EUDR Compliance Costs After Simplification: What the 75% Figure Actually Means for Your Budget

Two numbers are circulating in every EUDR budget conversation right now, and they are being conflated in ways that will cause real problems when finance teams start asking hard questions.

The first number is the Commission's aggregate estimate: annual EUDR compliance costs across all in-scope operators are projected to fall from approximately €8.1 billion to €2.0 billion - a reduction of roughly €6.1 billion, or about 75%, once all simplification measures are accounted for. That figure comes from Report COM(2026) 191 final, published on 4 May 2026 as part of the Commission's simplification review package. It is a macroeconomic modelling estimate, not an audited figure, and the Commission presents it as such.

The second number is the line item on your own compliance budget. Nobody receives a rebate. The €6.1 billion is a statistical aggregate across tens of thousands of operators spanning every commodity, every risk tier, and every supply chain role in the EU. Whether your programme costs more or less than it did before simplification depends entirely on where you sit in that distribution - and for a significant share of mid-size importers sourcing standard-risk commodities, the answer is: not much less.

This post is about money: where the saving went, what it left untouched, and how to build a cost model that will survive scrutiny from your CFO and your competent authority. For the legal detail on what the simplification package actually changed - the downstream operator category, the micro/small primary operator pathway, the simplified declaration - see our 2026 EUDR Simplification Package Explained post.

Where the €6.1 Billion Actually Went

The Commission's own report identifies three channels through which the saving is concentrated. Understanding them is the fastest way to calibrate how much of the aggregate reduction applies to your business.

Channel 1: Low-risk country sourcing (Article 13 simplified due diligence)

Under Article 13, operators sourcing from low-risk countries are not required to conduct a risk assessment or implement risk mitigation measures, unless new information indicates a risk of non-compliance. This is the single largest driver of the aggregate saving. The country benchmarking list published on 22 May 2025 classified approximately 140 countries as low-risk, including all EU Member States, the UK, the US, Canada, China, Japan, Australia and South Africa. According to one analysis, 51% of importing operators now qualify for simplified due diligence under Article 13, compared to the 20% projected in the original EUDR impact assessment.

The implication for cost is direct: if you source wood from Scandinavia or coffee from a low-risk origin, your risk assessment and mitigation burden is substantially reduced. If you source cocoa from Côte d'Ivoire or soy from Brazil - both standard-risk countries - you get none of this saving. Standard-risk countries, including Brazil, Indonesia and Malaysia, remain subject to full due diligence obligations under Articles 10 and 11.

Channel 2: Micro and small primary operators (one-time simplified declaration)

Micro and small primary operators established in low-risk countries can submit a one-time simplified declaration rather than a full due diligence statement for every shipment. This is a genuine structural relief for small-scale producers and importers who meet both conditions. The detail is covered in our EUDR for Micro and Small Businesses post.

Channel 3: Downstream operators (lighter duties)

The December 2025 revision created a formal downstream operator category. Downstream operators - those working with products already covered by an upstream operator's due diligence statement - have much lighter duties: they collect and pass on reference numbers rather than filing fresh statements. This removes a large volume of duplicative filing from the aggregate cost calculation.

The rule of thumb

The further upstream you sit and the higher the risk tier of your sourcing countries, the less of the €6.1 billion saving reaches you. A large importer of Brazilian soy or Indonesian palm oil, conducting full due diligence on hundreds of suppliers across standard-risk origins, should expect its cost profile to look much closer to the pre-simplification baseline than to the post-simplification aggregate.

The Cost Lines Simplification Did Not Touch

This is the section most budget conversations skip. The simplification package removed or reduced specific obligations. It left the following cost lines completely intact.

Geolocation collection. Operators must collect GPS coordinates of all plots of land where the relevant commodities were produced, regardless of the country risk tier. Low-risk status does not remove the geolocation requirement - it removes the risk assessment and mitigation step that follows. If your suppliers are smallholders across fragmented landscapes, the data collection challenge is unchanged.

Data cleaning and validation. Raw geolocation data from suppliers is rarely submission-ready. Coordinates need to be checked for format, accuracy, and overlap with deforestation alerts. This is an operational cost that scales with supplier count and plot complexity, not with risk tier.

The legality evidence file. The EUDR requires proof that products were legally produced in the country of origin - covering land tenure, environmental law, labour law, human rights, and other applicable areas. The cut-off date of 31 December 2020 and the deforestation-free test are unchanged by the simplification package, which means the underlying evidence burden for the deforestation-free and legality assessments is the same as it was under the original regulation.

Record retention. All documentation - geolocation files, supplier declarations, legality evidence, risk assessments - must be retained for five years. This is a storage and governance cost that does not diminish with simplification.

Supplier contract renegotiation. Many operators are embedding EUDR data-sharing obligations into supplier contracts. That legal and commercial work is unaffected by the simplification package.

Customs declaration alignment. HS codes in due diligence statements must match customs declarations. Standardising product coding across procurement, compliance, and logistics systems is an internal integration cost that simplification did not remove.

Internal ownership and training. Someone in your organisation needs to own EUDR compliance, understand the obligations, and keep pace with regulatory changes. That headcount or time cost is unchanged.

A Cost Model You Can Actually Defend

Rather than citing per-company benchmarks - which do not exist in any credible published form - the right approach is to identify the cost drivers for each spending bucket and size them against your own operational parameters. Here are the five buckets.

(a) One-off data acquisition and supplier onboarding

The primary drivers are: number of direct suppliers, number of production plots per supplier, commodity type (cocoa and coffee smallholder supply chains are far more fragmented than large-scale soy or palm), and the share of your supply that is already mapped with usable geolocation data. Companies starting from zero face a larger one-off investment than those with existing traceability programmes.

