CS3D for Education

What is CS3D?

The Corporate Sustainability Due Diligence Directive (CS3D) is a landmark piece of European Union legislation that requires large companies to identify, prevent, mitigate, and account for adverse human rights and environmental impacts across their entire value chains. Adopted by the European Parliament and Council, the directive moves beyond voluntary corporate social responsibility and establishes legally binding obligations with enforcement mechanisms and civil liability provisions. Companies falling within its scope must integrate due diligence into their corporate policies, establish complaints procedures, and publicly report on their efforts.

CS3D and the Education Industry

At first glance, the education sector may seem far removed from supply chain due diligence concerns typically associated with manufacturing or extractive industries. However, CS3D casts a wide net, and education companies — including large university groups, ed-tech platforms, private school chains, corporate training providers, and publishers — are directly affected when they meet the directive's size and revenue thresholds.

Education institutions and companies operate complex value chains that extend well beyond the classroom. Consider a large private university group that procures IT hardware for thousands of students, contracts catering and cleaning services, sources uniforms or laboratory materials, and partners with overseas institutions for exchange programmes. Each of these relationships introduces potential human rights and environmental risks that CS3D requires the organisation to assess and address.

Ed-tech companies face their own set of challenges. A learning management system provider that relies on data centres, hardware manufacturers, and content creators across multiple jurisdictions must trace the environmental footprint of its infrastructure and ensure that none of its suppliers engage in exploitative labour practices. Similarly, academic publishers sourcing paper, printing services, and distribution logistics from global supply chains must demonstrate that these operations do not contribute to deforestation or labour rights violations.

Corporate training firms that deploy instructors and materials internationally must scrutinise the working conditions of subcontracted trainers and the sourcing of physical training materials. Even institutions that consider themselves primarily domestic often depend on globally manufactured electronics, cloud computing services hosted in various countries, and cleaning or security contractors whose own supply chains may carry significant risks.

The directive also places particular emphasis on the rights of vulnerable groups, including children. For the education industry, this creates an additional layer of responsibility: ensuring that products and services used in educational settings — from tablets to textbooks — have not been produced using child labour at any point in the supply chain.

Key Requirements

Education companies within the scope of CS3D must comply with several core obligations:

• Due diligence integration into corporate policy: Organisations must adopt and regularly update a due diligence policy that describes their approach to identifying and addressing adverse impacts on human rights and the environment. This policy must be developed in consultation with employees and relevant stakeholders.
• Identification and assessment of adverse impacts: Companies must map their value chains — including procurement of IT equipment, catering, facilities management, publishing materials, and digital infrastructure — to identify actual and potential adverse impacts on human rights and environmental standards.
• Prevention and mitigation measures: Where potential adverse impacts are identified, organisations must take appropriate measures to prevent them. Where actual impacts are found, they must be mitigated. For an education company, this could mean switching to a hardware supplier with verified ethical sourcing or renegotiating contracts with cleaning service providers to ensure fair wages.
• Complaints procedure: A formal mechanism must be established allowing affected individuals, trade unions, and civil society organisations to raise concerns about adverse impacts. Education institutions must make this procedure accessible not only to employees but also to individuals affected within their supply chains.
• Monitoring and verification: Periodic assessments of the effectiveness of due diligence measures are required. This includes auditing suppliers, reviewing contractual compliance, and tracking progress on remediation actions.
• Public reporting and communication: Companies must publish an annual statement on their due diligence activities, findings, and measures taken. This reporting must be accessible on the company's website and meet the directive's transparency standards.
• Climate transition planning: Larger education companies must adopt a transition plan compatible with the Paris Agreement's 1.5-degree target, including emission reduction objectives covering their own operations and, where relevant, their value chain.
• Director duties and oversight: Board members and senior leadership bear responsibility for overseeing due diligence implementation. Directors must consider the human rights, climate, and environmental consequences of their decisions.

