In short
- The consequence that is established in the text is market exclusion: non-compliant product may not lawfully be placed on, made available on, or exported from the EU market.
- We have not verified a fine level or a percentage of turnover, so this page does not quote one. Several widely circulated figures have no source we could confirm.
- The commercial failure mode arrives before any authority does, when a customer asks for a reference number you cannot supply.
The consequence this regulation establishes is not a fine, it is exclusion. A relevant product may only be placed on the EU market, made available on it, or exported from it where it is deforestation-free, was produced in accordance with the law of the country of production, and is covered by a due diligence statement. Product that fails that test has no lawful route to market. On the size of any monetary penalty, we are going to disappoint you deliberately: our fact base does not establish one, so this page will not quote a figure that we have not read in the Official Journal ourselves.
What consequence is actually established?
Market access, and it is a harder consequence than it sounds.
EUDR is written as a prohibition rather than as a reporting duty with a sanction bolted on. The conditions for placing, making available or exporting are cumulative: deforestation-free, legally produced in the country of production, and covered by a due diligence statement. Fail any one of them and the transaction is not one the regulation permits, whatever anybody is prepared to pay for the goods.
For an operator, that is the whole exposure in a sentence: the shipment does not have a lawful path onto the EU market. For a business further down the chain, the same fact reaches you as a supply interruption rather than as a legal problem of your own.
What does this page refuse to tell you, and why?
The fine.
Every regulation of this kind attracts secondary write-ups that quote a maximum penalty, often as a percentage of EU turnover. We have not verified EUDR's penalty provisions against the primary text, and our standing rule is that a claim we have not read in the source does not go on the page, hedged or otherwise. So: this page does not state a fine level, a percentage of turnover, a confiscation power or a public-listing sanction, because we have not confirmed any of them.
If you need that answer, read it at the source rather than through us or through anybody else's summary. The consolidated text of Regulation (EU) 2023/1115 is published on EUR-Lex, and the current amending act is Regulation (EU) 2025/2650 of 19 December 2025, which replaced Article 38 in full and made a number of other structural changes. The European Commission also maintains its own EUDR page.
That is a shorter answer than most pages on this subject give you. It is also the only one we can stand behind, and the alternative is a number you would then plan around.
Which parties can actually be in default?
Not everyone in the chain, and the December 2025 amendment changed this materially. What follows is the obligation set, which is the thing a default is measured against.
| Party | The obligation that can be missed | What non-compliance looks like in practice |
|---|---|---|
| Operator | Full due diligence, plus a due diligence statement filed in the EU information system | No statement, or a statement not supported by geolocation and legality evidence |
| Downstream operator | No due diligence statement at all, and no duty to ascertain that due diligence was exercised | Very little. This is the point of the category |
| Downstream operator or trader above SME size | Registration in the EU information system before placing products on the market | Trading while unregistered |
| First downstream operator or trader in the chain | Collect and keep the due diligence statement reference numbers or declaration identifiers | Numbers received and discarded, or never captured at goods-in |
The second row is the one worth rereading. Regulation (EU) 2025/2650 states expressly that downstream operators and traders are not required to submit due diligence statements or to ascertain that due diligence was exercised. A great many EU manufacturers have been quoted enforcement risk against an obligation that, since December 2025, they do not have.
When can any of this bite?
Not yet, and the date is the single most misreported fact about this regulation.
The relevant articles apply from 30 December 2026, and from 30 June 2027 for operators who are natural persons or micro or small undertakings established as such by 31 December 2024, except for products that were covered by the Annex to the old EU Timber Regulation. Before those dates there is nothing to enforce.
That matters for an enforcement page specifically, because the two superseded application dates, 30 December 2024 and 30 December 2025, are still all over the web. If you have been told you are already exposed, check which date the source was written against. The Commission's simplification review of 4 May 2026 declined to move the current date again, so 30 December 2026 is the position to plan on.
What is the failure that actually costs money?
It arrives from a customer, months before any authority is involved.
The first downstream operator or trader in a chain has to collect and keep the reference numbers of the due diligence statements, or the declaration identifiers. That obligation is only satisfiable if the party upstream provides them. So the practical enforcement mechanism in this regulation is commercial: your customer needs a number from you, cannot lawfully do without it, and will find a supplier who has one. The same is true one step further up when you are the one asking.
The second real cost is timing. An operator's file rests on the geolocation of plots of land and evidence of legal production in the country of production. That information comes from counterparties, sometimes several tiers away and in a different growing season. A company that discovers on 30 December 2026 that it is an operator rather than a downstream operator has a sourcing problem, not a paperwork problem.
What should you do about exposure you cannot size?
Reduce the uncertainty you can control, and stop spending on the parts you cannot.
Establish your role in writing. Operator, downstream operator or trader, per product line, with the reasoning and the date. Most of the anxiety about penalties in this file dissolves once a company discovers it is downstream.
Capture reference numbers now. If you are or might be the first downstream party, make the goods-in process retain the reference numbers before the volume arrives. It is a small change to a purchase order template and an expensive one to retrofit.
Do not budget against the pending Annex I amendment. A delegated regulation adopted on 13 July 2026 would change the product list. It had not cleared the Parliament and Council scrutiny period on 28 August 2026 and it is not in force. Planning either way on it is planning on nothing.
Does any of this need carbon accounting?
No. This is worth saying on a penalties page because the two budgets often get merged.
EUDR requires geolocation, legality evidence, risk assessment and risk mitigation, and a due diligence statement. It does not require a greenhouse gas inventory, a product carbon footprint or a land-use emissions calculation, and no penalty in it can be triggered by not having one. If a proposal in front of you bundles deforestation compliance with an emissions platform, the two are separable and should be priced separately.
The genuine overlap is data, not obligation: the ingredient-level supplier and origin records behind a deforestation file are the same records that let you replace generic emission factors with defensible ones. If that second job is the one you actually need, it is scope 3 consulting or a first inventory on the Hedgehog platform, which reports 5,000+ users. One limitation to weigh before you assume the audit trail transfers: a mid-market reviewer on G2 in July 2026 noted that applied conversion factors and distance calculations are not exposed to the user, so a customer cannot always trace how an input became an entry. An evidence file for a legal prohibition has different traceability needs from an emissions figure, and it is better to know that at the start. For what a large customer may and may not demand of you alongside all this, see the value chain cap on ESG questions.
Sources: Regulation (EU) 2023/1115 and Regulation (EU) 2025/2650 as published in the Official Journal, the European Commission EUDR page, and COM(2026) 191 final of 4 May 2026. No penalty level is stated on this page because none was verified in this round. Hedgehog facts from the Hedgehog platform and Hedgehog on G2. Verified 28 August 2026.
Facts on this page were last verified on 2026-09-17.
