ESG standards are non-financial benchmarks used to measure how a company manages its environmental impact, treats the people it affects, and governs itself. They show up in three places at once: as voluntary reporting frameworks companies use to structure disclosures, as government rules that in some jurisdictions turn those disclosures into legal obligations, and as scoring systems private agencies sell to investors. No single body owns the term, which is part of why the rules feel unsettled and why the same company can look responsible under one standard and irresponsible under another.
What the Three Pillars Measure
The environmental pillar looks hardest at greenhouse gas emissions, which the GHG Protocol splits into three scopes. Scope 1 is direct emissions from sources the company owns or controls, such as factory smokestacks or company vehicles. Scope 2 covers indirect emissions from purchased energy — electricity, steam, heating, or cooling. Scope 3 captures everything else across the value chain, from raw materials the company buys to how customers dispose of the finished product.1GHG Protocol. FAQ Scope 3 is usually the largest share of a company’s footprint and the hardest to measure, because the data lives with suppliers and customers. Environmental criteria also cover water use, hazardous waste, recycling, renewable versus fossil fuel energy, biodiversity, deforestation, and energy efficiency.
The social pillar looks at how a company treats employees, suppliers, customers, and surrounding communities. Evaluators examine fair wages, working conditions, the absence of forced labor, and the strength of diversity and inclusion programs. Workplace safety carries weight, measured through injury rates, safety training, and compliance with federal occupational safety standards.2eCFR. 29 CFR Part 1910 – Occupational Safety and Health Standards Data privacy, consumer protection, pay equity, and community investment round out this pillar.
Governance covers the internal rules that control how the company is run. Evaluators look for a meaningful share of independent directors on the board, executive pay tied to measurable performance rather than guaranteed, and an audit committee that operates free of management influence. Anti-bribery policy is a required element, and for companies operating abroad the Foreign Corrupt Practices Act prohibits paying or promising anything of value to foreign officials to win or keep business.3U.S. Department of Justice. Foreign Corrupt Practices Act Unit The same law requires publicly listed companies to maintain accurate books and records and an adequate system of internal accounting controls.4International Trade Administration. U.S. Foreign Corrupt Practices Act
Two governance mechanisms sit close to the reader’s practical concerns. Under the Sarbanes-Oxley Act, an employer cannot fire, demote, suspend, threaten, or otherwise discriminate against an employee for reporting suspected securities fraud, SEC violations, or other fraud against shareholders to a federal agency, a member of Congress, or a supervisor. Employees who prove retaliation are entitled to reinstatement, back pay with interest, and compensation for litigation costs and attorney fees.5United States Department of Labor. Sarbanes Oxley Act (SOX) Separately, SEC Rule 10D-1 requires every listed company to maintain a written policy for clawing back incentive-based pay from current or former executives when the company restates its financials. The policy must cover compensation received during the three years before the restatement, and the recoverable amount is whatever exceeds what the executive would have earned under corrected numbers.6SEC.gov. Recovery of Erroneously Awarded Compensation
Who Writes the Standards
Several organizations produce the frameworks companies actually use, and they overlap.
The Global Reporting Initiative (GRI) produces the most widely used sustainability reporting standards in the world, designed so any organization can report on its impacts on the economy, environment, and people in a comparable way.7Global Reporting Initiative. GRI – Standards
The Sustainability Accounting Standards Board (SASB) took an industry-specific approach, focusing on sustainability issues most likely to affect a company’s cash flows, financing, or cost of capital.8IFRS. Understanding SASB Standards In 2021, the IFRS Foundation created the International Sustainability Standards Board (ISSB) to pull the fragmented voluntary frameworks — SASB, the Climate Disclosure Standards Board, and the Task Force on Climate-related Financial Disclosures (TCFD) — into a single global baseline. The ISSB issued its first two standards, IFRS S1 and IFRS S2, in June 2023.9IFRS. The Need for a Global Baseline for Capital Markets Starting in 2024, the IFRS Foundation formally took over the TCFD’s monitoring responsibilities, since the ISSB Standards fully incorporate the TCFD recommendations.10IFRS. IFRS Foundation Welcomes Culmination of TCFD Work and Transfer of Monitoring Responsibilities
What Companies Are Legally Required to Disclose
The legal picture has moved considerably in the last two years, and in different directions.
United States
In March 2024, the Securities and Exchange Commission adopted rules requiring public companies to disclose material climate-related risks, their effect on business strategy, board oversight of those risks, and, for large accelerated and accelerated filers, Scope 1 and Scope 2 emissions with third-party assurance.11U.S. Securities and Exchange Commission. SEC Adopts Rules to Enhance and Standardize Climate-Related Disclosures for Investors The rules were challenged in court. The SEC stayed them during litigation, and in March 2025 the Commission voted to withdraw its defense entirely, stating it would no longer authorize attorneys to advance arguments in support of the rules.12U.S. Securities and Exchange Commission. SEC Votes to End Defense of Climate Disclosure Rules There is currently no binding federal climate disclosure mandate for U.S. public companies. Companies may still follow ISSB or TCFD frameworks voluntarily, and many do.
