In short
- The EU’s deforestation rulebook is about to stop moving. The Annex I delegated act that the European Commission adopted on 13 July 2026 is in its two-month Parliament and Council scrutiny window and, absent an objection, enters into force around mid-September 2026.
- Leather is out. Cattle hides, skins and leather leave the scope entirely, together with retreaded tyres, soybeans for sowing, vulcanised rubber articles, conveyor and transmission belts, and aircraft and motor vehicle seats.
- Three product groups come in later. Soluble (instant) coffee, certain palm oil derivatives used in soap and cosmetics, and frozen cattle tongues join Annex I from 30 December 2027, a year behind the general deadline.
- The date that matters is 30 December 2026. Large and medium operators must comply from then; micro and small operators outside timber get until 30 June 2027, while timber-sector micro and small firms face the December 2026 date.
- Penalties are turnover-linked. Regulation (EU) 2023/1115 requires member states to set fines of at least 4% of an operator’s annual EU turnover, alongside confiscation of goods and exclusion from public procurement.
Retailers selling into the European Union have spent three years planning against a moving target. The EU Deforestation Regulation has been delayed twice, rewritten once, and argued over continuously. That phase is ending.
The final piece of the puzzle, the delegated act that fixes which products are actually covered, is now working through its scrutiny period. On current timing it enters into force in mid-September 2026, roughly 15 weeks before the compliance date that large and medium operators must hit.
For merchandising and compliance teams, the practical question changes shape. It is no longer “what will be in scope”, but “can our supplier data survive an audit by 30 December”.
What exactly is changing in mid-September
The European Commission adopted two legal instruments on 13 July 2026: a delegated act revising Annex I of the regulation, which is the list of covered products, and an implementing act setting the technical rules for declarations. The implementing act covers simplified declarations for micro and small primary operators and updated API specifications for automated submissions.
Delegated acts under Article 34 of the regulation do not take effect immediately. They sit for a scrutiny period of two months, extendable by a further two, during which the European Parliament or the Council can object.
No objection has been signalled. On that basis the trade compliance sector expects entry into force around mid-September 2026, which is what makes this a date worth marking rather than a formality.
Some context on why the timing feels precarious. The regulation entered into force in June 2023 with an original application date of 30 December 2024, which was pushed to 30 December 2025 and then, in December 2025, to 30 December 2026.
Each delay was agreed late and against industry warnings that the systems were not ready. That history is why compliance leads have been reluctant to treat any EUDR date as final, and why the Commission has spent 2026 repeating that this one is.
Why the scope list carries so much weight
Annex I is not an abstract schedule. It is the operational boundary that decides whether a given SKU needs geolocation data for the plot of land it came from, a risk assessment, and a due diligence statement filed before the goods are placed on the EU market.
A product inside Annex I triggers a documentary chain that reaches back to the farm or forest. A product outside it triggers nothing under this regulation. There is no middle setting.
That binary quality is why the leather decision matters more than its share of trade volume suggests. It moves entire categories of footwear, bags and upholstered goods from one regime to the other.
Which products leave the scope, and which arrive later
The five groups coming out
The delegated act removes five groups. Cattle hides, skins and leather come out across the whole value chain, which is the headline change for fashion and accessories.
Retreaded tyres are removed, and vulcanised rubber articles including conveyor and transmission belts follow them out. Soybeans intended for sowing are excluded, as are aircraft and motor vehicle seats.
The Commission’s stated rationale for the leather removal rests on economics rather than ecology. Cattle skins and hides carry relatively low economic value against meat within overall cattle production, which the Commission argued made it disproportionately hard for buyers to secure compliant traceability from suppliers.
The criticism the decision attracted
Campaign groups pushed back hard. Isabel Fernandez, Senior Advisor at Mighty Earth, said the proposal to remove leather from the scope of the EUDR “creates a ridiculous loophole”.
The argument is one of internal consistency. Meat from cattle raised on deforested land would face restrictions while the hide from the same animal would not, even though, as Fernandez put it, “the meat can’t be accessed until the skin is removed”.
