CSRD Reporting in Portugal: Guide for Portuguese SMEs

Introduction

Portugal’s economy is built on small and growing businesses (SMEs). From family wine estates in the Douro Valley to logistics firms along the A1 corridor and independent manufacturers in the Aveiro industrial belt, most Portuguese companies employ fewer than 250 people. Yet even these businesses are now feeling the effects of the EU’s Corporate Sustainability Reporting Directive (CSRD) — not always through a direct legal obligation, but through their clients, banks, and public procurement routes.

CSRD requires large companies across the EU to disclose detailed environmental, social, and governance (ESG) information. When a large company reports, it must also account for impacts across its supply chain — which means its Portuguese SME suppliers are asked for data too. Understanding what applies to your business, and how to respond, is the first practical step.

This guide explains how CSRD was brought into Portuguese law, what the 2026 timeline delays mean for your business, and how the voluntary VSME Standard (developed by EFRAG for non-listed SMEs) gives smaller businesses a clear, proportionate path to reporting.

How CSRD Became Portuguese Law

Portugal transposed the earlier Non-Financial Reporting Directive (NFRD) into national law via Decreto-Lei 89/2023. When CSRD (Directive 2022/2464/EU) replaced the NFRD, Portugal was required to update its legislation to bring the new, broader requirements into force.

CSRD transposition in Portugal was completed through Decreto-Lei nº 40/2024 of 14 June 2024, which brought CSRD requirements into Portuguese company law. The Comissão do Mercado de Valores Mobiliários (CMVM), Portugal’s securities market regulator, oversees sustainability disclosures for listed companies, while the Ordem dos Revisores Oficiais de Contas (OROC) is responsible for assurance standards.

Portuguese companies in scope must publish their sustainability report as part of the management report (relatório de gestão), following the European Sustainability Reporting Standards (ESRS). These are the 12 mandatory standards that cover environmental, social, and governance topics in detail.

CSRD Timeline and Deadlines for Portuguese Businesses

CSRD rolls out in waves, and recent EU-level changes have pushed back several key deadlines. Here is where Portuguese businesses stand as of 2026.

The 2026 Omnibus package — sometimes called the “Stop-the-Clock” regulation — was the EU’s response to concerns about compliance costs and complexity. It pushed Wave 2 back by two years (to FY 2027) and Wave 3 back by two years (to FY 2028), giving businesses more time to prepare without changing the underlying requirements.

For most Portuguese SMEs, these delays mean there is no immediate legal obligation to report under CSRD. However, the commercial pressure from large clients and financial institutions is already here and is not paused by Omnibus.

What This Means for Portuguese SMEs Not in Direct Scope

Even if your business sits below the CSRD thresholds, you are likely already being asked for sustainability information. Large companies in Portugal — and the multinational buyers your business may supply — are required to disclose sustainability data across their entire value chain. That means they will ask you for it.

The typical requests Portuguese SMEs receive include:

• Energy consumption in MWh and greenhouse gas emissions (Scope 1 and Scope 2)
• Waste volumes and recycling rates
• Workforce metrics: headcount, gender breakdown, training hours, and accident rates
• Anti-corruption and business conduct policies

Banks and financial institutions in Portugal are also under pressure from the European Banking Authority (EBA) to gather ESG data from their SME lending customers. Access to credit, loan conditions, and public procurement scores are increasingly tied to your ability to provide basic sustainability information. See how banks are assessing SME sustainability risk.

The practical takeaway: even if CSRD does not legally apply to your business today, your clients and lenders may well require VSME-aligned data before the end of 2026.

The Two Paths: CSRD and VSME

Portuguese businesses face two distinct situations, and it helps to be clear about which applies to you.

Path 1: CSRD (Mandatory, for larger businesses)

If your company meets two of the three thresholds — more than 250 employees, more than €40 million in annual turnover, or more than €20 million in total assets — CSRD reporting under the ESRS standards is mandatory (from FY 2027 under Wave 2). You will need a full double materiality assessment, ESRS-aligned disclosures across all material topics, and independent limited assurance.

Path 2: VSME (Voluntary, for non-listed SMEs)

The VSME Standard, published by EFRAG in 2024, is designed specifically for non-listed SMEs that choose to report voluntarily — or need to respond to client and bank data requests. It has two modules:

• Basic Module — covers 11 key disclosures including energy, GHG emissions, waste, workforce, and business conduct. It uses data that most businesses already have (utility bills, payroll, invoices).
• Comprehensive Module — adds nine further disclosures for businesses with more complex supply chains or ESG-focused investors.

For most Portuguese SMEs, the VSME Basic Module is the right starting point. Learn exactly what the VSME Basic Module requires.

How Portuguese SMEs Can Prepare: Practical Steps

Getting started does not require expensive consultants or enterprise software. The following steps are proportionate and achievable for a small team.

Step 1: Understand whether you are in scope

If you have <250 employees, <€40m turnover, and <€20m total assets, you are not directly in scope for mandatory CSRD. But check whether your clients or lenders are asking for data — many already are.

Step 2: Gather your baseline data

Start with what you already have. Your electricity and gas bills give you energy consumption. Your fuel purchase records give you vehicle emissions. Your HR system gives you headcount and training data. For most Portuguese SMEs, 80% of the VSME Basic Module data can be pulled from existing records within a few days.

