ESG has moved from voluntary messaging to a binding SEBI disclosure obligation. The Business Responsibility and Sustainability Report (BRSR) is mandatory for India’s largest listed companies, and BRSR Core assurance is expanding each year. Boards that treat ESG as a marketing exercise now face regulatory and legal exposure. Altacit Global’s ESG advisory practice helps companies build compliant, defensible ESG reporting frameworks that stand up to SEBI scrutiny and assurance review.
Key Takeaways
- BRSR is mandatory for the top 1,000 listed companies in India by market capitalisation.
- BRSR Core adds reasonable assurance on nine key ESG attributes, rolled out in phases of top 150 companies from FY 2023-24, expanding to the top 250 and beyond.
- ESG and CSR are legally distinct: ESG is a disclosure and risk obligation under SEBI rules; CSR is a spending obligation under Section 135 of the Companies Act, 2013.
- Value chain ESG disclosure applies on a comply-or-explain basis, extending obligations to suppliers and vendors.
- Greenwashing carries legal risk under the CCPA’s 2024 Guidelines and SEBI disclosure rules unverified environmental claims can trigger penalties.
What Is ESG and Why It's Now a Legal Obligation
ESG stands for Environmental, Social, and Governance, a framework for measuring how a company manages its environmental impact, social responsibilities, and governance practices. In India, ESG is now a legal disclosure obligation, not a voluntary branding choice.
SEBI made ESG reporting binding through the BRSR framework. The top 1,000 listed companies by market capitalisation must file a BRSR with their annual report. This shifts ESG from investor-relations messaging to a regulated compliance duty enforced by the Securities and Exchange Board of India.
The BRSR framework is built on the nine principles of the National Guidelines on Responsible Business Conduct (NGRBC). These nine principles cover ethics and transparency, product life-cycle sustainability, employee wellbeing, stakeholder engagement, human rights, environmental protection, responsible policy advocacy, inclusive growth, and consumer value. Every BRSR disclosure maps to these principles.
For CFOs and company secretaries, the change is practical. ESG data now sits inside the annual report, a document that carries statutory liability for accuracy. Misstatements are no longer a reputational risk alone; they are a disclosure risk. For the broader statutory context on how SEBI regulates listed companies, refer to our Banking and Finance Law guide for businesses and lenders.
Business Responsibility and Sustainability Report (BRSR): Who Must File
The BRSR is mandatory for the top 1,000 listed companies in India, ranked by market capitalisation. SEBI introduced the requirement to standardise how listed companies report their ESG performance.
The BRSR replaced the earlier Business Responsibility Report (BRR) and demands far more granular, quantitative disclosure. A company must report against each of the nine NGRBC principles across three sections:
- General disclosures: company details, products, employees, and operational reach.
- Management and process disclosures: the policies, governance structures, and processes that support responsible conduct.
- Principle-wise performance disclosures: quantitative and qualitative data for each of the nine NGRBC principles.
If your company sits inside the top 1,000 by market cap, BRSR filing is not optional. The report forms part of your annual report and must be filed with the stock exchanges. Companies outside the top 1,000 may file voluntarily, and many do to satisfy investor expectations.
BRSR Core: Assurance Requirement Expansion
BRSR Core is a subset of the full BRSR that requires independent assurance. SEBI introduced it to add credibility to the most material ESG data points, which are grouped as nine key ESG attributes covering areas such as greenhouse gas emissions, water consumption, energy use, and employee wellbeing.
The assurance requirement is being phased in by market capitalisation. Here is the rollout:
Phase | Companies covered | Effective from |
Phase 1 | Top 150 listed companies | FY 2023-24 |
Phase 2 | Top 250 listed companies | Subsequent year |
Phase 3 onward | Expanding to more companies | Progressive rollout |
Reasonable assurance means an independent assurance provider verifies the accuracy of the reported ESG attributes. This raises the bar. Data that once sat in a policy document now faces external verification, and any gap between claim and evidence becomes visible during assurance.
