Material risk · land and livelihood under buyer data capture · biomass into Germany
Executive briefing. Germany’s Supply Chain Due Diligence Act has been in force for companies with at least 3,000 employees since 1 January 2023 and for companies with at least 1,000 employees since 1 January 2024 [9][16]. BAFA, which supervises the Act, has said it will review the submission and publication of LkSG reports for the first time on 1 January 2026 — and has also said that the other due-diligence obligations in sections 4 to 10(1), and their control and sanctioning, are “not affected by this deadline regulation” [9]. As at September 2026, biomass, wood and agricultural commodities moving into German distribution are therefore already inside a live duty. The report may be late. The risk analysis is not. The subject beneath the filing calendar is land and livelihood at origin when a buyer portal harvests the plot file — and who captures the due-diligence claim once that file exists.
01The macro challenge: a national duty that buyers have already operationalised
BAFA’s own summary is the right starting point because it is the supervisor’s. The LkSG is “the first legally binding regulation of corporate responsibility for respecting human rights in supply chains.” It obliges companies “to respect human rights and certain environmental due diligence obligations in their supply chains in an appropriate manner.” The protected positions are drawn from eleven human-rights conventions and three international environmental conventions. Controls follow a risk-based approach and have been carried out on an ongoing basis since the Act entered into force [9]. BAFA has also published a FAQ paper on that risk-based approach and on collaboration in the supply chain, with the stated aim of showing how companies can implement the duty in practice [9]. Collaboration, in the supervisor’s usage, is not a courtesy. It is how the analysis is supposed to be done. LkSG is the entry point. The subject is whether biomass land and labour are observed at origin — or approximated in a buyer file that erases regenerative practice and transfers the claim upstream.
"The fulfilment of the other due diligence obligations pursuant to Sections 4 to 10 Paragraph 1 LkSG as well as their control and sanctioning by BAFA, for which information from a report may also give rise, are not affected by this deadline regulation." Federal Office for Economic Affairs and Export Control (BAFA), Supply Chain Act overview, retrieved September 2026 [9]
That sentence is the one German distributors have been acting on. A reporting pause is an administrative convenience. Sections 4 to 10 cover risk management, risk analysis, preventive and remedial measures, complaints, and documentation. BAFA has published guidance on the risk-based approach, on collaboration in the supply chain, and on standards, audits and certifications as instruments in the due-diligence process [9]. None of those documents tell a buyer to wait for 2029 and the Union CSDDD. They tell a buyer to look now.
Biomass is where that look becomes a logistics file — and a land file. Wood, wood chips, pellets, residues and agrifood sidestreams are land-based, often smallholder or forest-adjacent, and already dual-regulated: EUDR for deforestation-free status on listed commodities, and LkSG for human-rights and selected environmental due diligence on the German buyer. Forest-risk chains already show how sustainability instruments fail when they sit on untraceable origin data [1]. A distributor who cannot show origin, legality and the absence of named human-rights risks does not have a “documentation gap”. They have an uninsurable consignment — and an origin that may lose offtake while the buyer keeps the compliance story.
| Layer | Who is in scope | What is live now |
|---|---|---|
| LkSG (from 1 Jan 2023) | Companies with ≥3,000 employees in Germany | Full due-diligence duty; BAFA controls ongoing [9] |
| LkSG (from 1 Jan 2024) | Companies with ≥1,000 employees | Same duty, broader population [9] |
| LkSG reporting | In-scope companies | BAFA reviewing submission/publication from 1 Jan 2026; other duties not paused [9] |
| EUDR | Operators in listed commodities | Due diligence statements from 30 Dec 2026 (large/medium) [see Institute EUDR briefing] |
| CSDDD (amended) | Very large groups (≥5,000 employees and €1.5bn turnover) | Apply from 26 July 2029; does not suspend LkSG [14][15] |
| Biomass origin without a plot file | Smallholder and forest-adjacent suppliers | Livelihood risk via lot-level gate; claim captured in buyer portal |
02The transitional opportunity: one origin record for three German questions
A biomass supplier selling into Germany is already being asked some combination of: where was this grown or harvested; was the land deforested after the EUDR cut-off; and are there human-rights or listed environmental risks in the chain. Those are three statutes. They are one field visit. The expensive path is three portals. The cheap path is a plot-level record — regenerative practice and labour conditions still attested at origin — that a German compliance officer can map into LkSG risk analysis, EUDR geolocation, and, later, a CSDDD chain-of-activities file.
Mardenli and colleagues surveyed expert perspectives on the LkSG specifically in agri-food supply chains and published the operational finding that matters to a biomass supplier [11].
