The "2026 ESG Assurance" Readiness: Board Liability in the Age of Mandatory Reasonable Assurance

Executive Summary

The era of voluntary ESG disclosures and self-certified sustainability claims has ended. With SEBI's Business Responsibility and Sustainability Reporting (BRSR) Core framework now mandating reasonable assurance for India's top 1,000 listed companies by FY 2026-27, boards face unprecedented accountability for ESG claims, supply chain compliance and greenwashing risks. This article examines the legal implications of the new assurance regime, director liability for MSME vendor violations and litigation exposure from unsubstantiated environmental claims.

I. The Regulatory Landscape: From "Comply-or-Explain" to "Reasonable Assurance"

A. SEBI's Phased Rollout: Understanding the Timeline

The Securities and Exchange Board of India has implemented a phased expansion of ESG assurance requirements that places India among the world's most rigorous sustainability reporting jurisdictions.

• FY 2023-24 - top 150 listed entities - BRSR Core reasonable assurance mandatory.

• FY 2024-25 - top 250 listed entities - BRSR Core reasonable assurance mandatory.

• FY 2025-26 - top 500 listed entities - BRSR Core assessment or assurance (flexibility introduced).

• FY 2026-27 - top 1,000 listed entities - BRSR Core assessment or assurance mandatory.

Key development: in December 2024, SEBI amended the framework to allow entities to choose between reasonable assurance, being full third-party verification conducted by ICAI members or equivalent professionals under IAASB standards, and assessment, being third-party assessment under standards developed by the Industry Standards Forum in consultation with SEBI - a lighter verification mechanism.

However, this flexibility should not be mistaken for reduced liability. The evidentiary bar for both pathways requires systematic data collection protocols, documented control environments and traceable audit trails across all reported metrics.

B. BRSR Core: The Nine Attributes Under Scrutiny

BRSR Core comprises 49 key performance indicators across nine ESG attributes that must be reported with independent verification.

• Environmental: energy consumption, greenhouse gas emissions, water usage, waste management.

• Social: employee welfare, diversity metrics, community investment, labour practices.

• Governance: board composition, anti-corruption measures, whistleblower mechanisms, risk oversight.

For FY 2026-27, value chain ESG disclosures - covering upstream and downstream partners contributing 2% or more of purchases or sales, up to 75% coverage - move to voluntary assurance. Boards may defer third-party verification of supply chain data for one additional year, but disclosure remains mandatory.

II. Supply Chain Liability: When Your MSME Vendor's Violation Becomes Your Board's Problem

A. The Legal Basis for Extended Liability

Under the Companies Act, 2013, directors owe fiduciary duties to act in good faith, exercise due diligence and promote the company's long-term sustainable value. SEBI's BRSR framework operationalises these duties by requiring disclosure of value chain ESG performance - effectively making boards accountable for labour law violations, environmental breaches and governance failures among MSME suppliers.

Critical point: while SEBI made value chain assurance voluntary for FY 2026-27, value chain disclosure remains mandatory for the top 250 listed companies. This creates a legal paradox - boards must publicly report on supplier compliance without the protective shield of third-party verification, exposing themselves to shareholder litigation if disclosures prove inaccurate.

B. Case Study: MSME Labour Law Violations and Director Liability

Facts: a top-500 listed manufacturing company discloses in its BRSR report that 95% of its MSME suppliers comply with the Minimum Wages Act, 1948 and the Factories Act, 1948. Six months after disclosure, an investigative report reveals that three major suppliers, accounting for 18% of procurement, systematically underpay workers and operate without valid factory licences. The company's stock drops 12% on the news.

The legal exposure follows on three fronts.

• SEBI action for misleading disclosures. Under Regulation 34(2)(f) of the SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015, inaccurate BRSR disclosures constitute a violation of listing conditions. SEBI may impose monetary penalties up to Rs. 25 crore per violation under Section 23 of the SEBI Act, 1992.

• Shareholder class action. Under Section 245 of the Companies Act, 2013, institutional investors or 100 or more shareholders may file a class action alleging that the board failed to exercise due diligence in verifying supplier compliance, resulting in loss from reputational damage and a fall in the share price.

• Criminal liability for wilful default. If directors knowingly approved false disclosures - for instance, ignored internal audit findings on supplier violations - Section 447 of the Companies Act becomes applicable, carrying imprisonment up to ten years and a fine up to three times the amount involved.

C. Due Diligence Defences: What Boards Must Do Now

Supplier ESG risk mapping.

• Categorise suppliers by ESG risk profile - high, medium or low - based on sector, geography and historical compliance.

• Require high-risk suppliers, being those at 2% or more of procurement, to complete self-assessment questionnaires aligned with BRSR Core indicators.

• Conduct on-site audits for suppliers representing 5% or more of total procurement value.

Contractual safeguards. Insert ESG compliance clauses in supplier contracts covering representations and warranties on labour law compliance under the Minimum Wages Act, the Contract Labour Act and the POSH Act; a right to audit and inspect supplier facilities; termination rights for material ESG breaches; and indemnification for third-party claims arising from supplier violations.

Board oversight mechanisms.

• Establish a dedicated ESG Risk Committee, or expand the CSR Committee's mandate, to review supplier ESG performance quarterly.

