From Disclosure
to Enforcement
Regulation in 2026
A jurisdiction-by-jurisdiction guide to how governments are giving effect to this shift — through due diligence mandates, import controls, product bans, and penalties for non-compliance.
There is no country in the world untouched by modern slavery
For organisations with global value chains, modern slavery and human rights risk is no longer a reputational or ethical concern only. It is fast becoming a material business risk — with direct implications for legal exposure, supply chain resilience, and continued access to key markets.
The regulatory and enforcement response is continuing to intensify, with regulators raising their expectations of how companies identify and manage these risks. The past decade of modern slavery regulation was built largely on transparency: companies were required to publish statements describing the steps taken to address risks. In 2026, the balance is shifting towards enforcement — reinforced through penalties, civil liability, import controls, trade restrictions, and mandatory due diligence obligations.
The European Union is leading the move towards mandatory due diligence, while the United States and Canada are driving enforcement through import bans and trade-based measures. Australia is moving toward criminal liability for large companies that fail to prevent modern slavery in their supply chains, and New Zealand has proposed a modern slavery regime that combines mandatory reporting with enforceable due diligence obligations. Across multiple jurisdictions, the emphasis is shifting from policy statements to demonstrable action and provable outcomes.
Companies are now expected to look beyond their immediate suppliers, pinpoint higher-risk geographies, sectors, and products, maintain ongoing due diligence programmes, and provide evidence of remediation where risks materialise.
Where regulatory requirements are shifting in 2026
Enforcement and liability in force
Penalties, import controls or civil liability already being applied.
Mandatory due diligence landing
Due diligence duties adopted or in transposition.
Disclosure-based, tightening
Reporting regimes under review or consultation.
Other regulatory developments
Restrictions on foreign supply chain investigations.
What each jurisdiction requires
Obligation types across the fourteen jurisdictions covered. Filled marks are in force; outlined marks are adopted, proposed, or in consultation.
| Jurisdiction | Reporting duty | Mandatory due diligence | Import controls | Product bans | Civil liability | Criminal liability |
|---|---|---|---|---|---|---|
| Australia | ||||||
| Canada | ||||||
| China | ||||||
| European Union | ||||||
| France | ||||||
| Germany | ||||||
| Netherlands | ||||||
| New Zealand | ||||||
| Norway | ||||||
| South Korea | ||||||
| Switzerland | ||||||
| Thailand | ||||||
| United Kingdom | ||||||
| United States |
Summary only. Scope thresholds, effective dates and enforcement practice differ materially by jurisdiction — see the relevant chapter before relying on this table.
Jurisdiction-by-jurisdiction breakdown
Each chapter covers the operative legal instrument, current status, scope, and key development shaping the 2026 compliance picture.
Australia
| Instrument | Modern Slavery Act 2018 (Cth) |
| In force | 1 January 2019 — annual modern slavery statements required |
| In scope | Australian entities and entities carrying on business in Australia with annual consolidated revenue of at least A$100 million |
| Next | Consultation on enforcement mechanics, including a deferred prosecution agreement scheme |
The Attorney-General confirmed the government's intent to introduce a new criminal offence for failing to prevent modern slavery. This would be only the second 'failure to prevent' offence in Commonwealth criminal law, and the first to apply that model beyond economic crime.
The Modern Slavery Amendment (Australian Anti-Slavery Commissioner) Act 2024, which took effect in November 2024, established Australia's first Anti-Slavery Commissioner. In January 2026, the Commissioner published formal recommendations urging Australia to move beyond its current reporting-only model — including a mandatory, risk-based due diligence obligation, a mechanism to designate high-risk products and industries, expanded reporting requirements, and stronger enforcement powers.
On 16 July 2026, Attorney-General the Honourable Michelle Rowland announced that the Commonwealth Government intends to introduce a new criminal offence for companies with annual consolidated revenue over A$100 million that fail to prevent modern slavery in their supply chains. A defence would be available where a company can demonstrate it took reasonable steps to prevent modern slavery — mirroring the foreign bribery offence's "adequate procedures" model.
