Direct answer: The EU Forced Labour Regulation (Regulation (EU) 2024/3015) is not "publish a supplier code of conduct" or "do a social audit" and you are done. From 14 December 2027, it prohibits products made wholly or partly with forced labour from being placed on the EU market, made available on the EU market or exported from the EU; it covers all products/sectors/origins, with no company-size threshold. A manufacturer's forced-labour/supply-chain due-diligence page should state scope, role, risk identification, supply-chain traceability, recruitment fees/debt bondage/prison labour risks, grievance/remediation, investigation cooperation and customer data. Otherwise, when an EU customer/authority asks "where are the materials/processes, how do you exclude forced labour, is there a remediation mechanism," the answer becomes an ad-hoc explanation.
This guide is for textile/apparel, solar, electronics, auto parts, battery/materials, light industry and equipment manufacturers in Changzhou and nearby areas. It explains how to write and accept a forced-labour/supply-chain due-diligence page. Information is current to 2026-11-05. It is a review of public rules and project practice, not EU legal, human-rights due-diligence, audit or remediation advice; the specific scope, investigation, evidence, penalties and remediation depend on the regulation, Commission guidance, the competent authority and the customer contract.
2024/3015 is a product ban/result obligation, not "do due diligence and you are exempt"; it applies from 14 December 2027 to all products/sectors/origins, with no size threshold. Authorities investigate on a risk basis and can require supply-chain evidence; lack of traceability/evidence can lead to a ban. The website must not claim "certified forced-labour-free"; it should state risk identification, traceability, grievance, remediation and investigation cooperation.
How does the page relate to supplier code, conflict minerals, EUDR and CSDDD?
The supplier code page answers "which labour/environment/anti-corruption principles suppliers follow"; the RoHS/REACH page answers material substances; the EUDR page answers deforestation/land legality; CSDDD is a broader human-rights/environmental due-diligence directive (check its own scope/timing); the forced-labour page answers "is the product made with forced labour, how to investigate/prove/remediate". Codes/audits are evidence, not a substitute for the product-ban result obligation.
Common breakpoints: treating a code of conduct as compliance; treating a third-party audit as immunity; checking only tier-1 suppliers; ignoring recruitment fees/debt bondage/prison labour/agents; no grievance/remediation; cannot trace materials/processes; claiming "100% forced-labour-free"; mixing EUDR/conflict minerals/CSDDD with forced labour. A page that states scope, risks, traceability, grievance, remediation and red lines gives procurement, legal and ESG one playbook.
| Page/topic | Answers | Covers | Cannot replace |
|---|---|---|---|
| Forced Labour Regulation | Is the product made with forced labour | Product ban/investigation/remediation | Code/audit |
| Supplier code | Supplier principles/audits | CSR/labour/environment | Product result duty |
| Conflict minerals | 3TG/cobalt sourcing | Mineral due diligence | All labour risks |
| EUDR | Deforestation/land legality | Commodity origin | Forced labour |
| CSDDD | Broader human-rights/environmental due diligence | Corporate due diligence | Product ban |
This page map is editorial; forced-labour duties follow Regulation (EU) 2024/3015 and the European Commission page.
Which products/companies are covered?
The regulation prohibits products made wholly or partly with forced labour from being placed on the EU market, made available or exported; it applies to all products, all sectors, EU-produced/imported, with no company-size/turnover threshold. Economic operators include importers, exporters, distributors/retailers; non-EU companies selling into the EU may also be covered. If a product/component/material involves forced labour, it can be caught—not just the final assembly location.
Common misjudgements: "we are small/B2B/components only" so not covered; "forced labour is only in certain countries/sectors"; checking only the finished-goods factory and not materials/agents; excluding EU production; "the customer is responsible, so we have no duty". Scope is confirmed per product/supply chain/sales model; the page can explain how the company identifies/supports, but must not declare a shipment "risk-free" for the customer.
| Object | Coverage | Focus | Common misjudgement |
|---|---|---|---|
| Product | All/part forced labour | Finished/component/material | Assembly only |
| Sector | All sectors | High-risk processes | Textiles only |
| Origin | EU/imported | Supply-chain map | Excluding EU |
| Company size | No threshold | All operators | Small-business exemption |
| Sales model | Place/make available/export | Import/distribution/e-commerce | Factory gate only |
Scope follows Articles 1–4 and Commission guidance; confirm specific products/supply chains with legal/compliance.
How is "forced labour" defined, and which risks should be checked?
