1.1 Internal engagement and responsibilities

Article 7, Integrating due diligence into company policies and risk management systems 
The due diligence policy referred to in paragraph 1 shall be developed in prior consultation with the company’s employees and their representatives, and contain all of the following: 

(a) a description of the company’s approach, including in the long term, to due diligence; (b) a code of conduct describing rules and principles to be followed throughout the company and its subsidiaries, and the company’s direct or indirect business partners in accordance with Article 10(2), point (b), Article 10(4), Article 11(3), point (c), or Article 11(5); and (c) a description of the processes put in place to integrate due diligence into the company’s relevant policies and to implement due diligence, including the measures taken to verify compliance with the code of conduct referred to in point (b) and to extend that code’s application to business partners. 
 

Article 13, meaningful stakeholder engagement 
13.2. Without prejudice to Directive (EU) 2016/943, when consulting with stakeholders, companies shall, as appropriate, provide them with relevant and comprehensive information, in order to carry out effective and transparent consultations. Without prejudice to Directive (EU) 2016/943, consulted stakeholders shall be allowed to make a reasoned request for relevant additional information, which shall be provided by the company within a reasonable period of time and in an appropriate and comprehensible format. If the company refuses a request for additional information, the consulted stakeholders shall be entitled to a written justification for that refusal. 
 
13.3. Consultation of stakeholders shall take place at the following stages of the due diligence process: (a) when gathering the necessary information on actual or potential adverse impacts, in order to identify, assess and prioritise adverse impacts pursuant to Articles 8 and 9; (b) when developing prevention and corrective action plans pursuant to Article 10(2) and Article 11(3), and developing enhanced prevention and corrective action plans pursuant to Article 10(6) and Article 11(7); (c) when deciding to terminate or suspend a business relationship pursuant to Article 10(6) and Article 11(7); (d) when adopting appropriate measures to remediate adverse impacts pursuant to Article 12; (e) as appropriate, when developing qualitative and quantitative indicators for the monitoring required under Article 15. 

Recital 38  
In order to conduct appropriate human rights and environmental due diligence with respect to their operations, the operations of their subsidiaries, and the operations of their business partners in the chains of activities of the companies, companies covered by this Directive should integrate due diligence into their policies and risk management systems, identify and assess, where necessary prioritise, prevent and mitigate as well as bring to an end and minimise the extent of actual and potential adverse human rights and environmental impacts, provide remediation in relation to actual adverse impacts, carry out meaningful engagement with stakeholders, establish and maintain a notification mechanism and complaints procedure, monitor the effectiveness of the measures taken in accordance with the requirements that are provided for in this Directive and communicate publicly on their due diligence. In order to ensure clarity for companies, in particular the steps of preventing and mitigating potential adverse impacts and of bringing to an end, or when this is not possible, minimising the extent of actual adverse impacts, should be clearly distinguished in this Directive.  
 
Recital 39 
In order to ensure that due diligence forms part of companies’ policies and risk management systems, and in line with the relevant international framework, companies should integrate due diligence into their relevant policies and risk management systems and at all relevant levels of operation, and have in place a due diligence policy. The due diligence policy should be developed in prior consultation with the company’s employees and their representatives and should contain a description of the company’s approach, including in the long term, to due diligence, a code of conduct describing the rules and principles to be followed throughout the company and its subsidiaries, and, where relevant, the company’s direct or indirect business partners and a description of the processes put in place to integrate due diligence into the relevant policies and to carry out due diligence, including the measures taken to verify compliance with the code of conduct and to extend its application to business partners. The due diligence policy should ensure a risk-based due diligence. The code of conduct should apply in all relevant corporate functions and operations, including procurement, employment and purchasing decisions. For the purposes of this Directive, employees should be understood as including temporary agency workers, and other workers in non-standard forms of employment provided that they fulfil the criteria for determining the status of worker established by the CJEU. 
 
Recital 54 
To conduct their due diligence in an effective and efficient manner, companies should also make necessary modifications or improvements to their design and distribution practices, to address adverse impacts arising both in the upstream part and the downstream part of their chains of activities, before and after the product has been made.