CSDDD Omnibus Explained – Practical interpretation (Pharma) Scenerio -1
Case:
EU MAH → CMO (India) → API supplier (India)
Under Omnibus CSDDD:
| Tier | Entity | Legal CSDDD Expectation | Practical Pharma Reality |
|---|---|---|---|
| Tier 0 | EU MAH | ✔ Fully in scope under the Corporate Sustainability Due Diligence Directive | Full QMS integration with ESG embedded into governance and oversight |
| Tier 1 | CMO | ✔ Direct due diligence required | Already audited under Good Manufacturing Practice + ESG overlay added |
| Tier 2 | API supplier | ⚠ Risk-triggered due diligence | Typically already qualified under GMP; ESG depth depends on risk profile |
| Tier 3 | Raw materials | ❌ Not routinely required (unless risk triggers) | Rarely visible or assessed unless critical or high-risk input |
Key takeaway
The Omnibus proposal effectively says:
“Focus on direct suppliers, and only go deeper when risk justifies it.”
BUT in pharma:
- go deeper than the law requires
- So the real impact is:
- Formalising ESG within existing supplier qualification systems
- Not building entirely new layers
Strategic implication (non-obvious but important)
- EU MAHs remain the regulatory anchor
- Non-EU CMOs/APIs avoid direct legal scope
- BUT:
- They become contractually bound
- And subject to expanded audit scope (ESG + GMP)
Bottom line
Under the Omnibus approach:
- Tier 1 (CMOs) → fully in scope
- Tier 2 (API suppliers) → only if risk triggers deeper review
- Tier 3+ → generally out of scope

Leave a Reply