What "reasonable steps" looks like
- Proportionate procedures, documented and fit to the business
- Top-level commitment from the board and senior management
- Risk assessment across operations and supply chains
- Communication and training for staff and suppliers
- Reporting mechanisms that are used and monitored
- Monitoring and review, with evidence of what changed
Adapted from the "adequate procedures" model under Australia's corporate foreign bribery offence.
This section was prepared with input from Norton Rose Fulbright.
Canada
| Instrument | Fighting Against Forced Labour and Child Labour in Supply Chains Act |
| In force | 1 January 2024 — reports due annually by 31 May |
| In scope | Canadian and foreign entities that produce, sell, or distribute goods within Canada or elsewhere, as well as those importing goods into Canada, including any entity that controls another entity engaged in these activities. In scope entities must meet prescribed asset, revenue, and employee thresholds. |
| Next | Bill C-35, tabled 12 June 2026 |
The first reporting cycle concluded in 2024. In 2026, Public Safety Canada made it clear that organisations are expected to do more than describe policies — they must demonstrate measurable progress and show how they actively identify, manage, and reduce risks.
Canada by the numbers
Source: Public Safety Canada, second annual report to Parliament.
On 12 June 2026, the Canadian government tabled Bill C-35 — replacing the current Customs Tariff prohibition with a standalone legislative framework giving the Minister of Foreign Affairs authority to designate high-risk goods by producer, country, or region where there are reasonable grounds to suspect forced labour.
This section was prepared with input from Norton Rose Fulbright.
China
| Instrument | State Council Order No. 834 and Order No. 835 |
| In force | April 2026 |
| In scope | Supply chain due diligence and investigations conducted in China, and entities complying with foreign measures deemed inappropriate |
| Direction | Counter to the global trend — restricting rather than requiring supply chain investigation |
China is actively responding to the global expansion of forced labour and supply chain due diligence regulation. In April 2026, two new State Council Regulations came into effect. Order No. 834 requires supply chain due diligence and investigations conducted in China to comply with Chinese laws. Order No. 835 restricts compliance with certain foreign measures identified by the Chinese authorities as inappropriate, with non-compliance potentially giving rise to administrative penalties, civil liability and other legal consequences.
For multinational companies, this creates a direct regulatory collision whereby compliance with the UFLPA, CSDDD, or LkSG may trigger non-compliance with Chinese law. Managing this tension will require companies to take an integrated, multi-jurisdictional approach to supply chain risk, one that accounts for conflicting legal obligations simultaneously.
This section was prepared with input from Norton Rose Fulbright Shanghai Pacific Legal.
European Union
| Instrument | Corporate Sustainability Due Diligence Directive (CSDDD), as amended by the Omnibus Directive; EU Forced Labour Regulation |
| In force | Forced Labour Regulation applies from December 2027 |
| In scope | Large companies for CSDDD; the Forced Labour Regulation applies to products placed on the EU market |
| Next | Forced Labour Regulation guidelines published (26 June 2026) |
Key dates
The EU remains the global leader in mandatory due diligence. The CSDDD requires large companies to identify, prevent, and mitigate human rights and environmental risks throughout their operations and value chains. The EU Forced Labour Regulation bans the sale, importation, or exportation of products made with forced labour, giving authorities the power to investigate, withhold, and remove products from the EU market.
EU Member States will be required to transpose the CSDDD into national law by July 2028, moving the EU from disclosure-based obligations towards enforceable due diligence backed by trade restrictions, product bans, and greater scrutiny of supply chain practices.
This section was prepared with input from Norton Rose Fulbright.
France
| Instrument | Duty of Vigilance Law (Loi n° 2017-399 du 27 mars 2017) |
| In force | 2017 — first successful civil liability case decided March 2026 |
| In scope | Large French companies, with extraterritorial reach into overseas subsidiaries |
| Next | Alignment with CSDDD; further claims expected on the precedent |
The first successful civil liability case under the Duty of Vigilance Law — vigilance planning now carries real legal and financial consequences.
In March 2026, a French court awarded damages in the first successful civil liability case under the Duty of Vigilance Law, caused by alleged labor-rights abuses and anti-union dismissals at the Turkish subsidiary of the Yves Rocher group. The court found that the French parent company failed to identify and address clear risks to trade union rights within its overseas subsidiary, highlighting the regulation's extraterritorial reach.