Mighty Earth has also pointed to processor-level concentration, citing research indicating that more than 90% of cattle hides handled by the major processor JBS originate from its own slaughterhouses. Fern, the forests and rights organisation, reported the same decision as the Commission ruling out a reopening of the regulation text while nonetheless dropping leather from the goods it covers.
The three groups going in
Three groups join Annex I, all of them from 30 December 2027 rather than the general December 2026 date. That one-year lag is deliberate and gives affected supply chains a separate runway.
Soluble coffee, the instant format, comes into scope. Certain palm oil derivatives used as oleochemicals in soap and cosmetics are added. Frozen cattle tongues are the third, and smallest, addition.
For grocery and health and beauty buyers, the palm oil derivative addition is the one to plan around. Oleochemicals sit deep in formulations and are frequently sourced through intermediaries who do not currently pass plantation-level data downstream.
| Change | Products | Applies from | Retail categories most affected |
|---|---|---|---|
| Removed | Cattle hides, skins, leather (full chain) | On entry into force | Footwear, bags, belts, upholstered furniture |
| Removed | Retreaded tyres; vulcanised rubber articles; conveyor and transmission belts | On entry into force | Automotive aftermarket, industrial supply |
| Removed | Soybeans for sowing | On entry into force | Agricultural inputs, garden retail |
| Removed | Aircraft and motor vehicle seats | On entry into force | Automotive and aviation parts |
| Added | Soluble (instant) coffee | 30 December 2027 | Grocery, own-label coffee |
| Added | Certain palm oil derivatives (oleochemicals) | 30 December 2027 | Health and beauty, household cleaning |
| Added | Frozen cattle tongues | 30 December 2027 | Grocery, foodservice |
What stays firmly in scope
The seven core commodities are untouched: cattle, cocoa, coffee, oil palm, rubber, soya and wood. The derived-product lists attached to each of them are where retail exposure concentrates.
Furniture retailers remain fully in scope through the wood chain, and must be able to establish the origin of wooden components in the products they sell. Roasted and green coffee stay in, as do cocoa and chocolate, paper and packaging, and palm oil in food applications.
The regulation’s cut-off date is unchanged at 31 December 2020. Only goods produced on land not subject to deforestation or forest degradation after that date may be placed on the EU market or exported from it.
Paper and packaging deserve a specific mention because they are easy to overlook. Corrugate, cartonboard and printed packaging fall under the wood chain, which means a retailer’s own-label packaging can be in scope even when the product inside it is not.
Rubber remains in scope as a commodity even though vulcanised rubber articles have been removed from the derived-product list. Natural rubber content in footwear soles and household goods therefore still needs assessment where it enters through a covered heading.
The traceability standard is the hard part
Operators must submit high-precision geolocation coordinates linking products to specific plots of land, together with evidence of legal and deforestation-free production. That is a data problem before it is a policy problem.
Coffee illustrates the difficulty at scale. The EU imports roughly 40% of the world’s coffee, and around 60% of that volume comes from smallholder farmers working plots under five hectares.
Aggregating plot-level polygons across hundreds of thousands of smallholdings, then keeping them current, is a materially different exercise from onboarding a dozen tier-one factories. It is the reason coffee and cocoa programmes started earliest and still run hottest. The compliance burden here rhymes with what merchants met when the EU rewrote its low-value import rules: the rate change is simple, the data plumbing behind it is not.
How the December 2026 deadline is staged
The application dates are not uniform, and mixing them up is a common planning error. Large and medium operators comply from 30 December 2026.
Micro and small operators in non-timber sectors get until 30 June 2027. Micro and small operators in the timber sector, however, face the 30 December 2026 date, a carve-out that reflects the regulation’s inheritance from the earlier EU Timber Regulation.
Newly added products, the instant coffee, palm oil derivatives and frozen cattle tongues, apply from 30 December 2027 regardless of operator size.
| Operator or product group | Compliance date | Days from 2 September 2026 |
|---|---|---|
| Large and medium operators (existing Annex I) | 30 December 2026 | 119 |
| Timber-sector micro and small operators | 30 December 2026 | 119 |
| Micro and small operators, non-timber | 30 June 2027 | 301 |
| Newly added products, all operator sizes | 30 December 2027 | 484 |
What the May 2026 simplification actually changed
The scope decision arrived as part of a wider simplification package the Commission published on 4 May 2026, comprising a review report, updated guidance and FAQs, and the draft delegated act on Annex I. The public consultation on the draft ran four weeks and closed on 1 June 2026.
