CBAM Compliance Guide: The EU Carbon Border Tax in 2026
CBAM is the EU's carbon border tax. As of 2026 it moves from reporting to a definitive regime with certificates. Here's who must comply and how to report.

If you import cement, steel, aluminium, fertilizers, hydrogen, or electricity into the EU, 2026 is the year CBAM stops being a paperwork exercise and starts costing real money. For the past two years the Carbon Border Adjustment Mechanism has been in a "just tell us your numbers" phase. From January 2026, those numbers come with a price tag.
I've watched a lot of importers treat CBAM like a future problem. The conversation usually goes: "We filed our quarterly reports, our supplier sent some emissions figures, we're fine." Then they realize the definitive regime means buying certificates, getting authorized as a declarant, and having emissions data that's actually been verified — and "fine" looks a lot less comfortable.
Let's walk through what CBAM is, who it hits, and — because this is what most people are actually searching for — how to structure your reporting so you're not scrambling.
What CBAM Is and Why It Exists
CBAM stands for the Carbon Border Adjustment Mechanism. Its legal basis is Regulation (EU) 2023/956, which entered into force in 2023. People call it the "EU carbon border tax," and while that's not technically precise — it's a carbon-pricing adjustment, not a tariff — the nickname captures the practical effect well enough.
The problem CBAM is built to solve is carbon leakage. Inside the EU, producers of carbon-intensive goods pay for their emissions through the EU Emissions Trading System (EU ETS). That's a real cost. The worry is that this cost pushes production to countries with weaker climate rules, or that imported goods from those countries simply undercut EU-made products. Either way, emissions don't fall — they just move. That's the leakage.
CBAM closes the gap by mirroring the EU ETS at the border. The idea is that an importer of, say, steel from outside the EU pays a carbon price roughly equivalent to what an EU steelmaker would have paid for the same emissions. As the free allowances that EU producers currently receive under the ETS are phased out, CBAM is phased in to match. The two systems are designed to move in lockstep so that domestic and imported goods face comparable carbon costs.
You can dig into the framework on our EU CBAM standard page, but the one-sentence version is this: CBAM makes the carbon embedded in imports cost money, so that decarbonizing inside the EU doesn't just export the pollution somewhere else.
Which Goods Are Covered
CBAM does not apply to everything you import. It applies to specific carbon-intensive sectors, identified by their customs (CN) codes in Annex I of the regulation. The covered categories are:
- Cement
- Iron and steel
- Aluminium
- Fertilizers
- Electricity
- Hydrogen
Critically, CBAM also reaches a range of downstream products made from these materials — things like screws, bolts, certain tubes and pipes, and various aluminium and steel articles. This catches a lot of importers off guard. You might not think of yourself as a "steel importer," but if you bring in fasteners or structural components, some of your product line may sit inside CBAM's scope.
The practical takeaway: don't assume you're out of scope because your finished product isn't raw metal. Check your CN codes against Annex I line by line. The difference between "covered" and "not covered" can come down to a single tariff classification.
The Phases: Reporting First, Payment Later
CBAM rolls out in two distinct phases. The first was a soft landing; the second has teeth.
| Phase | Dates | What's required | Financial payment? |
|---|---|---|---|
| Transitional / reporting period | 1 Oct 2023 – 31 Dec 2025 | Quarterly CBAM reports listing imports, quantities, and embedded emissions. No certificates. | No — reporting only |
| Definitive regime | From 1 Jan 2026 | Authorized CBAM declarant status, annual CBAM declarations, verified embedded emissions, purchase and surrender of CBAM certificates | Yes — certificates must be bought and surrendered |
During the transitional period, the goal was data. Importers filed reports each quarter through the CBAM Transitional Registry, declaring the embedded emissions of their covered goods. There was no money changing hands — the EU used this window to let everyone build their data pipelines and to refine the methodology before charging anyone.
The definitive regime is the real thing. From 1 January 2026, you generally need to be an authorized CBAM declarant to import covered goods. You file an annual CBAM declaration covering the previous year's imports, the embedded emissions must be verified by an accredited verifier, and you buy CBAM certificates whose price tracks EU ETS allowance prices. You surrender certificates corresponding to the embedded emissions of what you imported, minus any carbon price already paid in the country of origin.
A note on timing: the first surrender of certificates under the definitive regime applies to 2026 imports, with the reconciliation happening the following year. So while obligations start accruing in January 2026, the cash impact of surrendering certificates lands a bit later. Don't read that as breathing room — the authorization and verification work needs to be underway now.
Who Must Comply
The obligation sits with the EU importer of the covered goods, or with the indirect customs representative where one is used. Non-EU producers don't file CBAM declarations themselves, but they're the ones who hold the emissions data, so in practice they get pulled into the process by their EU customers.