• Require management to present a supplier ESG dashboard at each board meeting, showing the percentage of suppliers audited in the last twelve months, the number of non-compliances identified with remediation status, and high-risk suppliers without valid compliance certifications.

Documentation trail.

• Maintain board minutes documenting ESG discussions, challenges raised and decisions taken.

• Preserve all supplier audit reports, corrective action plans and follow-up verification records.

• Ensure the BRSR disclosure process includes a management representation letter signed by the CEO and CFO attesting to the accuracy of value chain data.

III. Greenwashing Risk: When "Carbon Neutral" Claims Become Litigation Magnets

A. The CCPA's Greenwashing Guidelines: Penalties That Bite

In July 2023 the Central Consumer Protection Authority issued the Guidelines for Prevention and Regulation of Greenwashing, establishing a framework to combat misleading environmental claims.

• Substantiation mandate: generic terms such as "carbon neutral", "eco-friendly", "green" or "sustainable" shall not be used without adequate, accurate and accessible qualifiers backed by scientific evidence or third-party certification.

• Penalties: first-time offenders face imprisonment up to two years and a fine up to Rs. 10 lakh; repeat offenders, imprisonment up to five years and a fine up to Rs. 50 lakh.

• Scope: all advertisements, including digital marketing, social media posts, product labels and corporate sustainability reports used for promotional purposes.

B. Case Law Trends: Greenwashing Litigation in India

While India's greenwashing jurisprudence is nascent, global trends indicate rising litigation risk.

• Absolute claims are high-risk. Claims such as "100% sustainable", "zero emissions" or "fully carbon neutral" face the highest scrutiny because they are nearly impossible to substantiate across a product's entire lifecycle.

• False overall impression. Even technically accurate claims can constitute greenwashing if they create a misleading overall impression. A company that claims "50% recycled content" on packaging while omitting that the remaining half is non-recyclable plastic creates an impression of environmental friendliness that is not fully accurate.

• SEBI's parallel enforcement. Misleading ESG statements in annual reports, BRSR filings or investor presentations may trigger SEBI action under the broader disclosure ecosystem, independent of CCPA proceedings.

C. Building a Legal Defence: Evidence Requirements for Environmental Claims

Third-party certifications. Carbon neutrality claims require verification under recognised standards such as ISO 14064-3 on greenhouse gas verification, Science Based Targets initiative validation, or Bureau of Energy Efficiency certification for energy efficiency claims. Eco-friendly and green claims should rest on certifications such as EcoMark of the Bureau of Indian Standards, FSSAI organic certification for food products, or Forest Stewardship Council certification for wood and paper.

Lifecycle assessment documentation. Commission independent lifecycle assessment studies covering raw material extraction, manufacturing, transportation and distribution, the product use phase, and end-of-life disposal or recycling. Ensure the methodology aligns with ISO 14040 and 14044 and is publicly accessible, or available on request, to satisfy the CCPA's accessible disclosure requirement.

Internal control framework. Establish a green claims review committee comprising legal counsel to assess regulatory compliance, technical experts to validate scientific claims and marketing representatives to ensure claims are not overstated. Require all environmental claims to undergo pre-publication review, with documented approval trails retained for at least five years.

Qualifier language. Avoid absolute terms. "Carbon neutral" should read "carbon neutral for Scope 1 and 2 emissions, verified by [certifier] under [standard]". "100% sustainable" should read "made with 80% recycled materials, certified by [agency]".

IV. Board Readiness Checklist: Ten Critical Actions for FY 2026-27

• Confirm BRSR cohort status: verify whether the company falls within the top 1,000 listed entities by market capitalisation as on 31 March 2026.

• Choose the assurance pathway: reasonable assurance through ICAI auditors, or assessment under ISF standards, judged on cost, timeline and risk appetite.

• Conduct a gap assessment between current ESG data collection practices and BRSR Core requirements.

• Map the value chain: identify all suppliers contributing 2% or more of procurement value and assess their ESG compliance status.

• Strengthen internal controls so that ESG metrics are accurate, complete and auditable.

• Review marketing claims across advertising, packaging and corporate communications for CCPA compliance.

• Obtain third-party certifications for carbon neutrality, renewable energy usage and other environmental claims.

• Train the board: conduct ESG literacy sessions so directors understand their oversight responsibilities and liability exposure.

• Update D&O insurance: confirm that directors' and officers' liability cover extends to ESG-related claims, as many policies now exclude greenwashing litigation.

• Document everything: board discussions, management representations, audit trails and remediation efforts, so that a due diligence defence can be established if challenged.

V. Conclusion: The Stakes Have Never Been Higher

The convergence of SEBI's BRSR Core assurance mandate, the CCPA's anti-greenwashing enforcement and heightened shareholder activism creates a perfect storm of liability for Indian boards. Directors can no longer treat ESG as a CSR footnote or a marketing opportunity - it is now a core governance function with direct legal and financial consequences.

Boards that approach FY 2026-27 ESG readiness as a compliance checkbox risk regulatory penalties, shareholder lawsuits and reputational catastrophe. Those that treat it as a strategic imperative, investing in robust data systems, supply chain oversight and evidence-based claims, will not only mitigate liability but also attract ESG-focused capital and build long-term resilience.

The question is no longer whether your board is ready for reasonable assurance. The question is whether your board is ready for the scrutiny that comes with it.