The operational relief is concentrated downstream. The first downstream buyer only collects the due diligence statement reference number, and companies further along the chain carry no EUDR paperwork of their own.
That single change removes most large retailers from the position of filing statements for every shipment and puts them in the position of collecting and storing reference numbers instead. Industry estimates suggest the package cut compliance costs by roughly 75%.
What compliance now costs per tonne
Post-simplification estimates put the cost at roughly EUR 15 to EUR 40 per tonne for supply chains organised through cooperatives, and EUR 40 to EUR 80 per tonne where intermediary buyers sit between the operator and the producer.
The spread is the interesting part. It prices the value of a consolidated supplier base, and it explains why several grocers have been quietly reducing the number of intermediaries in coffee and cocoa rather than adding traceability software on top of a fragmented base.
The EU Information System, the platform through which declarations are filed, relaunched in June 2026. The implementing act adopted alongside the scope decision on 13 July 2026 set the final technical rules, including the updated API specifications that make automated submission workable at retail volumes.
What a due diligence statement actually contains
The statement is a structured declaration rather than a narrative document. It identifies the operator, the products by tariff heading and quantity, the country of production, and the geolocation of every plot of land where the relevant commodity was produced.
For cattle-derived goods it must cover all establishments the animals were held in. For a multi-origin blend, which describes most instant coffee and much cocoa, that means a set of coordinates rather than a single point.
The operator then declares that due diligence was carried out and that the risk of non-compliance is negligible. That declaration carries legal weight, which is why sign-off has migrated from sustainability teams to legal and compliance functions at most large retailers over the past year.
How enforcement will be targeted
Checks are risk-based rather than uniform, and the intensity is set by a country benchmarking system that classifies producing countries as low, standard or high risk.
Member state authorities must inspect at least 1% of relevant operators sourcing from low-risk countries, at least 3% for standard risk, and at least 9% of operators plus 9% of product volume for high risk. The volume test on the high-risk tier is the one that bites, because it cannot be satisfied by checking small consignments.
The first benchmarking list, published in May 2025, classified four countries as high risk: Belarus, Myanmar, North Korea and Russia. Fifty countries were placed at standard risk and 140 at low risk. The Commission has signalled a review of the list during 2026.
Enforcement sits with member state competent authorities rather than the Commission, which introduces variation that retailers operating across several markets should plan for. The regulation sets minimum check rates, not maximum ones.
Authorities can also act on substantiated concerns submitted by third parties, a channel campaign groups have said they intend to use. That makes public claims and published supplier lists a plausible enforcement trigger, independent of the routine inspection cycle.
Why the low-risk tier is not a free pass
A low-risk classification lowers the inspection rate; it does not lower the substantive obligation. Operators still need the geolocation data, the risk assessment and the due diligence statement.
What changes is the probability of being asked to produce them. That distinction has been widely misread in supplier communications, and it is worth correcting internally before December. This mirrors the pattern seen in marketplace product-safety enforcement running through customs data, where the documentation duty applies universally and only the audit frequency varies.
What this means for retail buying teams
The immediate effect of the scope decision is that fashion and footwear teams can stop building leather traceability programmes for EUDR purposes. That releases budget and headcount roughly four months before the deadline.
Whether they should stop entirely is a separate commercial judgement. Several large brands built leather traceability for reasons that predate the regulation, including customer-facing sustainability claims that now sit under a different EU regime entirely.
That regime is the Empowering Consumers Directive, which bites on 27 September 2026 and requires environmental claims to be substantiated. A brand that drops leather traceability and keeps a “deforestation-free leather” claim on its product pages has moved its exposure rather than removed it, as we set out when the EU green claims rules were confirmed for late September.
Branded goods do not transfer the risk automatically
A common assumption is that stocking a branded product moves the EUDR duty to the brand owner. That holds only where the brand or its distributor places the goods on the EU market first and the retailer is genuinely downstream.
Direct import arrangements break that assumption. A retailer importing branded stock from outside the European Union is the operator for those consignments, whatever the label on the box says.