Step 3: Complete a simple materiality check

The VSME does not require a full double materiality assessment, but it does ask you to consider which sustainability topics are most relevant to your business. A wine producer will prioritise water use and biodiversity; a logistics firm will prioritise fleet emissions; a manufacturer will focus on energy intensity and waste.

Step 4: Prepare a brief sustainability statement

Even a two- to four-page document covering the VSME Basic disclosures is enough to satisfy most client questionnaires and bank requests. You do not need a glossy report — you need structured, consistent data.

Step 5: Build a repeatable process

The real time saving comes from setting up simple tracking now, so next year’s data collection takes hours rather than days. A shared spreadsheet, updated monthly, is a reasonable starting point for most small businesses.

Which Portuguese Sectors Face Earliest Pressure

Some sectors in Portugal are experiencing stronger and earlier pressure than others, due to the profile of their large-company clients and buyers.

Tourism and Hospitality

Portugal’s tourism sector is central to the national economy. Hotels, tour operators, and restaurants increasingly find that international travel companies, event organisers, and corporate clients require sustainability data as part of procurement. Energy use, food waste, and water consumption are the most common requests. See the CSRD guide for hospitality businesses.

Wine, Agriculture, and Food Production

Portuguese wine producers and agri-food businesses supply major European supermarkets and distributors, many of whom are now in Wave 1 or Wave 2 CSRD scope. This creates direct supply-chain pressure for smallholders and cooperatives to provide data on water consumption, biodiversity impact, pesticide use, and packaging waste. Read about CSRD for agriculture and food businesses.

Manufacturing

The industrial clusters in Braga, Aveiro, and Setúbal include many SME manufacturers supplying automotive, textile, and electronics companies that are in CSRD scope. These buyers typically send formal supplier questionnaires asking for energy, waste, and workforce data — sometimes with contract renewal conditions attached.

Logistics and Transport

Portuguese logistics firms operate across Iberia and into wider Europe, serving clients who are under CSRD obligations. Fleet emissions (Scope 1), purchased energy at depots (Scope 2), and subcontractor emissions (Scope 3) are the data points most frequently requested. The VSME Basic Module covers the core disclosures needed to respond.

Frequently Asked Questions

When does CSRD actually apply to my Portuguese business?

If your business has more than 250 employees or meets two of the three financial thresholds (€40m+ turnover or €20m+ balance sheet), mandatory CSRD reporting begins for financial year 2027 — reports published in 2028. Listed SMEs start for FY 2028. Most Portuguese SMEs are not directly in mandatory scope, but supply chain data requests from clients arrive well before any legal deadline. Check the full CSRD timeline by country.

Do Portuguese SMEs need to report in Portuguese or English?

There is no EU requirement to report in a specific language. Portuguese businesses in mandatory scope typically report in Portuguese for domestic regulatory purposes. For international clients and banks, an English-language summary is recommended. The VSME Standard itself is available in English, and EFRAG publishes guidance in multiple EU languages.

What is the easiest way for a Portuguese SME to start?

Start with the VSME Basic Module. It requires 11 disclosures that use data most businesses already track — energy bills, HR records, and waste invoices. Most small businesses can complete a first-year VSME Basic report with a few days of focused effort, without hiring an external consultant. The key is starting with a clear data template and building the habit of monthly data capture.

My large client is asking for CSRD data — what should I send them?

Respond using the VSME Basic Module format. Cover your energy consumption (in MWh), Scope 1 and Scope 2 emissions, workforce headcount and safety data, and your anti-corruption policy. This structured format is compatible with what your client needs for their own ESRS disclosures. Read the guide on responding to large client data requests.

Key Terms

• CSRD — Corporate Sustainability Reporting Directive (Directive 2022/2464/EU). The EU law requiring large companies and listed SMEs to disclose sustainability information annually.
• VSME — Voluntary Sustainability Reporting Standard for non-listed SMEs, developed by EFRAG and published in 2024. Proportionate and accessible for small businesses.
• ESRS — European Sustainability Reporting Standards. The 12 mandatory reporting standards that large companies must follow under CSRD.
• EFRAG — European Financial Reporting Advisory Group. The body that developed both the ESRS and the VSME Standard.
• Wave 2 — The second phase of CSRD, covering large non-PIE companies. Now applies from FY 2027 following the Omnibus delay.
• Wave 3 — The third phase, covering listed SMEs. Delayed to FY 2028.
• Scope 1 emissions — Direct greenhouse gas emissions from sources your business owns or controls (e.g. company vehicles, on-site combustion).
• Scope 2 emissions — Indirect emissions from purchased electricity or heat.
• Double materiality — The CSRD process for assessing both financial risks from sustainability issues and your company’s impacts on people and the environment.
• CMVM — Comissão do Mercado de Valores Mobiliários. Portugal’s securities regulator, overseeing sustainability disclosures for listed companies.
• Omnibus — The 2026 EU legislative package that delayed CSRD Wave 2 to FY 2027 and Wave 3 to FY 2028.

Conclusion and Next Steps

Portuguese small and growing businesses are well placed to meet sustainability reporting expectations — many already track the data they need. The regulatory deadlines have moved, but the commercial pressure from clients and lenders has not. Starting with the VSME Basic Module gives your business a structured, proportionate way to respond to today’s requests and build towards tomorrow’s requirements.

With a clear process and consistent data collection, sustainability reporting becomes an asset rather than a burden — improving your position in supply chains, strengthening relationships with banks, and building long-term credibility.

Use the readiness quiz below to see where your business stands and get a personalised starting point.