The EU Deforestation Regulation (EUDR) is not a sustainability aspiration. From late 2025, it is a trading requirement. Brands shipping cotton apparel, home textiles, or leather products into the EU must demonstrate that the commodities in their supply chain did not contribute to deforestation - and they must evidence this at the point of customs clearance.
Cotton was added to the EUDR commodity scope alongside cattle, soy, palm oil, cocoa, coffee, and wood. That inclusion makes this regulation directly relevant to every apparel brand sourcing from South Asia.
To comply with EUDR, a brand needs four things per shipment: farm-level or gin-level geolocation data for the cotton, a risk assessment showing the land wasn't deforested after December 31, 2020, a due diligence statement filed with the EU Information System before customs clearance, and five years of retained documentation. The hard part isn't intent - it's data. Cotton passes through several hands between farm and garment, and most brands sourcing through traditional agents don't have visibility past the CMT factory, let alone the gin.
What EUDR actually requires
The regulation requires brands to perform due diligence - not just certification - before placing regulated products on the EU market. Specifically:
- Collect geolocation data for the land where the commodity was produced (cotton gin location + farm polygon data where available)
- Collect a risk assessment demonstrating that the commodity was not produced on land deforested after December 31, 2020
- Submit a due diligence statement to the EU Information System before customs clearance
- Retain documentation for 5 years
The practical challenge for apparel brands
The challenge is not intent - most brands genuinely want to source sustainably. The challenge is data. Cotton passes through multiple hands between farm and finished garment: farmer → gin → yarn spinner → fabric mill → cut-make-trim factory → brand. Tracing that chain and obtaining geolocation data at the farm level requires cooperation from every link.
Brands that source through opaque intermediary agents - the traditional model - will struggle. The agent has no incentive to maintain this data and no infrastructure to collect it. The liability, however, sits with the brand at the point of EU customs entry.
The EUDR compliance checklist
Documentation you need to collect for each shipment:
- Country of origin for the cotton (not just the garment - the raw fibre)
- Gin/spinning mill location (GPS coordinates or verified address)
- Farm-level geolocation data or credible risk-based alternative evidence
- Risk assessment document (standardised form, filed before customs)
- Factory audit report (BSCI, SA8000, or equivalent) for every production facility
- Fabric mill certification (GOTS or GRS if organic/recycled claims are made)
- Due diligence statement reference number from EU IS
Timeline and what happens if you are not ready
Large and medium operators were originally required to comply from December 2024, with a phased extension pushing full enforcement into 2025 and 2026 depending on operator size and product category. Cotton-specific enforcement has followed the broader deforestation-commodity timeline, and customs authorities in major EU import ports - Rotterdam, Hamburg, Antwerp - are now actively checking due diligence statements at clearance, not just on audit. EUDR's implementation dates have shifted more than once since the regulation was first published, so treat the dates above as directional and verify the current enforcement timeline and operator-size thresholds directly against the European Commission's EUDR page before making a compliance decision based on this article alone.
The penalty structure is not symbolic. Non-compliant consignments can be held at the border, which for a fashion brand means missed delivery windows and cancelled retail commitments - often a larger commercial cost than the fine itself. Financial penalties in several member states are set as a percentage of the EU turnover generated by the non-compliant goods, with repeat non-compliance escalating to suspension of market access. National authorities also have the power to require product recall.
The practical risk is not usually a single catastrophic shipment failure - it is the slow accumulation of shipments that clear customs today because enforcement capacity has not caught up, followed by a retroactive audit that flags months of undocumented consignments at once.
The data gaps we see most often
Working through EUDR readiness assessments with brands, the same gaps recur:
- Fabric mills that source blended-origin cotton. A single yarn lot can combine cotton from several gins, sometimes several countries. Geolocation data has to be evidenced at the lot level, which means the mill needs traceability systems the brand cannot see or audit remotely.
- Agent-managed programmes with no fabric-level visibility. When a sourcing agent controls the fabric relationship, the brand often only knows the CMT factory, not the spinning mill or gin. That is the single most common blocker we find in EUDR readiness reviews.
- Recycled and blended fabrics assumed to be out of scope. Recycled cotton content still requires origin documentation for the recycled input under most current guidance - brands frequently assume recycled content is automatically exempt, which is not a safe assumption.
- Historical shipments with no retained documentation. The five-year retention requirement is retroactive in practice once an audit begins - brands need to start retaining this data now, even for shipments that clear without incident today.
Building EUDR data requirements into your sourcing contracts
The most durable fix is contractual, not procedural. Brands renegotiating factory and mill agreements in 2026 should build EUDR data delivery into the commercial terms directly - not as a side request that gets deprioritised when production schedules tighten.
Three clauses are worth adding to any new sourcing agreement: a requirement that the mill provides gin-level geolocation data for every fabric lot before shipment (not on request, by default), a right to audit the mill's traceability records on reasonable notice, and a liability allocation clause specifying what happens commercially if data later proves inaccurate. None of this is unusual by the standards of other regulated commodity industries - it simply has not been standard practice in apparel sourcing until now.
Factories and mills that already supply EUDR-regulated commodities in other sectors - coffee, cocoa, timber - often have this infrastructure built and can move quickly. Factories new to traceability requirements need longer lead time to build it, which is a legitimate factor in vendor selection going forward.
How TextilMarkt handles this
Every Tradio order runs through the TextilMarkt compliance engine. The system captures cotton origin at the point of fabric sourcing, stores gin and mill location data against the order, and generates the due diligence statement package automatically before shipment. Brands using TextilMarkt access their EUDR documentation in one click - not through an email chain to the factory.
For brands not yet on TextilMarkt: start collecting this data now. The regulation is not waiting for your onboarding timeline. Every shipment you send to the EU without this documentation is a customs liability.
If you need to assess your current exposure, request a sourcing audit. We can map your existing supply chain against the EUDR checklist and identify the data gaps before they become customs problems.
FAQ
Does EUDR apply to all cotton products, or just raw cotton?
It applies to finished products containing cotton, not just raw fibre - apparel, home textiles, and other cotton-containing goods entering the EU are in scope, not only bulk cotton shipments.
Is a GOTS or OEKO-TEX certificate sufficient for EUDR compliance on its own?
No. Those certifications evidence organic status or chemical safety, not deforestation-free land use. EUDR requires its own geolocation and risk-assessment documentation regardless of what other certifications a factory holds.
Who is legally liable if a factory provides false geolocation data?
The "operator" placing goods on the EU market - typically the brand or its EU-based importer of record - carries primary liability, even if the underlying data failure originated further up the supply chain. This is why verification, not just collection, of supplier-provided data matters.
Can a sourcing agent handle EUDR compliance on my behalf?
An agent can facilitate data collection, but the compliance obligation and liability remain with the brand. Any arrangement should include contractual data-sharing commitments and a clear audit trail, not a verbal assurance that "the factory has it covered."