Why "Non-Reporting" Risk Is Out and "Misrepresentation" Risk Is In for 2026

For years, the biggest ESG compliance fear was straightforward: fail to disclose, get penalized. That's no longer where the real exposure sits. The center of gravity has shifted toward a harder problem: what happens when a company discloses something inaccurate.

The old risk model

Early ESG regulation was built primarily around getting companies to report at all. Frameworks like the original CSRD scope, early climate disclosure rules, and various national sustainability reporting mandates were designed to close a basic information gap: most companies simply weren't publishing structured sustainability data, and regulators wanted that baseline established. Under this model, the main compliance risk was straightforward non-disclosure, failing to file a required report, missing a deadline, omitting a mandated data point.

What's changed

As mandatory disclosure has matured and expanded across major markets, the regulatory and legal focus has shifted toward a different question: is what's actually being disclosed accurate, complete, and defensible. This is a fundamentally different kind of risk. A company that discloses nothing faces a clear, binary compliance failure. A company that discloses something inaccurate, an overstated emissions reduction, an unsubstantiated recyclability claim, a "carbon neutral" label resting on questionable offsets, faces a more complex exposure spanning regulatory enforcement, greenwashing litigation, and reputational damage simultaneously.

Several forces are driving this shift at once. Disclosure mandates have expanded enough that outright non-reporting is becoming rarer and easier for regulators to catch immediately. Assurance and verification requirements are tightening, meaning disclosed figures increasingly need to withstand third-party scrutiny rather than simply exist. And greenwashing litigation, brought by regulators, competitors, and private plaintiffs, has matured into a specific, well-developed legal category with its own precedents and enforcement patterns.

Why misrepresentation risk is harder to manage

Non-reporting risk has a clear remediation path: file the required disclosure. Misrepresentation risk doesn't resolve nearly as cleanly. A company can genuinely believe its sustainability claims are accurate and still face enforcement action or litigation if its underlying methodology, data sourcing, or offset quality doesn't hold up under the level of scrutiny now being applied. This means good-faith reporting isn't automatically sufficient protection anymore; the substantiation behind every claim matters as much as the claim itself.

This also means the risk profile has shifted from a legal or compliance team problem to something touching product marketing, investor relations, and operational data teams simultaneously, since misrepresentation risk can originate anywhere a sustainability claim gets made, not just in the formal annual disclosure document.

What this means for internal risk management

Companies adapting to this shift are moving compliance effort earlier in the process, verifying and documenting the evidence behind a sustainability claim before it's published anywhere, marketing material, investor presentations, formal disclosures, rather than treating verification as something that happens only during a formal audit or assurance cycle.

This has also elevated the importance of internal documentation discipline. Under a non-reporting risk model, the goal was simply producing a report. Under a misrepresentation risk model, the goal is producing a report, and every other public sustainability claim, that can withstand a level of scrutiny approaching what financial disclosures already face, complete with a defensible audit trail showing how each figure or claim was actually derived.

The specific areas facing the most scrutiny

Regulatory and litigation attention under this shifted model concentrates heavily on a few claim types: broad neutrality or net-zero claims without adequate qualification, recyclability claims that don't reflect real-world disposal outcomes, and renewable energy or offset claims that imply operational reality broader than what specific certificates or credits actually support. These aren't new categories of concern, but the intensity and sophistication of scrutiny applied to them has increased substantially.

The practical takeaway

Companies that built their ESG compliance programs primarily around meeting disclosure deadlines are working from an outdated risk model. The center of regulatory and legal exposure has moved to substantiation quality, whether every sustainability claim, formal or informal, can be defended with evidence that would hold up under external challenge. Building that substantiation discipline now costs considerably less than defending an inaccurate claim after the fact, once regulators, competitors, or plaintiffs' attorneys have already identified the gap.