UK CMA Green Claims
Disclosing Scope 3
Assurance on Scope 3 Data
Actions (Through 2025)
Understanding Scope 1, 2, 3 — Where 70–90% of Your Carbon Footprint Hides
Before diving into regulations, you need absolute clarity on what you're being asked to measure. The GHG Protocol — the global standard for emissions accounting — splits corporate emissions into three scopes. And the uncomfortable truth is: the scope that's hardest to track is the one that matters most.
Factory furnaces, company vehicles, on-site fuel combustion
Purchased electricity, steam, heating, cooling
Purchased goods, transport, distribution, product use, end-of-life
The GHG Protocol defines 15 categories of Scope 3 emissions — from purchased goods and services (Category 1) through end-of-life treatment of sold products (Category 12) to franchises and investments (Categories 14–15). For most manufacturers, Category 1 (purchased goods) alone dwarfs all of Scope 1 and 2 combined.
⚠ The Core Problem
Reporting Scope 1 and 2 while ignoring Scope 3 is like measuring a factory's energy bill but ignoring its entire supply chain. Under new regulations, this is no longer just incomplete — it is potentially legally actionable greenwashing.
This is exactly why regulators worldwide are now mandating Scope 3 disclosure. Let's map the regulatory landscape.
6 Regulations Reshaping Supply Chain ESG in 2026
The global ESG regulatory landscape in 2026 is defined not by retreat, but by recalibration and enforcement. Here is every regulation that now carries financial penalties for your supply chain:
| Regulation | Jurisdiction | Scope 3 Required? | Enforcement Date | Penalty |
|---|---|---|---|---|
| EU CSRD | EU (50,000+ firms) | Yes (material) | Phased 2024–26 | Up to 5% global revenue |
| EU CBAM | EU importers | Embedded emissions | Jan 2026 (definitive) | Certificate costs + penalties |
| California SB 253 | US ($1B+ revenue) | Yes (from 2027) | Scope 1&2: 2026 | Up to $500,000/year |
| New York Climate Law | US ($1B+ revenue) | Yes (from 2028) | Scope 1&2: 2027 | $100,000/day |
| UK CMA Green Claims | UK (all sectors) | Claims must be verified | Jan 2026 guidance | Up to 10% global turnover |
| India SEBI BRSR | India (top 1,000 listed) | Value chain (phased) | FY 2025–26 mandatory | LODR violations + penalties |
Notice the pattern: every major economy is now moving from voluntary disclosure to mandatory, assured, and penalised ESG reporting — with Scope 3 as the central battleground.
🔗 Related Reading
For a deeper analysis of how supply chain disruptions cascade through KPIs under regulatory stress, see our 10 Supply Chain Risks for 2026–2030 & Their Metric Impact newsletter, which maps 15 KPIs against disruption scenarios including regulatory and ESG risk.
Carbon Costs Now Hit Your Supply Chain — CBAM Is Live
The EU Carbon Border Adjustment Mechanism moved from its transitional reporting phase to its definitive operational phase on 1 January 2026. This is no longer about filing quarterly reports — it is about financial liability.
Now Operational
Cement, Fertilisers, Electricity, Hydrogen
50 Tonnes Must Comply
& Certificate Surrender
What CBAM Means for Supply Chain Operations
If your supply chain touches steel, aluminium, cement, fertilisers, electricity, or hydrogen flowing into the EU, you must now:
- Register as an authorised CBAM declarant (applications by 31 March 2026 for provisional importing)
- Collect actual emissions data from non-EU suppliers — not estimates
- Purchase CBAM certificates to cover embedded emissions (available from February 2027)
- Submit annual declarations — first due by September 2027 for 2026 imports
- Have embedded emissions verified by an accredited verifier
"CBAM effectively mandates upstream Scope 3 visibility from global suppliers. If your supplier cannot provide actual emissions data, your procurement costs will increase — and your EU customers may look elsewhere."
— Mathnal Analytics, Supply Chain Risk IntelligenceFor Indian exporters specifically: if you export steel or aluminium to the EU, your European buyers will require your actual emissions data. This is not optional — goods can be delayed at customs or blocked at the EU border for non-compliance. See Mathnal's Supply Chain Risk & Procurement services for how we help companies navigate CBAM exposure.
SEBI's Value Chain Disclosure Gets Real in FY 2025–26
India's ESG regime is no longer a distant aspiration. SEBI's Business Responsibility and Sustainability Report (BRSR) has evolved from voluntary disclosure into a strictly enforced framework with mandatory value chain reporting now in effect.
