When the German Supply Chain Due Diligence Act (LkSG) took effect on January 1, 2023, it marked a regulatory turning point. Ethical supply chain management became a legal obligation with penalties reaching eight million euros or 2% of annual global turnover. Yet many compliance teams still stumble over misconceptions, treating the LkSG as either a voluntary initiative they can defer or a German-only problem they can ignore.
These myths persist because they're comforting. They allow you to postpone difficult conversations about supplier visibility, budget allocation, and operational accountability. But they also expose your organization to enforcement action, reputational damage, and exclusion from public contracts. Let's dismantle them.
Myth 1: "This is a German law, so it only affects German companies"
Reality: The LkSG applies to any company with its headquarters, principal place of business, registered office, or branch office in Germany. This includes German subsidiaries of multinational corporations. If you operate a subsidiary in Germany with at least 3,000 employees (or more than 1,000 employees as of January 1, 2024), you're in scope regardless of where your parent company is domiciled.
Section 4 requires you to establish an "appropriate and effective risk management system" across your global supply chain, from raw material extraction to end customer delivery. Your compliance framework must account for operations in every jurisdiction where the LkSG applies, which means coordinating due diligence obligations across multiple legal entities and reporting lines.
Myth 2: "We can satisfy this with our existing CSR program"
Reality: The LkSG mandates specific, auditable actions with defined timelines and enforcement mechanisms. Section 5 requires an "appropriate risk analysis" at least annually and on an ad hoc basis whenever you introduce new products, projects, or business fields. Section 6 requires a policy statement defining human rights and environmental expectations for employees and suppliers, plus "appropriate procurement strategies and purchasing practices" to prevent or minimize identified risks.
Your CSR team may have laid valuable groundwork, but unless you've appointed a human rights officer to monitor risk management, established a complaint mechanism that guarantees anonymity and protection from retaliation (Section 8), and submitted an annual report to Germany's Federal Office of Economic Affairs and Export Control (BAFA) within four months of fiscal year-end (Section 10), you're not compliant. The LkSG requires operational integration, not aspirational statements.
Myth 3: "Our due diligence stops at direct suppliers"
Reality: Section 9 explicitly extends your obligations to indirect suppliers when you have "substantiated knowledge" of a human rights or environmental violation. Your complaint mechanism (which Section 8 requires you to make publicly accessible) must allow reporting of violations throughout your supply chain, including at indirect suppliers.
This creates a challenging dynamic: you're not required to audit every tier-three supplier proactively, but once you receive credible information about a violation, you must conduct a risk analysis and implement preventative measures. You can't plead ignorance if your complaint mechanism surfaces an issue and you fail to act. This means your procurement teams need clear escalation protocols, and your risk analysis framework must accommodate rapid deployment when substantiated knowledge triggers Section 9 obligations.
Myth 4: "Compliance is a documentation exercise"
Reality: Section 7 requires you to take "appropriate remedial action to prevent, end, or minimize the extent of the violation" without undue delay upon discovering a violation. In certain circumstances, the LkSG mandates termination of the business relationship. BAFA has "far-reaching supervisory powers," including the authority to enter business premises, demand information, and inspect documents.
On April 18, 2023, the National Garment Workers Federation, in collaboration with ECCHR and FEMNET, filed the first legal complaint under the LkSG against the garment industry, citing continued safety inspection failures and labor rights violations in Bangladesh clothing factories a decade after the Rana Plaza collapse. FEMNET Chair Dr. Gisela Burckhardt stated: "Now is the time to use the German law to finally oblige such companies that do not want to voluntarily take responsibility for the people in their supply chains to do so."
Your documentation must demonstrate action, not intent. BAFA's annual questionnaire contains open and closed questions plus multiple-choice options, and you must answer "completely and truthfully." You must publish this report on your website for seven years. This isn't a compliance theater exercise; it's an evidence trail that BAFA will scrutinize during investigations.
Myth 5: "We can build a standalone LkSG program"
Reality: Effective compliance requires viewing the LkSG holistically alongside France's Duty of Vigilance Law, the UK's Modern Slavery Act, and California's Transparency in Supply Chains Act. These regimes overlap in scope but diverge in specifics, creating compliance complexity if you treat each as a separate workstream.
Your risk management system (Section 4) should identify where regulatory obligations intersect and where they conflict. For instance, your UK Modern Slavery Act statement and your LkSG policy statement (Section 6) should reflect a unified human rights strategy, not competing narratives. Your complaint mechanism should serve multiple regulatory requirements simultaneously, provided it meets the most stringent standard (confidentiality, protection from retaliation, impartiality).
Technology becomes essential here. Risk analysis platforms that aggregate supplier data, flag regulatory triggers across jurisdictions, and generate audit trails will outperform manual processes as your employee threshold drops from 3,000 to 1,000 in 2024. But technology doesn't substitute for strategic integration; it amplifies it.
What to do instead
Start with a jurisdictional audit: identify every entity that meets the LkSG's scope criteria now or will by January 2024. Map your supply chain tiers and flag high-risk categories (child labor, forced labor, occupational health and safety, mercury use, hazardous waste handling). Appoint your human rights officer and define their authority to halt procurement decisions when risks surface.
Build your complaint mechanism with accessibility and confidentiality as design principles, not afterthoughts. Train procurement teams on Section 9 triggers so they recognize when substantiated knowledge creates an obligation to act on indirect suppliers.
Most importantly, integrate the LkSG into your enterprise risk framework rather than treating it as a standalone compliance module. The shift from voluntary CSR to mandatory due diligence isn't a German anomaly; it's a global trajectory. Your compliance architecture should reflect that reality.
