EUDR Compliance for Fashion Brands: What to Do Before December 2026

What is the EUDR and why does it affect fashion?

The EU Deforestation Regulation (EUDR) requires companies placing certain commodities on the EU market to prove those products are deforestation-free and were produced in compliance with the laws of the country of production. The seven commodities are cattle, wood, soy, palm oil, cocoa, coffee and rubber — but scope is defined by specific customs codes in Annex I, not by the commodity in the abstract, and that distinction is where most fashion brands get their scoping wrong.

Important update — leather was removed from scope in July 2026. On 13 July 2026 the Commission adopted a delegated act deleting cattle hides, skins and leather (HS 4101, 4104 and 4107) from Annex I, alongside re-treaded tyres, articles of vulcanised rubber, soybeans for sowing and vehicle seats. It also added soluble coffee, certain palm oil derivatives and frozen cattle tongues. The act is with the European Parliament and Council for scrutiny before it enters into force. Beef remains in scope; leather does not. The Commission's 2030 review may revisit this, and leather deforestation risk remains squarely in scope of ESRS E4, TNFD and your customers' own requirements — it is simply no longer an EUDR due diligence obligation.

For a typical fashion brand the in-scope items are narrower than most people assume, and finished goods are the common misconception. Leather footwear and handbags, viscose knitwear and rubber-soled trainers are not listed in Annex I. What is in scope sits further upstream: dissolving wood pulp and other wood products, natural rubber in its raw and specified processed forms, and soya beans, oil and meal. Your exposure depends on what your legal entity actually places on the EU market, not on what your finished products are made of — if an EU supplier imports the pulp or the rubber, the obligation sits with them, though they will pass the data request to you.

Timing depends on your size: 30 December 2026 for medium and large operators and traders, and 30 June 2027 for micro and small enterprises. Note the regulation entered into force in June 2023; these are the dates it starts to apply.

What the EUDR actually requires you to do

Compliance is not a certification. It is a due diligence process documented in a Due Diligence Statement (DDS) filed with the EU's Information System before each shipment. That DDS must include:

• Geolocation data — GPS coordinates or plot polygons for every production site where the commodity was grown or raised
• Risk assessment — a documented assessment of the deforestation risk attached to each sourcing location, using satellite data, certification status, and country/commodity risk classification
• Risk mitigation — if risk is non-negligible, evidence of steps taken to reduce it (supplier audits, certification requirements, alternative sourcing)

The geolocation requirement is the biggest practical hurdle. Most fashion brands have supplier names and countries of origin. They do not have GPS coordinates for the farms, ranches, and plantations that supply their T2 and T3 suppliers. Closing that gap is the central challenge of EUDR compliance.

The four commodities that matter most for fashion

Leather — no longer an EUDR obligation, still a nature risk. Brazil is the largest single exporter of bovine leather, and the Cerrado — the world's most biodiverse savanna — has lost over half its native vegetation, much of it to cattle ranching. Following the July 2026 delegated act this no longer creates an EUDR due diligence duty, but it remains material under ESRS E4 and TNFD, and Leather Working Group certification is a tannery-level scheme rather than a farm-level deforestation guarantee. If you have already built leather traceability, keep it.

Viscose and lyocell. Both are made from dissolving wood pulp. Around 30% of that pulp is sourced from regions where ancient and endangered forests are actively logged — parts of Canada, Russia, and Indonesia. The Canopy "HotButton" assessment provides a supplier-by-supplier risk ranking. Switching to FSC- or PEFC-certified dissolving pulp is the standard mitigation.

Cotton. Cotton is not listed under EUDR Annex I. However, cotton textile processing often involves soy-based inputs, and the political pressure to extend the regulation to cotton is growing. Build your supplier geolocation capability now — the infrastructure you create for leather and viscose will serve you if cotton is added.

Rubber. Athletic and outdoor brands with rubber soles sourced from Southeast Asia (Thailand, Indonesia, Malaysia) have direct EUDR exposure. Natural rubber plantations have driven significant deforestation in these regions over the past decade.

A practical timeline to December 2026

The brands that will hit the December deadline comfortably are those who started geolocation collection in 2025 and are now in test-filing mode. If you haven't started, here is the minimum viable timeline:

• Now (Q2–Q3 2026): Complete a commodity exposure classification. Which products are in scope? What countries do they come from? This gives you your risk matrix and tells you where to focus supplier outreach.
• Q3 2026: Issue a supplier questionnaire to your highest-volume, highest-risk T1 suppliers requesting site coordinates for their raw material origins. For leather: the slaughterhouse or feedlot. For viscose: the pulp mill.
• Q3–Q4 2026: Screen received coordinates against GFW deforestation data and WDPA protected areas. Any sites with alerts require escalation — either risk mitigation evidence or a sourcing switch.
• November 2026: Prepare draft DDS filings for your first shipments and run them through the EU's Information System in test mode.
• 30 December 2026: Go live. All new shipments require a filed DDS.

The gap matrix approach

The most useful internal tool you can build is a gap matrix: a ranked list of every supplier site, showing which sites have geolocation data, which have been screened, which have certificates, and which have open gaps. Gaps are classified by severity — geolocation missing for a high-risk country is Critical; missing certificate coverage for a low-volume, low-risk supplier is Medium.

This matrix becomes your compliance roadmap. It tells your procurement team where to focus supplier engagement, your legal team where you carry liability, and your board what your compliance pathway looks like.

What happens if you miss the deadline?

Non-compliance can result in fines of up to 4% of EU annual turnover, confiscation of goods, and exclusion from public procurement. The EU has signalled that enforcement will begin with high-risk commodities and high-volume operators — but small and medium brands are not exempt.

More practically: your EU retail partners will require DDS documentation from you as a condition of purchase. Brands without it will find doors closed regardless of the formal enforcement timeline.