EUDR interim measures suspension and corrective action procedure

EUDR Incident Response: What to Do When a Consignment Is Stopped or a Notice Arrives

Last updated · August 19, 2026

Most EUDR compliance guides tell you how to avoid trouble. This one starts the moment trouble has already arrived - your consignment is suspended at the border, a competent authority has sent a notice, or a third party has raised a substantiated concern against your due diligence statement. The question is no longer how to comply. It is how to respond, in what order, and within what time.

This is a procedural guide, not a legal opinion. It covers Articles 16, 18, 19, 23, 24, 26, and 31 of Regulation (EU) 2023/1115. For the fine structure and sanction stack, see our companion post EUDR Penalties Explained. For the customs declaration fields and DDS reference numbers, see EUDR at the Border. For retention obligations, see EUDR Record-Keeping and Audit Readiness.

1. The Four Trigger Events

Understanding what started the clock matters, because each trigger has a slightly different procedural pathway.

A customs-stage stop under Article 26. Customs authorities can refuse release for free circulation or export when a DDS is missing, incomplete, or flagged in the Information System. The competent authority is then notified and takes over.

A competent authority check under Articles 18 and 19. Article 16 obliges Member States to carry out checks on operators and non-SME traders. Those checks can include documentary examination of the due diligence system, examination of records for a specific consignment, on-site inspection, physical sampling, and - critically - they can arrive without warning. Article 36(4) of the regulation states that checks shall be carried out without prior warning of the operator or trader, except where prior notification is necessary to ensure the effectiveness of the checks. Checks on SME traders under Article 19 are narrower, focused on the information those traders are required to collect and pass on.

A substantiated concern under Article 31. Any natural or legal person - including NGOs, competitors, or civil society organisations - may submit a substantiated concern to a competent authority when they believe an operator or trader is not complying with the regulation. Competent authorities must assess these concerns; if found credible, they are obligated to investigate. The authority must inform the person who submitted the concern of the follow-up within 30 days of receiving it. If you are the operator named in such a concern, you may not receive immediate notice - but the investigation that follows can trigger a check under Article 18.

An anomaly flagged in the Information System. All DDS submissions flow into the centralised EU Information System. Competent authorities have full access to review operator-submitted statements and cross-check them against customs declarations. A risk flag generated by the system - based on country benchmarking, commodity type, or operator history - can trigger a check independently of any complaint or border event.

2. The Clock: Three Working Days That Define Your Window

This is the section most operators do not read until it is too late.

Under Article 23, where a competent authority identifies a high risk of non-compliance, it may take immediate interim measures. These include suspension of placing on the market, suspension of export, and seizure of the relevant products.

The critical timing rule is in Article 23(2) and (3): the suspension ends within three working days - or 72 hours in the case of perishable relevant products - from the moment the high risk of non-compliance is identified in the Information System. If the competent authority needs more time to establish whether the products comply with Article 3, it extends the suspension by further periods of three working days, either by taking additional interim measures under Article 23 or, for goods entering or leaving the Union market, by notifying customs to maintain the suspension under Article 26(7).

Under Article 23 of Regulation (EU) 2023/1115, the initial suspension of a consignment ends within three working days - or 72 hours for perishable relevant products - from the moment high risk of non-compliance is identified in the Information System.

The practical consequence is stark: your window to produce evidence is measured in working days, not weeks. Extensions are possible, but each extension is a further three-working-day block, not an open-ended pause. Everything you can pre-stage - your response pack, your supplier contacts, your geolocation dataset - determines whether you can respond within the first window or are forced to watch extensions accumulate while the goods sit.

The three-working-day clock runs from when the high risk is identified in the Information System — not from when you receive formal notification. Do not assume you have more time than the regulation provides. If you are unsure when the clock started, ask the competent authority directly and document the response.

3. What the Authority Will Ask For - and What a Good Response Pack Looks Like

Competent authority inspections typically involve document requests, potential on-site visits, sampling of consignments, and cross-checks against reference numbers in the EU Information System. Dry-run exercises conducted in 2025 with Belgian, French, German, Dutch, and Spanish competent authorities - facilitated by the European Forest Institute - confirmed that authorities review geospatial data before any inspection begins and expect the full due diligence system to be explainable, not just documented.

The core items you should be able to produce immediately:

DDS reference and verification number - exactly as filed in the Information System. This is the anchor for everything else.
Geolocation dataset as filed - the plot polygons or coordinates submitted with the DDS, with timestamps that pre-date placement on the EU market.
Risk assessment record under Article 10 - naming the source country, its deforestation risk classification, and the specific mitigation actions taken.
Mitigation record under Article 11 - demonstrating that risk was reduced to negligible, not merely acknowledged.
Supplier evidence for legality under Article 3(b) - the documentation showing the product was produced in accordance with the relevant legislation of the country of production.
Chain from consignment to plot - the traceability link connecting the specific batch in question to the specific land parcels in the DDS.