ILO C29 defines forced labour as work or service exacted under the menace of a penalty and for which the person has not offered themselves voluntarily; C105 requires its abolition. Risks include withholding ID/passport, debt bondage, recruitment/agent fees, withheld wages, forced overtime, movement restrictions/surveillance, threats/violence, prison/state-imposed forced labour, trafficking, deceptive recruitment and abuse of minors/student workers. Risk is not only in the factory; it can be in raw materials/agriculture/shipping/construction/labour agents upstream.
Acceptance checks: risk map (country/sector/process/labour source); recruitment process/fees; working hours/overtime/wages; freedom of movement/documents; agents/labour suppliers; grievance channel; on-site/remote audit; remediation. Common gaps: only asking "is there forced labour"; not checking recruitment fees/debt; not checking agents; ignoring overtime/wage deductions; no worker interviews; document-only audits; risk map only tier-1.
| Risk | Typical sign | Evidence | Common gap |
|---|---|---|---|
| Document retention | ID/passport withheld | Worker interview | Documents only |
| Recruitment fees/debt | Agent fees/deposits/loans | Recruitment records | Agents not checked |
| Forced overtime | Excess hours/no refusal | Attendance/wages | Contract only |
| Movement limits | Gates/surveillance/deposits | Site/interview | No visit |
| Wage withholding | Held wages/fines | Payslips | Not checked |
| Prison/state labour | Prison work/forced assignment | Source/project | Ignored |
| Agents/trafficking | Deceptive recruitment/resale | Labour chain | Tier-1 only |
This risk list is editorial; definitions/indicators follow ILO C29/C105 and Commission guidance; investigation methods follow the company/authority.
What do economic operators, authorities and customs do?
Economic operators (importers/exporters/distributors/retailers) must not place/make available/export forced-labour products; they must cooperate with authority investigations and provide supply-chain/risk/remediation evidence. Member State competent authorities investigate, request information, assess risk and issue bans; customs/market surveillance support enforcement. The Commission publishes guidance, the Single Portal and risk database; penalties are set by Member States. Non-EU companies selling into the EU need a contactable entity/evidence.
Acceptance checks: role/sales model; authority contact; investigation cooperation process/deadlines; evidence pack; ban/recall/delisting plan; customer/customs communication. Common gaps: not knowing the authority; no investigation coordinator; fragmented evidence; cannot respond in time; no recall/refund plan after a ban; no EU contact for a non-EU entity.
| Role | Main duty | Evidence | Common gap |
|---|---|---|---|
| Operator | No placing/making available/export | Policy/evidence | No owner |
| Importer/exporter | Supply-chain/customs cooperation | Documents/map | Invoice only |
| Distributor | Check/delist | Records | No cooperation |
| Authority | Investigate/decide | Information request | No response |
| Customs | Enforce/detain | Documents | Missing information |
Roles/procedures follow Articles 5–17, Commission guidance and Member State rules.
Timeline: what should be done before 14 December 2027?
The regulation entered into force on 13 December 2024 and applies/enforces from 14 December 2027; Member States had to designate competent authorities by 14 December 2025; on 26 June 2026 the Commission published implementation guidelines, the Single Portal and risk database; Member States must notify penalty rules by 14 December 2026. The transition is not "wait until 2027": procurement/production cycles are long, and products on sale in 2027 may need evidence now.
The page must not present "entry into force" as "application", nor "guidance published" as "enforcement started". State entry into force/authorities/guidance/penalties/application, and note that supply-chain evidence should be built early. The website can say "we are preparing the risk map/evidence before 2027", but must not promise "we will be compliant by then".
| Date | Event | Who | What the page should state |
|---|---|---|---|
| 2024-12-13 | Entry into force | All | In force ≠ applies |
| 2025-12-14 | Member States designate authorities | Member States | Enforcement preparation |
| 2026-06-26 | Guidance/Portal/database | Commission | Tools ≠ enforcement |
| 2026-12-14 | Penalty rules notified | Member States | Penalty framework |
| 2027-12-14 | Application/enforcement | Operators | Product ban |
This timeline follows Articles 30–33 and the Commission page/guidance; enforcement follows Member State arrangements.
How should investigation/evidence be prepared?
Authorities investigate on a risk basis and may request product/supply-chain/supplier/material/process/labour/recruitment/hours/wages/grievance/remediation information within deadlines; companies must provide it quickly, verifiably and traceably. Evidence includes supply-chain maps, supplier declarations/contracts, recruitment/agent records, attendance/wages, worker interviews, audit reports, grievances/remediation and corrective plans. Failure to provide/trace may lead to a risk finding/ban. Evidence needs versioning, redaction and translation.
