The EU Forced Labour Regulation: what the new implementation guidance means for businesses
GoodBlog | read time: 9 min
Published: 16 July 2026
The European Commission has published its long-awaited guidance on the EU Forced Labour Regulation (EUFLR), providing detailed information on the approach the Commission and Member State authorities are likely to take to investigations and enforcement when the Regulation begins to apply on 14 December 2027.
The guidance has been launched as part of the Forced Labour Single Portal, where the EU database of forced labour risks and additional implementation tools and resources will be published over the coming months. This resource will give businesses greater visibility of the information and support available as they prepare for the Regulation, as well as provide information on high-risk areas and investigations.
Under the EUFLR, products made with forced labour may not be placed on the EU market, made available within it or exported from it. The guidance provides useful clarification of the definition of forced labour used by the EUFLR, confirming that it covers both state-imposed and privately imposed forced labour, including forced child labour. It also clarifies that forced labour requires both the absence of genuine voluntary consent and the presence of coercion.
For organisations preparing for enforcement, it provides valuable insight into the practices and procedures authorities are likely to follow. While many of the underlying principles will already be familiar to businesses with established human rights programmes, there is now a clearer indication of how investigations may be prioritised, the evidence authorities are likely to request and the information companies may be required to provide if concerns arise. The guidance also reinforces the importance of effective human rights due diligence in identifying and addressing forced labour risks before they become the subject of regulatory scrutiny.
How EUFLR investigations are likely to work
The EUFLR gives authorities broad powers to identify products and organisations that may require further investigation. Information may come from a range of sources, including submissions made through the Single Information Submission Point, information held in the EU Forced Labour Risk Database, Member State authorities, civil society organisations, trade unions, worker representatives and alleged victims.
The Commission and Member State authorities may also gather information independently.
For businesses, this means an investigation may begin without the organisation being aware that concerns have been raised about its products, suppliers or sourcing locations. Information provided by external stakeholders may contribute to an authority’s decision to investigate, even where the business has not previously identified the issue itself.
This approach reflects the difficulty of identifying forced labour in global supply chains. Risks may occur several tiers away from the final seller, and traditional compliance mechanisms such as supplier questionnaires and audits may not always provide sufficient visibility.
What is in scope under the EUFLR?
The EU Forced Labour Regulation applies to all products, regardless of their sector or country of origin, that are placed on, made available within or exported from the EU market. It applies to all organisations involved in the supply chain, including manufacturers, importers, distributors and retailers.
The Regulation applies whether forced labour occurs inside or outside the EU and whether it involves state-imposed or privately imposed forced labour. This means businesses of all sizes with products connected to the EU market will need to understand how forced labour risks may affect their operations and supply chains.
The EU Forced Labour Risk Database
A significant development accompanying the Regulation is the creation of the EU Forced Labour Risk Database.
The database will provide information on forced labour risks associated with particular products, sectors and geographical areas. It is intended to support authorities in prioritising investigations, while also providing businesses with an additional source of information when reviewing their own supply chain exposure.
The database will not determine whether a specific company has breached the Regulation. Instead, it will highlight areas where potential concerns exist and where further assessment may be appropriate.
Businesses should treat the database as an important monitoring tool. Organisations will need to consider who is responsible for reviewing relevant updates and how new information will be incorporated into supplier assessments, sourcing decisions and wider human rights due diligence processes.
Monitoring will be critical to ensuring effective compliance, as supply chain risk assessments cannot be static. Labour conditions, political circumstances and supplier relationships can change over time, meaning that a product or sourcing location considered low risk today may require further attention in the future.
The scope of a forced labour investigation
The scope of an investigation may extend beyond a single finished product or supplier relationship.
Authorities may examine:
- individual parts or components;
- intermediate products;
- finished products;
- product lines;
- groups of similar products; and
- products originating from a particular factory or production facility.
This has important implications for businesses with complex supply chains. Where a component is found to have been made with forced labour, the finished product containing that component may also fall within the scope of the Regulation.
Investigations may also broaden as evidence develops. Where authorities identify indications of widespread or systemic forced labour, including suspected state-imposed forced labour, they may extend their assessment to additional products, suppliers or geographical areas.
A risk-based approach to enforcement
The Commission expects authorities to apply a proportionate and risk-based approach when deciding which products and organisations to investigate.
This means enforcement is likely to focus on situations where the potential harm is considered most serious. Authorities will assess both the scale and severity of the alleged forced labour, including the number of workers affected, the presence of multiple forced labour indicators, the duration of the practices and whether the situation appears systemic or difficult to remedy.
They will also consider the significance of the products concerned, including the quantity and value of products placed or made available on the EU market and the importance of the suspected forced labour within the final product.
The position of the organisation within the supply chain will also be relevant. Companies with close involvement in the production stage where forced labour is suspected, such as producers, manufacturers or processors, are likely to receive particular attention. Where forced labour occurs outside the EU and there is no direct link between the producer and the EU market, importers may become a key focus because they provide the connection between production and the EU consumer market.
The size and resources of a business may also influence how authorities approach an investigation. Larger companies may be expected to have greater capacity, expertise and leverage to identify and address risks. Businesses with long, multi-tier or heavily intermediated supply chains may also face closer scrutiny, as limited visibility can make it more difficult to trace products and demonstrate how potential forced labour concerns are identified and managed.
For businesses, the message is that scale and influence bring expectations. Organisations with significant purchasing power or exposure to higher-risk supply chains should be able to demonstrate how they understand and manage potential forced labour concerns.
