Netcrook Logo
👤 SECPULSE
🗓️ 03 Mar 2026   🌍 Europe

Europe’s Sustainability Reset: Has Omnibus I Made Corporate Green Rules Toothless?

Sweeping EU reforms promise lighter ESG reporting for companies - but at what cost to the continent’s green ambitions?

On a cold December night in Brussels, the European Parliament cast a vote that signaled a seismic shift in the continent’s approach to corporate sustainability. The approval of “Omnibus I” was billed as a victory for business - slashing red tape, delaying deadlines, and promising relief from the ever-expanding web of ESG obligations. But beneath the surface, critics warn, this regulatory overhaul may have handed European industry a free pass just as environmental and social risks reach a boiling point.

The Great EU Green Rollback?

For years, the EU’s Green Deal and its ESG directives set a global gold standard for corporate transparency and responsibility. But by late 2025, with European industry squeezed by energy prices, geopolitical instability, and mounting compliance costs, political winds shifted. Omnibus I emerged as a direct response: a simplification package that promised to cut administrative burdens by up to 35% for SMEs and 25% for all companies.

The heart of the reform is a dramatic narrowing of who must comply. The Corporate Sustainability Reporting Directive (CSRD) now targets only the largest players - those with more than 1,000 employees and €450 million in turnover. The Corporate Sustainability Due Diligence Directive (CSDDD) is even stricter, applying only to firms with over 5,000 staff and €1.5 billion in sales. The result? An estimated 90% of companies previously ensnared by reporting rules are now off the regulatory hook. Some EU countries will have fewer than forty firms still required to file mandatory sustainability reports.

Winners, Losers, and the New Compliance Landscape

For the majority of European businesses - especially SMEs - Omnibus I offers immediate relief. No more scrambling to compile ESG data for big customers, no more labyrinthine reporting standards. The volume of mandatory disclosures is slashed by over 60%, and sector-specific reporting becomes optional. Deadlines for compliance are pushed back, with full enforcement for some rules postponed until 2029.

But the story isn’t so simple. Critics warn that by reducing the scope and intensity of green rules, the EU risks undermining its own climate goals and losing global credibility. The “cascade effect” - where large companies pressure smaller suppliers for ESG data - has been curtailed, but at the risk of reducing transparency in vast swathes of the supply chain. And with civil liability devolved back to national courts, enforcement may become patchy and unpredictable.

Italy’s Corporate Crossroads - and a European Dilemma

In Italy, the new rules are a double-edged sword. Freed from mandatory compliance, many companies may see short-term savings and less bureaucracy. But those who see ESG as a path to market leadership are already moving to voluntarily adopt international standards, recognizing that investors, customers, and global partners still demand robust sustainability data.

The central question remains: does Omnibus I mark a pragmatic reset, or a retreat from green leadership? The answer will be written not in law books, but in balance sheets, supply chains, and the resilience of European industry in the face of intensifying environmental shocks.

WIKICROOK

  • ESG: ESG in cybersecurity assesses how organizations manage cyber risks within their environmental, social, and governance frameworks for responsible business conduct.
  • CSRD: CSRD is an EU directive mandating large companies to report standardized sustainability and ESG data, enhancing transparency, comparability, and accountability.
  • CSDDD: CSDDD is an EU directive requiring companies to identify and address human rights and environmental risks across their value chains.
  • SMEs: SMEs are small and medium-sized enterprises, often at higher cyber risk due to limited resources and less robust security compared to larger organizations.
  • Value Chain: The value chain covers all steps in creating and delivering a product or service, highlighting cybersecurity risks and protection needs at each stage.
Sustainability Omnibus I ESG

SECPULSE SECPULSE
SOC Detection Lead
← Back to news