Buying teams should map this by purchase order route rather than by supplier name, because the same brand can appear on both sides of the line depending on how a particular range is bought.
The furniture and home category is the real pressure point
Wood-based furniture remains in scope and has none of leather’s escape route. Furniture retailers must verify the origin of wooden components in every product they sell, which for flat-pack ranges means panel-level provenance across multi-country manufacturing.
Composite panels are the specific difficulty. Particleboard and MDF blend residues from many sources, and establishing plot-level origin for a blended input is a harder problem than tracing a solid oak component.
Grocery has two clocks running
Coffee, cocoa, palm oil and paper packaging are all in scope from 30 December 2026. Instant coffee and palm oil oleochemicals arrive a year later, on 30 December 2027.
Own-label programmes carry the sharper risk, because the retailer is frequently the operator placing the product on the market rather than a downstream trader collecting a reference number. That is a different legal position and a different filing duty.
How EUDR compares with the other EU deadlines landing this autumn
EUDR is not arriving alone. European retailers face an unusually dense compliance calendar between September and December 2026, and treating each rule as a separate project is how teams end up double-building supplier questionnaires.
| Regulation | Key date | Core duty | Maximum exposure |
|---|---|---|---|
| EU Cyber Resilience Act | 11 September 2026 | Vulnerability reporting on connected products | Up to 2.5% of global turnover |
| EU Data Act | 12 September 2026 | Access to data generated by connected goods | Set by member states |
| EUDR delegated act | Around mid-September 2026 | Fixes final Annex I product scope | Scope-setting, no direct penalty |
| Empowering Consumers Directive | 27 September 2026 | Substantiation of environmental claims | At least 4% of annual turnover |
| EUDR application | 30 December 2026 | Due diligence statements, geolocation data | At least 4% of annual EU turnover |
The overlap between the deforestation rules and the green claims rules is the one worth engineering for. Both ask a version of the same question about what a retailer can prove regarding the origin and impact of a product, and both attach turnover-linked penalties to getting it wrong. Similar sequencing showed up in the Data Act’s September obligations for connected goods, where the compliance artefact is documentation rather than a product change.
What still could change before December
The scrutiny period is not over. The European Parliament or the Council retains the ability to object to the delegated act, and either institution can extend the window by a further two months under Article 34.
An objection would not reopen the regulation itself. The Commission has been explicit that it will not reopen the EUDR text, so the realistic downside scenario is a delay to the scope clarification rather than a substantive rewrite.
That distinction matters for planning. A delayed delegated act would leave leather nominally in scope for longer, which is an argument for fashion teams to wind down rather than switch off their traceability work until entry into force is confirmed.
A second variable is member state readiness. Competent authorities in several member states have not yet published their inspection procedures or their penalty schedules, which leaves operators guessing at the practical shape of enforcement in their largest markets.
That uncertainty argues for documenting the compliance process itself, not only its outputs. Where an authority cannot yet say what good looks like, a defensible and well-evidenced method is the strongest position available.
The benchmarking review is the other open item
The Commission has indicated a review of the country risk list during 2026. A country moving from standard to high risk triples the operator inspection rate and adds the 9% volume test.
Sourcing teams with concentrated exposure to any single origin should treat that review as a live risk rather than a background process, particularly in cocoa and palm oil where origin concentration is structurally high.
What to do in the next 15 weeks
The practical sequence is unglamorous and mostly about data quality rather than legal interpretation. Compliance teams that started early are now in testing rather than building.
- Re-run the scope screen. Rebuild the in-scope SKU list against the final Annex I, and formally retire leather, retreaded tyre, vulcanised rubber and sowing-soybean lines from the programme once entry into force is confirmed.
- Confirm your legal role per product line. Establish where you are the operator placing goods on the market and where you are a downstream trader collecting reference numbers. Own-label and direct import usually put you in the first category.
- Test end to end on live orders. Run real purchase orders through geolocation capture, risk assessment and statement filing rather than testing components in isolation.
- Close supplier data gaps by origin. Prioritise smallholder-heavy chains in coffee and cocoa, where polygon coverage is typically weakest and lead times to fix are longest.
- Wire the API rather than the spreadsheet. The July implementing act finalised the automated submission specifications, and manual filing does not scale to grocery volumes.
