Business Ethics & ESG News: July 2026
The reporting rulebook took another concrete step this week. Brussels formally adopted the finalised sustainability standards it has been trimming for over a year, a new EU regime brought ESG ratings under direct supervision, and fresh research put numbers on the gap between how fast companies deploy AI and how slowly they govern it. Here is what changed and why compliance and ethics teams should care.
European Commission adopts the finalised ESRS
On 6 July 2026 the European Commission adopted the revised European Sustainability Reporting Standards for companies inside the mandatory Corporate Sustainability Reporting Directive, along with a voluntary standard for smaller businesses. This is presented as the final major step in the Omnibus I simplification effort launched last year, after EFRAG's December proposal to cut mandatory datapoints by 61 per cent and drop voluntary disclosures altogether, for a total reduction of more than 70 per cent.
The finalised standards also add flexibility: asset managers can avoid disclosing information about client-managed investments, companies may choose a financial control or operational control approach for their greenhouse gas inventories, and there are new transparency requirements where transition plan targets are not aligned with 1.5C. The delegated acts now pass to the Parliament and Council and take effect unless either objects, so reporting teams should track the scrutiny period rather than treat the text as settled.
Source: ESG Today
EU ESG Ratings Regulation starts to apply
From 2 July 2026 the EU ESG Ratings Regulation (Regulation (EU) 2024/3005) applies, bringing providers of ESG ratings that operate in the Union under the direct supervision of the European Securities and Markets Authority. Providers must be authorised and will face governance, methodology transparency and quality-control obligations designed to improve the integrity of the ratings that increasingly shape corporate access to capital.
On 1 July ESMA published a statement covering the transitional window: existing providers must notify their intention to continue, after which they can keep operating on a public register while they formally apply for registration from 2 August 2026, and by 2 November 2026 at the latest. Smaller providers below 50 staff and EUR 8 million turnover get a lighter regime. For companies being rated, the practical effect is more scrutiny of how their sustainability data is scored, and less room for opaque methodologies.
Source: ESMA
Survey exposes a widening AI governance gap
Research from Smarsh and FTI Consulting, reported on 8 July 2026, found that while 55 per cent of organisations are actively deploying AI, only 26 per cent say their governance frameworks are fully aligned with the pace of that adoption. Just 43 per cent keep a central inventory of their AI agents and integrations, and 47 per cent report that compliance actively shapes early-stage technology decisions.
FTI Technology's Jonathan Roberts warned that employees upskilling on AI without oversight can raise risks to data privacy, data protection and corporate governance through shadow IT and model hallucinations. The message for ethics teams is that written AI policies are no longer enough on their own: without an inventory of what is actually in use and controls that keep pace, governance drifts behind the technology it is meant to steer.
Source: Corporate Compliance Insights
Keep governance ahead of the rules
Regulation on AI and sustainability keeps moving, and the deadlines shift with it. We help organisations turn changing obligations into policies and controls their teams can actually follow. If you want support making sense of what applies to you, get in touch.
Get Started