Category: Sustainability and ESG

Non-Financial Reporting

Also known as: NFR, Non-Financial Disclosure, Sustainability Reporting, ESG Reporting

Simply put

Non-financial reporting is the practice of disclosing information about a company's performance that isn't captured by traditional financial figures, such as its environmental impact, labor practices, human rights policies, and community impact. It gives stakeholders a broader picture of how an organization operates and affects the world around it. Depending on the jurisdiction, such reporting may be legally required or undertaken voluntarily.

Formal definition

Non-financial reporting (NFR) refers to the process of gathering and disclosing information about an organization's performance beyond conventional financial statements, typically covering environmental, social, ethical, governance, labor, human rights, community, and supply chain dimensions. It is a comprehensive umbrella term encompassing several distinct reporting forms, including corporate social responsibility (CSR) reporting, integrated reporting (IR), Sustainable Development Goal (SDG) reporting, GRI-based reporting, and greenhouse gas (GHG) reporting. Reporting obligations are established under either mandatory regimes or voluntary frameworks, and the applicable requirements vary significantly by jurisdiction, sector, and entity type; the distinction between mandated and voluntary disclosure has material implications for scope, assurance, and comparability. This entry is educational and not legal, audit, or compliance advice, and does not address the specific disclosure requirements of any particular regime, which practitioners should verify against the applicable rules.

Why it matters

Non-financial reporting has become a significant area of corporate disclosure because financial statements alone do not capture the full range of factors that influence an organization's long-term performance, resilience, and reputation. Environmental impact, labor practices, human rights policies, community impact, and supply chain conduct can carry material consequences for a business, yet they fall outside conventional financial figures. Disclosing this information gives investors, regulators, and other stakeholders a broader picture of how an organization operates and the effects it has on the world around it.

The stakes are heightened by the shifting regulatory landscape. Non-financial reporting mandates are being considered or adopted in many jurisdictions, which means that what was once largely voluntary disclosure is, in certain contexts, becoming a legal requirement. Because obligations vary significantly by jurisdiction, sector, and entity type, boards and management face the challenge of determining which requirements apply to them and how to meet them. The distinction between mandated and voluntary disclosure carries material implications for the scope of reporting, the level of assurance expected, and the comparability of the resulting information.

Comparability and reliability are recurring concerns. Because non-financial reporting is an umbrella covering multiple forms of reporting prepared under different frameworks, inconsistency in what is disclosed and how can impede stakeholders from efficiently processing and interpreting the information. This creates pressure on governance and assurance functions to ensure that disclosures are accurate, complete, and prepared against a defined and appropriate framework, rather than presented in a way that risks misleading users.

Who it's relevant to

Boards and audit or sustainability committees

The board and its relevant committees typically hold oversight responsibility for the integrity of corporate disclosures, including non-financial information. This involves satisfying themselves that management has identified applicable reporting obligations, selected an appropriate framework, and established adequate processes, rather than preparing the disclosures themselves. Where obligations are mandatory, oversight of compliance is generally sharper; where reporting is voluntary, the committee still has an interest in ensuring disclosures are accurate and not misleading.

General counsel and compliance officers

Because non-financial reporting obligations vary significantly by jurisdiction, sector, and entity type, legal and compliance functions are typically relied upon to determine which mandatory requirements apply and to distinguish binding rules from voluntary frameworks. They generally support the organization in mapping requirements and managing the risk that disclosures fall short of applicable standards or misstate the organization's position.

Management and reporting preparers

Management owns the operational task of gathering and disclosing data on environmental, social, ethical, governance, labor, human rights, community, and supply chain performance. This includes selecting among the various reporting forms, such as CSR, integrated, SDG, GRI-based, or GHG reporting, implementing data collection processes, and preparing disclosures in line with the chosen or mandated framework.

Internal audit and assurance providers

Assurance functions may be called upon to test the reliability of non-financial disclosures and the processes that produce them. The level and nature of assurance often depend on whether reporting is mandated or voluntary, since this influences expectations around scope and comparability. Their work generally focuses on whether disclosures are supported by adequate underlying data and controls.

Investors and external stakeholders

Investors, regulators, and other stakeholders use non-financial reporting to gain a broader picture of how an organization operates and affects its environment and community. Inconsistency across frameworks and between mandatory and voluntary disclosure can impede their ability to efficiently process and compare information, making the reliability and comparability of these disclosures a matter of particular interest to this group.

Inside NFR

Environmental Disclosure

Information relating to an entity's environmental impact and dependencies, which may include greenhouse gas emissions, energy and resource use, climate-related risks and opportunities, and pollution or waste metrics. The specific content and format depend heavily on the applicable regime; in some jurisdictions certain climate disclosures are becoming legal requirements, while elsewhere they remain voluntary or framework-driven.

Social and Human Capital Information

Disclosures addressing matters such as workforce composition, health and safety, human rights, labour practices, diversity, and community or supply-chain considerations. The scope and mandatory status vary by jurisdiction, sector, and entity type.

Governance-Related Disclosure

Information describing governance structures, board oversight of non-financial matters, remuneration linkages, and accountability arrangements. This typically explains how oversight of environmental and social topics is allocated between the board, its committees, and management.

Reporting Frameworks and Standards

Voluntary and, increasingly in some jurisdictions, mandatory reference points that shape non-financial reporting content. These generally provide structure and comparability but differ in scope and legal force; no single framework is universally mandatory across all jurisdictions and entity types.