Acceptance checks: information-request response process/owner/deadline; evidence index; supply-chain tiers; data consistency; translation; confidentiality/personal data; remediation records. Common gaps: no evidence index; tier-1 only; expired documents; wages/attendance mismatch; no interviews; no translation; last-minute assembly. The website can say "summary available/cooperate with investigations", but must not publish customer/worker personal data.
| Evidence | Content | Source | Common gap |
|---|---|---|---|
| Supply-chain map | Tiers/countries/processes | Procurement | Tier-1 only |
| Recruitment/agents | Fees/contracts/source | HR | Not checked |
| Hours/wages | Attendance/payslips | HR/finance | Mismatch |
| Worker interviews | Freedom/documents/debt | Audit | Missing |
| Audit/corrective | Findings/plan/verification | ESG | Report only |
| Grievance/remediation | Channel/cases | Grievance | None |
| Version/translation | Date/language | Documentation | Outdated |
This evidence list is editorial; specific investigation/deadlines/materials follow the authority and Commission guidance.
How should due diligence/supplier traceability be done?
Although the regulation is not a due-diligence obligation, due diligence is the core tool to prove no forced labour: policy, risk identification/assessment, supplier mapping (to materials/labour agents), audits/interviews, contract clauses, corrective/remediation, grievance mechanism and management review. Higher-risk countries/sectors/processes need stricter checks; new suppliers/origins need pre-assessment. Audits/certification are evidence, not immunity; if risk is found, stop/correct/remediate—do not "pass the audit and continue".
Acceptance checks: policy/ownership; risk matrix; supplier onboarding/contract clauses; audit frequency/scope; corrective/remediation; grievance; training; management review. Common gaps: policy is a slogan; matrix not updated; no labour clauses; document-only audits; recruitment fees not repaid; untrusted grievance channel; no remediation budget/process.
| Step | What to do | Evidence | Common gap |
|---|---|---|---|
| Policy | Commitment/scope/responsibility | Policy | Slogan |
| Risk | Country/sector/process | Matrix | Not updated |
| Mapping | Suppliers/agents/materials | Map | Tier-1 only |
| Contract | Labour/audit/corrective | Clauses | Missing |
| Audit | Documents+interviews+site | Report | Documents only |
| Remediation | Repay fees/correct | Record | No remediation |
| Grievance | Anonymous/no retaliation | Channel | Untrusted |
| Review | Management/targets | Minutes | None |
Due diligence is editorial; methods reference ILO/OECD/Commission guidance; the regulation itself is a product ban.
How should grievance, remediation and delisting/recall be accepted?
There must be a trusted grievance channel (workers/suppliers/third parties, anonymous/no retaliation), with intake/investigation/corrective/remediation/follow-up records; if forced labour is found, stop the relevant sourcing/production, design remediation (repay recruitment fees, pay owed wages, ensure free choice, return/relocate), correct the supplier and verify; delist/recall/refund/notify customers if needed. Remediation should be victim-centred, not a PR statement.
Acceptance checks: visible/multilingual channel; intake deadline; investigation/corrective; remediation cases; delisting/recall plan; customer/authority communication; records. Common gaps: mailbox nobody monitors; retaliation; terminating the contract without remediation; not notifying customers; no recall budget; no records. The website can say "grievance/remediation mechanism", but must not publish whistleblower/worker data.
| Step | Requirement | Evidence | Common gap |
|---|---|---|---|
| Channel | Anonymous/multilingual/no retaliation | Page/hotline | Email only |
| Intake | Deadline/owner | Record | Unmanaged |
| Investigation | Independent/evidence | Report | Token |
| Remediation | Repay/pay/free choice | Record | Contract termination only |
| Delist/recall | Plan/notice | Process | None |
| Records | Retained/redacted | Archive | Missing |
Grievance/remediation is editorial; specifics follow the regulation, authority, customer contract and human-rights standards.
Which data will customers/authorities ask for?
Typically: product/component/material; supply-chain map (countries/factories/processes/agents); risk matrix; supplier policy/contract; recruitment/fees/hours/wages; worker interviews/audit reports; grievance/remediation; corrective plans; management review; ban/recall plan. The data must map to a specific product/batch/supplier, not a company-wide "human-rights statement"; personal data must be redacted/lawfully provided.
