1. Which Companies Should Budget for SB 261?
Check coverage before funding a disclosure project. Health and Safety Code § 38533 considers the entity’s formation, business activity, and prior-year revenue. Insurance exclusions and consolidated reporting may reduce the work required.
Check the Coverage Tests
- Confirm the entity was formed under U.S. .ederal or state law.
- Assess its business activities within the state.
- Check prior-fiscal-year revenue exceeding $500 million.
Document the entity-level assessment rather than relying on a corporate group’s public profile. A regulatory compliance review can test those assumptions.
Examine Insurance Exclusions and Groups
The statute excludes entities regulated by the state insurance department or in the insurance business elsewhere. A covered subsidiary may rely on a parent-level consolidated report. Verify which entities it covers before assigning costs.
2. What Must the Climate Risk Report Address?
The report addresses material financial exposure from physical and transition risks and measures adopted to address them. It is not an emissions inventory. SB 253 establishes a separate greenhouse gas reporting program.
Link Risks to Business Finances
- Review physical risks affecting facilities, employees, and supply chains.
- Assess transition risks affecting demand, investments, or financing.
- Describe measures already adopted to address identified risks.
Existing ESG disclosure records may support the analysis, but their scope must match the reporting requirements.
Identify Framework and Disclosure Gaps
Section 38533 refers to TCFD recommendations and permits qualifying equivalent frameworks, including ISSB standards. If disclosures remain incomplete, explain the gaps and steps toward completion. Compare existing reports before paying to rebuild them.
3. What Costs Should Businesses Actually Plan for?
The statute sets no standard consulting price or total compliance budget. Costs reflect existing records, covered entities, and reporting gaps. Separate annual regulatory fees from staff and adviser expenses.
Separate Statutory Fees from Preparation Costs
| Cost Area | What to Assess |
|---|---|
| Annual regulatory fee | Section 38533 provides for fees based on reasonable program costs; verify current implementation. |
| Internal review | Finance, operations, risk analysis, and approval time. |
| External support | Legal review or technical advisers for identified gaps. |
Annual regulatory fee
- What to AssessSection 38533 provides for fees based on reasonable program costs; verify current implementation.
Internal review
- What to AssessFinance, operations, risk analysis, and approval time.
External support
- What to AssessLegal review or technical advisers for identified gaps.
Do not treat a proposed fee as an issued invoice. Confirm the applicable rule and payment instructions before budgeting a fixed amount.
Reduce Duplicate Reporting Work
Start with previously prepared risk registers, financial disclosures, and board materials. Check whether parent-level reports already cover subsidiaries and flag unsupported claims before publication. Related climate policy advisory work may help distinguish shared inputs from separate reporting duties.
4. How Does the Court Order Affect Compliance Costs?
The statute set January 1, 2026, as the first biennial reporting date. A November 2025 Ninth Circuit injunction paused enforcement pending appeal. CARB announced it would not enforce that deadline and offered voluntary submission.
Distinguish the Injunction from Repeal
- Monitor court developments and subsequent CARB announcements.
- Decide whether voluntary publication serves a business purpose.
- Review SB 253 duties separately; that program is not covered by this injunction.
Voluntary submissions are public. Review confidential business information before posting reports or docket materials.
Assess Penalties without Assuming Enforcement
Section 38533 caps administrative penalties at $50,000 per reporting year for covered reporting violations. CARB must consider compliance history and good-faith efforts. Enforcement remains subject to the appellate injunction while it is in effect.
5. How Can Companies Prepare without Overspending?
A limited readiness review can be more useful than launching a full reporting program immediately. It should identify existing evidence, information gaps, and decisions that depend on future agency action. Management can then authorize work in stages.
Assign Owners to Existing Records
- Identify teams responsible for climate and financial risk data.
- Preserve records supporting any proposed public statements.
- Record missing information and estimated effort to obtain it.
Use a single record of assumptions so finance, operations, and legal reviewers can evaluate the same information.
Review Decisions before Spending or Publishing
An attorney can review coverage, draft language, and voluntary publication risks. Revisit fee rules when CARB announces changes, and record decisions to proceed, defer, or narrow the project.
6. Frequently Asked Questions
Does SB 261 require notice after a data breach?
No. It addresses climate-related financial risk reporting. Customer data breach notifications arise under different privacy laws.
Can a privately held business be covered?
Yes. Public listing is not a statutory condition; formation, business activity, revenue, and applicable exclusions determine coverage.
Can a subsidiary rely on its parent's report?
Potentially. Section 38533 permits consolidated reporting, so companies should verify which subsidiaries are included.
Must a company publish voluntarily during the injunction?
No. CARB offers voluntary submission while the injunction remains in place. Reassess if the court or agency changes its position.
7. Discuss SB 261 Reporting Decisions with SJKP
SJKP’s attorneys can evaluate coverage, reporting gaps, and draft disclosures under the statute. Bring entity records, risk assessments, and budget questions to discuss a focused legal review.
16 Oct, 2026
