October 2026 was a significant month for environmental, social, and governance (ESG) regulation, with governments and regulators shifting their attention from developing new requirements to implementing and enforcing existing ones.

In the United States, California finalized its initial climate disclosure regulations, establishing a November reporting deadline for companies subject to Senate Bill 253 (SB 253). Meanwhile, the European Union introduced new sustainability reporting enforcement priorities and advanced proposals to simplify certain extended producer responsibility obligations.

Additional developments in the United Kingdom, Spain, and Turkey have further implications for companies managing international compliance obligations.

Below, we break down seven regulatory developments from October and what they mean for businesses preparing for 2027.

Seven Regulatory Developments Shaping Corporate Compliance

1. California Finalizes Climate Disclosure Rules Ahead of November Deadline

Jurisdiction: United States – California | Effective: October 12, 2026

California has reached a critical milestone in implementing its landmark corporate climate disclosure legislation.

On October 12, 2026, California's Office of Administrative Law approved the California Air Resources Board's (CARB) initial regulation implementing SB 253, the Climate Corporate Data Accountability Act, and SB 261, the Climate-Related Financial Risk Act.

The regulation establishes November 10, 2026, as the first reporting deadline for Scope 1 and Scope 2 greenhouse gas (GHG) emissions under SB 253. Companies with more than $1 billion in annual revenue that meet California's doing-business requirements should assess applicability, with the revenue calculation now based on the lower of their two preceding fiscal years.

For the initial reporting cycle, companies have flexibility to use emissions information they possessed or were collecting as of December 5, 2024, or submit a statement of non-reporting where appropriate.

Importantly, SB 261's climate-related financial risk reporting requirements remain subject to a federal court injunction, and CARB has confirmed it will not enforce those requirements while the injunction remains in effect.

What this means for businesses: Companies potentially subject to SB 253 should immediately confirm their reporting obligations, identify the appropriate reporting entity, and finalize their emissions submissions before November 10. While SB 261 remains paused, businesses should continue monitoring litigation and future CARB rulemaking.

2. U.S. Expands Forced Labor Import Restrictions to Genomics and Life Sciences

Jurisdiction: United States | Updated: October 29, 2026

The United States has expanded its forced labor import restrictions to include three prominent Chinese genomics and biotechnology companies.

On October 29, the Department of Homeland Security added BGI Genomics Co., Ltd., MGI Tech Co., Ltd., and Shenzhen BGI Technology Co., Ltd. to the Uyghur Forced Labor Prevention Act (UFLPA) Entity List.

Under the UFLPA, goods produced wholly or in part by listed entities are presumed to involve forced labor and are prohibited from entering the United States unless importers successfully rebut that presumption or establish an applicable exception.

The additions are particularly important for biotechnology, pharmaceutical, healthcare, and research organizations that procure laboratory equipment, sequencing instruments, or reagents through complex supplier and distributor networks.

What this means for businesses: Companies importing life-science equipment and materials should review supplier relationships, including indirect procurement channels, to identify potential exposure to the newly listed entities. This development reinforces the importance of supply chain traceability beyond traditional high-risk industries such as textiles and solar manufacturing.

3. UK Strengthens Workplace Harassment Prevention and Employee Protections

Jurisdiction: United Kingdom | Effective: October 1 and October 30, 2026

The United Kingdom implemented additional employment protections under the Employment Rights Act 2025 during October, introducing new compliance considerations for businesses operating in Great Britain.

Beginning October 1, the standard time limit for most employment tribunal claims increased from three months to six months for relevant conduct occurring on or after that date.

On October 30, employers became subject to a strengthened obligation to take all reasonable steps to prevent sexual harassment of employees, alongside new provisions addressing harassment involving third parties, including customers and clients. Additional provisions relating to trade union workplace access, employee representation, and industrial action protections also commenced.

What this means for businesses: UK employers should review workplace harassment policies, risk assessments, employee training, and incident-response procedures to address the expanded requirements. Businesses with customer-facing personnel or significant third-party interactions may face additional compliance considerations.

4. European Securities Regulator Identifies Key Priorities for 2026 Sustainability Reporting

Jurisdiction: European Union | Published: October 13, 2026

The European Securities and Markets Authority (ESMA) published its 2026 European common enforcement priorities, providing important guidance on how national regulators will review corporate sustainability statements.

For companies reporting under the Corporate Sustainability Reporting Directive (CSRD), ESMA identified two central areas of focus: the quality of materiality assessments and the connection between identified sustainability impacts, risks, and opportunities and the corresponding policies, actions, targets, and metrics.

Particular attention will be given to climate change disclosures under European Sustainability Reporting Standards (ESRS) E1 and workforce-related disclosures under ESRS S1.

The priorities also address the transitional reporting arrangements available for financial year 2026, including the need for reporting companies to identify which permitted version of the standards they have applied.

What this means for businesses: Companies preparing ESRS disclosures should focus on ensuring that materiality assessments are defensible and that disclosed sustainability risks are clearly linked to measurable management actions. Although ESMA's priorities do not create new reporting obligations, they provide an important indication of regulatory enforcement expectations.

5. EU Moves Toward Targeted Relief From Extended Producer Responsibility Requirements

Jurisdiction: European Union | Developments: October 20–21, 2026

The European Parliament and Council advanced their negotiating positions on proposed changes to extended producer responsibility (EPR) requirements, potentially reducing administrative obligations for certain smaller businesses.

The proposals address requirements under the Packaging and Packaging Waste Regulation (PPWR) and other EU waste legislation that can require producers selling directly to end users in another Member State to appoint an authorized representative.

