EUDR Operator vs. Trader: How Your Role in the Supply Chain Determines Your Obligations

The most common compliance question we hear isn't "what products are in scope?" It's this: "Am I an operator or a trader - and does it actually matter?"

It matters enormously. Your role in the supply chain is the single biggest factor in determining what the EUDR requires you to do. Get the classification wrong and you could either over-engineer your compliance program or, worse, miss obligations that apply to you directly.

This guide cuts through the legal language and gives you a clear, practical answer.

---

The Core Distinction: Who Places the Product on the Market First?

Under Regulation (EU) 2023/1115, an "operator" is any natural or legal person who places a relevant product on the EU market for the first time, or exports it from the EU. A "trader" is any person in the supply chain - other than an operator or downstream operator - who makes relevant products available on the EU market in the course of a commercial activity.

The operative phrase is "for the first time." That single word carries the entire weight of the due diligence burden.

• Operator: You are the first company to bring the product into the EU market or to export it. This is typically an importer, a primary manufacturer using raw commodities, or an EU-based producer of in-scope goods.
• Trader: You buy a product that is already on the EU market and resell or distribute it further down the chain. You are not the first link - someone upstream already placed it.
• Downstream operator: A category formally created by Regulation (EU) 2025/2650 in December 2025. A downstream operator places on the market or exports products made from relevant products that are already covered by an existing Due Diligence Statement (DDS) or simplified declaration.

One important nuance: the same company can be an operator for some products and a trader for others, depending on which products it first places on the EU market. A food manufacturer that imports raw cocoa beans (operator) and also resells finished chocolate bars it bought domestically (trader) wears both hats simultaneously.

---

What Operators Must Do: Full Due Diligence

If you are the first operator, the regulation places the heaviest burden squarely on you. Under Article 8 of the EUDR, operators must complete a three-step due diligence process - collect information (including plot-level geolocation data), assess risk, and mitigate risk - before placing any in-scope product on the EU market or exporting it.

The three steps in plain English:

1. Collect information. Trace your product to the exact plot of land where the commodity was grown or harvested. You need geolocation coordinates (polygon-level for farms over 4 hectares), the country and region of production, the supplier's details, and evidence of legal production.
2. Assess risk. Evaluate whether the product is associated with deforestation or forest degradation after 31 December 2020, and whether it was produced in compliance with the laws of the country of origin.
3. Mitigate risk. If the risk is not negligible, you must take action - additional supplier audits, third-party verification, or halting the trade - before proceeding.

Only once those three steps are complete can you submit a Due Diligence Statement (DDS) through the EU Information System (built on the TRACES platform). Without a valid DDS reference number, products cannot legally be placed on or exported from the EU market. The DDS is a formal, legally binding declaration that you have completed due diligence and that residual risk is negligible.

Under the revised rules introduced by Regulation (EU) 2025/2650, annual DDS submissions are now permitted (rather than per-consignment), and similar consignments can be grouped voluntarily - a significant reduction in administrative load for high-volume importers.

---

What Traders Must Do: Collect, Keep, and Pass On

If you are a trader - buying and reselling products already on the EU market - your obligations are fundamentally different. You do not conduct fresh due diligence. You do not submit a new DDS.

Under Regulation (EU) 2025/2650, the obligation to submit a DDS rests exclusively with the operator who first places the relevant product on the EU market or exports it. That operator must communicate the DDS reference number to all downstream operators and traders in the supply chain.

Your job as a trader is to:

• Collect and retain the DDS reference numbers (or simplified declaration identifiers) provided by your upstream supplier.
• Keep records of your suppliers and customers, and maintain traceability documentation for at least five years.
• Pass on the reference numbers to whoever you sell to next, so the chain of traceability remains intact.
• Act on substantiated concerns. If you have concrete, objective evidence that a product does not comply with the EUDR, you must notify the competent authorities and - if you are a non-SME - verify that upstream due diligence was properly carried out.

This is a meaningful simplification compared to what the original 2023 regulation implied. The original EUDR created the impression that every company in the supply chain would need to carry out full due diligence anew; Regulation 2025/2650 corrects this by explicitly distinguishing between first operators and downstream actors.

---

The Downstream Operator: A New Category That Changes the Picture

The December 2025 amendment introduced the "downstream operator" as a distinct legal category. This matters for manufacturers and processors who work with inputs that have already been cleared upstream.

A downstream operator is defined as an entity that places on the market or exports products made from relevant products already covered by an existing DDS or simplified declaration. Downstream operators are subject to the same reduced obligations as traders - they do not submit a DDS.

In practice: if you are a chocolate manufacturer buying cocoa mass from a supplier who has already filed a DDS, you are a downstream operator. You collect and retain the upstream reference numbers; you do not re-run the full due diligence process from scratch.

Non-SME downstream operators and non-SME traders are required to register in the central EUDR Information System, even though they do not file a DDS. Registration is a separate, lighter obligation - but it is not optional for larger companies.

---

How Company Size Intersects With Role

Role classification tells you what you must do. Company size tells you how much and when. The two axes work together.

For a deeper look at what the SME thresholds mean and how the lighter path works in practice, see our companion post on EUDR for micro and small businesses.

---

A Decision Flow: Which Role Are You?

Use this interactive tool to work out your classification quickly.

---

Two Worked Examples

Example 1: EU importer of raw cocoa beans

A German trading company imports raw cocoa beans directly from Côte d'Ivoire. No one in the EU has placed these beans on the market before. This company is a first operator. It must collect plot-level geolocation data for every farm in its supply chain, conduct a full risk assessment, mitigate any non-negligible risk, and submit a DDS before the beans clear customs. If it is a large or medium company, its deadline is 30 December 2026.

Example 2: Domestic retailer reselling chocolate bars

A Dutch supermarket chain buys finished chocolate bars from a Belgian manufacturer. The manufacturer imported the cocoa, ran due diligence, and filed a DDS. The supermarket is a trader (or downstream operator). It does not re-run due diligence. Its job is to collect and retain the DDS reference number from the Belgian manufacturer, keep records for five years, and pass the reference number to any business customers it supplies. As a non-SME, it must also register in the EUDR Information System by 30 December 2026.

---

The Deadlines Are Now Fixed

After two postponements, the compliance calendar is settled in law.

• 30 December 2026 - large and medium operators and traders (non-SMEs) must be fully compliant.
• 30 June 2027 - micro and small enterprises have an additional six months.

On 4 May 2026, the European Commission published its formal simplification review - a commitment it made when the December 2025 amendment was adopted. The Commission confirmed it will not reopen the core EUDR text, and that no further amendment to the basic legal text is warranted at this time. The December 2026 date is not moving again.

The Commission's simplification measures, taken together with the December 2025 revision, are estimated to reduce annual compliance costs by approximately 75% compared to the original EUDR framework. The core due diligence obligations for first operators remain fully intact - what has changed is the burden on everyone downstream.

---

Key Takeaways

• Role, not size, determines what you do. Size determines when and how much.
• First operators bear the full due diligence burden: collect, assess, mitigate, and file a DDS.
• Traders and downstream operators collect and pass on DDS reference numbers - they do not file fresh statements.
• Non-SME downstream actors must register in the EUDR Information System, even without filing a DDS.
• The December 2025 amendment (Regulation (EU) 2025/2650) formally created the downstream operator category and confirmed that only the first operator files the DDS.
• Deadlines are fixed: 30 December 2026 for non-SMEs; 30 June 2027 for micro and small enterprises.

---

Stay on top of every regulatory development as it happens. The EUDR Brief is our free monthly newsletter - plain-English updates, no noise.