EU Forced Labour Regulation: Key compliance implications for businesses

The publication of the Guidelines marks a significant step in the operationalisation of the FLR and sends a clear signal that businesses should be preparing now, rather than waiting for FLR to come into force.

For an overview of the Guidelines and the practical steps businesses can take to prepare for the FLR, see our earlier briefing, "EU Forced Labour Regulation Guidelines Published". This article focuses on key aspects of the Guidelines, including their approach to enforcement, investigations, due diligence and compliance expectations.

Summary of key elements of the Guidelines

The FLR will apply from 14 December 2027 (with the exception of certain provisions applicable to Member States which have earlier application dates). The Guidelines provide the clearest indication yet of how the Commission and Member State authorities intend to enforce the FLR regime. Though non-binding, the Guidelines establish expectations regarding supply chain oversight, evidence gathering and forced labour due diligence, and therefore offer a vital roadmap for businesses preparing for compliance.

1. Scope and Application

• The scope of the FLR ban is exceptionally broad, applying to all products from all sectors where forced labour occurred at any stage of the supply chain, regardless of origin or product type.

• Products offered for sale online also fall within scope if targeted at EU end-users. Whether an online offer is so targeted requires a case-by-case assessment, taking into account factors such as the ability to dispatch to the EU, the use of Member State languages or currencies, region-specific payment methods, and the use of a domain name registered in a Member State.

• The FLR does not apply to services (e.g. transportation, warehousing and logistics services necessary for placing products on the EU market).

• The FLR applies to all EU economic operators - producers, manufacturers, importers, exporters, retailers and product suppliers – regardless of sector, origin, or company size, and the prohibition is unconditional and absolute.

• The Guidelines confirm that products placed, or made available, on the EU market from 14 December 2027 are within scope. Significantly, the FLR ban also covers products which were already on the EU market before this date - including those produced or imported before that date - which poses an additional layer of compliance risk for businesses. However, products that have already been sold to end-users are not subject to product withdrawal; the prohibition covers only products still being made available (e.g. on shelves or in warehouses). It includes strategic, military and defence products, which have recently seen carve-outs under other EU environmental and chemical regimes.

2. Investigative Process

• The Commission will lead investigations where suspected forced labour occurs outside the EU in relation to products placed on the EU market; Member State competent authorities will lead where it occurs on their territory. The process begins with an initial assessment of information, followed by requests for information from economic operators.

• The Guidelines envisage a two-phase investigative process: a preliminary phase and a formal investigation. Where a lead competent authority assesses that there is a likely breach of the FLR ban, it will launch a preliminary investigation. In doing so, the lead competent authority will focus on the seriousness of the suspected forced labour, the volume of products affected, and the extent to which the suspected forced labour contributes to the final product.

• If a ‘substantiated concern’ is established - defined as “a reasonable indication based on objective, factual and verifiable information for the Commission or competent authorities to suspect that it is likely that a product was made with forced labour” - the authority will launch a formal investigation. Economic operators will have between 30 and 60 working days to respond to information requests during a formal investigation. Investigations should, in principle, be concluded within nine months.

• The Guidelines set out detailed examples of information which authorities may request from economic operators during the investigative process (whether in the preliminary phase or during a formal investigation). This includes, among other things: product traceability evidence (i.e. chain-of-custody certificates and raw-material traceability data); laboratory test results including isotopic testing; documentation linking the finished product to its raw-material source; bills of materials; certificates of origin; packing lists; shipping and transport documentation; supply chain maps covering tiers and sub-tiers; and facility and location information including satellite imagery and GPS coordinates. These examples indicate that authorities may expect granular, product-level documentation demonstrating full chain of custody — going well beyond evidence of the operator’s general due diligence framework.

3. Enforcement and Decisions

• Where the forced labour ban is found to have been violated, the lead competent authority will issue a decision. Critically, such decisions have broad practical effect across the supply chain: once a decision is published on the Forced Labour Single Portal, any other economic operator dealing with the same products is on notice of the forced labour finding and faces enforcement risk under the underlying prohibition if they continue placing, making available, or exporting those products on the EU market. Decisions will include: (i) a general prohibition on placing or making the products available on the EU market or exporting them; (ii) an order to withdraw the products; and (iii) an order to dispose of the products (by recycling, rendering inoperable, or donating perishable goods).

• All decisions will be published on the Forced Labour Single Portal (a single website to be set up by the Commission which makes information sources of relevance for the implementation of the FLR publicly available). For products forming part of supply chains of strategic or critical importance to the EU, authorities may order the products to be withheld for a specified period, during which the economic operator is forbidden from placing the products on the market and must eliminate the forced labour from the supply chain. Businesses should therefore monitor the Forced Labour Single Portal to assess whether suppliers or other business partners have been implicated in decisions.

4. Penalties

• Member States must establish rules on penalties for infringements of the FLR by 14 December 2026. Importantly, the mere presence of forced labour in an operator's supply chain does not automatically give rise to a financial penalty. Rather, where competent authorities determine that a product has been made with forced labour, the FLR provides for an investigation and remediation process, which may culminate in a decision prohibiting the product from being placed on the market.

