EUDR Obligations in 2026: A Complete Guide to Who Must Comply, and When
Written by: Huzaifa Aziz
On 4 May 2026, the European Commission issued its definitive EUDR Simplification Report under Regulation (EU) 2025/2650, confirming that the EU Deforestation Regulation will not be reopened or delayed further. While most online guides still explain EUDR using an obsolete two-tier model ("operator vs trader"), the finalized framework splits obligations across five distinct supply-chain roles and company size categories.
This 3,000+ word cornerstone guide and checker exist to walk compliance officers, EU importers, and global exporters through their actual post-simplification legal category, covering the 30 December 2026 / 30 June 2027 phased deadlines, derived-product Annex I scope, TRACES registration rules, and the unresolved gap period.
1. What EUDR Covers, and Why "Derived Products" Catch People Out
The core objective of Regulation (EU) 2023/1115 (as amended by Reg. (EU) 2025/2650) is to prohibit products linked to deforestation or forest degradation from being placed on, or exported from, the EU market after 30 December 2026.
The regulation applies to seven primary commodities and an extensive list of derived products set out in Annex I:
- Cattle: Live cattle, fresh/frozen beef, offal, hides, leather goods (HS 4101, 4107), and leather upholstery/footwear.
- Cocoa: Cocoa beans, paste, butter, cocoa powder, chocolate, and cocoa-containing food products (HS 1806).
- Coffee: Raw coffee beans, roasted coffee, decaffeinated coffee, coffee husks, and extracts.
- Oil Palm: Crude palm oil, refined palm oil, palm kernel oil, oleochemicals, glycerol, and cosmetics containing palm derivatives (HS 1511, 3823).
- Rubber: Natural rubber, technical rubber, vulcanized rubber, tyres, rubber footwear, and industrial gaskets (HS 4001, 4011).
- Soya: Soya beans, soya bean meal, soya oil, and animal feed containing soya.
- Wood: Fuelwood, raw timber, sawn wood, plywood, particle board, wooden furniture (HS 9403), paper, pulp, and cardboard packaging (HS 47/48).
Worked Example: The Chocolate Manufacturer Buying Processed Chocolate
A confectioner in Germany buys industrial chocolate blocks (HS 1806) from a Belgian processor, melts them down, and packages branded retail chocolate bars.
Common Misconception: The confectioner assumes EUDR does not apply because they did not import raw cocoa beans from West Africa.
Post-Simplification Reality: Industrial chocolate blocks carry an upstream Due Diligence Statement (DDS) reference number. Because the confectioner manufactures a new downstream product (retail bars), they are classified as a First Downstream Operator. They do not file a new DDS per shipment, but they must retain the supplier's DDS reference number for 5 years and register in TRACES if they are a non-SME enterprise.
2. The Finalized Role Structure After the May 2026 Simplification
The May 2026 simplification review eliminated the ambiguity of the original 2023 text by establishing five distinct, finalized legal categories.
| Supply Chain Role | DDS Filing Requirement | Compliance Deadline | TRACES System Registration |
|---|---|---|---|
| Non-SME Primary Operator | Full DDS Per Shipment | 30 December 2026 | Mandatory Registration |
| Micro / Small Primary Operator | One-Time Simplified Declaration | 30 June 2027 | Mandatory Registration |
| Trader (Wholesaler / Distributor) | None (No DDS) | 30 Dec 2026 (TRACES if Non-SME) | Non-SME Only (SME Exempt) |
| First Downstream Operator | None (Retain Upstream DDS Ref) | 30 Dec 2026 (TRACES if Non-SME) | Non-SME Only (SME Exempt) |
| Further Downstream Operator | None (Exempt) | N/A (Lightest Touch) | Completely Exempt |
3. Company Size Classification: Why It Changes Everything
Company size under EUDR is governed by standard EU Accounting Directive definitions (Directive 2013/34/EU), assessing headcount and annual turnover:
- Micro Enterprise: Fewer than 10 employees AND annual turnover ≤ €2 million.
- Small Enterprise: Fewer than 50 employees AND annual turnover ≤ €10 million.
- Medium Enterprise: Fewer than 250 employees AND annual turnover ≤ €50 million.
- Large Enterprise: 250 or more employees OR annual turnover > €50 million.
Why Medium-Sized Companies Sit in the Large Enterprise Camp
A major point of surprise for mid-sized European importers is that Medium enterprises do NOT get the extended 30 June 2027 deadline. Under the EUDR text, the 6-month extension and simplified declaration rules apply strictly to Micro and Small enterprises. Medium enterprises are classified alongside Large enterprises as Non-SMEs, binding them to the 30 December 2026 deadline.
The Geolocation vs. Postal Address Concession
For Micro and Small primary operators sourcing from low-risk countries, the simplification review introduced a major administrative relief: instead of gathering exact GPS polygon geolocation coordinates for every individual plot of land, micro/small operators may submit a simple postal address for the origin plot. However, this concession does not apply to non-SME operators or standard/high-risk countries.