Materiality Determination

The process of deciding which non-financial matters are significant enough to disclose. Approaches differ across regimes, with some emphasising impact on the entity's value and others considering the entity's impact on people and the environment; the applicable concept of materiality depends on the governing regime.

Assurance and Verification

Arrangements under which non-financial information may be subject to internal or external assurance. The level of assurance (for example, limited versus reasonable) and whether it is required at all generally vary by jurisdiction and standard, and responsibility for the underlying data typically sits with management while independent assurance is a separate function.

Common questions

Answers to the questions practitioners most commonly ask about NFR.

Is non-financial reporting purely voluntary, or can it be legally required?

It is not accurate to treat non-financial reporting as inherently voluntary. Whether it is mandatory depends on jurisdiction, sector, entity size, and listing status. In some jurisdictions, certain entities face binding disclosure obligations under statute, regulation, or listing rules, while other entities in the same market may report on a voluntary basis against frameworks or codes. Many organizations also produce a mix of mandatory and voluntary disclosures within the same report. Because the requirements vary by facts and jurisdiction, an entity should confirm its specific obligations rather than assume a single answer applies. This entry is educational and not legal or compliance advice.

Does 'non-financial' mean the information is unaudited or less rigorous than financial statements?

No. The label 'non-financial' describes the subject matter rather than the level of rigor or the presence of assurance. Non-financial information can be subject to internal controls and, in some cases, external assurance, though the type and depth of assurance often differ from a financial statement audit and may vary by framework and jurisdiction. Assurance over such disclosures is frequently limited rather than reasonable assurance, and practices continue to evolve. The rigor applied generally depends on the applicable requirements, management's own choices, and any assurance engagement's scope, so the term itself does not imply weaker controls.

Which function should own the preparation of non-financial disclosures?

Ownership typically sits with management rather than the board or an assurance function, though the specific accountable owner varies by organization. Depending on the subject matter, responsibility may rest with functions such as sustainability, finance, legal, human resources, or operations, often coordinated through a designated lead. The board or a relevant committee generally exercises oversight of the reporting process and approves disclosures where required, but oversight is distinct from operational preparation. Clarifying who prepares, who reviews, and who oversees helps avoid gaps and is generally documented in the reporting governance structure.

How can an organization establish reliable controls over non-financial data?

Controls over non-financial data generally follow the same principles applied to financial information: defining data sources, assigning responsibilities, documenting methodologies, and testing both control design and operating effectiveness. Because much non-financial data originates outside core financial systems and may rely on estimates or third-party inputs, organizations often need additional controls around data collection, calculation, and consistency across periods. The three lines model can help delineate operational ownership, oversight, and independent assurance. The appropriate control environment depends on the entity's risk profile, applicable requirements, and management judgment.

What is the board's role in overseeing non-financial reporting?

The board, often acting through a committee such as audit, risk, or a dedicated sustainability committee, typically oversees the integrity of the reporting process and, where required, approves the disclosures. This oversight role is distinct from management's operational responsibility for preparing the information. In many jurisdictions and under various governance codes, boards are expected to satisfy themselves that reporting processes are reliable and that material matters are appropriately disclosed. The precise duties depend on jurisdiction, entity type, and any applicable code or regulation, so boards should confirm the requirements that apply to them.

Should an organization seek external assurance over non-financial disclosures?

Whether to obtain external assurance depends on applicable requirements, stakeholder expectations, and management and board judgment. In some jurisdictions certain assurance may be mandated for specified entities or disclosures, while in others it remains voluntary. Where assurance is obtained, it is commonly limited assurance rather than reasonable assurance, and the scope and standard used should be clearly stated. Organizations often weigh the credibility benefits against cost and data readiness, and may phase in assurance over time. This entry is educational and does not constitute audit, legal, or compliance advice.

Common misconceptions

Non-financial reporting is voluntary everywhere and carries no legal weight.

Whether non-financial reporting is voluntary or mandatory depends on the jurisdiction, sector, and entity type. In some jurisdictions specified disclosures are legal requirements under statute or listing rules, while in others they remain non-binding, framework-driven practice. The status must be assessed for each entity's circumstances.

Because it is called 'non-financial,' this information is less rigorous and does not need the same controls or oversight as financial reporting.

Non-financial information generally benefits from disciplined data governance, controls, and board oversight. Accountability for preparing and controlling the data typically sits with management, while the board and its committees generally exercise oversight, and independent assurance, where obtained, is a separate assurance function.

Adopting one reporting framework satisfies all non-financial reporting obligations.

Frameworks differ in scope and purpose, and none is universally mandatory. Applying a single framework may not meet the requirements of every applicable regime, and entities may need to reconcile multiple standards or legal requirements depending on where and how they operate.

Best practices

Confirm which non-financial disclosures are legally required versus voluntary for the entity, taking account of jurisdiction, sector, and entity type, and document the basis for that assessment.

Clarify accountability by assigning data preparation and control responsibilities to management while ensuring the board or relevant committee exercises documented oversight of non-financial reporting.

Establish a defensible materiality process that identifies which concept of materiality applies under the governing regime and records how significant matters were selected for disclosure.

Apply data governance and internal controls to non-financial information comparable in discipline to those used for financial data, addressing both control design and operating effectiveness.

Consider the appropriate level of independent assurance where relevant or required, and keep the assurance function distinct from the management function that prepares the information.

Where multiple frameworks or legal requirements apply, map and reconcile them rather than assuming a single framework satisfies all obligations, and treat entries and frameworks as educational reference points rather than legal or audit advice.