The consistency rule is non-negotiable. Produce the same data you filed. Any discrepancy between the DDS as submitted and the documents you hand to the authority is itself a finding - it suggests either that the original DDS was inaccurate or that the response has been constructed after the fact. Both are worse than the original question.

4. Corrective Action Under Article 24

If the competent authority concludes that the EUDR rules were breached, it will issue a formal notice requiring corrective action within a specified and reasonable period. The menu of corrective actions under Article 24 includes:

Correcting formal non-compliance - for example, submitting missing documentation or correcting geolocation data that was incomplete or inaccurate.
Preventing the product from being placed on the market or exported - a prospective stop on the specific consignment or product line.
Withdrawing or recalling - removing products already placed on the market.
Donating to charitable or public-interest purposes - where the product itself is sound but the compliance record is not.
Destruction or disposal under EU waste management law - the last resort where no other corrective option is available.

Under Article 24(2), competent authorities can require operators to withdraw or recall a product, donate it to charitable or public interest purposes, or dispose of it under EU waste management law. These corrective actions sit on top of any penalty rather than replacing it - a non-compliant shipment can attract a fine, a confiscation order, and a recall obligation in the same enforcement action.

Failing to act within the period specified, or acting inadequately, does not close the matter. It escalates it. The authority can proceed to the full penalty regime under Article 25 and, where goods are at the border, maintain the customs suspension indefinitely pending resolution.

Corrective action is not a substitute for penalties — it runs in parallel. Taking corrective action promptly and completely is the strongest signal of good faith available to you, but it does not extinguish the authority's power to fine or sanction. Do not treat compliance with a corrective action notice as the end of the matter.

5. Escalation and Consequences

The penalty regime under Article 25 - the 4% turnover cap, confiscation, market bans, and exclusion from public procurement - is covered in full in our EUDR Penalties Explained post. Two operational consequences are worth flagging here because they affect future consignments, not just the one under review.

Published enforcement decisions. The Commission is required to publish on its website the list of final judgments against legal persons for infringements of the regulation and the penalties imposed. A published finding is permanent and searchable by your customers, counterparties, and future competent authorities.

Loss of simplified procedure eligibility. Operators with a track record of compliance may qualify for reduced scrutiny. A finding of non-compliance reverses that. Heightened scrutiny on future consignments is a direct operational cost that compounds over time.

Member States are also required to report enforcement results annually, which means the aggregate picture of who was checked, what was found, and what was done about it becomes part of the public record.

6. Check Probability: Sizing the Risk Honestly

Under the amended EUDR, competent authorities must check at least 9% of operators sourcing from high-risk countries, 3% from standard-risk countries, and 1% from low-risk countries.

These are minimum floors, not ceilings. Authorities base their inspection plans on country of origin risk level, commodity type, supply chain complexity, and operator compliance history. They also factor in substantiated concerns raised by third parties. Checks can be unannounced.

EUDR Minimum Inspection Rates by Country Risk Tier

Until the Commission's country benchmarking exercise assigns a different level, every country defaults to standard risk - meaning a 3% minimum check rate applies as the baseline. If your supply chain touches countries that are subsequently classified as high risk, your check probability triples.

The practical implication: even at 1%, a low-risk-country operator with significant EU volume should expect to be checked within a few years of enforcement beginning. At 9%, a high-risk-country operator should treat a check as a near-certainty within the first enforcement cycle.

7. The 24-Hour Playbook

The first 24 hours after a trigger event are the most consequential. Here is the sequence.

Identify the trigger and the clock

Determine which event has occurred: a customs stop under Article 26, a competent authority notice under Article 18/19, a substantiated concern under Article 31, or an Information System flag. Note the exact time and date. The three-working-day clock may already be running.

Freeze the batch — do not ship the rest

Immediately suspend any further movement of the consignment in question and any related batches from the same DDS or the same supplier. Do not place additional units on the market while the question is open. Continuing to ship while a suspension is active compounds the exposure significantly.

Call your customs broker

If the stop is at the border, your customs broker needs to know immediately. They are the operational link to the customs authority and can confirm the exact status of the release suspension, the reference numbers involved, and what the authority has formally requested.

Assemble the single document folder

Pull together: the DDS reference and verification number, the geolocation dataset as filed, the risk assessment and mitigation records under Articles 10 and 11, supplier legality evidence, and the traceability chain from consignment to plot. This is the response pack. It must match what was filed — do not amend or reconstruct.