(b) Systems and integration

This covers the software or platform used to manage supplier data, run deforestation checks, and submit due diligence statements to the Information System. Costs vary enormously by company size and existing infrastructure. The Commission's Information System itself is free to use and now includes API specifications under Implementing Regulation (EU) 2026/1565, which entered into force on 17 July 2026, enabling automated submission for operators with the technical capacity to integrate.

(c) Recurring per-DDS operational cost

Once the initial supplier onboarding is complete, the ongoing cost per filing is driven by filing volume, the frequency of supply chain changes (new suppliers, new plots, new countries), and the degree of automation achieved. For downstream operators passing on reference numbers, this cost is minimal. For upstream operators filing full statements on standard-risk supply, it is the dominant recurring line.

(d) Assurance, audit and legal

This includes internal or external review of the due diligence system, legal interpretation of edge cases (re-imports, mixed-origin products, the relationship between EUDR and CSDDD), and any competent authority engagement. The Commission has confirmed it will not reopen the Regulation, so the legal framework is now stable - but interpretation questions remain live, particularly for complex supply chains.

(e) Risk provision

Non-compliance carries fines of at least 4% of EU-wide annual turnover for the most serious breaches, plus potential product confiscation, market bans, and exclusion from public procurement. A risk provision is not a compliance cost in the operational sense, but any defensible budget should acknowledge the exposure and the cost of getting it wrong.

Where the Money Is Usually Mis-Spent

Four patterns account for most EUDR budget waste.

Buying software before mapping data ownership. The most common mistake is procuring a compliance platform before establishing which team owns supplier data, who will chase geolocation from suppliers, and how the data flows into the system. Software cannot fix a data governance problem. Map ownership first; procure tools second.

Paying for certification in the belief it substitutes for due diligence. As noted above, it does not. The European Commission does not recognise any certification scheme as a substitute for a due diligence statement. Certification spend that is justified on the basis of EUDR compliance is misdirected unless it is explicitly framed as supporting evidence within a broader due diligence programme.

Duplicating geolocation collection across business units. Large organisations with multiple procurement teams often collect the same supplier geolocation data independently, paying for it multiple times. A single internal data repository with clear ownership eliminates this duplication.

Underfunding the supplier-facing effort. Geolocation and supplier verification can be difficult in fragmented or multi-level supply chains, and the cost of implementation can create commercial difficulties for smaller operations. The real bottleneck in most EUDR programmes is not the filing system - it is getting usable data from suppliers who may be unfamiliar with the requirements, distrustful of data-sharing, or simply without the tools to provide GPS coordinates. Budget for supplier engagement, communication, and support. This is where programmes stall.

Free and Low-Cost Resources to Use First

Before committing budget to external services, exhaust the zero-cost resources the Commission has made available.

• The official Guidance document (updated and formally adopted in all EU languages on 13 July 2026): the authoritative interpretation of the Regulation's requirements.
• The updated FAQs: practical answers to common edge cases, updated as part of the May 2026 simplification package.
• The Information System test environment: both the production and the acceptance (test) environments are operational, allowing companies to trial submissions before filing real statements. There is no charge to use either.
• Commission training sessions: the Commission's EUDR implementation pages list concrete September sessions for operators on 3, 8, 10 and 15 September 2026 (14:00 CEST), plus a dedicated session for micro and small primary operators on the simplified declaration on 17 September 2026 (14:00 CEST). These are free to attend and cover the Information System's functionality directly.
• Supply chain infographics and the Competent Authority list: available via the Green Forum implementation hub at no cost.

None of these replace legal advice for complex situations, but they substantially reduce the interpretive work that would otherwise be billed at external adviser rates.

What to Put in the 2027 Budget

The 2027 picture is materially different from 2026, and budgets should reflect it now.

Filing becomes recurring. The one-off data acquisition and supplier onboarding costs that dominate 2026 budgets shift to recurring operational costs in 2027. The per-DDS cost line becomes the dominant variable. Operators who have automated submission via API will see this cost fall; those relying on manual entry will not.

The country classification is due a review. A first review of the country risk classification is envisaged in 2026, drawing on updated FAO Global Forest Resources Assessment data. A country that is currently standard-risk could move to low-risk - reducing your due diligence burden - or a low-risk country could be reclassified upward, triggering a full due diligence obligation for supply chains that had been operating under Article 13. Build monitoring of the classification into your recurring compliance calendar, not just a one-time check.

Newly in-scope products land on 30 December 2027. The 13 July 2026 delegated act added soluble coffee, certain palm oil derivatives and frozen cattle tongues to Annex I, with an application date of 30 December 2027. Operators in those product categories need to begin supplier mapping now, not in late 2027.

Micro and small operators reach their deadline on 30 June 2027. If your supply chain includes micro or small primary operators who have not yet filed their simplified declarations, their readiness (or lack of it) becomes your problem. Budget for supplier support and verification.

The Honest Framing

The Commission's simplification measures made EUDR cheaper for the EU economy as a whole, and genuinely cheaper for specific categories of company: operators sourcing exclusively from low-risk countries, micro and small primary operators in low-risk jurisdictions, and downstream actors who now pass on reference numbers rather than filing fresh statements.

For a mid-size importer sourcing standard-risk commodities - Brazilian soy, Indonesian palm oil, Ivorian cocoa - the simplification package mostly changed the paperwork architecture, not the price. The geolocation collection, the legality evidence, the supplier engagement, the record retention, and the internal governance are all still there. The aggregate saving is real; it is just concentrated elsewhere in the distribution.

A budget built on the 75% headline will not survive contact with your actual supplier list. A budget built on your specific operator role, your sourcing countries, your supplier count, and your existing data coverage will.

This post provides general information only and does not constitute legal or financial advice. Readers should confirm their own compliance position with qualified advisers.