Corporate Sustainability: A Complete Guide for UK Businesses

Corporate sustainability stopped being a communications exercise in the UK the moment it acquired standards, deadlines and enforcement. As of September 2026 there is a UK-endorsed reporting standard, an annual energy and carbon disclosure in the directors' report, an energy audit regime with a 2027 deadline, and a regulator that can fine a business up to 10 per cent of global turnover for a green claim it cannot prove. This guide sets out what applies to whom, what is still voluntary, and how to build the thing rather than just report it.

What corporate sustainability actually means

The useful definition is narrow: running a business so that its environmental and social impacts are managed as business risks and opportunities, with the same rigour applied to financial risk. That is deliberately different from corporate social responsibility, which sits alongside the business and spends some of its money, and different again from an ESG report, which is an output rather than a practice. We set the three apart in ESG, CSR and sustainability compared.

The distinction matters because the regulation now follows the narrow definition. Reporting standards ask what sustainability risks could reasonably affect the entity's cash flows, access to finance or cost of capital. That is a finance question, and it is why sustainability has moved from the communications team to the finance function in most companies that take it seriously.

The UK rulebook as it stands in 2026

UK SRS S1 and S2: published, voluntary, probably not for long

The government published UK SRS S1, on general sustainability-related financial disclosures, and UK SRS S2, on climate-related disclosures, on 25 February 2026. They are the UK-endorsed versions of the ISSB's IFRS S1 and S2. Nothing about them is mandatory today: any entity may choose to use them.

What is coming is the Financial Conduct Authority's decision on listed companies. Its consultation, CP26/5, closed on 20 March 2026 and proposed applying UK SRS S2 from 1 January 2027 for listed companies in certain UK Listing Rules categories, with the wider S1 disclosures and Scope 3 emissions applying on a comply-or-explain basis at first. The policy statement is expected in autumn 2026. The government and the FCA are separately considering during 2026 whether other listed and private entities should report against the standards.

For an unlisted company the practical read is this: you are not required to adopt UK SRS, but your listed customers and your lenders will start asking for data shaped like it. Our comparison of GRI, SASB and ISSB covers how the frameworks relate.

SECR: the disclosure most companies already owe

Streamlined Energy and Carbon Reporting applies to quoted companies and to large unquoted companies and LLPs, and it lands in the directors' report every year. It has four elements:

1. total UK energy use in kWh;
2. Scope 1 and Scope 2 greenhouse gas emissions in tonnes of CO2 equivalent, calculated using the government's published conversion factors;
3. at least one intensity ratio, for example tonnes of CO2e per million pounds of turnover;
4. a narrative on the energy efficiency measures taken during the year.

Two practical notes. First, the uplift to Companies Act size thresholds that took effect for financial years beginning on or after 6 April 2025 moved the boundary between company size categories, so any business sitting near it should confirm its SECR position with its auditor rather than assume it has dropped out. Second, the narrative element is the one auditors query most: it asks what you did, not what you intend to do.

ESOS Phase 4: the deadline that is already running

The Energy Savings Opportunity Scheme requires large undertakings to audit their energy use every four years. For Phase 4 the qualification date is 31 December 2026 and the compliance deadline is 5 December 2027. An organisation employing 250 or more people, or with turnover above 44 million pounds and a balance sheet total above 38 million pounds, on that qualification date must complete an assessment and notify the Environment Agency.

The overlap with SECR is the useful part. The energy data behind an ESOS assessment is largely the same data SECR discloses each year, so collecting it once to an audit-ready standard serves both, and the opportunities your assessor identifies become the energy efficiency narrative in the directors' report.

Green claims: where the fines are

Since 6 April 2025 the Competition and Markets Authority has been able to decide that a business has broken consumer law and impose fines of up to 10 per cent of global turnover directly, under the Digital Markets, Competition and Consumers Act 2024. That is the sharpest enforcement tool now pointed at sustainability, and it is pointed at the claims rather than the operations. Our guide to UK greenwashing rules and the Green Claims Code covers the six principles a claim has to satisfy.

The rest of the stack

Depending on size and sector you may also owe a modern slavery statement, a section 172 statement on how directors have had regard to wider stakeholders, and TCFD-aligned climate disclosures under the Companies Act. Our overview of UK ESG reporting requirements maps which regime applies at which size.