The Operational Reality for Indian Companies
For a typical mid-cap Indian manufacturer, the value chain disclosure requirement means collecting ESG metrics from 20–40 key suppliers and distributors. The problem: most of these suppliers are MSMEs with no ESG reporting infrastructure. They don't track Scope 1 and 2 emissions. They don't measure water consumption. They have no waste management data.
✅ Practical Recommendation
Identify your top 10 value chain partners by transaction value and treat them as capability-building priorities. Get them to baseline Scope 1 and 2. Get them to track water and waste. Don't try to boil the ocean. For analytical infrastructure to support this, explore Mathnal's SC Intelligence Dashboard Suite — designed for real-time KPI monitoring across supply chain tiers.
Penalties, Criminal Investigations, and the Litigation Surge
Greenwashing — making unsubstantiated, misleading, or exaggerated environmental claims — is no longer a reputational nuisance. It is a legal, financial, and criminal risk that is accelerating globally.
% of Global Revenue
Annual Penalty Cap
Per Day Fine (from 2028)
% of Global Turnover
The UK CMA Supply Chain Guidance — A Game Changer
In January 2026, the UK Competition and Markets Authority published new guidance that fundamentally reshapes liability for environmental claims across supply chains. The key principle: responsibility is shared. Every business that makes, repeats, or enables environmental claims can be held liable.
- Retailers cannot rely blindly on supplier assurances — they must take "reasonable steps" to verify
- Liability does not depend on intent — an "innocent" breach remains a breach
- It is not a defence to argue that you took all reasonable precautions
- Daily penalties for continued non-compliance, calculated by reference to global turnover
Criminal Enforcement Is Now Real
In Germany, criminal investigations have been opened into alleged greenwashing, including potentially false ESG statements about financial products. In France, courts have ruled that public statements on carbon neutrality can amount to greenwashing if they misrepresent a company's actual trajectory. In the US, over 150 greenwashing class actions were tracked through early 2025, with California and New York as the most active venues.
⚠ The EU EmpCo Directive — September 2026
The EU's Empowering Consumers for the Green Transition Directive takes effect in September 2026, explicitly banning vague environmental claims that cannot be substantiated ("eco-friendly", "sustainable", "green"), prohibiting unreliable sustainability labels, and banning false claims about product environmental characteristics. If your packaging or marketing uses these terms without verifiable evidence — you are exposed.
8 Warning Signs You're Exposed to Greenwashing Risk
Before regulators, investors, or litigation discover your exposure — assess it yourself. If your organisation exhibits three or more of the following, your ESG compliance posture requires immediate attention:
- Vague claims without evidence — Marketing or reports use terms like "eco-friendly", "sustainable", or "green" without specific, verifiable data backing each claim
- Scope 3 blind spot — You report Scope 1 and 2 emissions but have no systematic approach to measuring value chain (Scope 3) emissions, which typically represent 70–90% of your footprint
- Cherry-picking metrics — You highlight improving areas (e.g., facility energy efficiency) while omitting deteriorating ones (e.g., transport emissions growth, supplier carbon intensity)
- Spend-based estimates only — Your Scope 3 figures rely entirely on spend-based emission factors rather than supplier-specific primary data
- Targets without roadmaps — You've published net-zero or carbon reduction targets but lack credible interim milestones, investment plans, or decarbonisation pathways
- No third-party assurance — Your ESG data has never been independently verified or assured by an accredited external party
- Claims-practice misalignment — Your public sustainability communications do not match your actual procurement, logistics, or production practices
- Missing methodology — You cannot produce GHG Protocol-aligned documentation showing how your emissions figures were calculated, what boundary conditions were used, and what assumptions were made
🔗 Diagnose Your Exposure
Mathnal's Supply Chain Risk & Resilience Simulator (SCRRS) uses a Bayesian risk engine to quantify compliance and disruption risk probability across your supply chain — including ESG regulatory exposure. Our free diagnostic suite includes inventory health checks and forecast accuracy audits that feed into risk modelling.
6 Pillars for Genuine ESG Compliance
Genuine compliance is not about filing reports. It is about building operational infrastructure that produces verifiable, auditable, and defensible ESG data — continuously, not annually.
1. GHG Protocol Alignment
Map all 15 Scope 3 categories against your operations. Determine which are material using the SBTi 40% threshold. Document your organisational and operational boundaries. Use the GHG Protocol's calculation approaches — not custom methodologies that auditors won't accept.
2. Primary Data Collection
Move beyond spend-based estimates. Deploy supplier portals, ERP integrations, and IoT sensors to collect primary emissions data from Tier 1 and critical Tier 2 suppliers. Where primary data is unavailable, use activity-based estimates calibrated against real data. See Mathnal's Analytics & Dashboard services for deployment models.