Deliver a "forced-labour evidence pack": cover (company/date/version/contact) + product/supply chain + risk matrix + policy/contract + recruitment/hours/wages + audit/interviews + grievance/remediation + corrective/verification + delisting plan. What customers fear most is "only a code of conduct, no traceability, audit findings not remediated, data inconsistent." Version and access-control the pack.
| Data item | Content/format | Owner | Use |
|---|---|---|---|
| Product/supply chain | Tiers/countries/processes | Procurement | Traceability |
| Risk matrix | Country/sector/process | ESG | Priority |
| Policy/contract | Labour/audit/corrective | Legal/procurement | Binding |
| Recruitment/hours/wages | Records/consistency | HR | Risk evidence |
| Audit/interviews | Report/findings | ESG | Verification |
| Grievance/remediation | Channel/cases | ESG/HR | Corrective |
| Delisting/recall | Plan/records | Quality/legal | Enforcement |
| Version/access | Date/redaction | Documentation | Trust |
This data list is editorial; specific fields/formats follow the customer contract, authority and privacy rules.
How should the website forced-labour/supply-chain page be written?
A public page should include: policy/commitment; scope/role; risk identification/supply-chain traceability; audits/interviews; recruitment fees/debt/hours/wages; grievance/remediation; investigation cooperation; delisting/recall; customer data request; version/contact. Write verifiably: state "we have a policy/process/evidence", not "certified/100% forced-labour-free/all suppliers compliant".
Separate "public information" from "customer/authority documents": supply-chain maps/audits/worker information are provided on a need-to-know basis, while the public page gives policy/process/grievance channel; do not publish worker/supplier sensitive data. If supplying components, state that the company supports the machine builder/customer with supply-chain evidence and do not declare the whole product compliant. Multilingual pages should match sales countries.
| Section | What to write | Evidence | Avoid |
|---|---|---|---|
| Policy | Commitment/scope/responsibility | Policy | Slogan |
| Scope/role | Products/supply chain/sales | Map | "All products" |
| Risk/traceability | Countries/processes/agents | Matrix | Tier-1 only |
| Audit/interviews | Method/frequency | Reports | Documents only |
| Recruitment/hours/wages | Fees/freedom/overtime | Records | Not checked |
| Grievance/remediation | Channel/cases/no retaliation | Records | None |
| Investigation/delisting | Cooperation/recall plan | Process | Not stated |
| Contact/version | Data request/date | Form | No entry |
This page structure is editorial; external claims must be truthful and verifiable, per the regulation, guidance, customer contract and authority.
What must not be written?
High-risk claims: "certified forced-labour-free/100% free" (no such unified certification/absolute guarantee); "an audit means compliance" (audits are evidence, not immunity); "we are small/B2B/components only, so not covered" (no threshold/product coverage); "forced labour is only in certain countries" (supply-chain risk); "EU production is exempt" (also covered); "due diligence done = safe" (result obligation); "suppliers signed the code, so we are fine" (implementation/evidence needed); "finding risk and terminating the contract is enough" (remediation needed). These are inaccurate or misstate responsibility.
Safer wording: "we have a policy/risk map/audit/grievance/remediation process"; "supply-chain evidence available on request"; "if risk is found, we stop/correct/remediate/cooperate with investigations". External promotion must also comply with advertising/fair-competition law; customer/worker information needs authorisation/redaction.
| Page wording | Problem | Suggested wording | Basis |
|---|---|---|---|
| "Certified forced-labour-free" | No unified certification | Policy/evidence/remediation | Regulation |
| "Audit = compliance" | Audit ≠ immunity | Audit+corrective+remediation | Regulation/guidance |
| "Small business exempt" | No threshold | Per product/supply chain | Regulation |
| "EU production exempt" | Also covered | Per product/sales | Regulation |
| "Due diligence = safe" | Result obligation | Evidence/remediation | Regulation |
| "Code signed = fine" | No implementation | Audit/corrective | Guidance |
| "Termination is enough" | No remediation | Remediate/verify | Guidance |
These red lines are editorial; whether a claim is false advertising/non-compliant is determined by regulators and the contract, and this is not legal advice.
Go-live acceptance checklist
Ten checks: scope/products, role, risk matrix, supply-chain traceability, recruitment/hours/wages, audits/interviews, grievance/remediation, investigation/delisting plan, customer data pack, and page wording/version. Each needs an owner, evidence and review date. The pass condition is not "the page has a policy", but that a customer/authority can see where the risk is, how it is traced and how it is remediated.
Before go-live, run one real product/supplier through: scope → supply chain → risk → recruitment/hours → audit → grievance/remediation → investigation/delisting → page wording. Any step that fails is a gap in the page or the process.
| Check | Pass condition | Evidence | If it fails |
|---|---|---|---|
| Scope/product | Product/component/material | List | Re-assess |
| Role | Import/export/distribution | Contract | Clarify |
| Risk matrix | Country/sector/process | Matrix | Assess |
| Traceability | Suppliers/agents/materials | Map | Complete |
| Recruitment/hours/wages | Fees/freedom/overtime | Records | Evidence |
| Audit/interviews | Documents+interviews+site | Reports | Audit |
| Grievance/remediation | Channel/cases/no retaliation | Records | Build |
| Investigation/delisting | Cooperation/recall plan | Process | Plan |
| Data pack | Supply chain/evidence/version | Data pack | Collect |
| Wording | No "certified/100%" | Page test | Remove |
This checklist is editorial; specific compliance requirements follow the regulation, guidance, customer contract and authority.
