ESG Compliance in the USA: Complete Guide to Regulations & Reporting 2026

ESG compliance in the USA has moved from a voluntary exercise to a legal and commercial imperative, and in 2026, the stakes have never been higher. While the federal government has pulled back from mandating ESG disclosures, California's landmark climate laws have filled the void, creating binding obligations for thousands of companies that operate in the state, regardless of where they are headquartered or whether they are publicly traded.

For any company earning more than $500 million globally and doing business in California, the world's fifth-largest economy, ESG compliance is now a legal reality with defined penalties. For multinationals accessing global capital markets, investor expectations tied to frameworks like ISSB, GRI, and TCFD make ESG reporting a practical necessity even without a domestic mandate.

This guide covers everything compliance officers, sustainability leads, and business leaders need to know: which laws apply, which ESG reporting frameworks to use, how to build an ESG compliance programme step by step, and what the regulatory horizon looks like through 2030.

Understanding the US ESG Regulatory Landscape in 2026

Unlike the European Union's Corporate Sustainability Reporting Directive (CSRD) or India's Business Responsibility and Sustainability Report (BRSR), the United States still lacks a single comprehensive federal ESG reporting mandate. Instead, ESG compliance requirements for companies in the USA in 2026 come from three overlapping layers.

Layer 1 - Federal Level: The SEC

The SEC's proposed 2024 Climate Disclosure Rule which would have required all public companies to report material climate risks, governance practices, and GHG emissions, was effectively withdrawn in March 2025 when the Commission ended its legal defence under the current administration.

However, the SEC's 2010 interpretive guidance on climate change remains fully binding. Under existing Regulation S-K, any public company for which climate change presents a material risk must address those risks in its 10-K filings and proxy statements. This covers transition costs, physical asset exposure, supply chain disruption, and regulatory compliance costs. The SEC's comment letter process has historically been used to surface weak disclosures in this area.

Nasdaq and NYSE have also implemented board diversity disclosure requirements and sustainability reporting expectations as listing conditions. These apply to all US-listed companies, independent of SEC rulemaking.

Layer 2 - State Level: California and the Emerging Patchwork

California's October 2023 climate legislation has become the most significant ESG compliance development in US corporate history. Its two laws, SB 253 and SB 261, apply to companies doing business in California regardless of headquarters location. Critically, they cover private companies as well as public ones.

New York, Washington, Illinois, and Minnesota are advancing similar legislation. A New York court in October 2025 ordered climate regulations to be issued by February 2026, accelerating the state's timeline considerably. Washington's Climate Commitment Act already imposes a cap-and-invest programme requiring covered entities to purchase emissions allowances.

Layer 3 - Market Pressure: Investors and Supply Chains

Institutional investors controlling 20–30% of equity in many large US companies, including major index funds and ESG-screened funds, increasingly require alignment with voluntary frameworks such as GRI, SASB, and ISSB. This investor pressure creates practical mandatory status for ESG disclosure even where no law exists.

Large US retailers, financial institutions, and multinational corporations are embedding ESG data requests into supplier contracts, effectively pushing compliance obligations down the value chain to companies of all sizes.

California's ESG Laws Explained: SB 253 and SB 261

California's two climate statutes are the centrepiece of ESG compliance requirements for companies in the USA in 2026. Every compliance professional must understand them in detail.

SB 253 - Climate Corporate Data Accountability Act

SB 253 applies to all companies, public or private, with more than $1 billion in global annual revenue that do business in California. Starting in 2026, these companies must disclose their prior-year Scope 1 (direct emissions) and Scope 2 (purchased energy) greenhouse gas emissions, with limited third-party assurance. Scope 3 value chain emissions will be required from 2027. By 2030, companies must obtain reasonable assurance on Scope 1 and 2 emissions. Non-compliance carries penalties of up to $500,000 per year.

SB 261 - Climate-Related Financial Risk Act

SB 261 applies to companies with more than $500 million in global annual revenue doing business in California. Beginning January 1, 2026, these companies must publish a biennial climate-related financial risk report aligned with ISSB or TCFD standards, covering their material climate risks and the measures taken to address them. The report must be posted publicly on the company's website. Non-compliance carries penalties of up to $50,000 per reporting year.

An important point that many compliance teams miss: both laws are based on global revenue, not California-specific revenue. A private company earning $1.2 billion globally with even a small California office is fully in scope for SB 253. Companies should assess their California operations footprint carefully with qualified legal counsel.

ESG Regulations Beyond California: The State Patchwork

California will not be acting alone for long. Here is what compliance teams need to monitor across other US states.