Under the definitive regime, you can't generally import covered goods unless you're an authorized CBAM declarant. That authorization is something you apply for through your national competent authority, and it's worth treating as a lead-time item — you don't want a shipment stuck because your status isn't sorted.
The 2025 Simplifications
In 2025 the EU moved to simplify CBAM, partly in response to feedback that the burden on small importers was disproportionate. The headline change was a new de minimis threshold based on the mass of goods imported, replacing the old €150-per-consignment exemption that had proven unworkable. Under the agreed simplification (the so-called "Omnibus" package), importers bringing in up to 50 tonnes of covered goods per year are exempt from CBAM obligations. The Commission estimated this would remove roughly 90% of importers — the many occasional and small-volume ones — from scope while still capturing about 99% of the embedded CO₂ emissions that CBAM is designed to address.
A couple of details worth knowing: the 50-tonne mass-based threshold applies to iron and steel, aluminium, cement, and fertilizers; hydrogen and electricity are excluded from the de minimis exemption and have their own treatment. If you exceed 50 tonnes in a year, the full obligations apply to all your covered imports, not just the excess. As with any threshold-based relief, confirm your own tonnage against the current regulation before concluding you're exempt — but the 50-tonne figure is the one to plan around. Separately, from 2027 the Commission is expected to allow use of default carbon-price values for certain third countries, which should ease the "carbon price already paid" calculation.
A Practical CBAM Reporting Checklist
This is the part most people come looking for: what actually goes in a CBAM report. Whether you're closing out a transitional-period quarterly report or building the data set for a definitive-regime declaration, the underlying information is broadly the same. Here's the structure to work from.
Per-import-shipment data
For each consignment of covered goods, your report needs:
- Goods identification — the CN code and a description of the goods.
- Quantity — the amount imported, in the unit CBAM specifies for that good (typically tonnes; megawatt-hours for electricity).
- Country of origin — where the goods were produced.
- Installation details — identification of the production installation, including its location, where required.
Emissions data
This is the heart of CBAM, and the part that depends on your suppliers cooperating:
- Embedded direct emissions — the emissions from the production process itself, expressed per tonne of goods.
- Embedded indirect emissions — the emissions from the electricity consumed during production.
- Methodology used — whether emissions are based on actual measured data from the installation or on default values, and which calculation method was applied.
A recurring pain point: in the early transitional period, the EU allowed default values when actual supplier data wasn't available. Under the definitive regime, the expectation shifts toward actual, verified emissions data. If you've been leaning on defaults, now is the time to get your suppliers producing real numbers — because verification of made-up figures isn't a thing.
Carbon price already paid
- Carbon price in the country of origin — any carbon price effectively paid where the goods were produced, with documentation. This matters because it reduces how many CBAM certificates you ultimately surrender. If your supplier's country already charges them for carbon, you shouldn't pay twice.
Process and governance
- Verification — under the definitive regime, embedded emissions must be verified by an accredited verifier. Build that relationship before you need the sign-off, not during a filing crunch.
- Records and audit trail — keep the supporting data. Customs and competent authorities can come back to you, and "the supplier emailed me a spreadsheet once" is not a defensible record.
- Filing channel and deadline — transitional reports went through the CBAM Transitional Registry within one month of each quarter's end. Definitive-regime declarations are annual. Know which registry and which deadline applies to you.
If you set this up as a repeatable template — one row per shipment, with columns for CN code, quantity, origin, direct emissions, indirect emissions, methodology, and carbon price paid — you've built most of what you need. The hard part is rarely the form; it's getting clean emissions data out of suppliers who'd rather not share it.
How CBAM Connects to CSRD, the GHG Protocol, and ISSB
CBAM doesn't live in isolation. If your organization is already doing sustainability reporting, a lot of the underlying carbon accounting overlaps — and treating these as one data problem rather than four separate ones saves real effort.
Start with the GHG Protocol Corporate Standard. It's the foundational methodology most carbon accounting is built on, splitting emissions into Scope 1 (direct), Scope 2 (purchased energy), and Scope 3 (value chain). CBAM's "embedded direct emissions" and "embedded indirect emissions" map naturally onto these concepts. The supplier emissions data you chase for CBAM is, from your own corporate-reporting perspective, Scope 3 value-chain data. Same numbers, two purposes.
That feeds directly into CSRD, the Corporate Sustainability Reporting Directive. Companies in scope for CSRD already have to disclose climate impacts across their value chain. If you're collecting embedded-emissions data from your steel or aluminium suppliers for CBAM, you're building exactly the kind of upstream data CSRD wants. Run the two programs together and your suppliers get one data request instead of two.
