CSRD Implementation Checklist for Japanese Companies: The Seven Phases, In Order

Most Japanese companies caught by CSRD now understand the rules. Far fewer have a sequence.

That gap is the expensive one. A team can read the directive correctly, brief the board accurately, and still lose a year — because it started collecting data before it decided which entities were in scope, or ran a materiality assessment after the data model was already built.

This is the operational companion to our dual-reporting guide, which covers what CSRD and SSBJ each demand and where they diverge. That piece is the what. This one is the order.

How to use this checklist

Seven phases. Each one names an owner, a decision gate, and the artifact it must produce. The rule is simple: you do not start a phase until the previous phase’s artifact exists and someone has signed it. Phases run long; that is fine. Phases run out of order and the work gets redone.

Phase 0 — Confirm you are actually in scope

Start here, and be willing to be surprised.

The population changed in 2026. Directive (EU) 2026/470, the Omnibus revision, entered into force on 18 March 2026 and narrowed the gate to companies with more than 1,000 employees and more than €450 million in turnover. That cut roughly 80% of previously in-scope companies — from about 49,000 down to an estimated 8,000 to 10,000 (Consilium; PwC; ESG Today; the remaining figure is a derived estimate, not an official register).

For a Japanese group this cuts both ways. Your large European operating company almost certainly stays in scope. The three smaller sales subsidiaries you were budgeting for may not. Scoping every EU entity you own, rather than assuming the 2024 answer still holds, is the single cheapest hour in this entire process.

At the same time, fix your SSBJ tier. Japan’s standards were finalised on 5 March 2025 and given legal force by Cabinet Office Ordinance in February 2026. Mandatory application phases in by market capitalisation: fiscal years ending March 2027 for TSE Prime companies above ¥3 trillion, March 2028 above ¥1 trillion, and March 2029 above ¥500 billion (FSA roadmap; Linklaters). The Prime segment holds roughly 1,500 to 1,600 companies in total (JPX).

Owner: Group legal, with the CFO’s office.
Gate: Every EU entity classified in-scope or out, with the employee and turnover figures that decided it.
Artifact: A one-page scope memo, dated and signed. It will be the first thing your assurance provider asks for.

Phase 1 — Name one accountable owner across both jurisdictions

The most common structural failure in Japanese groups is not technical. It is that Tokyo owns SSBJ, the European subsidiary owns CSRD, and nobody owns the relationship between them.

That arrangement produces two datasets, two consultancies, and a reconciliation exercise nobody budgeted for. One accountable owner — with authority over both workstreams, not merely visibility into them — prevents it.

Owner: The CFO or CSO, personally.
Gate: A named individual, not a committee, accountable for both filings.
Artifact: A responsibility map showing, for every disclosure area, who produces the data, who reviews it, and who signs it.

Phase 2 — Run the double materiality assessment

This is the phase most often deferred, and deferring it is the costliest sequencing error available.

CSRD requires double materiality: you assess both how sustainability matters affect the company and how the company affects people and the environment. SSBJ, built on the ISSB baseline, is financial-materiality only. So your EU entity must run an assessment its Japanese parent’s filing never asks for — and the output of that assessment determines which topics you report at all.

Build your data model first and you will collect the wrong things. The materiality result is an input to the data model, not a description of it.

Owner: Sustainability lead, with external stakeholder input.
Gate: A board-approved list of material topics, with the reasoning recorded.
Artifact: The assessment file, including who you consulted and what you discarded. Assurance providers test the process, not just the conclusion.

Phase 3 — Gap analysis against both rulebooks at once

Now, and only now, find out what you can actually produce.

The ESRS span climate, pollution, water and marine resources, biodiversity, circular economy, own workforce, workers in the value chain, affected communities, consumers, and business conduct — more than 1,000 individual data points in total (EFRAG). SSBJ’s shipped standards cover general requirements plus climate, but demand particular depth in the Japanese filing format.

Run one gap analysis across both, not two in sequence. For each required data point, record three things: whether it exists today, where it physically lives, and who would have to be asked for it. The third column is the one that predicts your timeline.