New York

New York Senate bills S897C and S5437 closely mirror California's model, targeting annual climate risk reporting for large corporations. A New York court ruling in October 2025 ordered the state's Department of Environmental Conservation to finalise climate regulations by February 2026. New York is also requiring electric heat and appliances in most newly constructed buildings from 2026, creating direct operational compliance obligations for the real estate sector.

Washington State

Washington's Climate Commitment Act created a cap-and-invest programme requiring covered entities to obtain emissions allowances for their covered emissions during each compliance period. This adds a direct cost mechanism to climate compliance, making carbon management a balance sheet issue for businesses operating in the state.

Illinois and Minnesota

Both states have active climate disclosure bills in their legislatures targeting large corporations. Passage within the next one to two years is anticipated, with implementation timelines of two to three years following enactment.

The Anti-ESG Countercurrent

It is worth noting that several states, including Texas, Florida, and West Virginia, have passed laws restricting ESG consideration in public pension fund investments or prohibiting government contracts with companies that "boycott" fossil fuel industries. Multistate operators must navigate this conflicting landscape carefully, as pro-ESG compliance obligations in California can appear to clash with anti-ESG statutory requirements in other states. Jurisdiction-specific legal advice is essential.

ESG Reporting Framework USA Guide: Which Framework Should Your Company Use?

Because the USA has no single federal ESG framework, most large US companies operate under a multi-framework reality. The right approach is not to pick one framework and ignore the others, it is to build a centralised data infrastructure that collects ESG information once and maps it to multiple frameworks simultaneously.

GRI Standards - Global Reporting Initiative

GRI is the world's most widely adopted sustainability reporting framework, used by the majority of Fortune 500 companies in their sustainability reports. It takes a multi-stakeholder approach, covering the full range of environmental, social, and governance topics. GRI is best suited for companies that need to communicate ESG performance to a broad audience, employees, communities, NGOs, regulators, and customers, beyond just investors. It applies a double materiality lens: companies assess both how ESG issues affect their financial performance and how their activities impact society and the environment.

SASB Standards - Now Under ISSB

SASB (Sustainability Accounting Standards Board) provides industry-specific, financially material ESG metrics across 77 sectors. It is the investor-facing reporting standard for US listed companies. SASB standards were absorbed by the IFRS Foundation under the International Sustainability Standards Board (ISSB) in 2022 and are now integrated into IFRS S1. For US companies reporting to institutional investors or capital markets, SASB/ISSB alignment is the standard expectation.

TCFD / IFRS S2 - Climate Risk Disclosure

The Task Force on Climate-related Financial Disclosures (TCFD) disbanded in 2023, having achieved its goal: its four-pillar framework, Governance, Strategy, Risk Management, and Metrics & Targets, has been fully incorporated into IFRS S2, the ISSB's climate disclosure standard. Companies already aligned with TCFD will find the transition to IFRS S2 seamless. California's SB 261 explicitly references ISSB climate standards as an acceptable reporting basis.

ISSB - IFRS S1 and S2

The ISSB, established under the IFRS Foundation, creates a global baseline for sustainability-related financial disclosures aimed at investor comparability across jurisdictions. By 2026, 17 jurisdictions have adopted or finalised ISSB implementation. For US companies accessing international capital markets, whether through global bond markets, cross-border M&A, or institutional investor relationships, ISSB alignment is increasingly a prerequisite.

CDP

CDP operates a global disclosure system through standardised questionnaires covering climate change, water security, and deforestation. It is required by many of the world's largest institutional investors and is increasingly embedded in corporate supply chain requirements. If your major customers are large multinationals with Scope 3 reporting obligations, completing the CDP questionnaire is often a condition of continued supplier status.

CSRD - For US Multinationals with EU Operations

The EU's Corporate Sustainability Reporting Directive applies to large US companies with significant EU operations, EU-listed subsidiaries, or revenues above EU thresholds. It requires reporting against European Sustainability Reporting Standards (ESRS), which use a double materiality approach. US companies with EU exposure should conduct a separate CSRD applicability assessment alongside their domestic US compliance work.

ESG Regulations Checklist for USA Businesses: A Step-by-Step Compliance Roadmap

The following checklist is structured across three phases. Companies whose 2026 California deadlines are already active should treat Phase 1 and Phase 2 as urgent priorities.

Phase 1: Determine Your Scope

1. Revenue threshold check: Assess whether your global annual revenue meets California's $1 billion threshold (SB 253) or $500 million threshold (SB 261). These are global figures, not California-specific revenue.

