You are using an outdated browser. Please upgrade your browser to improve your experience
On 13 December 2024, the European Union’s Forced Labour Regulation (EU) 2024/3015 officially came into effect. As a historic legal instrument, the regulation significantly raises the bar on corporate responsibility, targeting the use of forced labour at any point in a product’s lifecycle—from raw materials to finished goods.
Unlike previous EU laws, this regulation imposes a comprehensive ban on the placing and exporting of products made with forced labour, regardless of company size, sector, or geographic origin. Businesses worldwide, particularly those operating in high-risk regions such as Southeast Asia, now face heightened exposure to regulatory enforcement and reputational risk.
With full compliance required by December 2027, companies must now assess and strengthen their due diligence measures as a matter of urgency. Here’s what you need to know—and what steps to take now.
While the Corporate Sustainability Due Diligence Directive (CSDDD)—which came into force in July 2024—addresses human rights risks more broadly, including forced labour, the Forced Labour Regulation is narrower in scope and, crucially, applies to all products, irrespective of turnover or headcount thresholds.
It prohibits the sale (including online and through distance sales), distribution, or export of goods produced using forced labour at any stage of production. The definition aligns with the International Labour Organization’s Convention No. 29, which describes forced labour as “all work or service exacted under the menace of any penalty and for which the person has not offered themselves voluntarily.”
Under the regulation, investigations will be led by designated national authorities in EU Member States or by the European Commission where forced labour is suspected outside the EU. These investigations will be evidence-driven, with companies required to provide detailed product and supply chain information via a centralised digital portal.
Any product found to be associated with forced labour may be withdrawn from the EU market, seized, or ordered for disposal. Companies that fail to cooperate or obstruct investigations may also face financial penalties and significant reputational damage.
Key dates include:
While the CSDDD and Forced Labour Regulation may overlap, they function independently. Notably, the CSDDD’s implementation timeline was extended following a European Parliament vote on 3 April 2025. The earliest group of large companies—those with over 5,000 employees and €1.5 billion turnover—now face a compliance deadline of July 2028, one year later than originally anticipated.
Unlike the CSDDD, the Forced Labour Regulation does not introduce new due diligence obligations, but it does strongly encourage companies to adopt established international frameworks, including the UN Guiding Principles on Business and Human Rights, OECD Guidelines, and ILO conventions.
Although the regulation is geographically neutral, supply chains connected to ASEAN countries will likely receive particular scrutiny. Many multinational companies have shifted manufacturing to Southeast Asia under “China Plus One” strategies—yet the region continues to face systemic labour rights challenges.
A 2024 study by the Business & Human Rights Resource Centre (BHRRC) found that 37% of all reported cases of migrant worker abuse occurred in the Asia-Pacific region. Across ASEAN Member States, the risk of forced labour remains elevated in major export sectors including agriculture, construction, manufacturing, garments, and fishing.
High-risk countries include:
In 2023, multiple global fashion brands announced plans to exit Myanmar due to a surge in labour rights violations following the 2021 military coup. A BHRRC investigation documented 212 abuse allegations linked to 124 factories and at least 46 brands, including wage theft, forced overtime, and harassment.
Thailand’s fishing industry has also been subject to international scrutiny. Despite regulatory improvements, reports as recent as 2024 still highlight debt bondage, physical abuse, and exploitative conditions aboard fishing vessels—risks that remain embedded in supply chains supplying European and North American markets.
Some ASEAN nations are beginning to align more closely with international labour standards. Recent developments include:
However, progress is uneven, and many sectors remain exposed due to weak enforcement, lack of transparency, or political instability.
With the regulation’s 2027 deadline fast approaching and enforcement mechanisms being established, companies must act now to avoid legal, financial, and reputational risks.
At The Risk Advisory Group, we support clients in identifying and mitigating complex supply chain risks. Our tailored due diligence solutions help companies uncover and address exposure to forced labour, drawing on deep regional insight and regulatory expertise.
Whether you need to map your supply chain, strengthen compliance protocols, or respond to regulatory scrutiny, we can help you meet your legal and ethical obligations—while safeguarding your brand and operations.
Contact us to find out more about how we can support your business.
Intelligence delivered ingeniously
Helping key decision makers, make the right commercial decisions
Cookie | Duration | Description |
---|---|---|
cookielawinfo-checbox-analytics | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics". |
cookielawinfo-checbox-functional | 11 months | The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional". |
cookielawinfo-checbox-others | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other. |
cookielawinfo-checkbox-advertisement | 1 year | Set by the GDPR Cookie Consent plugin, this cookie is used to record the user consent for the cookies in the "Advertisement" category . |
cookielawinfo-checkbox-necessary | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary". |
cookielawinfo-checkbox-performance | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance". |
spcsrf | 2 hours | This cookie is used for ensuring the security of the website and visitors. This cookie ensures visitor browsing security by preventing cross-site request forgery. |
viewed_cookie_policy | 11 months | The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data. |
Cookie | Duration | Description |
---|---|---|
__cf_bm | 30 minutes | This cookie, set by Cloudflare, is used to support Cloudflare Bot Management. |
Cookie | Duration | Description |
---|---|---|
BrowserId | 1 year | This cookie is used for registering a unique ID that identifies the type of browser. It helps in identifying the visitor device on their revisit. |
iutk | 5 months 27 days | This cookie is used by Issuu analytic system to gather information regarding visitor activity on Issuu products. |
pardot | past | The pardot cookie is set while the visitor is logged in as a Pardot user. The cookie indicates an active session and is not used for tracking. |
SPSI | session | This cookie is used for setting a unique ID for the session and it collects user behaviour on the website during the session. This collected information is used for statistical purposes. |
Cookie | Duration | Description |
---|---|---|
__qca | never | The __qca cookie is associated with Quantcast. This anonymous data helps us to better understand users' needs and customize the website accordingly. |
mc | 1 year 1 month | Quantserve sets the mc cookie to anonymously track user behaviour on the website. |
test_cookie | 15 minutes | The test_cookie is set by doubleclick.net and is used to determine if the user's browser supports cookies. |
Cookie | Duration | Description |
---|---|---|
adOtr | past | No description available. |
BrowserId_sec | 1 year | No description available. |
CookieConsentPolicy | 1 year | No description |
libsyn-paywall-s | 1 day | No description |
LSKey-c$CookieConsentPolicy | 1 year | No description |
sp_lit | 5 minutes | No description available. |
SPSE | session | No description available. |
UTGv2 | 5 months 27 days | No description available. |
visitor_id135291 | 10 years | No description |
visitor_id135291-hash | 10 years | No description |