Building it: five steps that survive audit

1. Run a materiality assessment first

Everything downstream depends on knowing which issues actually matter to your business and your stakeholders. Doing it properly stops you measuring twenty things badly instead of five things well, and it is the evidence you point at when someone asks why a topic is absent from the report. See how to run an ESG materiality assessment.

2. Measure a baseline you can defend

Scope 1 and 2 first, using government conversion factors and actual meter data rather than estimates where you can get it. Then decide honestly which Scope 3 categories are material. Scope 3 is where most corporate footprints live and where most reporting quietly stops. Our guide to measuring a business carbon footprint covers the method.

3. Set targets against the baseline, not against the ambition

A target without a dated baseline, a stated scope and a named owner is a slogan. Say what is included, from when, and who reports on it. The route from target to plan is in how to create a net zero plan.

4. Put it under governance

Board-level ownership, a named executive accountable, and sustainability metrics in the papers the board actually reads. UK SRS S1 asks specifically about governance processes and controls, and a company that cannot describe them will not disclose well. Our guide to corporate governance covers the structures.

5. Report last

The report is the output, not the project. Build the data and the governance, then write it. Our guide to writing an ESG report and building an ESG strategy cover the sequence in full.

The three failure modes worth naming

Reporting without reducing. A polished report and a flat emissions curve is the most common outcome, and it is the one that attracts scrutiny now that year-on-year data is comparable.

Avoiding Scope 3. Excluding the categories that dominate your footprint because they are hard to measure produces a number that is technically accurate and practically meaningless. Say what you have excluded and why.

Claiming ahead of the evidence. Carbon neutral, sustainable and eco-friendly are all claims a regulator can test. If the substantiation is not on file before publication, do not publish it.

Where to start this quarter

If you are behind, three things move first: confirm whether you are in ESOS Phase 4 scope on the 31 December 2026 qualification date, get twelve months of clean energy data into one place, and audit every environmental claim on your website against the evidence you hold. Those three cover the nearest deadline, the data foundation and the enforcement risk.

The standards themselves are published on GOV.UK, and the CMA's Green Claims Code sits on the same site. Our E-Business Ethics homepage collects the rest of the guides, including writing a code of conduct and building a compliance programme, which sit next to sustainability in most governance workplans.

Frequently Asked Questions

What is corporate sustainability?

Running a business so that its environmental and social impacts are identified and managed as business risks and opportunities, with the same rigour applied to financial risk. It differs from corporate social responsibility, which sits alongside the business, and from an ESG report, which is an output of the practice rather than the practice itself.

Is sustainability reporting mandatory in the UK?

Partly. SECR disclosures in the directors' report are mandatory for quoted companies and large unquoted companies and LLPs, and climate-related financial disclosures apply to certain large companies. UK SRS S1 and S2, published on 25 February 2026, are currently voluntary, although the FCA has consulted on requiring listed companies to report against UK SRS S2 from 1 January 2027.

What are the four SECR disclosures?

Total UK energy use in kWh, Scope 1 and Scope 2 emissions in tonnes of CO2 equivalent using the government conversion factors, at least one intensity ratio such as emissions per million pounds of turnover, and a narrative describing the energy efficiency measures taken during the reporting year.

When is the ESOS Phase 4 deadline?

The qualification date is 31 December 2026 and the compliance deadline is 5 December 2027. An organisation with 250 or more employees, or turnover above 44 million pounds and a balance sheet total above 38 million pounds on the qualification date, must complete an ESOS assessment and notify the Environment Agency.

What is the penalty for a misleading sustainability claim?

Since 6 April 2025 the Competition and Markets Authority can decide directly that a business has breached consumer law and impose a fine of up to 10 per cent of global turnover, without going to court, under the Digital Markets, Competition and Consumers Act 2024. That applies to environmental claims made to consumers.

Where should a mid-size company start?

With a materiality assessment, then a defensible Scope 1 and 2 baseline built from meter data rather than estimates, then targets with a stated scope and a named owner. Write the report last. Reporting before the data and the governance exist produces a document nobody can stand behind.