2. Map your operational footprint: Identify all US states where you have operations, employees, customers, or significant supply chain relationships. Flag California, New York, Washington, Illinois, and Minnesota as priority jurisdictions.

3. Public vs. private status: Public companies face additional SEC materiality obligations and Nasdaq/NYSE listing requirements beyond state laws. Verify your exchange ESG requirements separately.

4. EU exposure check: If your company has European operations, a listed EU subsidiary, or significant EU revenue, conduct a CSRD applicability assessment. EU and US obligations layer on top of each other.

5. Supply chain obligations: Survey your top 10–15 customers for their ESG data requirements. Many large buyers now require Scope 3 supplier data, CDP completion, or SASB-aligned disclosures as part of their vendor contracts.

Phase 2: Build Your Data Infrastructure

1. Establish a GHG emissions inventory: Implement measurement protocols for Scope 1 emissions (direct, from owned sources), Scope 2 emissions (purchased electricity, heat, and cooling), and begin preparing for Scope 3 (value chain). Follow the GHG Protocol Corporate Standard as your methodology baseline.

2. Deploy a centralised ESG data platform: Manual spreadsheet-based ESG reporting is not scalable or audit-ready. Invest in ESG software that collects data once and maps it simultaneously to California, SEC, SASB, GRI, TCFD/ISSB, and CDP requirements.

3. Build internal controls: Finance teams should establish data governance processes with documented collection methods, review workflows, audit trails, and evidence repositories, all required for California's third-party assurance obligations.

4. Conduct a materiality assessment: Identify the ESG issues that are material to your business, both from a financial risk perspective and from an impact perspective. This dual lens (double materiality) is required under CSRD and increasingly expected under GRI.

Phase 3: Governance, Reporting, and Monitoring

1. Establish board-level ESG oversight: Designate an audit committee, risk committee, or dedicated sustainability committee with formal responsibility for ESG risk oversight and disclosure approval. Document this structure clearly for SEC governance disclosures.

2. Engage a third-party assurance provider: California SB 253 requires limited assurance on Scope 1 & 2 emissions from the 2026 reporting cycle. Demand for sustainability assurance services is high, engage a provider now to avoid deadline bottlenecks.

3. Publish your SB 261 climate-risk report: The report must be posted on a publicly accessible company website, clearly labelled, and aligned with ISSB or TCFD's four-pillar structure: Governance, Strategy, Risk Management, and Metrics & Targets.

4. Assign a legislative monitoring role: Designate a compliance owner, or retain external counsel, to track evolving state legislation in New York, Illinois, Minnesota, and Washington, and to flag any changes to SEC guidance or exchange requirements.

Key ESG Compliance Dates: 2026 to 2030

The following timeline covers the most important deadlines that US businesses must plan around.

• January 2026: California SB 261 first reports due. Companies with $500 million+ global revenue doing business in California must publish their first biennial climate-risk report on a public website, aligned with ISSB or TCFD standards.

• 2026: California SB 253 Scope 1 & 2 reporting begins. Companies with $1 billion+ global revenue must disclose prior-year Scope 1 and Scope 2 GHG emissions with limited third-party assurance.

• 2027: California SB 253 Scope 3 reporting. The same companies must also report prior-year Scope 3 value chain emissions within 180 days of their Scope 1 & 2 filing. This is the most technically demanding requirement.

• 2026–2028: New York, Washington, Illinois, and Minnesota mandates expected. Companies operating in these states should begin data preparation now, as implementation timelines of two to three years from passage are anticipated.

• 2030: California SB 253 reasonable assurance required. Companies must obtain a higher standard of assurance on Scope 1 & 2 emissions, and limited assurance on Scope 3. Finance-grade controls infrastructure will be necessary.

How to Comply with ESG Laws in the USA: Strategic Guidance

Knowing which laws apply is only the starting point. The following guidance reflects best practice for building a sustainable, scalable ESG compliance programme.

1. Treat ESG as a Finance-Grade Function

California's third-party assurance requirements mark a fundamental shift: ESG data must now be managed with the same rigour as financial data. Finance teams must take active ownership of ESG measurement, controls, and reporting. Sustainability teams cannot operate in isolation from the CFO's office.

2. Build One Data Foundation for All Frameworks

The most common, and costly, ESG compliance mistake is building separate reporting processes for each framework or regulation. Leading companies build a centralised ESG data platform that collects raw data once and maps it to all required outputs: California SB 253/261, SASB, GRI, TCFD/ISSB, and CDP. This approach reduces duplication, improves data quality, and dramatically accelerates reporting cycles.

