germany is not an audit problem. It is a monitoring problem. The Lieferkettensorgfaltspflichtengesetz, in force for large companies since January 2023 and for mid-market companies since January 2024, requires continuous risk management — not a stack of certificates renewed once a year. Most German brands sourcing from Bangladesh discover the gap only when BAFA asks for evidence between audit dates.
What LkSG actually requires from a sourcing operation?
The law applies to German companies with 1,000 or more employees and reaches into the supply chain in a specific way: direct suppliers must be assessed and monitored on an ongoing basis, and indirect suppliers must be addressed when the company has substantiated knowledge of a possible human rights or environmental violation. For Bangladesh garment sourcing, this means the buying house is a direct supplier and the factory is an indirect supplier — both fall within scope the moment a risk signal appears.
The duties themselves are concrete. Companies must conduct an annual risk analysis, implement preventive measures, take remedial action when violations are identified, run a complaints mechanism, and publish an annual report on BAFA's portal. The report is public. Anyone — competitors, journalists, NGOs — can read it. The law also covers environmental risks tied to Minamata, Stockholm and Basel Conventions, which matters in Bangladesh because finishing chemistry sits inside that scope.
Why Bangladesh sits at the top of the German risk register?
Bangladesh produces roughly $45 billion in garment exports annually and supplies a meaningful share of German fashion retail. It also carries documented sector risks that BAFA pays attention to: subcontracting outside the audited facility, wage delays during financially stressed periods, and chemical handling in finishing operations that are often outsourced to separate facilities not covered by the main BSCI audit.
When BAFA evaluates a German company's risk analysis, the question is whether the methodology recognises these specific risks or treats Bangladesh as a generic "high risk" country. The latter does not satisfy the law. A defensible LkSG file names the factory, identifies the specific risks at that facility, describes the controls in place, and shows evidence those controls are operating. This is where most German sustainable garment sourcing programmes fall short — they hold annual audit reports but cannot produce monitoring evidence from the months in between.
What is the documentation gap that BAFA actually finds?
A BSCI audit is a snapshot. The auditor walks the floor, reviews documents, scores the facility, and leaves. The certificate is valid until the next audit, typically twelve months later. LkSG asks a different question: what happened in those twelve months? If a wage payment slipped from the 7th to the 22nd of the month, if a subcontracted order moved to an unverified facility, if the finishing chemistry changed — the audit certificate does not show any of that.
This is the core operational point. The German Supply Chain Act expects monitoring records that sit between audit dates. We covered the specific documentation BAFA looks for in German Supply Chain Act mid-market documentation requirements — quarterly factory check-ins, wage payment timing records, capacity utilisation tracking, and written subcontracting prohibitions in every purchase order. A certificate file is not a monitoring file, and why BSCI audit scores do not predict delivery explains the same gap from the operational reliability angle.
What BAFA actually asks to see
Documented risk analysis per factory
Quarterly monitoring records
Preventive measures evidence
Grievance mechanism log
Annual public risk report
Records of remedial action taken
Records between audit dates
Tier 2 supplier visibility
Subcontracting evidence
Financial monitoring trail
Documented escalations
Evidence of action when risk emerged
What an LkSG Bangladesh buying house should be producing?
A buying house that takes LkSG seriously delivers four documentation streams per active factory, refreshed quarterly. First, financial health records: bank solvency certificate refreshed every six months, wage payment timing for the past quarter, and capacity utilisation against installed lines. Second, compliance documentation: current BSCI or SMETA report, LEED or equivalent environmental certification where applicable, OEKO-TEX certificates for finished goods, and chemical inventory for finishing operations.
Third, order-level controls: written subcontracting prohibition in the purchase order and service agreement, midpoint production report at 50% completion with floor photographs, and pre-shipment inspection by SGS, Bureau Veritas or Intertek at AQL 2.5. Fourth, a complaints channel that workers can actually use — translated into Bangla, accessible without going through factory management. Our own protocol is described in how Bengal Origin Co. vets factories financially, and it exists because a 2022 factory failure taught us audit certificates do not flag deteriorating bank credit.
How the responsibility splits between brand and buying house?
LkSG does not let the brand outsource its duties. The German company remains legally responsible. But the buying house can be contractually obligated to produce the operational records the brand needs to demonstrate due diligence. In practice, this means the service agreement should require the buying house to deliver quarterly compliance packs, conduct annual risk reassessment per factory, escalate any change in financial or subcontracting status within a defined window, and operate the worker grievance channel.
The brand's job is to integrate this material into the BAFA report, run the risk analysis methodology, and document remedial action when issues are identified. The buying house's job is to make sure the underlying facts are accurate and current. When the two roles are unclear in the contract, BAFA tends to find gaps on both sides during a portal review.
What This Means for European Brands
If your Bangladesh sourcing is currently documented by an audit certificate and an annual factory visit, your LkSG file is incomplete. The fix is not another audit. It is establishing monitoring routines that produce evidence between audit dates — quarterly financial health checks, wage timing records, written subcontracting controls, midpoint production reports, and an accessible grievance channel. This is operational work, not a certification purchase. German brands moving from generic country-risk language to factory-specific monitoring tend to find their BAFA reports become shorter and more defensible at the same time.
The practical next question is not whether your audit is current. It is whether you could answer a BAFA query about what happened at a specific Bangladesh factory in March of last year. If the honest answer is no, the gap is in the monitoring layer, and that is where the work sits. Further reading on the operational side is at bengalorigin.co/sourcing-intelligence/.
If your LkSG file relies on audit certificates and you are unsure what monitoring documentation BAFA would expect for your Bangladesh suppliers, I am happy to discuss what closing that gap looks like in practice.
Talk through your setup →