• Penalties are envisaged where an economic operator fails to comply with a decision - for example, by continuing to place the prohibited product on the market or failing to comply with other corrective measures.

• Unlike other EU instruments, the FLR does not cap financial penalties for non-compliance.

5. Due Diligence

• While the FLR does not itself impose due diligence obligations, the Guidelines make clear that due diligence is the primary mechanism by which economic operators can demonstrate compliance and reduce the risk of being subject to an investigation. The Guidelines’ main guidance on forced labour due diligence (Section 6) is closely aligned to the OECD Guidelines for Multinational Enterprises on Responsible Business Conduct and the UN Guiding Principles on Business and Human Rights (UNGPs). It specifies that due diligence should be risk-based, proportionate, involve prioritisation where necessary, and should be appropriate to a company’s circumstances (e.g. its size, position in supply chains, the nature of its products, and the severity of the adverse impact). The Guidelines set out a six-step approach to forced labour due diligence, based on the OECD framework, covering: (1) integrating forced labour due diligence into company policies and businesses risk management systems; (2) identifying and assessing forced labour risks; (3) preventing, mitigating and bringing to an end forced labour risks; (4) monitoring and assessing implementation; (5) communicating how risks are addressed; and (6) remediation. Businesses should consider implementing this framework now in order to ensure compliance when the FLR enters into force on 14 December 2027

6. Non-Cooperation and State-Imposed Forced Labour

• The Guidelines address the consequences of non-cooperation with an FLR investigation. Where an economic operator fails to provide requested information, provides misleading information, or otherwise impedes an investigation, the authority may establish a violation on the basis of other available facts. Non-cooperation may itself constitute evidence that contributes to a finding of an FLR violation.

• In cases of state-imposed forced labour, fear of retaliation by state authorities may discourage victims from coming forward, complicating evidence gathering. The Guidelines therefore permit reliance on indirect and circumstantial evidence, including public reports, satellite imagery and information from international organisations. Social audits conducted in contexts where workers cannot speak freely are expressly stated not to constitute credible evidence.

• Where economic operators cannot eliminate forced labour risks in their products’ supply chains, the Guidelines state that disengagement from a supplier or business partner should be considered as a last resort. However, in cases of state-imposed forced labour - where leverage is unavailable and remediation is not feasible - disengagement may be the only responsible course of action.

7. Submission of Information by Third Parties

• Any person may submit information about possible violations via the Forced Labour Single Portal from 14 December 2027. This includes individuals (including victims of forced labour), businesses, NGOs, trade unions and consumer organisations. Submissions must be made in good faith with supporting reasons and evidence. The Commission will discard submissions that are manifestly incomplete, unfounded or made in bad faith.

• Petitioners who qualify as whistleblowers under the EU Whistleblower Directive - and who acquired information on FLR breaches in a work-related context - will receive protections against retaliation. The European Commission will also apply procedural safeguards when handling investigations into forced labour occurring outside the EU.

Commentary

The publication of the Guidelines represents a significant milestone in the operationalisation of the FLR. While the FLR does not apply until 14 December 2027, the Guidelines make clear that the European Commission expects businesses to be preparing now — and the stakes for non-compliance are significant.

The most striking feature of the enforcement framework is the breadth of its reach. An FLR decision does not merely affect the business that was investigated — it applies to the product itself. This means that any economic operator handling that product, anywhere in the supply chain, is caught by the ban. Businesses may therefore find themselves exposed to enforcement action even where they had no involvement in the underlying forced labour, and no knowledge of the investigation, simply because they place, make available or export the affected product. For businesses with complex or opaque supply chains, this may create a material compliance risk.

Due diligence is central to the FLR framework. Although the FLR does not itself impose due diligence obligations, the Guidelines leave no doubt that due diligence is the primary mechanism by which businesses can demonstrate compliance — and, critically, defend themselves if subject to investigation. Economic operators that cannot evidence effective due diligence may find it considerably harder to respond to information requests or rebut concerns raised by competent authorities. This is particularly acute for businesses with supply chain exposure to regions presenting state-imposed forced labour risks: the Guidelines make clear that heightened scrutiny is likely in such cases, and that responsible disengagement may be the only viable response where leverage over suppliers is unavailable.

Businesses should not wait until December 2027 to act. The Guidelines set out clear expectations: companies should conduct supply chain mapping exercises, integrate forced labour risk assessments into existing due diligence frameworks, review supplier contractual terms, and ensure that traceability systems can support an evidence-based response to any potential investigation. Given the breadth of information that authorities may request, businesses may consider identifying which of their products are at highest risk of enforcement action - taking into account the scale and severity of suspected forced labour in relevant supply chains, the volume of products placed on the EU market, and the proximity of their supply chains to known risk areas - and ensure that for those products, they are in a position to produce granular documentation including raw-material traceability, chain-of-custody certificates, and bills of materials linking finished products to their inputs. The staggered implementation timeline - with penalty rules required by December 2026 and the substantive ban applying from December 2027 - should not create a false sense of comfort. The EU expects economic operators to be in a position to demonstrate, with documentary evidence, that their products are free from forced labour across the entirety of their supply chains. Businesses that begin this work now will be better placed to respond if and when scrutiny arises.