EUDR Supply Chain Traceability Requirements
Documentation Requirements
Required Information
- Article 9 documentation
- Annex II information
- Article 2(28) geolocation data
- 5-year retention period
Due Diligence Systems
Required components include:
- Information collection (Article 9)
- Risk assessment measures (Article 10)
- Risk mitigation measures (Article 11)
- System maintenance (Article 12)
Information Sharing
Downstream Communication
Operators must share:
- Due diligence documentation
- Risk assessment results
- Compliance information
- Supporting documentation
Responsibility Chain
- Downstream operators retain obligations
- Information sharing requirements
- Independent due diligence maintenance
- Verification responsibilities
System Security
Information System
- Data protection compliance
- Security measure implementation
- Information integrity protection
- Confidentiality maintenance
Compliance Verification
- Information accuracy requirements
- Authority reporting obligations
- Documentation maintenance
- System monitoring
Record Keeping
Documentation Management
- 5-year retention requirement
- Complete information maintenance
- Accessibility requirements
- Update procedures
Frequently Asked Questions
Q: How long must documentation be maintained?
A: Information must be kept for 5 years.
Q: Can operators rely on upstream due diligence?
A: While they can use upstream information, they retain their own due diligence obligations.
Q: What security measures protect shared information?
A: The Information System includes security measures ensuring data integrity and confidentiality.
Q: What must due diligence systems include?
A: Systems must include information collection, risk assessment, and risk mitigation measures.