Skip to content

EU Deforestation Regulation (EUDR): Enforcement

The EU Deforestation Regulation (2023/1115) is in full enforcement, and it's already reshaping global supply chains. If you deal in cattle, cocoa, coffee, oil palm, rubber, soya, or wood, you need a Due Diligence Statement for every shipment — backed by geolocation coordinates down to the plot level. No exceptions, no phase-ins for small operators.

Most companies underestimate how hard the geolocation requirement is. Your supplier in Côte d'Ivoire needs to provide plot-level GPS coordinates that match satellite imagery. If they can't, your shipment doesn't clear customs.

The Country Benchmarking System

The Commission classifies countries into three risk tiers based on deforestation rates, governance quality, and agricultural expansion trends. Your due diligence burden scales accordingly. Low-risk countries qualify for simplified due diligence — essentially a declaration with minimal traceability. Standard-risk countries require full due diligence: geolocation, traceability, risk assessment, and mitigation. High-risk countries need all of that plus mandatory third-party verification and audit.

Here's the catch: even if your country is classified as low risk, individual production areas within it may not be. The classification is a starting point, not a free pass. Operators must assess risk at the supply chain level, not just the country level.

The Due Diligence Statement (DDS)

Every operator placing a relevant commodity on the EU market must submit a Due Diligence Statement via the EU's central information system (TRACES NT). The DDS is not a registration — it is a legal declaration, signed by a responsible person, confirming that:

  • The product is deforestation-free (no deforestation on the production land after December 31, 2020)
  • The product is legal under all applicable laws of the country of production (land rights, environmental protection, labour, tax, and trade laws)
  • The operator has conducted a risk assessment and, where risks were identified, implemented adequate mitigation measures

Each DDS is assigned a unique reference number. Customs authorities cross-reference shipments against DDS numbers at the point of entry. A shipment without a valid DDS — or with a DDS that does not match the declared product — is denied entry.

Geolocation Requirements

Geolocation is where the EUDR gets operationally difficult. For parcels up to 4 hectares, you need a single GPS coordinate with six decimal places. Over 4 hectares, you need a full polygon map of the boundary in GeoJSON or shapefile format. Multiple parcels? Each one gets its own file.

The key constraint: data must be collected at the production plot level — not at the mill, exporter, or regional level. This means you need traceability systems that connect your finished product back to the specific farm or plantation where the raw material grew. If you're buying from dozens of smallholder farmers without GPS-capable devices, you have a data collection problem that no amount of paperwork will solve.

Enforcement Mechanisms

Customs Controls

Customs authorities in each member state perform checks on shipments based on risk analysis. The EUDR requires that:

  • At least 9% of operators placing high-risk commodities be inspected annually
  • At least 3% of standard-risk operators be inspected
  • Control rates may be adjusted based on historical compliance data

Inspections include document checks (DDS, geolocation data, risk assessments), identity checks (product matches declaration), and physical checks (sampling and testing where applicable).

Penalties

Member states set their own penalties but must ensure they are effective, proportionate, and dissuasive. Maximum penalties across member states include:

  • Fines proportionate to environmental damage and market value of goods — up to 8% of annual turnover in some member states
  • Confiscation of products and revenues from non-compliant shipments
  • Temporary exclusion from public procurement and access to public funding
  • Prohibition on placing products on the EU market — for repeat or serious violations
  • Criminal liability for directors and responsible persons in some jurisdictions

Market Surveillance

Beyond customs, market surveillance authorities can inspect operators at any point in the supply chain. They can require operators to produce due diligence documentation, access premises, and seize non-compliant products already in circulation.

Interaction with Other Supply Chain Laws

EUDR doesn't exist in a vacuum. If you're already complying with CSRD, CSDDD, the EU Battery Regulation, Conflict Minerals Regulation, or Germany's LkSG, you can reuse supply chain mapping and supplier data — but you'll need to adapt them to EUDR's specific deforestation criteria and geolocation requirements.

CSRD requires disclosure of deforestation risks. CSDDD covers human rights and environmental due diligence more broadly. The Battery Regulation and Conflict Minerals Regulation use a similar due diligence architecture. FLEGT-licensed timber may satisfy EUDR's legality requirement. The overlap is real, but each framework has distinct requirements that need separate documentation.

Practical Compliance Steps

  • Map your supply chain — Identify every raw material origin for covered commodities. This is the foundational step; without origin data, geolocation and risk assessment are impossible.
  • Collect geolocation data — Establish protocols for collecting plot-level coordinates from farmers, cooperatives, and intermediaries. This is the most operationally challenging requirement.
  • Conduct risk assessments — Evaluate deforestation risk at country, region, and supply chain levels. Consider satellite imagery, government data, NGO reports, and certification scheme data.
  • Implement mitigation measures — Where risks are identified, define and document mitigation actions: supplier audits, certification requirements, alternative sourcing.
  • Submit DDS through TRACES NT — Register in the system, submit statements per product batch, and maintain reference numbers.
  • Maintain audit trail — Retain all due diligence documentation for at least five years. Documentation must be available to authorities upon request.
  • Monitor regulatory developments — Country classifications, harmonised standards, and enforcement practices are still evolving.

Frequently Asked Questions

Does EUDR apply to products manufactured from covered commodities?

Yes. The regulation covers products listed in its Annex I, which includes processed goods containing covered commodities — chocolate (cocoa), furniture (wood), tyres (rubber), leather goods (cattle), and biodiesel (oil palm, soya). The due diligence obligation attaches to the final product placed on the EU market.

Can certification schemes replace EUDR due diligence?

Certification schemes (FSC, PEFC, RSPO, Rainforest Alliance) can provide evidence for specific elements of the due diligence process — particularly traceability and legal compliance — but they do not replace the operator's legal obligation to submit a DDS. The operator remains responsible regardless of certification.

What happens if my supplier cannot provide geolocation data?

Without geolocation data, you cannot submit a valid DDS. If your supplier cannot or will not provide plot-level coordinates, you must source from an alternative supplier. The regulation does not provide exemptions based on supply chain complexity — the obligation is on the operator to obtain the data.

How do customs authorities verify geolocation data?

Customs use satellite imagery, land registry databases, and cross-checks against known deforestation alerts (Global Forest Watch, EU Observatory data). If geolocation coordinates fall within an area identified as deforested after December 2020, the shipment is flagged for further inspection and potentially seized.