- Align claims with evidence. Cross-check marketing copy against what the due diligence file actually supports, ahead of the separate 27 September environmental claims deadline.
Full documentation on implementation, including the guidance and FAQs published alongside the simplification package, is maintained by the European Commission on its deforestation regulation implementation pages.
The wider signal for cross-border retail
The EUDR has become a test case for how far the European Union will push supply-chain due diligence onto retailers rather than producers, and how much it will trim under pressure.
The answer so far is that it pushes hard on the substance and trims on the edges. The cut-off date, the geolocation requirement and the turnover-linked penalties survived two delays and a simplification review intact. What moved was the product list and the downstream paperwork.
Retailers reading this as a template for what comes next in EU regulation would be reasonable to expect the same pattern elsewhere: firm obligations, softened administration, and scope negotiated late. The other lesson is more prosaic, and it is that market-access rules increasingly turn on data a retailer does not itself generate. That dependency, more than any single deadline, is what reshapes sourcing over the next two years, and it is the same force pulling EU marketplace operations toward country-level structures.
There is also a competitive dimension that the compliance framing tends to obscure. Firms that built plot-level traceability early now hold supplier data their rivals do not, and that data has uses well beyond regulatory filing.
Origin-level visibility supports provenance claims, shortens the response time when a commodity price moves, and makes supplier substitution a planned exercise rather than an emergency. Several grocers have said publicly that their EUDR programmes surfaced duplicate and dormant suppliers that no procurement audit had caught.
The counter-argument is straightforward: the leather reversal shows that early movers can build for a requirement that later evaporates. Both readings are defensible, and the difference between them is mostly a judgement about whether traceability has commercial value independent of the rule that forced it.
Frequently asked questions
When exactly does the EUDR apply to my business?
Large and medium operators must comply from 30 December 2026. Micro and small operators outside the timber sector have until 30 June 2027, while micro and small operators in the timber sector face the 30 December 2026 date. The three newly added product groups apply from 30 December 2027 regardless of operator size.
Is leather definitely out of scope now?
The delegated act removing cattle hides, skins and leather was adopted on 13 July 2026 but is still within its scrutiny period. Absent an objection from the European Parliament or the Council, it is expected to enter into force around mid-September 2026. Until that happens the removal is not yet legally effective.
Which products were added to the scope?
Soluble (instant) coffee, certain palm oil derivatives used as oleochemicals in soap and cosmetics, and frozen cattle tongues. All three apply from 30 December 2027, a year after the general deadline.
Do downstream retailers have to file due diligence statements?
Not in most cases after the May 2026 simplification. The first downstream buyer collects the due diligence statement reference number, and companies further down the chain carry no EUDR paperwork. Retailers acting as the operator placing goods on the EU market, which is common for own-label and direct imports, still file.
What are the penalties for non-compliance?
Regulation (EU) 2023/1115 requires member states to set fines proportionate to the environmental damage and the value of the goods, at a level of at least 4% of the operator’s annual EU turnover. Confiscation of products and revenues and exclusion from public procurement are also available.
How does country benchmarking affect my checks?
Authorities must inspect at least 1% of operators sourcing from low-risk countries, at least 3% for standard risk, and at least 9% of operators plus 9% of product volume for high risk. The first list, published in May 2025, put Belarus, Myanmar, North Korea and Russia in the high-risk tier, with 50 countries at standard risk and 140 at low risk.
What is the cut-off date for deforestation?
31 December 2020. Products may only be placed on the EU market or exported from it if the land they came from was not subject to deforestation or forest degradation after that date. The cut-off has not changed through either delay.
How much does compliance cost?
Post-simplification estimates put it at roughly EUR 15 to EUR 40 per tonne for cooperative-structured supply chains and EUR 40 to EUR 80 per tonne where intermediary buyers are involved. The May 2026 package is estimated to have reduced compliance costs by around 75%.
Could the December 2026 deadline slip again?
The Commission has stated it will not reopen the EUDR text, and the 30 December 2026 date has been treated as settled through the 2026 simplification process. A further objection during the delegated act scrutiny period could delay the scope clarification, but that is a separate question from the application date itself.