3. Get Ahead of Scope 3 Now

Scope 3 emissions, those occurring across your value chain, from suppliers to end-of-life product disposal, are the most technically challenging element of any GHG disclosure programme. California requires Scope 3 reporting from 2027. Companies that begin supplier engagement, data collection, and methodology selection now will be far better positioned than those who wait.

4. Align with ISSB for Global Capital Market Access

With 17 jurisdictions adopting ISSB standards in 2026 and global institutional investors increasingly applying ESG screens, alignment with IFRS S1 and S2 is no longer optional for companies accessing international capital. Companies seeking to raise debt in ESG-labelled bond markets, retain large institutional shareholders, or list on international exchanges should treat ISSB alignment as a core element of investor relations strategy, not just a compliance exercise.

5. Get Jurisdiction-Specific Legal Advice

The anti-ESG legislation active in some US states can appear to conflict with pro-ESG mandates in California and New York. Multistate operators need jurisdiction-specific legal analysis. A blanket compliance policy applied uniformly across all US states will almost certainly create exposure in one direction or the other.

The US ESG regulatory environment in 2026 is defined by accelerating state-level ambition and relentless investor pressure, not by federal clarity. California has acted. New York is close behind. Washington's cap-and-invest programme is already operational. And global capital markets governed by ISSB standards are setting their own conditions for access.

For companies with $500 million or more in global revenue doing business in California, ESG compliance requirements are live, legally binding, and enforceable with meaningful penalties. For companies operating at any scale, the investor and supply chain consequences of inadequate ESG disclosure are increasingly concrete and quantifiable.

The organisations that will emerge strongest from this regulatory transition are those building proper data infrastructure, board-level governance, and reporting framework alignment now, not when the next mandate passes. Start with a materiality assessment, establish your GHG data programme, assign board-level oversight, and select your reporting frameworks based on your stakeholder base. The 2026 compliance clock is already running.

Frequently Asked Questions

Q1. Are ESG disclosures mandatory for all US companies in 2026?

Not for all companies, but significantly so for large ones. California's SB 253 mandates Scope 1 & 2 GHG emissions reporting from 2026 for companies with $1 billion+ in global revenue doing business in California. SB 261 requires biennial climate-risk reports for companies with $500 million+ in global revenue. Both laws apply to public and private companies. The SEC's 2024 federal climate rule has been effectively withdrawn, but pre-existing SEC materiality guidance still requires public companies to disclose material climate risks. Nasdaq and NYSE listing rules impose additional ESG disclosure expectations on publicly traded companies.

Q2. What ESG reporting frameworks should US businesses use in 2026?

There is no single mandated federal framework. Most US businesses use a combination: SASB (now under ISSB) for investor-facing, industry-specific metrics; TCFD's four-pillar structure (now incorporated into IFRS S2) for climate risk disclosure; GRI for comprehensive multi-stakeholder sustainability reporting; and CDP for supply chain and investor questionnaires. California's SB 261 explicitly references ISSB climate standards as an acceptable reporting basis. Companies with EU operations must also comply with CSRD.

Q3. Does ESG compliance in the USA apply to private companies?

Yes, significantly so under California law. Both SB 253 and SB 261 apply to all companies doing business in California that meet the respective revenue thresholds ($1 billion and $500 million globally), regardless of whether they are publicly traded. This is a major shift from traditional securities law, which historically applied only to public registrants. Large private equity-backed businesses, family-owned companies, and private multinationals with California operations must all assess their compliance exposure urgently.

Q4. What are the penalties for ESG non-compliance in the USA?

Under California SB 253, non-compliant companies face civil penalties of up to $500,000 per year. Under SB 261, penalties reach up to $50,000 per reporting year. Beyond statutory fines, the material consequences of non-compliance include: divestment by ESG-screened institutional investors; exclusion from sustainability-linked loan facilities and green bond markets; supply chain disqualification by large corporate buyers with Scope 3 reporting obligations; and heightened scrutiny from state attorneys general and regulators.

Q5. How long does it take to implement an ESG compliance programme?

For large organisations, comprehensive ESG reporting implementation typically requires 12 to 24 months, covering materiality assessment, data governance setup, process design, technology deployment, and stakeholder engagement. Given that California's 2026 deadlines are already active, companies that have not yet begun should immediately prioritise: a scope and materiality assessment; Scope 1 and 2 GHG data collection; procurement of an ESG data platform; and engagement of a third-party assurance provider.

Disclaimer: This article is for informational purposes only and does not constitute legal, regulatory, or financial advice. Consult qualified legal counsel for jurisdiction-specific guidance.