The same logic extends globally through ISSB IFRS S1/S2, the ISSB's sustainability and climate disclosure standards that many jurisdictions outside the EU are adopting. IFRS S2 leans heavily on the GHG Protocol for emissions measurement, so the data architecture you build for CBAM and CSRD carries over to ISSB reporting too. One carbon data backbone, multiple regulatory outputs.
It's also worth noting CBAM is part of a broader EU pattern of pushing environmental accountability onto importers — the same logic that drives the EU Deforestation Regulation, which makes importers prove their commodities aren't linked to deforestation. The EU is increasingly making the company that brings a product across the border responsible for what happened upstream. CBAM is the carbon version of that idea.
The Bottom Line
CBAM has quietly shifted from a reporting drill to a financial obligation. The transitional period gave everyone two years to get their data houses in order; the definitive regime starting January 2026 turns embedded emissions into a cost.
If you import covered goods, three things deserve your attention right now: get authorized as a CBAM declarant if you need to be, line up an accredited verifier, and — most importantly — get your suppliers producing actual, verifiable emissions data instead of default placeholders. The companies that struggle in 2026 won't be the ones who misunderstood the rule. They'll be the ones who waited for clean data that their suppliers were never asked to provide.
Build the reporting template once, wire it into your CSRD and GHG Protocol work, and CBAM becomes one more output of a carbon data system you needed anyway — not a fire drill four times a year.
FAQ
What is CBAM in simple terms?
CBAM is the EU Carbon Border Adjustment Mechanism, sometimes called the EU carbon border tax. It puts a carbon price on certain imported goods so that products made outside the EU face a cost comparable to what EU producers pay under the EU Emissions Trading System. It currently covers cement, iron and steel, aluminium, fertilizers, electricity, and hydrogen.
When does CBAM start charging money?
CBAM ran as a reporting-only transitional period from 1 October 2023 to the end of 2025, with no financial payment. The definitive regime begins on 1 January 2026, when authorized CBAM declarants must start buying and surrendering CBAM certificates that correspond to the embedded emissions in their imports.
Who has to comply with CBAM?
CBAM obligations fall on the EU importer of covered goods, or on the indirect customs representative where applicable. Under the definitive regime you generally need to be an authorized CBAM declarant to import covered goods. Non-EU producers do not file CBAM declarations themselves, but they are usually asked to supply embedded emissions data to their EU customers.
What goods does CBAM cover?
CBAM covers cement, iron and steel, aluminium, fertilizers, electricity, and hydrogen, plus a range of downstream products such as screws, bolts, and certain aluminium and steel articles. The exact list is defined by CN customs codes in Annex I of Regulation (EU) 2023/956.
What is a CBAM quarterly report?
During the transitional period, importers had to file a CBAM report each quarter listing the covered goods imported, their quantities, the embedded direct and indirect emissions, and any carbon price already paid in the country of origin. Reports were submitted through the CBAM Transitional Registry within one month of the quarter end.
How does CBAM relate to CSRD and the GHG Protocol?
CBAM is a customs and carbon-pricing mechanism, while CSRD and ISSB standards are corporate disclosure frameworks. They share underlying carbon accounting concepts, often built on the GHG Protocol. The embedded-emissions data you gather for CBAM overlaps with the Scope 3 and value-chain data you report under CSRD and ISSB.
References
- Regulation (EU) 2023/956 (CBAM) — Official Journal of the EU
- Carbon Border Adjustment Mechanism — European Commission, Taxation and Customs Union
- CBAM Guidance and Resources for Importers — European Commission
- EU Emissions Trading System (EU ETS) — European Commission, Climate Action
Related Topics
Related Standards
Related Articles
EU AMLA and AMLD6: What the 2026 Anti-Money Laundering Reset Actually Means
The EU's 2024 AML package created a new supervisor (AMLA), a single AML rulebook, and a beneficial ownership regime that starts biting in mid-2026. Here's what changes.
EU PPWR: What the Packaging Regulation Means for Anyone Shipping into Europe in 2026
Regulation (EU) 2025/40 — the Packaging and Packaging Waste Regulation — becomes binding on 12 August 2026. It changes packaging design, e-commerce parcels, recycled content, and EPR for every product placed on the EU market.
The EU Cyber Resilience Act Is Coming for Your Product in 2026-2027
The EU Cyber Resilience Act applies to almost every digital product sold in Europe. Here's what it requires, when it kicks in, and how it affects software, IoT, and connected devices.
NIS2 vs DORA: Which EU Digital Resilience Rule Applies to You in 2026?
NIS2 and DORA are both EU cybersecurity regulations that took effect in 2024-2025. They overlap, they conflict, and they probably both apply to you. Here's how to tell them apart.