← Sourcing Intelligence

What the EU CSDDD actually requires from your Bangladesh sourcing partner

The EU Corporate Sustainability Due Diligence Directive is not a distant regulation. For companies above the thresholds already in scope, obligations are live. For mid-market brands, the effective date is approaching. The question is not whether CSDDD applies to your business — it is whether your current Bangladesh sourcing setup can satisfy what it requires.

This article is a plain-English guide to what the directive means operationally — not what it says in legal language, but what it requires you to actually do when sourcing garments from Bangladesh.

What CSDDD actually requires in plain English

The directive imposes three core obligations on companies within scope:

Identify adverse impacts. You must identify actual and potential adverse human rights and environmental impacts in your supply chain. This is not a one-time exercise. It is an ongoing obligation that requires a systematic process — not a questionnaire sent once a year.

Prevent or mitigate those impacts. Where you identify risks, you must take action to prevent them from occurring or mitigate their effects. This means documented action plans, not awareness. You need to show what you did, not just that you knew.

Provide remedy. Where adverse impacts have already occurred, you must provide or facilitate remediation. This requires a complaints mechanism or grievance process accessible to affected stakeholders.

Critically, "supply chain" under CSDDD means your direct suppliers and their suppliers. If you source from Bangladesh through a buying house, the buying house is your direct supplier (Tier 1) and the factory is your indirect supplier (Tier 2). Both are in scope. You are responsible for due diligence across both tiers — not just the entity you have a contract with.

What this means for your buying house relationship

Most European brands sourcing from Bangladesh do so through a buying house or sourcing agent. Under CSDDD, the buying house becomes a critical node in your due diligence chain. Your buying house must be able to provide:

• Documented evidence of how factories are selected and vetted. A buying house that says "we know the factories" is not providing due diligence documentation. You need a written factory selection protocol — what criteria are assessed, how factories enter the network, and what triggers removal.
• Ongoing monitoring information, not just one-time audit results. A BSCI audit conducted twelve months ago tells you about one day in that factory's history. CSDDD requires ongoing due diligence — continuous or periodic monitoring that reflects current conditions, not historical snapshots.
• Documented communication when risks are identified. If your buying house identifies a risk at a factory — a compliance lapse, a financial stress signal, a subcontracting incident — you need evidence that the risk was documented, communicated to you, and addressed through a defined process.
• Evidence that subcontracting is disclosed and controlled. Undisclosed subcontracting is one of the highest-risk areas in Bangladesh garment sourcing. Under CSDDD, if your production is subcontracted to a facility you have not assessed, you have a due diligence failure — even if your buying house arranged it.

A buying house that provides a BSCI certificate and calls that due diligence is not CSDDD-ready. The directive requires a system, not a document.

The documentation gap most brands have

In my experience, most European brands sourcing from Bangladesh can produce the first list below. Very few can produce the second.

What most brands have:

• A compliance certificate (BSCI, Sedex, or equivalent) for their primary factory
• A signed purchase order with their buying house
• A general code of conduct document

What CSDDD requires:

• A factory financial health assessment — not just compliance, but operational viability
• A subcontracting disclosure policy with signed factory confirmation for each order
• A documented process showing how the buying house escalates identified risks to the brand
• Ongoing monitoring records — not annual audit snapshots, but periodic checks between audits
• A complaints or grievance mechanism accessible to workers at the factory level

The gap between these two lists is the CSDDD compliance gap. Most brands discover it when a regulator, a retail partner, or a journalist asks for documentation that does not exist.

The German Supply Chain Act as a head start

Brands supplying the German market or with German operations are already subject to the Lieferkettensorgfaltspflichtengesetz — the German Supply Chain Due Diligence Act. This legislation, in force since 2023 for large companies, requires German companies to conduct human rights and environmental due diligence across their supply chains.

The German act covers similar ground to CSDDD: risk identification, prevention measures, remediation obligations, and documentation requirements. It has already expanded to cover companies with 1,000 or more employees, and its scope continues to broaden.

If your business is already compliant with the German Supply Chain Act, you are largely CSDDD-ready — the frameworks are closely aligned. For brands not yet subject to the German act, it provides a useful preview of what CSDDD implementation looks like in practice. The documentation standards, the monitoring requirements, and the depth of due diligence expected are substantively similar.

Five questions to ask your Bangladesh sourcing partner today

Whether CSDDD applies to your business now or in the near future, these five questions will tell you whether your current sourcing relationship can support the level of due diligence the directive requires:

1. Can you provide a written factory selection and vetting protocol? Not a description of how you choose factories — a documented protocol with defined criteria, assessment procedures, and acceptance thresholds.
2. Do you maintain ongoing monitoring records between audit dates? If the answer is "we rely on the annual BSCI audit," that is a gap. CSDDD requires ongoing due diligence, not periodic audits alone.
3. Do you have a subcontracting prohibition policy with signed factory confirmation? Verbal agreements are not documentation. You need a written, signed confirmation from each factory for each order that subcontracting will not occur without explicit buyer consent.
4. Can you provide a documented escalation protocol for identified risks? When a problem is identified — a compliance lapse, a financial warning sign, a delivery risk — what is the defined process for escalating it to the European buyer? Is it documented? Has it ever been used?
5. Can you produce this documentation within 48 hours if a customer or regulator asks? CSDDD compliance is not theoretical. If a regulator asks for your due diligence documentation, you need to be able to produce it quickly, completely, and in a format that demonstrates a systematic process — not an ad hoc response assembled under pressure.

If the answer to any of these questions is no, slow, or vague, your current sourcing relationship has a CSDDD documentation gap. The gap is not necessarily a reason to change partners — but it is a reason to start a conversation about what closing it requires.

---

At Bengal Origin Co., every element of our sourcing process is documented against the CSDDD framework. Our factory vetting protocol, ongoing monitoring records, subcontracting prohibition documentation, and escalation procedures are maintained continuously — not assembled when someone asks. If you would like to see what CSDDD-ready sourcing documentation looks like in practice, I am happy to share our framework as a reference point.