On October 20, Parliament supported limiting the proposed suspension to qualifying micro and small enterprises, generally those with fewer than 50 employees and turnover or balance sheet totals below €10 million. The Council adopted its negotiating mandate on October 21, also focusing relief on smaller producers.

What this means for businesses: Medium-sized and large producers should not assume that the proposed simplification will remove their authorized-representative obligations. The changes remain subject to legislative negotiations, and existing requirements continue to apply until amendments are formally adopted and become effective.

6. Spain Confirms Continued Sustainability Reporting Requirements for 2026

Jurisdiction: Spain | Updated: October 20, 2026

Spanish regulators have clarified that existing national sustainability reporting obligations remain applicable while the country continues its process of implementing changes to the EU's Corporate Sustainability Reporting Directive.

On October 20, Spain's National Securities Market Commission (CNMV) and Institute of Accounting and Auditing (ICAC) published a joint communication addressing sustainability reporting for 2026.

The communication confirms that the optional reporting exemption available under EU Directive 2026/470 has not been implemented in Spain for financial years 2025 and 2026. Companies subject to Spain's Law 11/2018 must therefore continue preparing their required non-financial information statements, with regulators providing recommendations on the use of European reporting standards depending on company size.

What this means for businesses: Companies with Spanish reporting obligations should not assume that EU-level simplifications automatically eliminate their existing national requirements. Organizations should evaluate their obligations under Law 11/2018 alongside applicable carbon footprint and emissions reduction planning requirements under Royal Decree 214/2025.

7. Turkey Advances Implementation of Its National Carbon Trading System

Jurisdiction: Turkey | Effective: October 21, 2026

Turkey has taken another step toward implementing its national emissions trading system (ETS), establishing rules for how carbon allowances will be managed and traded.

On October 21, the Regulation on the Operation of the Turkish ETS Market was published and entered into force, establishing procedures covering market participation, allowance transactions, the transaction registry, and related financial obligations.

The regulation builds on Turkey's Climate Law No. 7552 and the broader ETS framework introduced in August 2026, which established initial requirements for installations participating in the pilot phase.

What this means for businesses: Companies operating emissions-intensive facilities in Turkey should determine whether their installations fall within the ETS framework and review associated monitoring and market participation requirements. Businesses with only commercial offices or sales operations in Turkey are not automatically subject to these installation-based requirements.

Additional Regulatory Developments to Watch

Beyond the seven confirmed developments, several major regulatory initiatives remain important for multinational organizations as they prepare for 2027.

EU Urban Wastewater Treatment Directive: The Court of Justice of the European Union has not yet issued its judgment in Case C-193/25, which challenges aspects of the producer-funded treatment requirements affecting pharmaceutical and cosmetics manufacturers. The Directive remains in force pending a ruling, leaving potentially significant cost implications unresolved.

EU Pharmaceutical Package: Following the Council's adoption of its first-reading position in September, the legislative package remains under consideration, with further parliamentary action anticipated. Pharmaceutical companies should continue monitoring the final legislative outcome rather than treating the proposed changes as binding law.

EU Pay Transparency Directive: The June 7, 2026, transposition deadline has passed, but implementation remains uneven across Member States. Businesses should track individual national laws, particularly in jurisdictions where implementing legislation remains outstanding.

German Supply Chain Due Diligence Act: Proposed changes to Germany's Supply Chain Due Diligence Act (LkSG), including the removal of annual reporting obligations, had not been adopted during October. Existing due diligence requirements therefore remain applicable to companies meeting the relevant statutory thresholds.

EU Deforestation Regulation: As reflected in the October update, the regulation was still scheduled to begin applying to large and medium operators on December 30, 2026, with no confirmed October change to its application dates.

UK Packaging EPR: Large producers reached their October 1 data submission deadline, with additional year-two liability notices expected toward the end of November. Companies should monitor updates to recyclability-based fee calculations and associated financial exposure.

EU Carbon Border Adjustment Mechanism (CBAM): Discussions continued regarding the potential extension of CBAM to downstream steel- and aluminum-intensive products beginning in 2028, although no final agreement was reached during October.

What Companies Should Prioritize Before Year-End

October's developments highlight a broader shift in global ESG regulation: compliance readiness, reporting quality, and implementation are becoming just as important as tracking newly adopted legislation.

For multinational businesses, three themes deserve particular attention. First, reporting deadlines require immediate operational readiness. California's November 10 climate reporting deadline creates a near-term obligation for companies within scope, while EU and Spanish sustainability reporting developments demand careful coordination across legal entities and reporting teams.

Second, regulatory simplification does not necessarily eliminate compliance responsibilities. Whether considering the EU's proposed EPR relief, Spain's sustainability reporting framework, or Germany's planned supply chain reforms, companies should distinguish between political proposals and legally effective changes.

Third, ESG obligations extend beyond climate disclosure. The latest forced labor restrictions, employment protections, and carbon market rules demonstrate the growing breadth of regulation affecting global operations, procurement, human resources, and supply chains.

Looking Ahead: Critical Dates for November and Beyond

Several important milestones should remain on corporate compliance calendars as 2026 draws to a close.

These dates reflect the regulatory position covered in LoneReport's October 2026 update and should continue to be monitored for subsequent changes.

Final Thoughts: Turning Regulatory Change Into Compliance Readiness

October 2026 reinforced an important reality for companies managing global ESG compliance: regulatory developments do not always take the form of entirely new laws.

Implementation rules, enforcement priorities, court decisions, and national legislative delays can materially change how companies approach existing obligations.

As businesses prepare for 2027, maintaining an accurate understanding of regulatory applicability across jurisdictions and legal entities will be essential to reducing compliance risk and avoiding unnecessary reporting burdens.