European Union
The Corporate Sustainability Reporting Directive (CSRD) requires covered companies to disclose detailed information on their environmental and social impacts, including target-setting and transition plans.13European Commission. Corporate Sustainability Reporting The scope has narrowed. In February 2026, the Council of the EU signed off on an “Omnibus I” simplification package that limits the CSRD to companies with more than 1,000 employees and net annual turnover above €450 million, well above the original thresholds.14Council of the European Union. Council Signs Off Simplification of Sustainability Reporting and Due Diligence Requirements to Boost EU Competitiveness Many mid-sized firms that would have been covered under the original directive are now exempt.
How ESG Ratings Work and Why They Disagree
Private rating agencies such as MSCI and Sustainalytics evaluate companies and sell scores that institutional investors use to build portfolios, screen out certain stocks, or compare peers. Agencies collect data from sustainability reports, regulatory filings, and legal records, and some also run automated web-crawling tools and news sentiment analysis to catch real-time controversies.15Sustainalytics. Methodology Abstract ESG Risk Ratings – Version 3.1 The final score depends on how the agency weights each category for the industry: an oil company’s environmental score matters more than a software firm’s, while a social platform’s data privacy performance can dominate its social score.
Ratings from different agencies often disagree, sometimes sharply. Academic research finds correlations between major ESG rating providers average about 0.54, with some pairs as low as 0.38. A company in the top 10 percent at one agency can land below average at another. Governance shows the widest divergence, with correlations averaging around 0.30. This is unlike credit ratings, where the major agencies tend to line up closely. Anyone acting on a single ESG score should treat it as one opinion, not a settled measurement.
ESG and Retirement Plan Investments
For employers and plan administrators running 401(k) or pension funds, ESG runs into federal fiduciary duties under ERISA. The question is whether fiduciaries can factor ESG criteria into investment selections for participants’ retirement savings.
In November 2022, the Department of Labor finalized a rule stating that fiduciaries may consider climate change and other ESG factors when they are reasonably relevant to risk and return. The rule kept the underlying principle intact: a fiduciary cannot sacrifice returns or accept more risk to pursue goals unrelated to plan benefits. Under a tiebreaker provision, if two investments equally serve the plan’s financial interests, the fiduciary may pick the one with additional ESG benefits without special documentation.16U.S. Department of Labor. Final Rule on Prudence and Loyalty in Selecting Plan Investments and Exercising Shareholder Rights
That rule’s future is unsettled. In May 2025, the Department of Labor withdrew its defense of the rule in ongoing litigation brought by a coalition of state attorneys general and announced new rulemaking. Until new guidance is finalized, fiduciaries face legal ambiguity about how to incorporate ESG considerations. The safer course is to ground every investment decision in a documented risk-and-return analysis, whether or not the investment carries an ESG label.
How ESG Requirements Reach Smaller Companies
A company with no public reporting obligations can still be pulled into ESG through its customers and its lenders. When a large public company commits to reporting Scope 3 emissions, it needs carbon data from its suppliers. Large buyers now often require vendors to track and submit environmental performance metrics as part of purchase agreements, similar to how they require standardized invoices or quality certifications. Some large retailers tie payment speed to supplier compliance with sustainability data requests, paying compliant vendors faster. Technology companies have begun requiring select high-volume suppliers to commit to 100 percent carbon-free electricity by specific target dates.
ESG also surfaces in commercial lending. Sustainability-linked credit agreements tie loan pricing to performance targets, requiring the borrower to report on indicators such as greenhouse gas reductions, water savings, renewable energy use, or workforce diversity. The borrower typically delivers an annual certificate documenting progress, and a third-party auditor may verify the numbers. For small and mid-sized businesses seeking financing from major banks, basic ESG data reporting has become part of the loan process.
Legal Risk of Overstating ESG Performance
Companies that oversell their ESG performance can face regulatory enforcement and private litigation. The SEC has brought cases against firms for materially misleading statements about ESG controls and products. A Deutsche Bank subsidiary agreed to pay a $19 million civil penalty for misrepresenting its ESG integration processes. Activision Blizzard agreed to pay $35 million for failing to maintain controls that would collect and analyze employee complaints of workplace misconduct, a failure tied directly to the social pillar.17U.S. Securities and Exchange Commission. SEC Announces Enforcement Results for Fiscal Year 2023
Private plaintiffs have followed. Shareholders have filed securities class actions alleging that companies failed to disclose financial risks tied to their diversity or sustainability commitments, and ERISA fiduciary duty claims have been brought against employers whose plan investment decisions allegedly put ESG goals ahead of participants’ financial interests. If a company makes specific ESG commitments in its public filings, it can be held accountable through regulatory fines, shareholder lawsuits, or both when those commitments prove inaccurate.
State Laws Restricting ESG
While international bodies push toward more disclosure, roughly 20 state legislatures have moved the other way, enacting laws that restrict or prohibit the use of ESG factors in managing public pension funds. More states are considering similar legislation. The laws generally fall into two categories. Some prohibit state retirement systems from considering any “non-pecuniary” factors in investment decisions. Others take aim at financial institutions that “boycott” specific industries such as fossil fuels or firearms, restricting state business with those firms.
The practical result is a patchwork of conflicting rules. A financial institution managing assets for public pension funds in multiple states may face pressure to integrate ESG factors under one state’s framework and a ban on doing so under another’s. Companies, investors, and plan administrators working across state lines need to read the specific rules in each jurisdiction where they manage or hold assets.