Human rights in deep-tier supply chains: the 2027 EU ban is only the first domino

The EU Forced Labour Regulation—Regulation (EU) 2024/3015—comes into full application on December 14, 2027. It bans products made with forced labour from the EU market at any point in the supply chain, applies to all economic operators regardless of size, and carries the power to order product withdrawals, destruction of goods, and market bans that ripple through every tier. Most procurement teams are treating this as a tier-1 compliance exercise: send a self-assessment questionnaire to direct suppliers, collect signed declarations, file the paperwork. That approach will fail when the first investigation reaches into tier 4 and discovers labour conditions the company never knew existed.

The reality is that visibility drops off a cliff after tier 1. A manufacturer may know its direct supplier of lithium-ion battery cells. It almost certainly does not know which mine produced the cobalt, which intermediary processed it, or which sub-contractor handled the final assembly. Those are tiers 3, 4, and 5. And that is exactly where forced labour risk concentrates.

Why tier 1 auditing is not enough

The EU Forced Labour Regulation does not distinguish between tiers. The product is banned if forced labour occurred at any stage of its production, procurement, or processing. A company that audits only its direct suppliers is exposed to every labour risk in its upstream supply chain, with no contractual or operational ability to detect it before an investigation begins.

"The Regulation applies to all economic operators, with no SME exemption. Due diligence is not formally mandatory but is effectively required as a shield in investigations. Authorities will request evidence of due diligence measures taken before deciding on bans or withdrawals."
— White & Case LLP, EU Forced Labour Regulation analysis

This is not a hypothetical scenario. In 2024, the Italian Competition Authority investigated a major fashion brand for supplier working conditions that would have gone unnoticed had the investigation stopped at tier 1. The German Supply Chain Due Diligence Act (LkSG), in effect since 2023, has already triggered multiple investigations where the documented human rights violation occurred at a sub-supplier the company had never directly contracted with.

The regulatory convergence accelerating around 2027-2029

The EU Forced Labour Regulation does not exist in isolation. Three other regulatory tracks are converging on the same timeframe, creating overlapping obligations that a tier-1 auditing approach cannot satisfy:

• EU Corporate Sustainability Due Diligence Directive (CSDDD) — In force since July 2024, amended March 2026. Member states must transpose by July 2028, with obligations applying from July 2029. Requires companies to identify, prevent, mitigate and remediate adverse human rights and environmental impacts across their entire "chain of activities," including upstream and downstream business partners.
• German Supply Chain Due Diligence Act (LkSG) — In effect since 2023. Applies to companies with 1,000+ employees. Requires due diligence on human rights and environmental risks in direct supply chains, with documented risk analysis and remedial action for identified violations.
• UK Modern Slavery Act (updated 2025) — The Home Office published updated Transparency in Supply Chains guidance in March 2025, strengthening reporting requirements and clarifying expectations for supplier due diligence.
• French Duty of Vigilance Act — Since 2017, requires large French companies (5,000+ employees in France) to establish and implement a vigilance plan covering human rights and environmental impacts across controlled companies and subcontractors.

The combined effect is that by 2029, every large company operating in or selling into Europe will have mandatory obligations to know what is happening at least three tiers into its supply chain. Companies that start building deep-tier visibility today have a 36-month runway. Companies that wait until 2028 will face simultaneous compliance deadlines across multiple regimes.

The visibility gap: what procurement actually knows about tier 3+

Most organizations have reliable data only on tier 1 suppliers—the entities they contract with directly. Some have partial tier 2 data for critical categories. Almost none have systematic visibility into tiers 3, 4, or 5. A Bain & Company analysis notes that price and supply volatility have made it urgent for procurement teams to achieve full transparency on suppliers and raw materials down to tier 3 or tier 4, but the gap between urgency and capability remains wide.

The difficulty of mapping deep-tier supply chains varies dramatically by commodity category. Minerals and metals supply chains are relatively tractable because material flows through a limited number of smelters and refiners. The OECD Due Diligence Guidance for Responsible Supply Chains of Minerals provides a ready-made framework. Textile and apparel supply chains are harder because subcontracting is widespread and informal. Electronics supply chains sit in the middle—high concentration at the component level but diffuse assembly networks.

The cost of building deep-tier visibility

There is a cost to establishing tier-3-plus visibility. Digital traceability platforms, supplier mapping tools, audit programs, and dedicated compliance personnel do not come free. But the cost of not having this visibility is higher.

The EU Forced Labour Regulation empowers competent authorities to order product withdrawal from the market, disposal of goods, and—for repeat violations—market bans on the economic operator. A single forced labour investigation that reaches a company's tier 4 supply chain can halt product sales across the entire EU, disrupt revenue for months, and trigger investigations under LkSG and CSDDD simultaneously.

Leading organizations are already investing. Ivalua's 2026 procurement trends report notes that 74% of CPOs plan to integrate AI into their procurement operations by the end of 2025, and a growing portion of that investment targets supply chain risk and compliance automation. The Netstock 2025 Benchmark Report found that 30% of SMBs now classify a portion of their inventory as "strategic" for hedging purposes, signaling that even smaller organizations are reallocating resources toward supply chain visibility.

A practical approach: risk-based deep-tier mapping

No procurement team can map every commodity to tier 5 simultaneously. The correct approach is risk-based segmentation:

The Bain analysis makes clear that leading organizations are already building end-to-end traceability: "Procurement teams are partnering with the supply chain function to create end-to-end traceability within the value chain. Price and supply volatility now make it urgent to achieve full transparency on suppliers and raw materials, down to tier 3 or tier 4 suppliers."

What this means for procurement teams

The 2027 EU Forced Labour Regulation is not a tier 1 compliance exercise. It is a full-supply-chain transparency requirement that will be enforced with product bans, market withdrawals, and cascading liability across multiple regulatory regimes. Procurement teams that build deep-tier visibility now gain a 3-year lead on compliance, reduce exposure to investigation-driven disruption, and position themselves for the broader CSDDD obligations arriving in 2029.

1. Map the top 5 highest-risk commodity categories to tier 3+ by Q1 2027. Start with minerals, electronics components, textiles, and any commodity sourced from regions with documented forced labour risk. Use the OECD Due Diligence Guidance framework.
2. Amend all tier 1 supplier contracts to include cascading audit and disclosure rights. The contracts must explicitly require suppliers to pass the same obligations to their sub-suppliers. Without this, tier 2+ visibility is legally blocked.
3. Deploy a digital traceability platform for high-risk supply chains. Manual spreadsheet tracking does not scale to the depth and frequency that the regulations demand. Digital tools that map material flows and flag anomalies are becoming table stakes.
4. Integrate human rights due diligence into the category management process, not a separate compliance workflow. When due diligence lives in a separate ESG office, it is disconnected from sourcing decisions. Embed it in category strategy, supplier selection, and contract renewal cycles.
5. Run a forced labour scenario drill before December 2027. Simulate an investigation reaching tier 4. Map the evidence you would need to produce, the contracts you would need to invoke, and the timeline you would face. The gaps you find are your 2027 action plan.

---

---