Owner: Sustainability lead with group finance.
Gate: Every material data point marked available, partial, or missing.
Artifact: A data point inventory naming a system and a person for each item.

Phase 4 — Build the dataset once, around activity data

This is the phase that decides whether the next five years are cheap or expensive.

Both frameworks are asking about the same physical company. Scope 1 and Scope 2 emissions come from the same meters, the same fuel invoices, the same electricity contracts. Energy consumption, headcount, safety incidents, and the governance facts overlap heavily.

The design rule: store activity data with boundary tags, not reported figures. The Japanese parent consolidates globally for SSBJ; the European entity reports its own scope for CSRD. The same tonne of CO₂ from a plant outside Rotterdam sits inside both numbers at two different boundaries. Teams that store only the reported figure cannot explain the relationship at audit. Teams that store the underlying activity data with its boundary tags can derive both — and show the derivation.

This matters commercially, too. Most companies expect CSRD compliance to cost more than €100,000 per year (Novata), and the European Commission has estimated the recurring EU-wide burden at roughly €4.4 billion annually. In Workiva’s survey of more than 2,200 practitioners, 83% named data collection — not interpretation, not writing — as the hardest part. Collecting twice is where that number comes from.

Owner: Group finance systems, with IT.
Gate: One dataset demonstrably producing both a CSRD and an SSBJ figure for the same metric.
Artifact: A documented data model with boundary tagging and a defined refresh cycle.

Phase 5 — Build the audit trail before you need it

Assurance is not a final review. It is a test of whether every number can be traced to a source document by someone who was not involved in producing it.

CSRD requires limited assurance from the first report. Japan staggers it: the FSA roadmap sets mandatory assurance one year after mandatory application of the disclosure standards, at limited assurance level, with scope in the first two years confined to Scope 1 and 2, Governance, and Risk Management. So a ¥3 trillion company disclosing for the year ending March 2027 faces assured disclosure for the year ending March 2028 — while its European subsidiary’s numbers were already assured from day one.

Plan for the stricter of the two regimes, not the earlier one.

Owner: Internal audit.
Gate: A sample of ten disclosed figures traced end-to-end to source evidence by someone outside the reporting team.
Artifact: Documented controls, with owners and review dates, for each material data point.

Phase 6 — Dry run in both filing formats

Do a full rehearsal one reporting cycle early, on last year’s data.

SSBJ disclosure lands in the annual securities report, in Japanese. CSRD disclosure lands in the management report of the EU entity, in that entity’s filing language. The same emissions figure is published twice, under different labels, in different documents, for different readers — and it has to reconcile if anyone checks. A dry run is when you discover it does not.

Owner: Disclosure/IR, with the sustainability lead.
Gate: A complete draft in both formats, reconciled, with variances explained in writing.
Artifact: The reconciliation note. Keep it; it becomes your template.

Phase 7 — Engage assurance and file

Bring the assurance provider in during Phase 5, not Phase 7. A provider who sees your controls while they can still be changed is an advisor; one who sees them at filing is an examiner.

Owner: CFO’s office.
Gate: Signed assurance report.
Artifact: The filing, and a retrospective naming what to fix before the next cycle.

The three sequencing mistakes that cost the most

Collecting data before the materiality assessment. You gather the wrong things, then gather again.
Treating SSBJ and CSRD as separate projects. Two teams, two datasets, one reconciliation crisis near the deadline.
Storing reported figures instead of activity data. Everything reconciles until an assurance provider asks how the two boundaries relate — and then nothing does.

Where to start this week

Phase 0 takes an afternoon and changes the size of everything after it. If you want a structured version of that first pass, our free CSRD readiness check walks through scope, materiality, and data availability and returns a written gap summary — no cost, no sales call. Japanese groups working the domestic clock in parallel can run the SSBJ readiness check alongside it.

For the regional picture on how neighbouring regimes are phasing in, see our Asia-Pacific ESG reporting overview. For CSRD dates in isolation, see the CSRD timeline.

Socious Report exists for the phase-4 problem specifically: one dataset in, audit-ready disclosures out under CSRD, SSBJ, and ISSB, with every figure traceable to its source. The checklist above works with or without it. The sequence is what matters.