The First Climate Restatement Is Coming. Is Your Board Ready?

A climate restatement is what happens when a company has to formally correct a sustainability claim it already published, because that claim is now audited financial data rather than marketing. As of 2026, climate disclosure is assured and legally binding across 28 jurisdictions representing roughly 60% of global GDP. The exposure has moved from the sustainability team to the board.

For a decade, the sustainability report was the safe document. No auditor signed it, no regulator built a case on it, and the worst outcome was a critical press cycle. Two rule sets ended that quietly, and most boards have not repriced the risk. This is written for directors: what changed, why it is now your problem, where the specific trap sits, and a test you can run before the next filing.

Your sustainability report just became a financial statement

Two frameworks did the work. IFRS S2, the ISSB climate-disclosure standard, has been adopted in 28 jurisdictions as of April 2026, covering close to 60% of global GDP. In the European Union, the Corporate Sustainability Reporting Directive (CSRD) requires independent limited assurance on sustainability disclosures from the first year a company reports, and the 2025 Omnibus package, which narrowed CSRD scope, kept that assurance requirement in place.

What "audited" actually changes

Limited assurance is a lighter check than the reasonable assurance behind audited financial statements. It is still an external auditor putting their name to your climate numbers. An unaudited claim is an aspiration. An assured, filed claim is a representation of fact with a signature behind it, and regulators, litigants, and short sellers treat the second very differently from the first. That is the entire shift, in one line.

Why this is a board problem, not a sustainability-team problem

National law now ties climate disclosure to management responsibility. In several member states a misstated CSRD disclosure carries accountability comparable to a misstated financial one. The Netherlands has set penalties as high as 10 million euros or 5% of annual turnover for listed issuers. Those are financial-reporting-grade numbers, and they attach to the people who sign the accounts.

Consumer-facing claims tighten on a fixed date. The EU Empowering Consumers for the Green Transition Directive applies from 27 September 2026. From that date it bans marketing a product as "climate neutral" when the claim relies on carbon offsetting rather than actual emission reductions, and it bans generic terms like "green" or "eco-friendly" that are not backed by a recognised certification. The rollout was not smooth: on 28 May 2026 the European Commission opened infringement proceedings against 20 member states for failing to transpose the directive on time, which tells you how abruptly this arrived.

Put those facts together. The claim is assured. The penalty is financial-grade. The enforcement date is fixed and near. A board that still files climate under corporate social responsibility is carrying a liability on the wrong risk register.

The carbon-credit trap most boards have not priced

Here is the precise spot where a clean-looking net-zero claim turns into exposure. Under the EU standard ESRS E1-7, any company using carbon credits toward its targets must disclose those credits separately and document their quality, additionality, and permanence. Vague or unsupported credit claims do not survive even limited assurance.

From 27 September 2026, the Empowering Consumers directive bans marketing a product as climate neutral when that claim rests on offsets instead of real reductions. So the same carbon credits that made a target look met can now make a disclosure fail assurance and make a marketing claim unlawful, at the same time.

Most boards have never seen the evidence file behind their own carbon credits. That file, the additionality proof, the registry status, the permanence, is exactly what an assurer, a regulator, or a plaintiff will ask to see. If it does not exist, the claim was never audit-grade, and no one told the board.

This is not hypothetical. Ask Keurig.

In September 2024 the SEC settled charges with Keurig Dr Pepper over statements in its 2019 and 2020 annual reports, filed on Form 10-K, that its K-Cup pods "can be effectively recycled." Keurig had tested the pods, but two large recycling companies had told the company they did not intend to accept them. That omission, inside a financial filing, was enough. Keurig paid a 1.5 million dollar penalty for a securities-reporting violation.

Read it as a template, not a coffee story. A green claim in a financial filing, contradicted by evidence the company already held, became an enforcement action. Climate and carbon-credit claims are the same shape at far larger scale, and they now sit inside assured disclosures across dozens of jurisdictions. Keurig was the rehearsal.

It is not only Europe, and the US risk did not vanish

If your board sits outside the EU, do not file this under someone else problem. IFRS S2, the same standard driving assurance, has been adopted or is being adopted across the UK, Canada, and dozens of other markets, 28 jurisdictions in total. The UK is finalising its own version, the UK Sustainability Reporting Standards, closely aligned to IFRS S2.

