Scope 3 Emissions: From Blind Spot to Strategic Lever

Scope 3 reporting has entered a phase where the regulatory, legal, and commercial consequences of getting it wrong are converging faster than most organizations have prepared for. The EU’s Omnibus I directive, adopted by the Council in February 2026, narrowed CSRD scope to companies with over 1,000 employees and EUR 450 million+ turnover while removing the climate transition plan obligation. In California, CARB approved proposed regulations under SB 253 in February 2026, with Scope 3 reporting beginning in 2027 for U.S. entities exceeding USD 1 billion in revenue that do business in the state. And the GHG Protocol is revising its Scope 3 Standard, with a public consultation draft expected in late 2026 and final publication in 2027.

The practical effect: organizations face overlapping, partially contradictory Scope 3 requirements across jurisdictions while the foundational measurement standard itself is being rewritten. The data architecture, supplier contracts, and governance structures you build now will determine whether your Scope 3 program becomes a defensible asset or a compliance liability.

The Regulatory Picture Is Less Settled Than It Appears

It would be tempting to read the EU Omnibus simplification as a retreat from Scope 3 ambition. The scope reduction removed roughly 80% of companies from CSRD obligations, and the revised ESRS will cut mandatory datapoints by an estimated 61%. But for companies that remain in scope, the core requirement is unchanged: Scope 3 disclosure is mandatory where those emissions are material, which for most manufacturers, retailers, and extractive-sector firms means they are always material. Companies that interpret the Omnibus as a signal to deprioritize Scope 3 data infrastructure are misreading the directive and will face a compressed timeline when enforcement begins for the 2027 financial year.

In the U.S., the picture is fragmented but hardening. SB 253 survived a constitutional challenge at the district court level in August 2025, and while the Ninth Circuit issued a preliminary injunction against SB 261’s climate risk disclosures, it declined to enjoin SB 253. CARB has signaled enforcement discretion for the first Scope 1 and 2 cycle, but for Scope 3 in 2027, it has reserved the right to impose assurance requirements. Any multinational operating in California with qualifying revenue should treat Scope 3 readiness as a compliance workstream with a hard deadline.

Why the Measurement Standards Themselves Are a Risk Factor

The GHG Protocol’s Scope 3 Standard, published in 2011, is being substantially reworked. The Scope 3 Technical Working Group is addressing minimum boundary requirements, disaggregated reporting, reclassification of financed emissions (Category 15), and data quality disclosure obligations. Companies building inventories today are working with a standard that will be superseded within two years.

This creates real operational tension. Organizations that invest heavily in rigid, tool-dependent architectures risk rebuilding when the revised standard tightens boundary definitions or imposes new data quality hierarchies. The smarter approach: build modular data systems that can adapt to changing category definitions and emission factor requirements. Procurement and sustainability teams need to coordinate now on which supplier data streams to prioritize, because the revised Protocol is expected to push aggressively away from spend-based estimation and toward activity-based and supplier-specific data.

The Enforcement Gap Is Closing

In February 2024, New York Attorney General Letitia James sued JBS USA for advertising a "Net Zero by 2040" commitment despite having no viable plan and no complete emissions inventory. The investigation found JBS had not calculated its total greenhouse gas emissions when it made the pledge. In November 2025, JBS settled for USD 1.1 million, agreed to reframe its claims as a "goal" rather than a "pledge," and submitted to three years of compliance monitoring. The precedent matters more than the dollar amount: aspirational climate targets, when presented as commitments, must be substantiated with feasible plans and actual emissions baselines.

Separately, a class action against Delta Air Lines over its "world’s first carbon-neutral airline" branding is proceeding through federal court in California, with the court denying Delta’s motion to dismiss injunctive relief claims in December 2024. The EU’s Greenwashing Directive, enforceable from September 2026, will outright prohibit product-level "carbon neutral" claims based on offsets. In the UK, the CMA gained direct enforcement powers in April 2025, including fines of up to 10% of global turnover.

The operational implication is that marketing, investor relations, and sustainability teams must draw a clear line between data used for internal sourcing decisions and data used for external claims. Internal procurement analytics can legitimately rely on spend-based estimates and proxy models to identify hotspots. External claims must be backed by auditable, methodology-consistent data. Using the same rough estimates for both purposes creates legal exposure that no disclaimer can mitigate.

A Decision Framework for Scope 3 Data Architecture

Given the regulatory flux and enforcement trajectory described above, organizations need a structured approach to building Scope 3 programs that are defensible today and adaptable to what comes next. This framework addresses five governance and data-architecture decisions that determine whether a Scope 3 inventory is decision-grade, meaning granular enough to inform procurement and capital allocation, and robust enough to withstand third-party assurance.

First, segment your Scope 3 categories by data accessibility and financial materiality simultaneously, not sequentially. Running both assessments in parallel identifies where investment in supplier-specific data collection yields the highest return and where industry-average emission factors are an acceptable bridge. Assign each of the 15 GHG Protocol categories to one of three tiers: primary data required, modeled data acceptable, or immaterial/excluded with documented justification.

Second, embed data quality metadata into every emission factor from day one. The revised GHG Protocol will almost certainly require data quality disclosure at the category level. Organizations that have built inventories without tracking whether a data point is supplier-specific, industry-average, or spend-based will face costly retrofitting. Build your architecture so every line item carries a quality tag that can aggregate into a category-level score.