Although the damages awarded were relatively small, the decision establishes an important precedent: French companies now face civil liability where deficiencies in their vigilance plans contribute to harm in overseas operations or supply chains.
Germany
| Instrument | Lieferkettengesetz (LkSG) — Supply Chain Due Diligence Act |
| In force | Yes — BAFA guidance on risk analysis published January 2026 |
| In scope | Companies with more than 1,000 employees, including foreign companies with a German presence |
| Next | Transition period to align the LkSG with the EU's CSDDD |
Germany's LkSG requires companies with more than 1,000 employees to establish a formal due diligence framework to identify, prevent and address human rights and environmental risks across their operations and supply chains. BAFA published further guidance in January 2026.
Companies are required to:
- Establish a risk management system
- Conduct annual and ad hoc risk assessments
- Appoint a human rights officer
- Implement preventive and remedial measures
- Maintain grievance mechanisms
- Keep detailed records and internal documentation
Germany is now entering a transition period as it prepares to align the LkSG with the EU's CSDDD. Core due diligence obligations would remain in force until the CSDDD is implemented into German law.
Netherlands
| Instrument | Draft International Responsible Business Conduct Act (WIVO) |
| Status | Draft bill published late 2024, implementing the EU's CSDDD into Dutch law |
| In scope | In-scope companies would be required to identify, prevent, and address adverse impacts in their operations and value chains |
| Next | CSDDD transposition, due July 2028 |
No standalone law is final — but Dutch authorities already expect companies operating abroad to conduct due diligence.
The Netherlands has not yet finalised a standalone due diligence law, but Dutch authorities have indicated that they expect Dutch companies operating abroad to engage in responsible business conduct by conducting due diligence to identify risks for people and the environment within their own business operations and international value chain.
New Zealand
| Instrument | Modern Slavery Bill (bipartisan, February 2026) |
| Status | Passed first reading; before the Education and Workforce Select Committee, due to report by 31 August 2026 |
| In scope | NZ entities and overseas companies carrying on business in New Zealand with consolidated annual revenue of NZD $100 million or more, including controlling parents |
| Penalty | Maximum fine of NZD $200,000, plus personal liability for directors and senior managers |
Modern slavery returned to the agenda — but not as another reporting exercise.
Modern slavery returned to New Zealand's agenda in February 2026 with the bipartisan Modern Slavery Bill, which has since passed its first reading in Parliament. It is now before the Education and Workforce Select Committee, which is due to report back by 31 August 2026.
Stricter than Australia and the UK
New Zealand's Bill carries a maximum fine of NZD $200,000 and personal liability for directors and senior managers where they authorised, permitted, or failed to prevent an offence. Neither the Australian Modern Slavery Act 2018 (Cth) nor the UK Modern Slavery Act 2015 currently imposes financial penalties or director liability for failure to report.
This section was prepared with input from Norton Rose Fulbright.
Norway
| Instrument | Transparency Act (Åpenhetsloven) |
| In force | Yes — revised Consumer Authority guidance issued late 2025 |
| In scope | Due diligence in line with the OECD Guidelines for Multinational Enterprises, an annual report, and responses to public information requests within three weeks |
| Next | Continued supervision focused on evidence and responsiveness |
Due diligence cannot be outsourced entirely to suppliers, auditors, or industry initiatives.
Norway's Transparency Act remains one of the clearest examples to date of a due diligence law backed by meaningful enforcement powers. In late 2025, the Norwegian Consumer Authority issued revised guidance emphasising meaningful stakeholder engagement, ongoing risk-based assessment and prioritisation of risks, stronger follow-up measures, and recognition that a company's connection to adverse impacts is dynamic and may change over time.
The guidance makes clear that due diligence cannot be outsourced entirely to suppliers, auditors, or industry initiatives. Companies remain responsible for identifying and handling risks in their own operations and supply chains.