Do not amend the filed DDS

This is the most common mistake under time pressure. Amending a DDS after a check has been triggered — to align it with a story that differs from what was originally filed — is not a correction. It is a discrepancy that the authority will identify. If the original DDS contained an error, that error needs to be disclosed and explained, not quietly overwritten.

Decide on legal counsel

If the notice is a formal Article 23 interim measure or an Article 24 corrective action requirement, involve legal counsel before responding in writing. National procedural law governs appeals and varies by Member State — your counsel needs to know the jurisdiction. If the trigger is a routine documentary check, you may be able to respond directly, but document every communication.

Communicate internally — and only internally

Notify your compliance lead, your logistics team, and your senior management. Do not issue external statements, press releases, or customer communications about the check until you have legal advice on what can be said and when. Premature disclosure can create obligations or admissions that complicate the response.

Respond to the authority within the window

Submit your response pack to the competent authority before the three-working-day window closes. If you need more time, request an extension in writing and document the request. Silence is not a neutral position — it is read as an inability to produce the evidence.

8. Pre-Incident Preparation: The Short Checklist

The 24-hour playbook only works if the underlying materials exist before the trigger event. The following checklist is for the period before 30 December 2026 - the application date for large and medium operators confirmed by the Commission's 13 July 2026 implementing measures.

On 13 July 2026, the European Commission adopted an Implementing Act governing the EUDR Information System and confirmed the application date of 30 December 2026 for large and medium operators and traders.

Named responder. Designate one person - by name, not by job title - who owns the incident response process. That person must have authority to freeze shipments, access all compliance records, and engage external counsel without seeking further approval.
Response pack template. Build the folder structure now: DDS reference, geolocation file, risk assessment, mitigation record, supplier evidence, traceability chain. Populate it for your current consignments. Verify that the contents match what is in the Information System.
Supplier contact SLA in contracts. Your suppliers need to be reachable within hours, not days. Build a contractual obligation for suppliers to respond to compliance requests within a defined window - 24 or 48 hours is realistic. Test it before enforcement begins.
Dry run before 30 December 2026. Simulate a check. Ask your compliance team to produce the full response pack for a live consignment in under four hours. Identify the gaps. Fix them. The European Forest Institute's dry-run exercises with Belgian, French, German, Dutch, and Spanish competent authorities in 2025 found that operators who had invested in their systems still needed to invest in their ability to explain and defend those systems - not just produce documents.

A Note on Scope

This post covers the procedural sequence under Regulation (EU) 2023/1115. It is general information, not legal advice. National procedural law - including appeal rights, administrative review requirements, and deadlines for challenging authority decisions - varies by Member State and is not addressed here. If you receive a formal notice, involve qualified legal counsel in the jurisdiction where the check is taking place.

The EUDR Information System Implementing Act entered into force on 17 July 2026. The application date for large and medium operators is confirmed as 30 December 2026, with micro and small operators following on 30 June 2027. There are no further delays anticipated.

If you want to make sure your response pack is ready before a trigger event arrives, the Free EUDR Readiness Checklist is a practical starting point - it covers what to collect, how to assess it, and what to document across Articles 9, 10, and 11.

help_outlineCan I amend my DDS after a check has been triggered?expand_more

No — not to align it with a different account of events. If the original DDS contained a genuine error, that error should be disclosed and explained to the authority, not quietly corrected. Amending a filed DDS after a check begins creates a discrepancy that authorities will identify and treat as a separate finding.

help_outlineWhat if I cannot produce all the evidence within three working days?expand_more

Request an extension in writing before the window closes, and document the request. The competent authority can extend the suspension by further three-working-day periods under Article 23. Silence is not a neutral position — it is read as an inability to produce the evidence.

help_outlineDoes taking corrective action under Article 24 cancel the penalty?expand_more

No. Corrective action and penalties run in parallel under the regulation. Complying promptly and completely with a corrective action notice is the strongest signal of good faith available to you, but it does not extinguish the authority's power to fine or sanction under Article 25.

help_outlineWho is the competent authority in my Member State?expand_more

The European Commission maintains an official list of competent authorities by country. These are typically environmental, agriculture, or forestry ministries, though the exact body varies. Your customs broker or legal counsel in the relevant Member State can confirm the correct contact.

help_outlineCan a third party trigger an investigation without my knowledge?expand_more

Yes. Under Article 31, any natural or legal person — including NGOs — may submit a substantiated concern to a competent authority. The authority must assess it and, if credible, investigate. You may not receive notice until the authority has already begun its review.

help_outlineWhat happens if the same non-compliance is found in multiple Member States?expand_more

Competent authorities share information across the EU. If non-compliant goods are detected in one country, that information is shared to prevent entry elsewhere. A finding in one Member State can therefore trigger scrutiny in others, and published enforcement decisions are visible EU-wide.