The Sourcing Journal Fall Summit opened with one question parked at the top of the agenda: what does human rights due diligence look like in 2026?

For sourcing teams, the answer is no longer a voluntary checkbox. Three rule stacks now pull in the same direction.

The EU's Corporate Sustainability Due Diligence Directive (CSDDD) entered force in 2024 and starts biting on the largest companies from 2027. Germany's Lieferkettensorgfaltspflichtengesetz (LkSG) has been live since January 2023 and tightened from 2024 to cover firms with 1,000 or more employees. The US Uyghur Forced Labor Prevention Act (UFLPA), live since June 2022, shifts the burden of proof onto the importer at the port of entry.

What does the rule stack actually require?

CSDDD asks in-scope companies to identify, prevent, and mitigate adverse human-rights and environmental impacts across the chain — including tier-2 subcontractors and, where established, the raw-material processors further upstream.

LkSG requires a written risk analysis and a published policy for German-headquartered firms and their direct suppliers, with indirect suppliers pulled into scope once a specific risk is flagged.

UFLPA presumes goods from Xinjiang or produced by entities on the UFLPA Entity List are made with forced labor — unless the importer proves otherwise to US Customs and Border Protection.

How does it change the supplier brief?

Buyers are elevating mill-level disclosure from checkbox to contractual item. Tier-1 factories must collect, not just request, social-compliance data from their own fabric and trim vendors. The summit's framing — "what does HRDD look like in 2026" — maps onto the question factory-side teams across Türkiye, Mexico, and India have been raising for two sourcing cycles: which standard applies, and who audits?

Buyers active in both the EU and US markets are converging on the OECD Due Diligence Guidance for Responsible Business Conduct as the working frame, with CSDDD, LkSG, and UFLPA layered on top by jurisdiction. That convergence is forcing a single supplier questionnaire rather than the patchwork of brand-specific forms — a cost item the factory side has long complained about.

What does tier-3 traceability cost?

A tier-3 traceability system by 2026 stops looking like a sustainability add-on and starts looking like a market-access item. Sourcing budgets are shifting toward traceability platforms, worker grievance channels, and supplier-capacity grants. Those are the items CSDDD and LkSG name explicitly, and UFLPA enforces at the US border.

For suppliers, the cost of getting the documentation wrong is no longer a rejected PO. Under UFLPA, it means a detained shipment at port. Under CSDDD and LkSG, it means civil liability — and, in the German case, fines of up to 2% of group turnover for the largest firms.

The sourcing decision the news forces

Brands that want to keep selling into both the EU and the US will need tier-3 traceability in place by 2026, not a tier-1 audit programme. That single fact reshapes the next sourcing-cycle budget — away from voluntary ESG reporting and toward enforceable compliance documentation that holds up in a regulator's file.