Short answer
EU law does not create one general damages claim against directors for every sustainability error, weak control or unsuccessful business decision. It creates several distinct routes whose personal consequences are largely completed by Member State law.
First, the Accounting Directive, as amended by the Corporate Sustainability Reporting Directive (CSRD), gives members of administrative, management and supervisory bodies collective responsibility for compliant management and sustainability reporting, within their national competences. Member States must apply liability rules at least toward the company when those duties are breached.
Second, listed-company and capital-markets rules may create additional exposure. A materially false sustainability statement in a prospectus can engage the Prospectus Regulation's responsibility regime. A non-public sustainability matter may require prompt disclosure under the Market Abuse Regulation (MAR) if it is precise and price-sensitive. Personal responsibility, fault, causation, sanctions and investor remedies still depend on the particular rule and national law.
Third, the Corporate Sustainability Due Diligence Directive (CSDDD) imposes duties on the company. Directive 2026/470 removed its specific EU-wide civil-liability regime; national law now supplies the liability route, subject to effective access to justice and full compensation where a company is held liable. The CSDDD still creates no harmonised personal director duty.
Finally, when insolvency becomes likely, Article 19 of Directive 2019/1023 requires directors to consider creditor, shareholder and other stakeholder interests, steps to avoid insolvency, and conduct threatening business viability. National insolvency law determines the practical claims and remedies and may impose stricter duties.
Sustainability reports remain the board's responsibility
Article 33 of Directive 2013/34/EU places collective responsibility on members of the relevant corporate bodies, acting within the competences assigned by national law, for ensuring that required financial statements and management reports are properly drawn up and published. The CSRD amendment extends that formulation to applicable sustainability reporting standards and electronic tagging.
The Directive then requires Member States to ensure that their liability rules apply:
“at least towards the undertaking” for breach of the reporting duties. —
That is a meaningful minimum, but not a complete EU tort code. National law decides matters such as whether an individual director failed the required standard of care, how functions were allocated, whether reliance on management or experts was reasonable, who may sue, causation, loss, limitation and available defences.
“Collective responsibility” also does not mean that directors can safely treat the sustainability report as a specialist's document outside board supervision. The board should understand the reporting boundary, materiality process, estimates, value-chain limitations, control weaknesses and corrections. Equally, it does not erase national distinctions between management and supervisory functions or impose automatic liability merely because a report was later restated.
External assurance does not transfer management's responsibility. Limited assurance provides a lower level of assurance than reasonable assurance and is not a guarantee that every misstatement or control weakness has been detected.
Misleading market disclosures create a different exposure
For an approved prospectus, Article 11 of Regulation 2017/1129 requires responsibility to attach at least to the issuer or its administrative, management or supervisory bodies, the offeror, admission applicant or guarantor, as applicable. Responsible persons must be identified and declare that, to the best of their knowledge, the information accords with the facts and omits nothing likely to affect its import. Member States must apply their civil-liability rules to those responsible persons.
A sustainability claim, climate assumption or transition risk can therefore matter if it forms part of a prospectus and is inaccurate, misleading or materially incomplete. The claim still requires the applicable national elements—often including responsibility, fault, reliance or causation and compensable loss. Prospectus approval does not transfer responsibility to the regulator.
In Case C-174/12, Hirmann, the Court confirmed under the predecessor prospectus regime that EU company-capital rules did not prevent national liability of an issuer towards a purchaser for inaccurate prospectus information. The precise remedy and its elements remained matters for the applicable liability framework.
MAR is narrower and more time-sensitive. A listed issuer must disclose inside information directly concerning it as soon as possible, unless the conditions for a lawful delay are met:
“An issuer shall inform the public as soon as possible of inside information which directly concerns that issuer.” —
A failed climate target, concealed environmental liability or serious flaw in published sustainability data may qualify, but only if the information satisfies MAR's precise, non-public and price-sensitivity tests. Not every CSRD mistake is inside information. Depending on conduct and national enforcement, exposure may concern the issuer, responsible natural persons, unlawful disclosure, manipulation, administrative sanctions or criminal law.
