ESG is now a contract term, not a press release

For most mid-sized companies the first real ESG obligation does not arrive from a regulator. It arrives in a customer's supplier code, an audit right, or a disclosure clause slipped into a renewal. Those terms are enforceable in the ordinary way, which also means they are negotiable in the ordinary way. The pattern is the same whether the customer is a European manufacturer, a UK retailer, a US brand or a large listed Indian company: rules written for the customer are passed down the supply chain by contract, and the supplier ends up carrying obligations that no statute places on it directly. This note looks at where those obligations come from, how they enter a contract, and what an Indian supplier can and should negotiate before signing.

Where the obligation actually comes from

Very few ESG rules bind an Indian supplier directly, but many bind its customers, and customers comply by writing the rules into procurement contracts. In Europe, the Corporate Sustainability Reporting Directive requires in-scope companies to report on impacts across their value chain, the Corporate Sustainability Due Diligence Directive requires due diligence on human rights and environmental harms in supply chains, and Germany's Supply Chain Due Diligence Act has applied to large German companies since 2023, although the EU regimes have been subject to delays and scope changes under the EU's Omnibus simplification proposals. The EU's Carbon Border Adjustment Mechanism already requires importers of steel, aluminium, cement, fertilisers and certain other goods to obtain embedded emissions data from producers, which lands squarely on Indian exporters. In the UK, Section 54 of the Modern Slavery Act, 2015 requires larger businesses to publish an annual statement on slavery and trafficking in their supply chains, and in the US the Uyghur Forced Labor Prevention Act creates a presumption against goods linked to forced labour. At home, SEBI's Business Responsibility and Sustainability Reporting framework has required the largest listed companies to report on ESG performance and is being extended, in phases, to their value chains. In each case the supplier's obligation is contractual, but the pressure behind it is regulatory, which is why customers are often less flexible on these clauses than on price.

The supplier code you did not read

The operative ESG terms are rarely in the master agreement itself. They sit in a supplier code of conduct, a sustainability policy or a responsible sourcing standard that the agreement incorporates by reference, often with words such as as amended from time to time. Indian law generally gives effect to incorporation by reference where the intention to incorporate is clear, although the Supreme Court in M.R. Engineers and Contractors v. Som Datt Builders drew a line between a general reference to another document and a specific reference needed to import an arbitration clause, a distinction courts in the UK and Singapore also draw. The commercial risk is less about validity and more about content. A code that can be amended unilaterally lets the customer change the supplier's obligations without renegotiating price, and a code written for a multinational may require policies, certifications or reporting systems that a mid-sized supplier does not have. The practical fix is simple and routinely accepted: attach the version of the code that applies at signature, require notice and a reasonable implementation period for material changes, and state that changes which increase cost are to be discussed rather than imposed.

Audit rights, data requests and certifications

ESG clauses increasingly impose continuing information obligations rather than one-off promises. Customers ask for greenhouse gas emissions data to feed their own Scope 3 reporting, for evidence of labour and health and safety compliance, for sub-supplier lists, and for third-party certifications, and they reserve rights to audit the supplier's sites and records, sometimes without notice. Each of these is reasonable in principle and expensive in practice. The terms worth negotiating are the frequency and notice for audits, who pays for them, whether the customer may appoint its own auditor or must use an accredited third party, and what happens to the information collected. Audit and data clauses should sit alongside a confidentiality obligation that covers commercially sensitive information such as pricing, capacity and sub-supplier identities, and where the data includes information about individual workers, the supplier will need to consider its obligations under the Digital Personal Data Protection Act, 2023 before transferring it. A supplier that agrees to provide data it does not yet collect should also agree a realistic timetable, because a representation that cannot be met from day one is a breach waiting to be discovered.

When an ESG breach becomes a contract breach

The remedy provisions are where ESG language stops being aspirational. Many supplier agreements treat any breach of the supplier code as a material breach giving an immediate right to terminate, sometimes combined with an indemnity for losses the customer suffers, including regulatory penalties and reputational harm. Under Indian law, a termination right for material breach will generally be enforced as written, and a clause fixing a sum payable on breach is governed by Section 74 of the Indian Contract Act, 1872, under which the Supreme Court in Kailash Nath Associates v. Delhi Development Authority held that the innocent party can recover only reasonable compensation up to the stated amount, not the stated figure automatically. English courts apply the penalty test in Cavendish Square Holding v. Makdessi, and US courts generally ask whether a liquidated sum was a reasonable forecast of loss. A supplier should push for three things: a distinction between serious breaches, such as forced or child labour, which can justify immediate termination, and minor or technical breaches, which should carry a cure period; an indemnity limited to losses caused by its own breach rather than any ESG-related loss; and an express exclusion of indirect and reputational loss unless both sides agree otherwise.

The claims you make, not just the ones you accept

ESG exposure in contracts runs in both directions. Suppliers answering tenders routinely describe their own sustainability credentials, and those statements can become contractual representations. Under Indian law, a statement that induces a contract and turns out to be untrue can support rescission or damages as a misrepresentation under Section 18 of the Contract Act, and a statement made to consumers may also engage the Guidelines for Prevention and Regulation of Greenwashing or Misleading Environmental Claims issued under the Consumer Protection Act, 2019 in 2024. The UK Competition and Markets Authority's Green Claims Code and the US Federal Trade Commission's Green Guides apply comparable standards to environmental claims made in those markets. The safer practice is to treat every sustainability statement in a tender, a questionnaire or a marketing document as something the supplier may later have to prove: specific, supported by data, and qualified where the position is still developing. A claim such as carbon neutral or sustainably sourced is far easier to write than to evidence, and the contract will usually be read against the party that made it.