Enforcement measures and penalties under the EUFLR
If an investigation concludes that a product has been made with forced labour, authorities can take action to prevent that product from remaining on the EU market. This may include prohibiting the product from being placed or made available within the EU, preventing its export, ordering the withdrawal of products already available on the market and requiring their disposal.
The primary enforcement mechanism under the EUFLR is therefore the removal of forced labour products from the market; however, where organisations fail to comply with a ban decision, penalties may also apply. Member States will determine the nature and level of penalties, taking into account factors such as the seriousness and duration of the non-compliance, as well as the need for penalties to be effective, proportionate and dissuasive. Costs associated with the disposal of prohibited products will also be the responsibility of the business concerned.
Preparing for enforcement: what businesses should do now
Although enforcement does not begin until December 2027, the Commission’s guidance provides businesses with a clearer understanding of how the Regulation is likely to be applied and what information authorities may expect companies to provide.
For many organisations, preparation should not require the creation of entirely new systems. Businesses that already have human rights due diligence, responsible sourcing or supply chain management processes should use this opportunity to test those arrangements. Companies will need assurances that they have sufficient visibility, accountability and evidence if a product, supplier or sourcing decision becomes subject to investigation.
The first step is understanding where forced labour risks may arise. Businesses should familiarise themselves with the forced labour indicators identified, which draw on International Labour Organization (ILO) standards. These include indicators such as forced recruitment, deception, debt exploitation, restrictions on movement, withholding of wages or identity documents, intimidation, violence and abuse of vulnerability.
The guidance also highlights indicators relevant to state-imposed forced labour, including detention, state surveillance, restrictions on employment termination, denial of legal status or social entitlements and other forms of state coercion.
Businesses should consider whether these indicators are reflected in their risk assessment processes and whether they have sufficient understanding of where risks may exist across their operations and supply chains. This includes identifying higher-risk products, suppliers, countries and production locations, while recognising that risk profiles can change over time.
Beyond identifying potential risk, organisations should also ensure they are prepared to respond if an investigation is initiated. GoodCorporation recommends developing an internal process for the 30-day (extendable) response deadline that authorities will be working to once an investigation opens. This will need to include the accumulation and gathering of evidence that authorities may need, such as:
- actions taken to identify, prevent, mitigate, end or remediate forced labour risks;
- working conditions at the relevant production site; and
- details relating to the products under investigation.
To prepare for such an investigation, businesses should ensure that key decisions are documented and that any actions taken can be explained. This will also include showing how the Forced Labour database is monitored and the system used for flagging and escalating any risks identified.
One of the biggest challenges will be obtaining visibility beyond Tier 1 suppliers, particularly for high-risk product lines. This is likely to involve mapping sub-suppliers and raw material origins rather than relying on direct supplier assessments alone.
It is recommended that organisations designate a specific contact person or department to manage engagement with authorities. This should include clear ownership of the process, with access to all important information and an agreed escalation system, should the investigation require it.
The focus of regulatory scrutiny will go beyond the development of policies. As with much corporate regulation, the focus will be on the development of effective systems and processes to demonstrate how the risks are being managed, how concerns were identified, what information informed their decisions and why particular actions were taken.
Due diligence remains central
As such, due diligence will play a central role. Although the EUFLR does not create a mandatory human rights due diligence obligation, the Commission recognises its effectiveness in helping to identify, prevent, mitigate and address forced labour risks.
As with other recent legislation such as the Corporate Sustainability Due Diligence Directive (CSDDD), the Forced Labour Guidance draws heavily on the OECD’s six-step due diligence framework. In line with other directives, it emphasises that due diligence should be proportionate to a company’s circumstances, including its size, resources, supply chain position and the nature and severity of the risks identified.
It also makes clear that effective due diligence requires more than policies or supplier commitments. Businesses should use credible information sources to understand potential impacts, including engagement with workers, trade unions, civil society organisations, independent experts and affected communities where appropriate.
Supplier audits remain a useful tool, but the Commission cautions against relying solely on these. In situations where forced labour risks are difficult to detect through conventional assessments, organisations may need to draw on additional sources of information and engage with stakeholders in a way that protects confidentiality and avoids creating risks for those providing information.
The guidance also recognises the different circumstances faced by SMEs. Smaller businesses are not expected to replicate the formal systems of larger companies. Instead, they should adopt approaches proportionate to their resources and risks, which may include direct engagement with key suppliers, customers or employees where concerns arise.
How GoodCorporation can help
GoodCorporation is advising businesses on preparation for the EU Forced Labour Regulation, helping organisations understand what the Regulation means for their operations and how existing systems can be strengthened.
Our work includes:
- assessing exposure to forced labour risks across operations and supply chains;
- reviewing human rights due diligence processes against EUFLR expectations;
- supporting supply chain mapping and risk assessment;
- identifying gaps in governance, accountability and escalation arrangements;
- developing investigation response procedures; and
- benchmarking approaches against OECD due diligence expectations and wider EU sustainability requirements.
The publication of the Commission’s guidance provides businesses with greater clarity on what preparation should involve. For organisations with existing human rights and supply chain management processes, the task is not necessarily to start again, but to assess whether those systems provide the visibility, evidence and governance needed to respond effectively.
Businesses that take the opportunity now to review and strengthen their approach will be better prepared when enforcement begins in December 2027. To learn more about how GoodCorporation can help with FLR preparation, visit our human rights webpage or get in touch with our experts today.
work with us