Who should read this, who should not, and what decisions does it support?
It suits manufacturers in Changzhou and nearby areas that export textiles/apparel, solar, electronics, auto parts, batteries/materials, light industry, equipment or bid for projects in the EU. It also suits procurement, legal, ESG, HR, quality and website teams assessing a forced-labour page. It does not suit businesses that do not sell to the EU, whose products/supply chains involve no labour risk, or want one page to replace investigation/remediation/legal advice.
Read it if an EU customer/authority is pressing for supply-chain evidence; you are preparing for 14 December 2027; you are building or revising a forced-labour page; or you need to separate code of conduct, conflict minerals, EUDR, CSDDD and the forced-labour regulation. Skip it if you treat an audit as immunity, claim "100% free", or check only tier-1. It supports self-review of scope, risk, traceability, audits, grievance/remediation, data pack and page wording.
FAQ
Is 2024/3015 a due-diligence obligation?
No. It is a product ban/result obligation: forced-labour products cannot be placed/made available/exported; authorities can request evidence during investigations. Due diligence is a prevention/proof tool, but "doing due diligence" is not automatic compliance and does not replace the product result duty.
Which products/companies are covered?
All products/sectors/origins (EU/imported), made wholly or partly with forced labour; economic operators include importers/exporters/distributors/retailers; non-EU companies selling into the EU may be covered; there is no company-size/turnover threshold.
What should be done before 14 December 2027?
Build a supply-chain map/risk matrix, supplier contracts/audits, recruitment/hours/wages evidence, grievance/remediation and an investigation/delisting plan; prepare a customer/authority evidence pack. The guidance/Portal/database were published on 26 June 2026 for risk prioritisation, but enforcement starts on 14 December 2027.
How is forced labour defined, and what are the risks?
ILO C29: work/service exacted under the menace of a penalty and not voluntarily offered; C105 requires abolition. Risks include document retention, recruitment fees/debt, forced overtime, movement restrictions, wage withholding/fines, prison/state-imposed labour, trafficking/agents. Check upstream/agents, not only the factory.
Can third-party audits/certification prove compliance?
Audits/certification are evidence, not immunity or a "unified certification"; check scope/method/interviews/corrective/remediation. If risk is found, stop/correct/remediate—do not "pass the audit and continue". The website must not claim "certified forced-labour-free".
How should the website/customer statement be written?
State policy, scope/role, risk identification/supply-chain traceability, audits/interviews, recruitment/hours/wages, grievance/remediation, investigation/delisting, data request/version; do not write "100%/all suppliers/absolutely free". Customer/authority documents are provided on a need-to-know basis; worker/supplier data is redacted.
One-sentence takeaway
A Changzhou manufacturer's forced-labour/supply-chain page should not be "a code of conduct/certification badge". It should turn scope/products, role, risk matrix, supply-chain traceability, recruitment/hours/wages, audits/interviews, grievance/remediation, investigation/delisting and the customer data pack into a verifiable checklist—so a customer/authority can see where the risk is, how it is traced and how it is remediated.
Method and limitations
This is a review of public rules and project practice, not an audit or legal opinion on any company's products, supply chain, labour, audits, remediation or law. No undisclosed customer supply-chain, worker or audit data were used. Scope, risks, evidence, remediation and acceptance items are editorial suggestions, not legal/human-rights conclusions. Specific scope, investigation, evidence, penalties and remediation depend on the regulation, Commission guidance, the competent authority and the customer contract.
Sources and scope
Information is current to 2026-11-05. The following are EU official/legal pages; their articles, guidance and Member State rules control.
- Regulation (EU) 2024/3015 on prohibiting products made with forced labour on the Union market, adopted 27 November 2024, OJ L 2024/3015, published 12 December 2024: EUR-Lex. Product ban, investigation, evidence, penalties and application date.
- European Commission, Forced Labour Regulation: European Commission. Application from 2027-12-14, authorities, guidance/Portal/risk database and product-risk approach.
- ILO Forced Labour Convention, 1930 (No. 29): International Labour Organization. Definition of forced labour (menace of penalty/non-voluntary).
- ILO Abolition of Forced Labour Convention, 1957 (No. 105): International Labour Organization. Abolition of forced labour.