CBAM Compliance 2026–2027 — The Carbon Border Tax CPOs Cannot Ignore

The EU Carbon Border Adjustment Mechanism (CBAM) entered its definitive phase on January 1, 2026. Every tonne of steel, aluminum, cement, fertilizer, hydrogen, or electricity imported into the EU from outside the bloc now carries a carbon price at the border. The transitional reporting period that ran from October 2023 through December 2025 is over. What replaces it is a mandatory, legally enforceable financial obligation tied to verified embedded emissions data — and for procurement leaders, the clock is already running on the first certificate surrender deadline of September 30, 2027.

CBAM is not a future regulation. It is a present compliance obligation with financial consequences that compound daily. Any CPO whose company imports covered goods into the EU and has not yet registered as an authorized CBAM declarant, secured verified emissions data from suppliers, and budgeted for certificate purchases is already behind. The cost of catching up — in penalties, default-value premiums, and disrupted supply relationships — will far exceed the cost of preparing now.

What changed on January 1, 2026

From January 1, 2026, CBAM moved from a reporting-only exercise into a fully enforced carbon pricing regime. Importers of covered goods must now register as authorized CBAM declarants with their member state's competent authority. Only authorized declarants can import CBAM goods, hold certificates, and submit declarations. Without this registration, importing covered goods is effectively illegal.

The KPMG framework captures the operational shift: importers must now collect verified embedded-emissions data for each product and each production installation, using actual verified values where possible or EU default values where not. The data must cover the calendar year 2026 and be verified by an accredited third-party verifier before inclusion in the annual declaration. Records must be kept for at least four years.

This is the decisive shift: carbon data is no longer a reporting checkbox. It is a direct line item on the cost of goods sold. An importer relying on default values pays significantly more than one with verified, installation-specific data. The financial incentive to secure supplier-level emissions data is now embedded in every purchase order for CBAM-covered goods.

The timeline that matters for procurement

The next 15 months will define the financial impact of CBAM for every affected importer. Understanding the calendar is step one.

Throughout 2026: Importers must collect and verify embedded emissions data for all CBAM goods imported during the year. This is installation-specific data — generic country averages will not suffice unless the importer is willing to pay default-value premiums. Third-party verification of emissions calculations becomes mandatory.

February 1, 2027: The EU central platform opens for the sale of CBAM certificates. Certificates for 2026 imports become purchasable, priced at the average quarterly EU ETS price for 2026. Importers must plan their certificate procurement strategy now, because the 2027 purchasing window opens against a background of known-but-unsettled liability.

September 30, 2027: The first annual CBAM declaration is due, and importers must surrender certificates covering all embedded emissions from 2026 imports. From 2027 onward, importers must also maintain a running balance of at least 50% of year-to-date required certificates at the end of each quarter.

What this means for steel, aluminum, cement, and fertilizer procurement

The six covered sectors share a common regulatory framework, but the practical exposure and mitigation strategies differ materially by material category.

Steel and aluminum face the highest absolute exposure because of trade volumes and the emissions intensity of primary production. Blast furnace steel carries direct emissions of approximately 1.8-2.0 tCO2e per tonne of crude steel, while electric arc furnace (EAF) routes using scrap can be below 0.4 tCO2e per tonne. The differential is enormous. CPOs who can source from EAF producers with verified low-carbon data gain a structural cost advantage once CBAM is applied. Those who rely on blast furnace suppliers without verified data pay the default-value penalty on every tonne.

Cement is structurally difficult to decarbonize. The calcination process itself releases CO2 — roughly 60% of cement emissions are process-related rather than energy-related. Fuel switching from coal to gas or biomass helps at the margin but cannot eliminate the process emissions. The CBAM benchmarks for cement are tight, meaning even relatively efficient plants may face significant liabilities. Importers of cement clinker and finished cement need verified, plant-specific data to avoid default values that are almost certainly punitive.

Fertilizers present the most dramatic spread between verified data and default values. Emissions vary strongly by production technology and abatement measures. A modern gas-fed ammonia plant with N2O abatement can produce urea at roughly half the embedded emissions of an older coal-fed plant without abatement. That spread translates directly into CBAM cost exposure. A single 10,000-tonne urea shipment using default values triggers an estimated EUR 430,000 in CBAM costs. Verified data from an efficient plant with N2O abatement can reduce that figure by 40-50%. For CPOs managing fertilizer procurement, supplier emissions data is not a sustainability metric — it is a direct cost lever.

Hydrogen and electricity follow production-method-specific rules. Green hydrogen from electrolysis using renewable power faces minimal CBAM exposure. Grey hydrogen from SMR without CCS faces the full carbon price. Electricity embedded emissions depend on the generation mix of the exporting country, with rules set by the European Commission. These are relatively concentrated supplier markets, meaning CPOs have leverage to demand verified data as a condition of sourcing.

The CPO's action plan for CBAM compliance

CBAM compliance cannot be delegated solely to trade compliance or sustainability teams. It requires coordinated action across procurement, finance, sustainability, and legal. The CPO owns the supplier data relationship, the procurement systems that capture product-level information, and the category strategies that determine sourcing mix. Here is what a CBAM-ready procurement function looks like in mid-2026.

1. Register as an authorized CBAM declarant or confirm your declarant status. Without authorized declarant registration, importing CBAM goods is not permitted. If your company has not yet registered with the competent authority in the relevant EU member state, this is the single most urgent action item. The registration process requires detailed information about the importing entity, the types and volumes of CBAM goods imported, and the contact persons responsible for compliance.

2. Map your CBAM product and supplier exposure at the installation level. This is the foundational procurement exercise. Create a comprehensive inventory of every CBAM-covered product imported into the EU, organized by CN code, supplier, production installation, country of origin, and annual volume. For each supplier, determine whether the production installation can provide installation-specific, verified emissions data aligned with CBAM methodologies. Identify the suppliers that cannot — these are your highest risk positions.

