1. Based on the risk/impact assessment (1.2), the purchasing company develops and implements a plan to achieve more responsible purchasing practices, including responsibilities, targets and measures.
2. Actions will be based on the severity and likelihood of the adverse risks/impact.
3. Relevant staff agree on priorities and resources/ budget are assigned.
CSDDD relevant articles
Articles 10, 11 & 13
Article 10, Preventing potential adverse impacts.
Article 10.2: Companies shall be required to take the following appropriate measures, where relevant:
(a) where necessary due to the nature or complexity of the measures required for prevention, without undue delay develop and implement a prevention action plan, with reasonable and clearly defined timelines for the implementation of appropriate measures and qualitative and quantitative indicators for measuring improvement; companies may develop their action plans in cooperation with industry or multi-stakeholder initiatives; the prevention action plan shall be adapted to companies’ operations and chains of activities;
Article 10.6: As regards potential adverse impacts as referred to in paragraph 1 that could not be prevented or adequately mitigated by the measures set out in paragraphs 2, 4 and 5, the company shall, as a last resort, be required to refrain from entering into new or extending existing relations with a business partner in connection with which, or in the chain of activities of which, the impact has arisen and shall, where the law governing their relations so entitles them, take the following actions, as a last resort:
(a) adopt and implement an enhanced prevention action plan for the specific adverse impact without undue delay, by using or increasing the company’s leverage through the temporary suspension of business relationships with respect to the activities concerned, provided that there is a reasonable expectation that those efforts will succeed; the action plan shall include a specific and appropriate timeline for the adoption and implementation of all actions therein, during which the company may also seek alternative business partners;
Article 11, Bringing actual adverse impacts to an end
Article 11.3: (b) where necessary due to the fact that the adverse impact cannot be immediately brought to an end, without undue delay develop and implement a corrective action plan with reasonable and clearly defined timelines for the implementation of appropriate measures and qualitative and quantitative indicators for measuring improvement; companies may develop their action plans in cooperation with industry or multi-stakeholder initiatives; the corrective action plan shall be adapted to companies’ operations and chains of activities;alternative business partners;
Article 11.7: As regards actual adverse impacts as referred to in paragraph 1 that could not be brought to an end or the extent of which could not be minimised by the measures set out in paragraphs11.3, 11.5 and11.6, the company shall, as a last resort, be required to refrain from entering into new or extending existing relations with a business partner in connection with which, or in the chain of activities of which, the impact has arisen and shall, where the law governing their relations so entitles them, take the following actions, as a last resort:
(a) adopt and implement an enhanced corrective action plan for the specific adverse impact without undue delay, including by using or increasing the company’s leverage through the temporary suspension of business relationships with respect to the activities concerned, provided that there is a reasonable expectation that those efforts will succeed; the action plan shall include a specific and appropriate timeline for the adoption and implementation of all actions therein, during which the company may also seek alternative business partners;
Article 13, Meaningful engagement with stakeholders
Article 13.3.B: when developing prevention and corrective action plans pursuant to Article 10(2) and Article 11(3), and developing enhanced prevention and corrective action plans pursuant to Article 10(6) and Article 11(7);
CSDDD relevant recitals
Recitals 38, 39, 40, 46 & 54
Recital 38
In order to conduct appropriate human rights and environmental due diligence with respect to their operations, the operations of their subsidiaries, and the operations of their business partners in the chains of activities of the companies, companies covered by this Directive should integrate due diligence into their policies and risk management systems, identify and assess, where necessary prioritise, prevent and mitigate as well as bring to an end and minimise the extent of actual and potential adverse human rights and environmental impacts, provide remediation in relation to actual adverse impacts, carry out meaningful engagement with stakeholders, establish and maintain a notification mechanism and complaints procedure, monitor the effectiveness of the measures taken in accordance with the requirements that are provided for in this Directive and communicate publicly on their due diligence. In order to ensure clarity for companies, in particular the steps of preventing and mitigating potential adverse impacts and of bringing to an end, or when this is not possible, minimising the extent of actual adverse impacts, should be clearly distinguished in this Directive.
Recital 39
In order to ensure that due diligence forms part of companies’ policies and risk management systems, and in line with the relevant international framework, companies should integrate due diligence into their relevant policies and risk management systems and at all relevant levels of operation, and have in place a due diligence policy. The due diligence policy should be developed in prior consultation with the company’s employees and their representatives and should contain a description of the company’s approach, including in the long term, to due diligence, a code of conduct describing the rules and principles to be followed throughout the company and its subsidiaries, and, where relevant, the company’s direct or indirect business partners and a description of the processes put in place to integrate due diligence into the relevant policies and to carry out due diligence, including the measures taken to verify compliance with the code of conduct and to extend its application to business partners. The due diligence policy should ensure a risk-based due diligence. The code of conduct should apply in all relevant corporate functions and operations, including procurement, employment and purchasing decisions. For the purposes of this Directive, employees should be understood as including temporary agency workers, and other workers in non-standard forms of employment provided that they fulfil the criteria for determining the status of worker established by the CJEU.
Recital 40
To comply with due diligence obligations, companies need to take appropriate measures with respect to the identification, prevention, bringing to an end, minimisation and remediation of adverse impacts, and the carrying out of meaningful engagement with stakeholders throughout the due diligence process. The term ‘appropriate measures’ should be understood to mean measures that are capable of achieving the objectives of due diligence, by effectively addressing adverse impacts in a manner commensurate to the degree of severity and the likelihood of the adverse impact, and reasonably available to the company, taking into account the circumstances of the specific case, including the nature and extent of the adverse impact and relevant risk factors. If necessary information, including information that is deemed to be a trade secret, cannot be reasonably obtained due to factual or legal obstacles, for instance because a business partner refuses to provide information and there are no legal grounds to enforce this, such circumstances cannot be held against the company, but it should be able to explain why such information could not be obtained and should take the necessary and reasonable steps to obtain it as soon as possible.
Recital 46
So as to comply with the prevention and mitigation obligation provided for in this Directive, companies should be required to take the following appropriate measures, where relevant. Where necessary due to the complexity of prevention measures, companies should develop and implement a prevention action plan.
Recital 54
So as to comply with the obligation to bring to an end or minimise the extent of actual adverse impacts provided for in this Directive, companies should be required to take the following appropriate measures, where relevant. Where necessary due to the fact that the adverse impact cannot be immediately brought to an end, companies should develop and implement a corrective action plan.
To conduct their due diligence in an effective and efficient manner, companies should also make necessary modifications or improvements to their design and distribution practices, to address adverse impacts arising both in the upstream part and the downstream part of their chains of activities, before and after the product has been made; of their subsidiaries and those of their upstream business partners.