4. Country Risk Tiers and Due Diligence Depth
The EUDR establishes a three-tier country benchmarking system (Low, Standard, High Risk) managed by the European Commission:
- Low Risk: Simplified due diligence applies. Operators are exempt from risk assessment and risk mitigation steps, provided they gather supply-chain information.
- Standard Risk: Standard due diligence applies. Operators must complete full risk assessment (evaluating deforestation rates, indigenous rights, and legal compliance) and risk mitigation.
- High Risk: Enhanced due diligence applies. Increased audit frequency and mandatory third-party verification.
Transparency Note: As of August 2026, the European Commission has not yet published the finalized country risk benchmarking list. All countries default to Standard risk until official benchmarking lists are formally published in the Official Journal of the European Union.
5. The Unresolved Gap Period: December 2026 to June 2027
One of the most complex practical questions surrounding EUDR compliance is the 6-month gap period between 30 December 2026 and 30 June 2027.
During this window, Large and Medium primary operators are fully bound by EUDR due diligence obligations, while Micro and Small primary operators are not yet required to file simplified declarations. If a Large downstream manufacturer buys commodities from a Micro primary operator during this window, current Commission guidance has not fully resolved how the downstream operator should verify compliance. EU trade compliance counsel advises companies to request voluntary supplier declarations during this interim period.
6. Penalties and Why "Downstream" Doesn't Mean "No Risk"
Article 25 of Regulation (EU) 2023/1115 mandates member state enforcement authorities to enact effective, proportionate, and dissuasive penalties:
- Fines up to 4% of EU Annual Turnover: Maximum fines must be set at least at 4% of the operator or trader's total annual EU-wide turnover.
- Confiscation of Goods & Revenues: Confiscation of the relevant commodities or derived products, as well as revenues gained from non-compliant transactions.
- Public Procurement Exclusion: Temporary exclusion from public procurement processes and access to EU public funding for up to 12 months.
Even "Further Downstream Operators" with no formal DDS filing duties cannot sell products linked to deforestation. The market prohibition applies universally across the entire EU internal market.
7. Geolocation Mapping: The Point vs. Polygon Rule (Article 9(1)(d))
Under Article 9(1)(d) of Regulation (EU) 2023/1115, primary operators must collect precise geospatial coordinates for all production plots of land. Plots under 4 hectares permit a single geographic coordinate (latitude/longitude point), whereas plots of 4 hectares or larger strictly require full polygon mapping (vector outlines of the land perimeter) in decimal degrees.
The core objective of the EUDR polygon requirement is to allow automated satellite overlay verification against the mandatory 31 December 2020 deforestation cutoff date. Operators cannot rely on regional center-point coordinates or postal district approximations when sourcing from large agricultural or forestry concessions. All geolocation data format TRACES submissions must adhere to standard WGS84 coordinate reference systems with a minimum precision of six decimal places (e.g., latitude 4.123456, longitude 101.654321).
Under the 4-hectare geolocation rule, for smallholder cocoa or coffee farms under 4 hectares, a single decimal degrees GPS coordinate format EUDR entry is sufficient. However, if a single plantation or land plot spans 4.01 hectares or more, submitting a point coordinate will trigger an immediate validation error within the EU TRACES NT portal, rendering the Due Diligence Statement invalid for customs clearance.
| Land Plot Size | Required Geospatial Data Format | Coordinate Precision Standard | Deforestation Verification Method |
|---|---|---|---|
| < 4.0 Hectares (Smallholder) | Single Latitude / Longitude Point | Decimal Degrees (6 decimal places) | Satellite point radius check against forest canopy baselines |
| ≥ 4.0 Hectares (Commercial) | Polygon Vector Perimeter (GeoJSON/KML) | Array of connected Lat/Long coordinate pairs (WGS84) | High-resolution satellite polygon boundary overlay vs Dec 2020 map |
8. The Annex I Scope Trap: Complex Derived Products & Packaging Nuances
Annex I of Regulation (EU) 2023/1115 covers derived products based on specific Harmonized System (HS) tariff codes, catching many importers unaware. While protective packaging used solely to transport another product is exempt, packaging imported or sold as a standalone commercial item is strictly subject to full EUDR due diligence.
Understanding the EUDR HS code list Annex I boundaries requires evaluating how items enter the EU customs territory. For example, corrugated cardboard boxes (HS 4819) surrounding imported electronics are classified as protective packaging and enjoy a statutory packaging material EUDR exemption. However, if a retailer imports flat-packed cardboard shipping boxes or paper shopping bags to sell as standalone packaging inventory, those items are in scope.
Similar classification nuances apply to composite products deforestation risks:
- Palm Oil Derivatives: Glycerol, fatty acids, and oleochemicals used in cosmetics (HS 1511, 3823) require full traceability to origin mills under palm oil derivatives compliance rules.
- Vulcanised Rubber: Natural rubber components in automotive tyres, conveyer belts, and footwear (HS 4001, 4011) fall under vulcanised rubber tyres EUDR obligations.
