What Should Your Corporation Know about Human Rights Due Diligence?

Corporations face mounting legal, financial, and reputational pressure to conduct human rights due diligence. Regulatory regimes in the European Union, California, and other jurisdictions now mandate or strongly encourage human rights impact assessments. Institutional investors increasingly screen portfolio companies for credible human rights programs, and failure to demonstrate a structured approach can affect access to capital. Supply chain disruptions, labor disputes, and environmental justice claims often trace back to inadequate pre-transaction or pre-engagement vetting. When a corporation enters a new market, acquires an asset, or partners with a supplier, the absence of documented human rights due diligence creates a procedural vulnerability. Corporate due diligence frameworks that integrate human rights considerations position your organization to defend its decision-making and demonstrate proportionate risk management to stakeholders.

Multiple overlapping legal regimes now touch on human rights due diligence obligations. In the United States, the Uyghur Forced Labor Prevention Act imposes import restrictions and mandatory supply chain vetting for certain goods. The California Transparency in Supply Chains Act requires large retailers and manufacturers to disclose efforts to address slavery and human trafficking. The Securities and Exchange Commission has proposed disclosure rules that will require public companies to report on labor practices and human rights governance. Internationally, the UN Guiding Principles on Business and Human Rights establish a widely adopted standard that corporations should conduct human rights due diligence as part of their responsibility to respect human rights. In New York and other U.S. .tates, corporate governance statutes increasingly permit boards to consider stakeholder interests, including labor and human rights impacts. Due diligence regulatory affairs specialists can help map which frameworks apply to your specific operations and transactions.

A credible human rights due diligence program follows a structured, documented sequence. The first step is scoping: identify which operations, geographies, suppliers, and business relationships pose the highest human rights risk. The second step is impact assessment: conduct interviews, site visits, and document reviews to understand current practices, worker grievances, and compliance gaps. The third step is remediation planning: develop written action plans with timelines and accountability measures. The fourth step is implementation and monitoring: assign responsibility for corrective actions and establish metrics to track progress. The fifth step is reporting and stakeholder engagement: communicate findings transparently to investors, regulators, and affected communities.

Documentation is the procedural linchpin. Courts and regulators will scrutinize whether your corporation maintained contemporaneous records of risk identification, the reasoning behind risk rankings, and the basis for remediation decisions. Create a central repository for due diligence files, including risk assessment matrices, consultant reports, correspondence with suppliers about compliance gaps, and evidence of corrective actions taken.

Failure to remediate is the procedural weakness that transforms a due diligence program from a shield into evidence of negligence. If your corporation identifies a violation during an audit and does nothing, regulators and plaintiffs will argue that the company knowingly tolerated the abuse. When violations are identified, document the remediation plan in writing, including specific actions, responsible parties, and target completion dates. Communicate the plan to the supplier or partner, and require written acknowledgment. Conduct follow-up audits to verify that corrective actions were implemented. If the supplier fails to remediate within the agreed timeframe, your corporation should consider suspending orders, increasing audit frequency, or terminating the relationship. A corporation that can produce a remediation file showing timely investigation, a written corrective action plan, follow-up verification, and documented escalation will have a much stronger defense against claims of negligence or complicity.

Reporting serves two audiences: internal stakeholders and external stakeholders, such as investors and regulators. Internal reporting should be detailed and candid, identifying risks, gaps, and remediation progress. External reporting should be transparent but strategic, disclosing material findings while framing your corporation's response and commitment to continuous improvement.

Maintain separate versions: a detailed internal audit file and a public-facing disclosure that meets regulatory requirements without revealing confidential supplier information. When reporting to regulators or in SEC filings, use precise language that describes your processes and findings without overstating control or making guarantees about future compliance. Use framing such as we have implemented a systematic assessment process that has identified and addressed material gaps rather than we have eliminated all human rights risks. This demonstrates that your corporation is taking human rights due diligence seriously and is committed to accountability.

Start by creating or updating your supply chain inventory and risk assessment matrix. Identify which suppliers, operations, and geographies fall into high-risk, medium-risk, and low-risk categories, and document the reasoning. If you have not yet conducted a human rights audit, prioritize high-risk suppliers and schedule assessments for the next 12 months. Ensure that all audit reports, remediation plans, supplier correspondence, and follow-up verification records are stored in a centralized, secure location with version control and access logs. Establish a policy that requires all findings, violations, and remediation decisions to be documented in writing within 30 days of discovery. Train your procurement, compliance, and operations teams on documentation requirements so that informal communications do not become the only record of important decisions. Preserve all communications with suppliers about compliance gaps, timelines for correction, and consequences for non-compliance. This documentation will be your primary evidence that your corporation acted with reasonable diligence and good faith.