For finance and sustainability teams, BRSR Core changes the workload. You need auditable data trails source records, measurement methodologies, and internal controls for every assured attribute. Altacit Global helps companies build the documentation and control frameworks that survive assurance review. For a complete treatment of BRSR Core obligations, assured KPIs, and assurance provider requirements, see our BRSR Core deep-dive guide.
ESG and CSR: How They Differ Legally
ESG and CSR are frequently confused, but they carry different legal obligations under different statutes. ESG is a disclosure and risk-management obligation under SEBI’s BRSR framework. CSR is a mandatory spending obligation under Section 135 of the Companies Act, 2013.
The distinction matters because compliance with one does not satisfy the other. A company can meet its CSR spend and still fail its ESG disclosure duty.
Feature | ESG | CSR |
Governing law | SEBI LODR Regulations (BRSR framework) | Section 135, Companies Act, 2013 |
Core obligation | Disclose ESG performance and risk | Spend 2% of average net profit on eligible activities |
Who it applies to | Top 1,000 listed companies by market cap | Companies meeting net worth, turnover, or profit thresholds |
Nature | Disclosure and risk management | Financial spending and implementation |
Regulator | SEBI | Ministry of Corporate Affairs |
Assurance | Required for BRSR Core attributes | Reporting through the board’s report and CSR-2 filing |
CSR looks backward at how a company spends a share of its profit on social causes. ESG looks forward at how a company manages environmental, social, and governance risk across its operations and value chain. For a detailed treatment of CSR obligations including qualifying thresholds, eligible activities, and the CSR-2 filing requirement see our CSR compliance guide.
Value Chain ESG Disclosure: Supplier and Vendor Obligations
Value chain ESG disclosure extends BRSR reporting beyond the company itself to its suppliers and vendors. Under BRSR Core, the top listed companies must disclose ESG data for their value chain partners on a comply-or-explain basis.
Comply-or-explain means a company either reports the required value chain data or explains why it cannot. Value chain partners are generally defined as those accounting for a significant share of the company’s purchases and sales, a threshold that captures major suppliers and customers.
This obligation reaches deep. A listed company can no longer treat its ESG performance as an internal matter. It must gather emissions, labour, and governance data from vendors that may have no reporting systems of their own.
For procurement and supply chain teams, the practical steps are clear:
- Map your material value chain partners by purchase and sales volume.
- Build ESG data requests into supplier contracts and onboarding.
- Document your explanation where a partner cannot supply data, so the comply-or-explain record is defensible.
Altacit Global advises companies on structuring supplier ESG clauses and value chain disclosure records that meet SEBI’s comply-or-explain standard.
Greenwashing: Legal Risk Under Consumer Protection and SEBI Rules
Greenwashing is making false, exaggerated, or unverified environmental claims about a product, service, or business practice. In India, greenwashing now carries direct legal risk under two regimes: the Consumer Protection Act and SEBI’s disclosure rules.
The Central Consumer Protection Authority (CCPA) issued Guidelines for Prevention and Regulation of Greenwashing in 2024. These guidelines prohibit misleading environmental claims and require that any green claim be backed by verifiable evidence. Vague terms “eco-friendly,” “green,” “sustainable” must be substantiated with accessible data.
The SEBI angle is separate but equally serious. A BRSR disclosure is a statutory filing. An environmental claim in a BRSR that cannot be supported by evidence is a misstatement in a regulatory document, which exposes the company to SEBI action.
Three practices raise greenwashing risk:
- Unsubstantiated claims: describing a product as sustainable without measurement data to prove it.
- Selective disclosure: highlighting one positive metric while omitting material negative impacts.
- Aspirational statements framed as fact: presenting future targets as achieved results.
The BRSR Core assurance requirement is, in part, an anti-greenwashing tool. Independent verification of ESG attributes makes unsupported claims harder to sustain. Companies that align their marketing claims with their assured BRSR data reduce exposure on both the consumer protection and securities fronts. For a full analysis of greenwashing legal risk and how to structure defensible environmental claims, see our greenwashing legal risk guide.