3. Independent Assurance
Obtain limited assurance (moving to reasonable assurance) from accredited third parties on your Scope 1, 2, and 3 data. This is already mandatory under BRSR Core, EU CSRD, and California SB 253. Don't wait for enforcement — build the audit trail now.
4. Science-Based Targets
Set reduction targets validated by the SBTi. Include Scope 3 if it exceeds 40% of total emissions (for most companies, it does). Publish interim milestones — not just 2050 net-zero aspirations. Investors and regulators are increasingly treating targets without credible pathways as greenwashing.
5. Claims Governance
Establish a cross-functional review process for every environmental claim in marketing, packaging, investor communications, and supplier contracts. Document evidence for each claim. Under the UK CMA guidance, unsupported claims are legally actionable regardless of intent. Learn more about Mathnal's Risk Intelligence solutions.
6. AI-Powered Monitoring
Deploy continuous monitoring systems that track emissions KPIs in real-time, flag anomalies, model decarbonisation scenarios, and auto-generate multi-framework reports. Mathnal's Agentic AI Systems provide autonomous monitoring across the supply chain — see our SC Risk Intelligence Monitor.
How AI & Analytics Close the Scope 3 Gap
The core challenge of Scope 3 compliance is data. Value chain emissions data is fragmented, inconsistent, often unavailable, and expensive to collect manually. This is precisely where supply chain AI and analytics provide disproportionate value.
Automated Data Collection
Integrate supplier portals, ERP systems, IoT sensors, and procurement platforms into a unified emissions data pipeline. Python-based ETL pipelines normalise and validate data automatically. See Mathnal's ML Engineering & MLOps services.
ML-Based Emissions Estimation
When primary supplier data is unavailable, ML models trained on actual emissions data can estimate Scope 3 emissions with significantly higher accuracy than spend-based factors — especially for demand forecasting and procurement categories.
Bayesian Risk Quantification
Mathnal's Bayesian risk engine quantifies compliance risk probability across suppliers and geographies — the same approach used in our Bayesian stockout optimisation methodology, applied to ESG regulatory exposure.
Scenario Simulation & Pathways
Monte Carlo simulation for decarbonisation pathway planning — quantifying the cost, timeline, and probability of achieving reduction targets under different scenarios. Our SC Optimization & Simulation tool supports constraint-based scenario modelling.
"The organisations that survive the ESG compliance wave won't be those with the best PR — they'll be those with the best data infrastructure. This is an analytics problem, not a marketing problem."
— Krish Naidu, Mathnal Analytics🔗 Build Your Capability
Mathnal's SC AI & Analytics Program covers Python-based analytics, ML forecasting, and MLOps — the exact skills needed for building ESG compliance data infrastructure. Our CSCOP Certification covers optimisation and risk modelling that underpins emissions reduction pathway analysis.
Frequently Asked Questions
Explore More from Mathnal
10 Supply Chain Risks 2026–2030 & Their Metric Impact
15-metric impact matrix including ESG regulatory risk scenarios across OTIF, fill rate, inventory turns, and cash-to-cash.
Newsletter #2Bayesian Statistics for Stockout Optimisation
The same Bayesian methodology that powers our risk engine — applied to predicting stockouts before they happen.
Free ToolSC Risk & Resilience Simulator (SCRRS)
Bayesian risk engine with 45 scenarios, Monte Carlo simulation, and VaR analysis — now applicable to ESG compliance risk.
Newsletter #7How ML & AI Transform Every Supply Chain Function
6 functions × ML models × quantified outcomes. The analytical foundation for ESG data infrastructure.
ProductSC Risk Intelligence Monitor
Continuous supplier risk monitoring with geopolitical, financial, climate, and quality risk scoring. 14-day early warning.
Newsletter #8The Safety Stock Decision Matrix
27-cell ABC × XYZ × Frequency framework. The inventory optimisation methodology that feeds into emissions reduction.
SolutionSupply Chain Risk Intelligence
Multi-tier supplier risk monitoring, Monte Carlo quantification, geopolitical scoring, and resilience scenario planning.
CertificationCSCOP — SC Optimisation Professional
12 weeks, 96 hours. Python optimisation including risk modelling and scenario analysis for compliance planning.
Flagship ProgramSC AI & Analytics Certification
12 months, 416+ hours. Build the AI and analytics capability your ESG compliance infrastructure demands.
Build Your ESG Compliance Intelligence
Whether you need consulting on CBAM exposure, BRSR compliance analytics, or training your team on supply chain AI — start with a conversation.