- Recycled Material Exception: Products manufactured 100% from post-consumer recycled fiber or timber enjoy a statutory recycled wood exemption, provided no virgin timber or pulp is blended into the product batch.
Printed Media Exemption vs. Blank Paper Scope
Under the May 2026 EUDR Simplification Review (Reg. (EU) 2025/2650), printed paper products such as books, newspapers, brochures, and periodicals (HS 4901, 4902) were explicitly removed from EUDR scope to reduce administrative burdens. However, blank paper, notebooks, kraft paper, and paperboard (HS 4802, 4810, 4820) remain strictly in scope and require full Due Diligence Statements prior to EU market entry.
9. TRACES NT Integration: System Registration & Bulk API Filing
Due Diligence Statements (DDS) must be registered in the European Commission's TRACES NT (Trade Control and Expert System) portal to generate a 16-character DDS Reference Number required for EU customs clearance. High-volume importers cannot rely on manual web portal entry and must integrate automated REST API or bulk XML uploads with the EU Customs Single Window (EU CSW-CERTEX).
Completing TRACES NT EUDR registration is a legal prerequisite for all Non-SME primary operators, traders, and first downstream operators. Upon successful verification of the supply-chain data, the system issues a unique DDS reference number customs declaration key. Without this reference number embedded in Box 44 (or data element 12 04 000 000 of the EU Customs Single Window H1 declaration), customs clearance software will automatically reject the entry.
For enterprise logistics managing thousands of SKUs, manually inputting polygon coordinates into the TRACES web UI is unfeasible. Companies must deploy bulk XML upload TRACES API pipelines connected to the EUDR Information System to validate geospatial data and retrieve DDS numbers programmatically.
Automated Customs Clearance Integration Workflow
- Geospatial Data Harvest & Validation: Collect GeoJSON polygon/point coordinates from origin suppliers and run pre-submission checks against the 31 Dec 2020 satellite baseline.
- Bulk XML / REST API Submission: Push the validated due diligence payload to the TRACES NT API endpoint using corporate EORI and EU Login credentials.
- DDS Reference Number Generation: TRACES NT verifies polygon integrity and issues a 16-character DDS Reference Number and verification security code.
- EU Customs Single Window (CSW-CERTEX) Clearance: Embed the 16-character DDS reference number in the customs declaration (Box 44) for instant automated import clearance.
10. Supply Chain Chaos: Navigating the 6-Month Transition Window
During the 6-month transition gap between 30 December 2026 and 30 June 2027, Large and Medium operators are fully bound by EUDR obligations, while Micro and Small primary operators are not yet required to file simplified declarations. Large downstream operators cannot delay compliance and must retroactively gather geolocation mapping from SME suppliers to legally place goods on the EU market.
This operational asymmetry under Regulation (EU) 2025/2650 creates significant compliance risk. While the small enterprise June 2027 extension gives Micro/Small primary operators an extra 6 months, a Large buyer operating under the EUDR December 2026 deadline cannot legally sell goods sourced from an unverified SME supplier. The downstream operator due diligence obligation obligates the Large buyer to conduct full due diligence independently.
Case Study: Large German Retailer Purchasing Timber from Polish Micro Sawmill (Feb 2027)
Scenario: In February 2027, a Large German furniture manufacturer (>250 staff) buys sawn oak timber from a Micro Polish sawmill (<10 staff).
Legal Friction: The Polish sawmill relies on its statutory SME extension until 30 June 2027 and refuses to file a simplified declaration in TRACES NT.
Resolution: Because the German manufacturer faces full EUDR liability from 30 December 2026, it cannot place the finished furniture on the market without a valid DDS. The German company must contractually mandate the Polish sawmill to provide raw plot geolocation coordinates so the German enterprise can file the DDS in TRACES NT itself.
11. Article 25 Enforcement: Fines, Border Confiscation & Strict Liability
Enforcement under Article 25 of Regulation (EU) 2023/1115 operates on a strict liability standard, where maximum administrative fines must equal at least 4% of an operator's total annual EU-wide turnover. Non-compliance also triggers mandatory border confiscation of goods, revenue forfeiture, and up to a 12-month ban from EU public procurement.
Unlike traditional regulatory regimes where ignorance of supplier non-compliance can be argued, EUDR enforces strict liability deforestation supply chain standards. If an imported shipment of rubber or timber is found to originate from land deforested after 31 December 2020, member state competent authorities will execute customs confiscation deforestation goods at EU entry ports regardless of buyer intent.
Under Article 25 EUDR fines, statutory penalties scale aggressively with corporate revenues. For a global enterprise with €500 million in EU turnover, maximum financial exposure reaches €20 million per major infringement. In addition, companies face a statutory public procurement ban EUDR for up to 12 months, preventing participation in government tenders across all 27 EU member states.
Disclaimer: This tool and guide are for general informational purposes only, do not constitute legal or regulatory advice, and EUDR compliance requirements depend on specific corporate supply-chain structures. Readers should confirm their obligations with qualified EU trade compliance counsel before relying on computed verdicts. Last updated: August 2026.