EUFLR readiness has two distinct but interconnected dimensions: response readiness and preparedness. Response readiness refers to the processes, teams, timelines, and workflows needed to handle investigations quickly and credibly. Preparedness refers to a forced-labour-sensitive due diligence system and the product-level evidence to support it.
Companies that focus exclusively on one dimension without the other will be under-prepared. A strong investigation response without underlying due diligence will lack credibility with authorities. Equally, a robust due diligence system without clear response procedures will fail to mobilise effectively when a trigger arises.
Enforcement: trigger, investigation, and consequences
The EUFLR creates a two-stage investigation system, supported by an EU-level portal, a risk database, and cooperation between the Commission and Member State authorities. Understanding how this system works, and where it differs from other forced-labour regulations, is essential for any company seeking to manage its exposure effectively.
Triggers: what starts an investigation
Investigations can begin reactively, through submissions made via the EU's single information submission point by any natural person, NGO, or civil society organisation; or proactively, based on the risk-based prioritisation mechanism built into the regulation, drawing on a forced-labour risk database.
In practice, LRQA expects reactive triggers, particularly from NGOs and civil society, to be the most common. Drawing on the experience of the German Supply Chain Due Diligence Act (LkSG), NGOs and civil society actors were prepared to submit grievances and cases to authorities, and a similar pattern is expected for the EUFLR once the portal is operational.
That said, not every submission will result in an investigation. Authorities retain significant discretion over which cases to pursue, based on factors including the severity and scale of potential forced labour, the volume of products on the EU market, and the proportion of the supply chain affected. In practice there may be a large number of triggers submitted, but only a few will initiate an investigation, because authorities have considerable decisional power over whether to proceed.
Who is most at risk of being triggered?
While the EUFLR applies across all sectors and supply chains, certain industries and commodities carry heightened exposure based on existing forced-labour risk profiles. Drawing on established frameworks, including the US UFLPA entity list and the US Department of Labor's List of Goods Produced by Child Labor or Forced Labor, key high-risk sectors include aluminium, apparel, cotton, PVC, solar and seafood.
Within the EU, sectors such as food production and agriculture carry elevated risk of forced labour in domestic supply chains and may be early targets for Member State-led investigations. However, EUFLR's global scope extends risk identification well beyond these established categories. LRQA's EiQ platform provides a data-driven risk identification layer that helps organisations map where their supply chains intersect with known forced-labour risk geographies and commodities.
The preliminary investigation phase
The preliminary investigation is the first formal stage after a trigger is accepted. The authority's objective at this stage is to assess whether a substantiated concern exists, that is, whether there is reasonable indication that a product was made with forced labour. This is not yet a finding of violation; it is a threshold determination.
Companies typically have 30 working days to provide information. This response window is tighter than many organisations realise, particularly where documentation is scattered across business units or supply chain systems. The ability to mobilise adequate evidence quickly is a decisive factor in whether a case escalates to formal investigation.
This phase represents a genuine opportunity. Companies can use this stage to engage, cooperate, and demonstrate their overall due diligence and forced-labour-specific processes. Critically, if a company can show that a forced-labour case has already been identified and remediated, the authority may conclude there is no substantiated concern and close the matter at this stage.
The formal investigation phase
If a substantiated concern is established, the case moves to formal investigation. The nature of the information requested changes significantly at this stage. Where the preliminary phase focuses on general due diligence systems and processes, the formal investigation requires highly specific, product-level evidence.
Companies will need to demonstrate product-to-site linkage, identify the specific manufacturer and upstream suppliers involved, and trace the product down the supply chain. This is precisely where gaps in supply chain visibility, common beyond first- and second-tier suppliers, become acutely problematic.
The formal investigation typically carries a 30-60 working day response window, with authorities aiming, though not required, to conclude within approximately nine months. Possible outcomes include a ban on placing or exporting the product, mandatory withdrawal from the market, disposal, or, for certain critical products, temporary withholding. Decisions will be published on the EU portal.
Business impact of a violation decision
The direct financial and operational impact of a violation decision under EUFLR is more contained than under the UFLPA, but reputational exposure is significant and sector-specific impacts can be severe.
A key distinction is that a violation finding attaches to a specific product and batch, not to the company as a whole or to all of its products. To illustrate this lets look at an example: if a factory produces a spoon that is found to be made with forced labour, a ban applies to that spoon; a whole new investigation would need to be conducted to establish that the same factory's fork is also in violation. This limits the immediate reputational risk, though LRQA expects related cases to proceed more quickly once a precedent has been established.
That said, product shelf-life is a critical variable. For perishable goods or products with short shelf lives, a prohibition on sale may arrive too late to enable any meaningful withdrawal. Still, reputational damage is a near-certain consequence regardless of product type; for online, direct-shipping business models, the commercial implications may be particularly acute.