Third, restructure supplier contracts before the data requests begin. Introduce Scope 3 data disclosure requirements into RFP scoring and supplier codes of conduct now. There is a meaningful difference between requiring product carbon footprints and requiring responses to annual sustainability questionnaires. The former supports external claims; the latter supports internal tracking. Legal and procurement must align on which obligation applies to which supplier tier.

Fourth, establish a formal review protocol for Scope 3-related external communications. The JBS and Delta cases demonstrate that marketing, investor relations, and executive statements are all potential vectors for liability. Every public-facing claim referencing emissions should pass through legal, sustainability, and communications review that verifies underlying data, methodology, and boundary conditions.

Fifth, plan for assurance from the outset. CSRD mandates limited assurance; California’s SB 253 is expected to phase in Scope 3 assurance by 2030, with possible acceleration to 2027. Organizations that design data collection with assurance in mind, maintaining auditable records of methodology choices, emission factor sources, and exclusion rationale, will spend far less when the requirement becomes binding.

Moving From Analysis to Execution

The challenge this analysis surfaces is operational: most organizations lack the internal alignment between procurement, legal, sustainability, and finance to execute a Scope 3 program that meets both current disclosure requirements and the tighter standards arriving in 2027.

Our Scope 3 Value Chain Diagnostic is a structured, four-week assessment that maps your regulatory exposure across jurisdictions, evaluates data quality by GHG Protocol category, identifies specific supplier engagement and contract modifications needed to close gaps, and produces a prioritized 12-month implementation roadmap. The first step is a regulatory exposure mapping session with your sustainability, legal, and procurement leads. Contact our team to schedule the initial mapping session.

Get In Touch

Not ready for a full diagnostic? Start by benchmarking your current emissions baseline with our free Carbon Footprint Estimator, a low-commitment first step to understanding where your Scope 3 exposure is concentrated.

Carbon Footprint Estimator

Written by: Gasilov Group Editorial Team

Reviewed by: Arif Gasilov, Partner, Climate & Environmental Reporting​

Leads CSRD and ESRS alignment, double materiality assessments, emissions baselining, and climate risk mapping, with hands-on experience across corporate and public sector sustainability engagements in North America and Europe.

Meet Our Team →

Frequently Asked Questions (FAQ):

How does the EU Omnibus simplification change Scope 3 reporting for companies already in CSRD Wave 1?

Wave 1 companies reporting for financial year 2024 remain subject to CSRD requirements, but the Omnibus Directive includes a transition exemption for entities falling below the new thresholds (1,000+ employees and EUR 450 million+ turnover) for 2025 and 2026. Companies that remain in scope must still report Scope 3 where it is material under a double materiality assessment. The European Commission adopted "quick fix" ESRS amendments in July 2025 that extended transitional provisions for Wave 1 reporters through 2026. The revised, simplified ESRS is expected via delegated act by September 2026, so companies should avoid locking into reporting architectures that cannot accommodate forthcoming standard changes.

Can companies use spend-based Scope 3 estimates in external reports without triggering greenwashing risk?

Spend-based estimates are a recognized starting methodology under GHG Protocol guidance. The risk arises when those estimates are presented externally without adequate disclosure of limitations, or when they support specific reduction claims where the margin of error makes such precision misleading. A defensible external report should disclose the methodology tier for each material category, acknowledge data gaps, and avoid presenting spend-based figures with unjustified precision. The EU’s Greenwashing Directive, enforceable from September 2026, requires that environmental claims about products be substantiated with evidence accounting for lifecycle impacts. Companies relying exclusively on spend-based data should treat their Scope 3 figures as directional indicators in public communications, not as the basis for quantified reduction claims.

What happens if California SB 253 Scope 3 requirements conflict with the revised GHG Protocol expected in 2027?

SB 253 requires reporting "in conformance with the Greenhouse Gas Protocol standards and guidance," currently the 2011 Scope 3 Standard. CARB’s draft regulations do not specify which version must be used, creating a potential alignment gap if the revised standard changes category definitions or boundary requirements. CARB has indicated it will address Scope 3 specifics in a second rulemaking later in 2026. Companies should build flexibility into data systems, track the GHG Protocol’s public consultation expected in mid-to-late 2026, and maintain detailed methodology documentation in case CARB’s final rules require reconciliation.

How should companies structure supplier engagement to produce assurance-ready Scope 3 data?

Assurance-ready supplier data requires more than a sustainability questionnaire. Assurance providers evaluate traceability to a primary source, methodology consistency, and reporting entity oversight of data collection. For strategic suppliers in high-emission categories, request product carbon footprints calculated under ISO 14067 or equivalent, require disclosure of emission factor sources and allocation methods, and build contractual provisions permitting audit access. For lower-tier suppliers, activity-based data (energy consumption, transport distances, material volumes) is preferable to spend-based proxies and more likely to withstand limited assurance. Platforms like CDP Supply Chain can standardize collection, but companies must verify platform-collected data meets their inventory’s specific methodology and boundary requirements before incorporation.

What governance changes are needed to prevent Scope 3-related greenwashing liability?

The most critical structural change is a formal claim review protocol requiring legal, sustainability, and communications sign-off before any public statement references emissions data or climate targets. This should cover sustainability reports, investor presentations, product packaging, executive speeches, and social media. The JBS settlement specifically required review of statements by officers and directors, confirming that personal executive remarks can create corporate liability. Organizations should also maintain a claim register documenting the data source, methodology, and boundary conditions behind each external statement. Board-level oversight of climate claims, through an audit committee or dedicated sustainability committee, provides a governance layer that regulators are beginning to expect as a baseline standard of care.