3. Embed CBAM data requirements into supplier contracts and RFQs. This is where the CPO has the most leverage. Every new contract and renewal for CBAM-covered goods should include:
- Mandatory provision of product-specific GHG data calculated according to CBAM methodologies.
- Requirement for accredited third-party verification of emissions data.
- Documentation of any carbon prices paid in the country of origin (ETS allowances, carbon taxes, etc.).
- Ongoing cooperation obligations for data updates and verification access.
- Clear consequences for non-provision of data, including the financial impact of default-cost pass-through.

4. Upgrade procurement systems to capture plant-level emissions data linked to purchase orders. CBAM requires emissions data to be linked to specific import transactions. Procurement systems must be capable of capturing, storing, and reporting installation-level emissions intensity data at the product category level and linking it to specific purchase orders, customs declarations, and supplier invoices. Manual spreadsheet tracking is not sustainable given the verification and recordkeeping requirements.

5. Build a CBAM certificate procurement and budgeting process. Certificate purchases begin in February 2027 for 2026 imports. CPOs, working with finance, should:
- Estimate total embedded emissions for 2026 imports by product category and supplier.
- Model CBAM costs under multiple EU ETS price scenarios (EUR 60, EUR 80, EUR 100 per tonne).
- Compare costs using verified data versus default values for each supplier.
- Budget for certificate purchases and integrate CBAM cost into total landed cost models.
- Plan certificate procurement to meet the 50% quarterly holding requirement while managing cash flow.

6. Integrate CBAM into category strategy and supplier selection. CBAM changes the cost competitiveness of different sourcing options. A supplier with higher unit price but lower emissions intensity may now be the lower-total-cost option once CBAM is applied. Category strategies for steel, aluminum, cement, fertilizers, and hydrogen must incorporate CBAM-adjusted cost comparisons. Low-carbon suppliers that previously appeared uncompetitive on unit price may gain a structural advantage.

The cost of delay

The penalty structure creates a steep cost for inaction. Failure to surrender the required number of CBAM certificates results in a penalty of approximately EUR 100 per excess tonne of CO2 equivalent, in addition to the obligation to still surrender the missing certificates. For a mid-sized steel importer bringing in 50,000 tonnes annually at 1.8 tCO2e per tonne, the penalty for a complete failure to comply could exceed EUR 9 million — before the certificate obligation itself is satisfied.

But the more insidious cost is the default-value premium. Importers without verified installation-specific emissions data from their suppliers are forced to use EU default values, which the Commission deliberately sets with an upward adjustment. For a company importing 100,000 tonnes of cement clinker annually, the difference between verified data and default values can exceed EUR 500,000 per year. Over the three-year period before CBAM can be adjusted through supplier engagement, that is EUR 1.5 million in avoidable cost.

There is also the risk of supply disruption. Suppliers that cannot provide verified emissions data may find themselves excluded from EU procurement processes as importers shift to CBAM-compliant sources. CPOs who delay supplier data engagement may discover in 2027 that their primary suppliers are non-compliant, forcing emergency resourcing at unfavorable terms.

Beyond 2027: the expanding scope

CBAM is not static. By 2030, the mechanism is expected to expand to all sectors currently covered by the EU ETS, adding downstream processed goods, chemicals, polymers, and potentially glass, ceramics, and paper. The European Commission has indicated that the initial scope was deliberately narrow to allow the administrative framework to mature, but the political trajectory is toward comprehensive coverage.

CPOs whose companies import goods beyond the current six sectors should begin preparation now. The transitional reporting phase for new sectors — if one is provided — will be short. The systems, supplier relationships, and data pipelines built for the 2026-2027 CBAM cycle can be extended to new categories, but only if the foundational capability exists.

The UK has also announced its own CBAM, effective January 1, 2027, covering aluminum, cement, fertilizers, hydrogen, and iron and steel. Importers serving both the EU and UK markets face parallel but distinct regulatory frameworks. The UK CBAM does not include electricity, glass, or ceramics initially but may add them later. Dual-market CPOs must track both regimes.

The procurement mandate

CBAM represents a structural shift in the cost of importing carbon-intensive goods into the EU. It is not a trade policy debate or a compliance inconvenience. It is a direct per-tonne cost on embedded emissions that changes the economics of procurement across six major material categories — with more to come.

The procurement function owns the levers that determine CBAM cost exposure: supplier selection, data collection, contract terms, and category strategy. CPOs who treat CBAM as a finance or sustainability problem miss the point. The data that determines CBAM cost comes from suppliers. The contracts that secure that data are procurement contracts. The category strategies that optimize for CBAM-adjusted total cost are procurement decisions.

1. Confirm authorized CBAM declarant status for all EU importing entities by September 2026. Without registration, import of covered goods is not permitted. This is the non-negotiable foundation.
2. Complete installation-level product and supplier mapping by December 2026. Every CBAM-covered product, every supplier, every production installation. Identify data gaps now.
3. Amend supplier contracts to mandate verified emissions data provision by Q1 2027. Include data-sharing obligations, verification cooperation, and carbon price documentation. Make verified data a contractual requirement, not a request.
4. Model 2026 CBAM exposure under multiple EU ETS price scenarios by Q3 2026. Use 2025 import data as a baseline. Compare verified-data costs vs. default-value costs for each supplier, and budget accordingly.
5. Integrate CBAM-adjusted total cost into category strategy and supplier selection immediately. Re-evaluate all steel, aluminum, cement, fertilizer, hydrogen, and electricity sourcing decisions with CBAM cost included. The supplier with the lowest unit price may no longer be the lowest total cost.

---

---

Research conducted via You.com Research.