For many importers, CBAM began as a reporting exercise.
That phase is over.
The European Union’s Carbon Border Adjustment Mechanism entered its definitive phase on 1 January 2026. It now moves businesses toward a more consequential reality: embedded emissions in imported carbon-intensive goods can create direct financial, procurement and margin exposure.
The core principle is simple. CBAM is designed to place a carbon price on certain imported goods that corresponds with the carbon costs faced by EU producers under the EU Emissions Trading System.
The operating challenge is not simple at all.
Importers need to know what they are buying, where it was produced, which facilities made it, how its emissions were calculated, whether those figures are verified, whether a carbon price has already been paid in the country of origin and how all of this affects product cost and commercial decisions.
That makes CBAM a cross-functional control problem—not a tax, customs or sustainability task in isolation.
Why the definitive phase changes the conversation
During the transitional period, businesses were focused on quarterly reporting of embedded emissions.
The definitive regime introduces monitoring, reporting and financial obligations for importers of covered goods. It applies to carbon-intensive sectors including cement, iron and steel, aluminium, fertilisers, hydrogen and electricity. The European Commission’s recent guidance package includes both general and sector-specific documents covering concepts, compliance cycles, embedded-emissions calculations and monitoring considerations.
For management teams, the shift can be expressed in one sentence:
CBAM data is becoming a cost input.
That changes the questions procurement, finance and commercial teams must ask.
It is no longer enough to know that an imported product is within a CBAM category. The business must understand whether the supplier can provide credible emissions data, whether a lower-emissions alternative exists, who bears the cost contractually and whether the resulting carbon exposure can be passed through to customers.
The risk is hidden in everyday purchasing data
CBAM exposure often sits inside ordinary purchase orders, supplier lists and customs classifications.
A manufacturer may import aluminium parts rather than raw aluminium. A construction business may purchase steel-intensive components through distributors. A retailer may source goods from multiple countries but lack visibility of the production installation. A procurement team may negotiate price, delivery and quality without receiving emissions data in a usable format.
This creates a familiar pattern: the company discovers its CBAM exposure after the product is already committed, shipped or incorporated into a customer contract.
The result is a late scramble for supplier data, uncertain assumptions, unplanned costs and difficult conversations about who is responsible.
The alternative is to build a practical CBAM control environment now.
Five data controls every importer should establish
1. A CBAM goods and customs register
Start with a definitive list of imported goods that may fall within CBAM scope.
This should link purchasing records with customs commodity codes, country of origin, importer-of-record status, supplier, manufacturing location where known, transaction value and volume. It should be refreshed regularly, not assembled once a year.
The objective is to make exposure visible before procurement decisions are finalised.
A useful register should allow management to answer:
Which goods create the greatest potential CBAM exposure?
Which business units and suppliers are involved?
Which import routes and legal entities act as importer of record?
Where are data gaps most material?
Which products may create the greatest margin sensitivity?
Without this foundation, every other CBAM process becomes reactive.
2. A supplier-emissions evidence protocol
The Commission’s definitive-phase framework distinguishes between actual embedded emissions and the use of default values in relevant circumstances. Actual emissions data must be robust enough to stand up to the applicable methodology and verification requirements.
Importers therefore need a standard supplier request pack.
It should specify:
The information required for each product and production installation
The relevant reporting period
Calculation methodology and activity data expectations
Supporting evidence required
Verification requirements where applicable
Who within the supplier organisation is authorised to confirm data
The process and deadline for updates
The consequences of non-response or incomplete data
This is especially important where importers buy through traders or distributors. The commercial supplier may not be the producer and may have limited access to facility-level emissions data. Procurement teams must identify that chain early.
A generic sustainability questionnaire is unlikely to be sufficient.
3. A carbon-cost forecasting model
CBAM exposure belongs in financial planning.
Finance teams should work with procurement and sustainability colleagues to develop a scenario model for expected certificate costs or other relevant financial adjustments. The model should connect imported volumes, emissions intensity, available supplier data, EU carbon-price assumptions, any carbon-price adjustment in the country of origin and planned sourcing changes.
The purpose is not to forecast an exact future cost with false precision. It is to understand financial sensitivity.
For example, a company importing an emissions-intensive material from two suppliers may find that the apparent cheaper supplier becomes more expensive once CBAM exposure is considered. That insight can change sourcing strategy, contract negotiations and product pricing.
The model should be reviewed alongside commodity, currency and freight exposure—not after those decisions have already been made.
4. A contractual allocation of responsibility
Many businesses will discover that their supplier contracts say little about carbon data.
Contracts should address the right to request emissions information, the supplier’s duty to provide it, acceptable data quality, audit or verification rights, confidentiality, liability for inaccurate data and the allocation of carbon-related costs.
Businesses should also examine customer contracts.
If CBAM increases input costs, can the importer pass through the cost? Is there a price-adjustment mechanism? Are there customer commitments on carbon intensity or origin? Could an inability to provide emissions data affect a tender, delivery requirement or environmental claim?
The commercial allocation of risk should be decided before the cost lands—not argued over afterwards.
5. Governance, assurance and an escalation route
CBAM requires ongoing evidence, not a one-off compliance response.
The business needs clear accountability across customs, tax, procurement, sustainability, finance and legal. A senior owner should oversee the overall control environment, while operational teams should have defined responsibilities for data collection, validation, record retention and reporting.
A practical governance process should include:
A regular review of high-risk imports and suppliers
Data-quality scoring for supplier emissions information
Escalation where supplier evidence is missing or inconsistent
Documented assumptions and methodology decisions
Periodic reconciliation between customs records, procurement data and emissions data
Internal review before declarations and financial commitments are made
The companies that manage CBAM best will treat it like other material business risks: with controls, owners, evidence and decision-making discipline.
CBAM can reshape procurement strategy
The immediate instinct is to see CBAM as a compliance burden.
But it can also become a strategic procurement lens.
A company that understands embedded emissions at supplier and product level can compare sourcing choices more intelligently. It can identify whether a lower-emissions supplier offers a financial advantage. It can engage suppliers on efficiency investments. It can redesign products to reduce exposure to high-carbon materials. And it can price contracts with more confidence.
This does not mean every business should switch suppliers immediately. Reliability, quality, trade risk and cost remain important.
It means carbon intensity is becoming another factor that must be visible alongside those decisions.
What to do in the next 90 days
Importers should not wait for the first financial impact to test whether their data works.
Over the next 90 days, leadership teams should aim to:
Identify all potentially covered imports and validate commodity-code classification
Confirm importer-of-record responsibilities across group entities
Rank suppliers by volume, emissions intensity and data risk
Issue structured emissions-data requests to priority suppliers
Review relevant supplier and customer contract terms
Build an initial carbon-cost sensitivity model
Create a cross-functional CBAM steering group with named owners
Establish a documented timetable for evidence collection, validation and reporting
The key is to begin with the highest-value and highest-risk import flows. Perfect coverage can come later. Material visibility cannot.
The real test
CBAM’s definitive phase will not be judged by whether companies can complete forms.
It will be judged by whether they can make better purchasing, pricing and investment decisions using credible embedded-emissions data.
For importers, the time to build that capability is before carbon costs become an unwelcome surprise in the margin bridge.
Sources
European Commission, CBAM Questions and Answers
European Commission, Guidance documents to support CBAM implementation in the definitive period
European Commission, Technical study on indirect emissions in CBAM