The United States looks like the exception, and is not. The SEC moved in 2026 to rescind its dedicated climate-disclosure rule, and much of the market read that as the end of the pressure. It was not. California SB 253 requires companies above $1 billion in revenue that do business in the state to report Scope 1 and 2 emissions in 2026 and Scope 3 from 2027; its companion SB 261 requires climate financial-risk reporting for companies above $500 million, with enforcement currently paused pending a court appeal. A company does not need to be Californian to be caught. It needs to do business there.

And the Keurig case is the reminder that the SEC never needed a special climate rule to act. It used the ordinary securities-disclosure law that applies to every filing. Rescinding the bespoke rule removes one instrument, not the exposure. For a US board, the risk did not disappear; it moved into state law, general securities law, and private litigation, which are harder to lobby away than a single federal rule.

The Restatement Test: five questions before your next filing

Run every material climate claim in your reporting through these five. If any answer is "no" or "we do not know," you have found your exposure before a regulator does.

1. Is it independently assured? If an external assurer has not signed off, the claim is not yet defensible. If one has, you now own what they signed.

2. Is the carbon-credit evidence E1-7 grade? Additionality, registry status, and permanence documented, not asserted.

3. Would it survive a hostile read? Not only your assurer, but a regulator, a plaintiff, or a short seller working from the same file.

4. Who signed off, and are they a director? If accountability sits below the board while the liability sits on it, that gap is the problem.

5. What is the D&O exposure if it is wrong? Price it now, because your insurer is already doing so.

What a board should actually do

Three moves, none of which need a strategy offsite. Put a climate-claims line on the audit committee standing agenda, next to the financial statements it now resembles. Demand the evidence file behind every carbon credit in your targets before it is disclosed, not after it is challenged; a credit that cannot show additionality and permanence does not belong in an assured statement. And treat verification as audit evidence, because audit-grade measurement, reporting, and verification is the difference between a claim you can defend and one you have to withdraw. If you want the mechanics of how verification standards actually work, start there. That discipline is the core of how we think about data integrity.

The next two years

Do not expect the pressure to arrive as one dramatic rule. It comes from the whole stack tightening at once. CSRD assurance stays in force; the Omnibus kept it at limited and dropped the earlier plan to escalate to reasonable assurance, but limited assurance is already enough to catch a weak carbon-credit claim. The Empowering Consumers enforcement begins in September 2026. National penalties are live. And the IFRS S2 footprint keeps expanding past 60% of global GDP.

The first board that has to withdraw or restate a climate claim will not do it because the science changed. It will do it because the evidence behind a number never existed, and someone with assurance obligations finally asked for it. The boards that are ready will be the ones that started treating their climate claims like financial statements a year before they were forced to. The lesson is boring and decisive: a climate claim is only as strong as the evidence beneath it. Build that evidence before you file, or explain its absence afterward, on someone else timeline.

Frequently asked questions

Is climate disclosure legally enforceable in 2026?

Yes, in a growing number of places. IFRS S2 has been adopted in 28 jurisdictions covering roughly 60% of global GDP, and the EU CSRD requires independent limited assurance on sustainability disclosures. A misstated disclosure can carry financial-reporting-grade penalties; the Netherlands, for example, allows fines up to 10 million euros or 5% of annual turnover for listed issuers.

Who is liable for a misstated sustainability claim, the board or the sustainability team?

Once a claim is assured and filed, responsibility runs to management and the board, the same way it does for financial statements. Accountability that sits only with the sustainability team while the legal liability sits with directors is itself a governance gap.

What is ESRS E1-7?

It is the EU reporting standard covering carbon credits and removals. A company using credits toward its climate targets must disclose them separately and document their quality, additionality, and permanence. Weak or undocumented credit claims do not survive assurance.

Can using carbon credits trigger a restatement or a greenwashing action?

Yes. If a credit lacks the additionality and permanence evidence ESRS E1-7 expects, an assured disclosure built on it can fail. Separately, from 27 September 2026 the EU bans marketing a product as climate neutral when the claim relies on offsets rather than real emission reductions.

What is the difference between limited and reasonable assurance?

Limited assurance is a lighter, negative-form check ("nothing came to our attention"). Reasonable assurance is the higher bar behind audited financial statements. CSRD currently requires limited assurance, which is already enough to expose a climate claim with no evidence file behind it.