The line between mandatory and voluntary ESG reporting is getting harder to observe, and for most businesses, that ambiguity is the problem. What was optional three years ago is now legally required in certain jurisdictions. What’s required in one major economy today is likely heading toward others within a policy cycle or two. If you’re still treating ESG reporting as something you do when it’s convenient or when an investor asks, the regulatory ground has already shifted beneath you.
This isn’t theoretical. The compliance calendar for sustainability disclosure has compressed significantly, and businesses that haven’t mapped their obligations are running behind.
Regulation is catching up to investor demand. That’s the simplest way to understand why mandatory ESG reporting frameworks have proliferated so rapidly across major economies.
In all regions, governments and financial regulators have implemented or are working towards implementing mandatory disclosures on sustainability matters. Some begin with large companies serving the public interest, then gradually reduce the size of companies affected until small listed and privately held firms are included. Other requirements are based on revenue levels, industry groups, or operational activities – even those conducted by foreign-based companies that operate within the regulator’s jurisdiction.
What’s driving all of this isn’t altruism. It’s capital market pressure. Institutional investors managing trillions in assets necessitate standardised, comparable ESG data to price risk accurately. Voluntary disclosure gave them inconsistency. Mandatory frameworks give them something they can actually use.
Here’s where a lot of companies get confused. The rise of mandatory reporting doesn’t make voluntary frameworks irrelevant. It changes their function.
The frameworks like GRI, SASB, and TCFD recommendations were originally created for companies to have a standard format to disclose sustainability data before there was any mandatory system in place. In many cases, such frameworks have already turn into part of or aligned with mandatory systems. Recommendations of TCFD are integrated into the requirements of several countries and supranational jurisdictions. Standards by SASB guide the requirements in specific industries based on IFRS S1 & S2, which are the internationally accepted sustainability standards by ISSB.
| Framework | Current Status | Relationship to Mandatory Reporting |
|---|---|---|
| GRI Standards | Widely used voluntarily | Referenced in several regulatory frameworks |
| SASB Standards | Absorbed into IFRS S1/S2 | Informs industry-specific mandatory disclosures |
| TCFD Recommendations | Largely superseded | Embedded in multiple national and regional rules |
| IFRS S1 / S2 | Mandatory in adopting jurisdictions | Becoming the global baseline standard |
| CDP Disclosure | Voluntary | Aligns with TCFD and ISSB requirements |
Voluntary reporting today functions primarily as preparation and differentiation. Companies that built robust GRI or SASB reporting programs over the past five years are finding that transitioning to mandatory disclosure is significantly less painful than starting from scratch. The data infrastructure exists. The internal processes are established. The learning curve is shorter.
One of the most common miscalculations is underestimating cross-border exposure. Many mandatory frameworks extend beyond companies headquartered in the regulating jurisdiction. A business that meets revenue or operational thresholds in a given market may trigger reporting obligations under that market’s laws regardless of where the parent company is domiciled. Many mid-sized businesses haven’t run that calculation against each major market where they operate. Some are going to be surprised when a foreign subsidiary triggers a group-level reporting obligation that flows back to the parent.
The other common blind spot is supply chain pressure. Even companies that don’t meet mandatory thresholds directly are facing de facto reporting requirements through their customers. Large enterprises subject to mandatory disclosure are increasingly pushing data collection requirements down to their suppliers making ESG reporting a commercial necessity even before it becomes a legal one.
The worst position to be in is reactive, scrambling to meet each new mandatory requirement as it lands, with no underlying data infrastructure connecting your disclosures across frameworks.
Companies handling ESG reporting well in 2025 have done something structural:
- They mapped all current and anticipated mandatory obligations by jurisdiction and entity type
- They identified the data points required across frameworks and consolidated collection at the source rather than running parallel processes
- They assigned clear internal ownership not just to the sustainability team, but across finance, legal, operations, and procurement
- They built audit trails from the start, treating ESG data with the same rigour applied to financial data
- They engaged external assurance providers early, given that several mandatory frameworks already require or are moving toward third-party verification
The companies that approach ESG reporting this way aren’t just compliant. They’re positioned to use their sustainability data strategically in investor conversations, in procurement negotiations, in talent acquisition, and in the product development decisions that will increasingly need to account for embedded carbon and social impact.