South Korea
| Instrument | Corporate Human Rights and Environmental Due Diligence Bill |
| Status | Reintroduced in 2025; enactment subject to political negotiation and business opposition |
| In scope | Large Korean companies and certain foreign companies doing business in South Korea |
| Next | Unlikely to take full effect before 2027 at the earliest |
An export economy in electronics, batteries, shipbuilding, automotive and seafood carries significant upstream human rights risk.
South Korea is emerging as an important jurisdiction in the field of business and human rights. In 2025, lawmakers reintroduced a Corporate Human Rights and Environmental Due Diligence Bill that would require large companies to identify, prevent and address human rights and environmental risks throughout their operations and supply chains. Enactment remains subject to political negotiation and business opposition; the bill is unlikely to take full effect before 2027 at the earliest.
Switzerland
| Instrument | Conflict minerals and child labour due diligence and reporting rules |
| In force | Yes — annual reporting required |
| In scope | Companies importing or processing tin, tantalum, tungsten or gold from conflict zones, and those dealing in goods or services suspected of involving child labour |
| Next | Federal Act on Sustainable Corporate Governance proposed April 2026; discussion underway |
A proposed Federal Act on Sustainable Corporate Governance would broadly mirror CS3D — and add civil liability and supervisory oversight.
In April 2026, the Swiss government proposed the adoption of a new Federal Act on Sustainable Corporate Governance, to align with CSRD and CS3D. The legislation would require in-scope companies to report on and undertake risk-based human rights and environmental due diligence, with obligations broadly mirroring those of CS3D including risk assessment and prioritisation, remediation, establishing grievance mechanisms and monitoring. It also provides for civil liability and supervisory oversight for non-compliance.
Thailand
| Instrument | Draft Act on the Promotion of Responsible Business Conduct — the HREDD Bill |
| Status | First circulated for consultation July 2025; final form subject to revision |
| In scope | Manufacturing businesses with annual revenue over THB 500 million (approx. USD 16 million); wholesale, retail or service businesses over THB 300 million — including foreign companies |
| Context | Included in the US Section 301 investigation; OECD accession ambition |
Mandatory supply chain due diligence is moving from aspiration to expectation.
Thailand's Ministry of Justice is developing a Draft Act on the Promotion of Responsible Business Conduct — the HREDD Bill — first circulated for consultation in July 2025. The draft would impose mandatory due diligence obligations on large enterprises operating in Thailand, including foreign companies that meet the applicable revenue thresholds. The bill has not yet entered the formal legislative process, but it sends a clear signal — reinforced by Thailand's inclusion in the US Section 301 investigation and its OECD accession ambition — that mandatory supply chain due diligence is moving from aspiration to expectation.
United Kingdom
| Instrument | Modern Slavery Act 2015, section 54 — amendments tabled as Part 5 of the Immigration and Asylum Bill |
| Status | Introduced 30 June 2026; second reading 13 July |
| In scope | Existing section 54 reporting population, now reporting against a prescribed set of topics with a signed accuracy declaration |
| Next | Substantive due diligence legislation and an EU-style import ban indicated before the end of this parliament |
On 30 June 2026, the UK government introduced proposed amendments to Section 54 of the Modern Slavery Act 2015, tabled as Part 5 of the Immigration and Asylum Bill, which had its second reading on July 13. The amendments would make the content of modern slavery statements mandatory for the first time — requiring reporting against a prescribed set of topics including risk assessments, policies, due diligence processes, training, and effectiveness measures — and to include a signed accuracy declaration. The bill also introduces financial penalties for non-compliance, a first for the UK's modern slavery reporting regime.
The reforms strengthen transparency and reporting but stop short of mandating human rights due diligence itself and do not introduce a forced labour import ban. A Government minister has separately indicated the government expects to introduce substantive due diligence legislation, along with an EU-style import ban, before the end of this parliament.
This section was prepared with input from Norton Rose Fulbright.
United States
| Instrument | Uyghur Forced Labor Prevention Act (UFLPA); Section 301 of the Trade Act |
| In force | UFLPA since 2022; Section 301 investigations launched March 2026 |
| In scope | Importers of goods sourced from Xinjiang or from entities on the UFLPA Entity List — rebuttable presumption of forced labour |
| Next | Continued Entity List expansion; Section 301 findings across about 60 economies |
Section 301 investigations into about 60 countries and trading blocs — exposure now follows the sourcing country, not only the supplier.
