EU Forced Labour Regulation explained: what does this mean for your business as a supplier?

On 14 December 2027 the EU Forced Labour Regulation (Regulation (EU) 2024/3015) becomes applicable. From that date, products made wholly or partly with forced labour may no longer be placed on the EU market or exported from the EU. Customs authorities gain the power to hold products.

Who this affects

Every company placing products on the EU market — producers, importers and retailers — must be able to demonstrate that their supply chain is free of forced labour. That means they have to question their suppliers. If you supply such a company, you can expect a request for a declaration.

Unlike the CSRD, there is no size threshold: the regulation looks at the product, not at the revenue or headcount of the company behind it. A small supplier can therefore end up in the chain of an investigation too.

What counts as forced labour under this regulation

The regulation follows the ILO definition: work exacted under the menace of a penalty and for which the person has not offered themselves voluntarily. This includes state-imposed forced labour — a direct reference to the situation in Xinjiang (China) and North Korea.

What you need to be able to demonstrate as a supplier

You may be asked for a declaration that you do not use forced labour in your own operations. Companies sourcing directly or indirectly from high-risk regions are expected to carry out more extensive due diligence, including documentation of their own supply chain.

In practice the question rarely comes from customs and almost always from your client — often as an annex to a purchase contract or a supplier questionnaire, with a signature and a date attached.

How verified.supply supports this

The CSDDD module in verified.supply lets you record and sign your forced labour declaration digitally. You can share the signed declaration via your badge URL or deliver it automatically to clients who ask for it.

verified.supply does not verify the content — it is your declaration, with your name and date under it. What the platform adds is structure and traceability: one version, current, shareable with everyone who asks.