Due diligence and oversight now depend more heavily on national liability law
The CSDDD requires covered companies to conduct human-rights and environmental due diligence. Directive 2026/470 substantially narrowed its scope, postponed application to 26 July 2029 and removed the original harmonised liability conditions. Member States must nevertheless ensure effective access to justice and full compensation where a company is held liable under national law for a due-diligence failure that caused damage.
The distinction remains important: neither the original final Directive nor the 2026 amendment enacted the proposal's separate harmonised director-duty article. It is unsafe to say that the CSDDD itself makes directors personally liable for inadequate sustainability oversight.
Personal exposure may still arise under national duties of care, loyalty, supervision or proper organisation. A board that ignores repeated compliance warnings, approves an unsupported public claim, fails to establish basic reporting controls, or does not respond to a known severe risk may face a stronger national-law claim than a board that obtained reliable information, challenged assumptions and made a documented judgment. The outcome depends on the Member State's business-judgment protections, allocation of functions and liability rules.
CSDDD-related company liability and director liability can coexist under national law. They answer different questions: whether the company owes compensation to a harmed person, and whether a director must answer to the company, creditors, shareholders, authorities or others.
The legal centre of gravity shifts when insolvency is likely
Directors cannot assess a distressed decision only through ordinary shareholder-return logic. Article 19 of Directive 2019/1023 requires Member States to ensure that, where insolvency is likely, directors have due regard at least to:
“the interests of creditors, equity holders and other stakeholders”; steps needed to avoid insolvency; and avoiding deliberate or grossly negligent conduct threatening business viability. —
The Directive states the minimum orientation; national law supplies the operational trigger, claims and remedies. Local rules may address wrongful trading, late filing, prohibited payments, asset depletion, transactions with related parties, director disqualification and civil or criminal liability. They may begin earlier or impose more detailed duties.
A risky decision near insolvency is not automatically unlawful merely because it fails. The important questions are what information was reasonably available, whether liquidity and solvency forecasts were credible, whether alternatives and creditor effects were considered, whether conflicts were managed, and whether the decision worsened creditor losses without a defensible restructuring rationale.
What good board evidence should show
A board cannot eliminate legal risk with minutes alone, but a contemporaneous record can demonstrate a real process. Depending on the issue, it should show:
- clear ownership of reporting, risk, assurance and escalation controls;
- the evidence supporting material sustainability claims and key estimates;
- board challenge of data gaps, scope limitations and inconsistent assumptions;
- prompt assessment and correction of discovered misstatements;
- a separate MAR analysis where information may be price-sensitive;
- current liquidity, cash-flow and balance-sheet forecasts when distress indicators arise;
- creditor and stakeholder effects, available restructuring options and conflicts;
- reasons for relying on experts and the limits of that reliance; and
- dissent, recusals, follow-up actions and deadlines accurately recorded.
Boilerplate approval is weak evidence where warnings show that directors did not understand the report or financial position. Conversely, an informed and properly documented decision is not necessarily negligent simply because later events make it look unsuccessful.
A practical liability checklist
- Map each alleged statement or omission to the exact reporting, prospectus, MAR, due-diligence or insolvency rule.
- Confirm scope and law applicable on the historical decision date; EU sustainability legislation has phased and amended application rules.
- Identify the responsible corporate body and each director's national-law competence.
- Separate company liability, personal director liability, regulatory sanctions and criminal exposure.
- Test materiality, knowledge, fault, causation and loss rather than assuming them.
- Do not treat assurance or professional advice as a transfer of board responsibility.
- Reassess duties when cash-flow warnings make insolvency likely.
- Obtain Member State advice on filing triggers, creditor duties, insurance, indemnification and limitation periods.
Conclusion
EU law supplies real director-facing responsibilities, but personal liability is not a single EU cause of action. CSRD reporting sits within collective board responsibility and national liability rules. Prospectus and market-abuse rules can add investor and enforcement exposure where their specific elements are met. After Directive 2026/470, CSDDD-related compensation and personal oversight claims depend even more clearly on national liability law.
Once insolvency is likely, the board must widen its focus to creditors, other stakeholders, avoidance steps and business viability. The defensible approach is to identify the precise legal route, preserve reliable evidence and apply the relevant Member State's liability and insolvency rules to each director's actual role.
Sources
This article provides general legal information, not advice for a specific matter. Laws, facts and procedural deadlines may change the result. Follow the linked primary sources and obtain local advice before acting.