Under the UFLPA, CBP operates a rebuttable presumption that goods sourced from Xinjiang or from entities on the UFLPA Entity List are treated as products of forced labour unless importers can prove otherwise. Since the UFLPA came into effect in 2022, authorities have reviewed more than 10,000 shipments worth over USD 4 billion, and enforcement has expanded to include automotive parts and electronics.
UFLPA
Company- and product-level. A rebuttable presumption against goods tied to Xinjiang or to listed entities, enforced at the border through shipment detention. The burden sits with the importer to prove otherwise.
Section 301
Country-level. Assesses whether a government adequately prohibits forced labour imports, with tariffs, withdrawal of trade preferences, or broader import restrictions as remedies. Exposure follows the sourcing country, not only the supplier.
The Office of the USTR launched Section 301 investigations in March 2026 into about 60 countries and trading blocs. On 2 June 2026, the USTR concluded that Canada and roughly 60 other countries were not effectively enforcing forced labour import prohibitions, and proposed a 10% tariff on affected goods.
Five questions to ask
Use these as a quick sense check of your organisation's readiness.
| Question | Evidence of capability | |
|---|---|---|
| 1 | How far beyond Tier 1 can we see and where are the greatest risks? | You have mapped supply chain relationships beyond Tier 1 including raw material sources and labour-intensive processing stages and can identify higher-risk geographies, sectors, and products. Risk assessments are dynamic: updated when sourcing changes, new intelligence emerges, or regulatory expectations shift. |
| 2 | If a regulator or customer challenged us, could we prove where our goods come from? | You can trace key products, materials and suppliers back through the supply chain and provide evidence if challenged by customers, regulators or customs authorities. |
| 3 | Are we relying on policies, or on evidence? | You can trace priority products and materials to source, supported by documentation that would withstand scrutiny from customs authorities, regulators, or major customers. Traceability is not limited to contractual record; it includes independent verification such as site-level data, certifications, or audit evidence. |
| 4 | Could we demonstrate what we have actually done, not just what we have written? | You can point to concrete actions, not just policies — documented supplier risk assessments, audit findings and follow-up, active grievance mechanisms with evidence of use, remediation plans with measurable outcomes, and a clear record of how decisions were made when risks were identified. |
| 5 | Would we be prepared if enforcement affected us tomorrow? | You have a tested response protocol for realistic enforcement scenarios: a shipment detained at the border, a supplier placed on a restricted entity list, a regulatory information request, or a media enquiry about sourcing practices. Roles, responsibilities, legal advisers, and escalation triggers are documented and understood, not improvised under pressure. |
From disclosure to enforcement, from policies to provable outcomes, and from transparency as an end in itself to due diligence as a condition of market access — the regulatory trajectory set out in this guide points in one direction. Organisations that treat modern slavery and human rights risk as a compliance formality are increasingly exposed.
Ultimately, the question regulators, investors, and customers are asking is simple: can you prove it? The organisations that can — that know where their risks are, can demonstrate what they are doing about them, and have the evidence to back it up — will be those best prepared for the years ahead.
The organisations best positioned for what comes next:
- Have mapped their supply chains beyond immediate suppliers and can identify where the highest risks concentrate
- Treat modern slavery as one dimension of a broader human rights risk profile, not a standalone reporting obligation
- Invest in technology and data to improve supply chain visibility, rather than relying on supplier self-assessments alone
- Demand evidence, not assurances, and are prepared to act when evidence is lacking
- Have planned for enforcement scenarios: import detentions, entity list designations, regulatory information requests, and customer audits
- Review and strengthen their approach continuously, in response to new intelligence, changing sourcing patterns, and evolving regulatory expectations
Free download · August 2026
From Disclosure to Enforcement
Modern Slavery and Human Rights Regulation in 2026 — a jurisdiction-by-jurisdiction briefing across 14 countries and 6 obligation types, drafted with input from Norton Rose Fulbright.
From risk to resilience — with Ethixbase360
covered