"The findings reveal a dichotomous picture: large, established companies are perceived to be less affected due to their existing transparency and compliance infrastructure. On the contrary, smaller and less established companies are expected to face significant challenges, particularly in terms of administrative burden and resource allocation." Abdulaziz Mardenli, Katharina Friederike Sträter, Christoph Herrmann and Dirk Sackmann, seminal 2025 agri-food expert assessment in Cleaner Logistics and Supply Chain [11]
The paper’s existence is the signal: the Act is already an agrifood operations problem, not a legal-theory problem. Ahrens, Gasparri and Giessen make the adjacent point for forest-risk soy and cattle: insetting claims fail when origin data cannot support them [1]. BAFA’s guidance on audits and certifications is the complementary signal from the supervisor: buyers will reach for standards and third-party certificates as instruments [9]. Certificates that cannot be traced to a plot will not survive a risk-based control. They will survive a questionnaire. Germany already has the authority. It is BAFA, operating from Borna, on a risk-based programme that did not stop for Omnibus [9]. The transitional opportunity for a Serbian wood-chip exporter or a Brazilian soy trader is not to wait for 2029. It is to give the German buyer a file that BAFA’s own risk-analysis FAQ would recognise as collaboration in the supply chain rather than a dumping of cost [9] — while the producer retains the original. Waiting for Union transposition to make that file cheaper is a misreading of the calendar. The German duty is already the expensive one, because it is already being enforced — and the cost skew Mardenli documents will land hardest on the smaller origin organisations least able to finance a second portal [11].
03The Institute analyst take: who absorbs the cost — and who captures the claim
The Act does not, in BAFA’s public overview, use the phrase “real-time biomass tracking”. What German distributors are demanding in contracts is faster than an annual report: lot-level origin, a geolocation that can be checked against the EU Observatory, and a human-rights screen that can be refreshed when a media allegation appears. That operationalisation is rational under a risk-based duty. It is also how a national due-diligence law becomes a logistics specification without any further legislative step — and how compliance cost lands on the origin that must answer every lot. A supplier who treats the Act as an annual PDF will discover that the buyer’s operations team is running it as a lot-level gate. Those two clocks do not reconcile at the port.
The capture warning is structural. A due-diligence claim assembled in a German portal that harvests plot data as a condition of offtake, then owns the human-rights and environmental story, leaves the biomass producer as a data subject in someone else’s file. Samuel Nguiffo’s seating-plan critique — instruments designed without the people who live on the land — travels from carbon markets into due-diligence software with the same mechanics [12]. Corporate “regen” and certification theatre that cannot be walked to a plot are the same enclosure under friendlier labels.
Investors holding German agrifood or energy distributors should therefore not wait for the 2026 report publication to ask the question. The report is the narrative. The exposure is whether a named biomass origin could be shown, tomorrow, to a BAFA control — and whether the producer still holds the underlying record. If the answer is a certificate without coordinates, the duty is not being met in the sense BAFA has described — appropriate risk management, not a stack of attestations [9]. The 1,000-employee threshold, in force since January 2024, pulled a much larger set of distributors into that question than the original 3,000-employee wave [9]. Mid-sized German traders are now running a duty that was designed, in the public debate, as a large-company problem.
Producers should assume the German buyer’s portal is not a negotiation. It is the private enforcement of sections 4 to 10. The counter is not refusal. It is to hold the underlying record so that several buyers, and later several statutes, can be served from one dataset. A portal login without that record is a dependency. A record that can fill several portals is an asset — and the only form of climate stewardship that survives a customs hold or a BAFA request.
04The proactive resolution: stewardship closes at the plot
Build the origin file to the stricter of LkSG risk analysis and EUDR geolocation. Map it into the buyer’s template; do not let the template become the original. When CSDDD application arrives in 2029 for the very large groups [15], the same file is the chain-of-activities evidence. Groups that rebuild from scratch at each legal wrapper will pay three times for one plot. The same logic applies to a biomass residue that is also an EUDR-listed wood product: two wrappers, one harvest event. Splitting the evidence is how consignments get held. Combining it — regenerative practice and labour still attested where the biomass grew, the primary observation still in producer hands — is how a cooperative keeps the season moving. That is the legitimacy test: origin ownership; verification the farmer can inspect; a shorter path from field to buyer; ecology measured in place, not converted into portal theatre.
Editorial infrastructure note. Buyer-side ratings and supplier questionnaires organise the importer’s file; they are not a substitute for plot-level evidence the producer still holds. Independent ratings utilities such as EcoVadis automate supplier risk assessments against corporate due-diligence thresholds on the buyer side of the file. The Institute holds no commercial relationship with the providers named in this directory unless this block is labelled Sponsored Insight; they are cited as examples of the architectural model under discussion.
What to do while BAFA reviews the reports
The reporting date moved. The duty did not. One action per reader.
Cooperatives & producers
Pair every biomass or commodity lot with a plot ID and a labour/land-use statement you hold. A German portal should receive a copy, not become the original — or the climate claim on your land.
NGOs & development programmes
Test whether certified biomass origins in your programmes can actually be mapped. A certificate without coordinates will not help a BAFA control — and will not protect livelihoods when a lot is refused.
Agro-exporters
Ask the German customer which LkSG risk-analysis step your file is feeding, and whether EUDR geolocation is being dual-used. Align the two now.
ESG investors
Do not treat a delayed LkSG report as delayed compliance. Ask which biomass origins would fail a BAFA request for the underlying risk analysis — and who owns the plot-level data after disclosure.
CSDDD will eventually sit above this. It has not replaced it, and a delayed report is not climate stewardship. In German agrifood and biomass, the competent authority is already at work, and it has said so in terms. Stewardship closes at the plot the producer still holds — not at the portal that borrowed it.
References and citation matrix
Published by The Global Risk & Regeneration Institute as independent regulatory analysis. This briefing does not constitute legal, tax, or investment advice. Platforms named in the editorial infrastructure note are cited as architectural examples; the Institute holds no commercial relationship with them.