Building an ESG Compliance Framework: Where to Start
An ESG compliance framework is the set of policies, data systems, and controls that lets a company meet its BRSR and BRSR Core obligations accurately. The most effective way to build one is a sequenced, six-step approach.
- Confirm your applicability. Check your market capitalisation ranking to determine whether full BRSR, BRSR Core assurance, or voluntary reporting applies to you. Applicability drives every step that follows.
- Map disclosures to the nine NGRBC principles. Build a matrix that ties each required data point to its NGRBC principle and identifies the internal owner responsible for the data.
- Establish data systems and controls. Set up measurement methodologies, source-record retention, and internal controls for each ESG attribute. BRSR Core assurance requires auditable data, so build for verification from the start.
- Extend to your value chain. Identify material suppliers and customers, embed ESG data requests into contracts, and prepare comply-or-explain documentation for gaps.
- Align marketing with disclosure. Review public environmental claims against your BRSR data to close greenwashing exposure under the CCPA’s 2024 Guidelines.
- Institute board oversight. Assign ESG accountability at board level, since BRSR sits inside the annual report and carries statutory liability for accuracy. Our directors’ liability guide covers the personal exposure of board members who sign off on materially inaccurate disclosures.
Companies that treat these steps as a one-time filing exercise tend to struggle at assurance. Companies that build durable systems pass assurance and reduce disclosure risk year on year. Altacit Global’s ESG advisory practice guides companies through each of these six steps, from applicability assessment to board-level governance.
Turn ESG Compliance Into a Defensible Position
ESG is now a disclosure obligation with statutory teeth. BRSR is mandatory, BRSR Core assurance is expanding, and greenwashing carries real penalties under the CCPA’s 2024 Guidelines and SEBI rules. Companies that build auditable data systems and board-level oversight now will pass assurance and reduce legal exposure. Altacit Global’s ESG advisory practice with offices in Chennai, Bangalore, and Hyderabad helps listed and large private companies build compliant, defensible ESG reporting frameworks. To discuss your ESG compliance, contact us at info@altacit.com.
Frequently Asked Questions: ESG Law India
Q1: Is ESG reporting mandatory in India?
Yes, for the top 1,000 listed companies by market capitalisation. SEBI requires these companies to file a Business Responsibility and Sustainability Report (BRSR) with their annual report. Companies outside the top 1,000 may report voluntarily.
Q2: What is the difference between BRSR and BRSR Core?
BRSR is the full sustainability disclosure filed by the top 1,000 listed companies. BRSR Core is a subset of nine key ESG attributes that require independent reasonable assurance. BRSR Core is being phased in by market capitalisation, starting with the top 150 companies from FY 2023-24.
Q3: How is ESG different from CSR in Indian law?
ESG is a disclosure and risk obligation under SEBI’s BRSR framework. CSR is a mandatory spending obligation under Section 135 of the Companies Act, 2013, requiring qualifying companies to spend 2% of average net profit on eligible activities. Meeting your CSR spend does not satisfy your ESG disclosure duty.
Q4: Can a company be penalised for greenwashing in India?
Yes. The Central Consumer Protection Authority’s 2024 Guidelines prohibit false or unverified environmental claims. Separately, an unsupported environmental claim in a BRSR filing is a misstatement in a statutory document and can expose the company to SEBI action.
Q5: Does BRSR apply to unlisted or private companies?
BRSR is currently mandatory only for the top 1,000 listed companies by market capitalisation. Large private companies are not yet covered, though many adopt ESG reporting to meet investor, lender, and value chain expectations. Value chain disclosure obligations can indirectly reach private suppliers of listed companies.
Q6: What are the nine NGRBC principles?
The nine principles of the National Guidelines on Responsible Business Conduct cover ethics and transparency, product life-cycle sustainability, employee wellbeing, stakeholder engagement, human rights, environmental protection, responsible policy advocacy, inclusive growth, and consumer value. Every BRSR disclosure maps to these nine principles.