Implementation Steps for Education Companies

1. Determine whether your organisation falls within scope. CS3D applies in phases based on employee count and net turnover. Review the directive's thresholds against your organisation's figures, including consolidated numbers for corporate groups. If your education company operates across multiple EU member states, assess each entity's position and the group's aggregate status.
2. Map your complete value chain. Document every significant supplier, contractor, and business partner. For a typical education organisation, this includes IT hardware and software vendors, cloud service providers, publishers and content creators, catering companies, cleaning and security contractors, facilities maintenance providers, laboratory material suppliers, and partner institutions abroad. Prioritise mapping the upstream chain, where most material risks tend to concentrate.
3. Conduct a risk assessment for each value chain segment. Evaluate the likelihood and severity of human rights and environmental risks in each segment. IT hardware procurement, for example, carries well-documented risks related to mineral sourcing and factory working conditions. Catering services may involve risks related to agricultural labour practices. Use sector-specific guidance and recognised frameworks such as the OECD Due Diligence Guidance to structure your assessment.
4. Develop and adopt a due diligence policy. Draft a comprehensive policy that covers all identified risk areas and outlines your approach to prevention, mitigation, and remediation. Ensure the policy is approved at board level and communicated throughout the organisation. Engage employees, student representatives where applicable, and trade unions in the policy development process.
5. Establish a complaints mechanism. Create a clear, accessible, and confidential channel through which individuals can report concerns about adverse impacts in your value chain. This mechanism should be available in relevant languages and should not require complainants to identify themselves. Define clear response timelines and escalation procedures.
6. Integrate due diligence into procurement and contracting. Update your procurement policies and standard contract terms to include human rights and environmental clauses. Require key suppliers to demonstrate their own due diligence practices. For education-specific procurement — such as bulk purchases of laptops, laboratory chemicals, or printed materials — include specific provisions addressing sector-relevant risks.
7. Implement monitoring and audit procedures. Establish a schedule for reviewing supplier compliance, conducting site audits where appropriate, and reassessing your risk mapping. Consider engaging independent third-party auditors for high-risk segments of your value chain, such as electronics manufacturing or overseas partnerships.
8. Prepare your climate transition plan. If your organisation meets the higher thresholds, develop a Paris-aligned transition plan covering Scope 1, Scope 2, and relevant Scope 3 emissions. For education companies, Scope 3 typically includes emissions from commuting, business travel, digital infrastructure, and procured goods and services. Set interim and long-term targets, and identify concrete actions to reduce your carbon footprint.
9. Train your teams and build internal capacity. Ensure that procurement officers, compliance staff, and senior leadership understand the directive's requirements and their roles in implementation. Develop training programmes tailored to the specific risks and responsibilities within the education sector.
10. Publish your first due diligence report. Prepare and publish a transparent report detailing your due diligence policy, risk assessments, measures taken, and outcomes achieved. Make this report easily accessible on your website and ensure it meets the directive's content requirements.

Frequently Asked Questions

Does CS3D apply to public universities and state-funded schools?
CS3D primarily targets companies — entities engaged in economic activity — rather than public institutions funded entirely by the state. However, the boundaries are not always clear. A public university that generates significant commercial revenue through research contracts, international student fees, or subsidiary companies may find that parts of its operations fall within scope. Private university groups, for-profit school chains, and commercial ed-tech companies are more straightforwardly covered if they meet the size thresholds. Each institution should seek legal advice based on its specific structure and revenue sources.

What are the consequences of non-compliance?
Member states are required to establish supervisory authorities with the power to investigate, impose fines, and order corrective measures. Fines can reach up to 5% of global net turnover, making non-compliance a material financial risk. Additionally, the directive introduces civil liability, meaning that companies can be held liable for damages resulting from a failure to carry out adequate due diligence. For education companies, reputational damage may be equally significant, given the sector's emphasis on ethical values and social responsibility.

How does CS3D interact with other EU sustainability regulations?
CS3D complements several existing and forthcoming EU regulations. The Corporate Sustainability Reporting Directive (CSRD) requires detailed sustainability disclosures, and much of the data gathered for CS3D due diligence will feed into CSRD reporting. The EU Taxonomy Regulation provides a classification system for sustainable activities that can inform your transition planning. Education companies already subject to CSRD should align their CS3D due diligence processes with their existing reporting infrastructure to avoid duplication and ensure consistency.

When do education companies need to start complying?
The directive is being transposed into national law by EU member states, with compliance obligations phasing in based on company size. The largest companies — those with over 5,000 employees and EUR 1,500 million in net turnover — face the earliest deadlines. Smaller in-scope companies follow in subsequent years. Education organisations should begin preparations now, regardless of their specific compliance date, as building effective due diligence systems across complex value chains requires significant lead time.

Summary

The Corporate Sustainability Due Diligence Directive represents a fundamental shift in how businesses, including those in the education sector, must approach their environmental and human rights responsibilities. Education companies that proactively build robust due diligence processes will not only meet their legal obligations but also strengthen trust with students, parents, partners, and regulators. The time to begin mapping your value chain, assessing risks, and integrating due diligence into your operations is now — waiting for enforcement deadlines will leave your organisation exposed to both legal liability and reputational risk.