- For US buyers, the rules that most change what procurement asks suppliers are the Uyghur Forced Labor Prevention Act and Section 307 of the Tariff Act. Companies that sell into the EU also face the EU Forced Labour Regulation, the EU due diligence directive and product passport rules.
- Each rule has a different status: some are enforced today, some have confirmed dates and some depend on acts not yet adopted. This page separates confirmed from indicative.
- Underneath, they ask for the same things: who the supplier is and where it produces, dated evidence, and a record of every decision.
- Each row links to a guide with official sources, a review date, and what is obligation, good practice or Traza's interpretation.
Which regulations affect supplier management?
More rules now look not just at what you buy, but at who made it and how. For procurement, that means new questions for suppliers, documents that expire and decisions that have to be explained years later. This library collects the rules that most affect that work for US buyers, including EU rules that apply when you sell into Europe, with their status and what they ask for, and links to a guide for each.
The library, rule by rule
| Rule | Who it applies to, and from when | Status | What to ask suppliers | Guide |
|---|---|---|---|---|
| Uyghur Forced Labor Prevention Act (UFLPA) | US importers. In force since June 21, 2022. Goods made wholly or in part in Xinjiang, or by entities on the UFLPA Entity List, are presumed made with forced labor unless the importer proves otherwise. | Confirmed, enforced | Supply-chain tracing back to raw material for goods in high-risk sectors; sub-supplier names and sites; origin documents. | Beyond Tier 1 |
| Section 307 of the Tariff Act of 1930 | US importers. Prohibits importing goods made wholly or in part with forced labor. CBP enforces it through withhold release orders and findings. | Confirmed, enforced | Origin and production evidence for goods covered by an order; social audits; recruitment practices at the producer. | Beyond Tier 1 |
| EU Forced Labour Regulation (EU) 2024/3015 | Any company placing products on the EU market or exporting from it, regardless of size. Applies from December 14, 2027. | Confirmed | Sites, subcontractors and labor agencies; recruitment policy; social audits; origin of high-risk raw materials. | Forced labor (in Spanish) |
| EU Corporate Sustainability Due Diligence Directive, as amended by Directive (EU) 2026/470 | EU companies with more than 5,000 employees and €1.5 billion worldwide turnover; non-EU companies with €1.5 billion turnover in the EU. Transposition by July 26, 2028; applies from July 26, 2029. | Confirmed, reduced scope | Traza's reading: in-scope customers will pass questions on risks, codes of conduct and contract assurances down to their suppliers. | Beyond Tier 1 |
| EU Ecodesign Regulation (EU) 2024/1781 and the Digital Product Passport | Manufacturers and importers of product groups covered by each delegated act. The framework has been in force since July 18, 2024. | Framework confirmed; product passports pending | Composition, origin and manufacturing data, as each product's delegated act will define. | Digital Product Passport (in Spanish) |
| EU Batteries Regulation (EU) 2023/1542 | Industrial batteries over 2 kWh, electric-vehicle and light-means-of-transport batteries sold in the EU. Battery passport required from February 18, 2027. | Confirmed | Composition, origin and manufacturing data for the battery and its materials. | Digital Product Passport (in Spanish) |
“Confirmed” means the obligation and the date are in the published text. “Pending” means they depend on acts not yet adopted. The “what to ask” column summarizes each guide; where it is Traza's reading, it says so. The deeper EU guides are currently published in Spanish.
The evidence every rule ends up asking for
- A verified supplier identity: legal name, tax ID, beneficial owners and sanctions screening.
- Where it produces: sites, subcontractors and, where risk justifies it, its own suppliers.
- Dated documents: certificates, audits and declarations, with their expiry tracked.
- The questions asked, the answers received and what the supplier did not provide.
- Who decided, when, and under which rule.
That is why it pays to ask once and reuse: one supplier file answers several rules and your customers' own requirements. To reach beyond your direct suppliers, the guide to Tier 2 and Tier 3 due diligence explains how to do it on a risk-based scope.
How each guide is built
- First, the answer to the regulatory question and who it applies to.
- A status table separating confirmed, indicative and pending.
- What is obligation, what is good practice and what is Traza's interpretation, each labelled.
- What evidence procurement needs, and when to stop and escalate to a person.
- Official or primary sources, a review date, and the limits of what the agent does.
How this library is kept current
Every guide shows the date its regulatory status was last checked against official sources, next to the byline. It is reviewed when the rule moves: a delegated act adopted, new agency guidance, an entity list update. Sources are CBP, DHS, EUR-Lex, the European Commission and bodies such as the ILO and OECD; software vendor blogs are not used as sources for dates. Rules whose timetable is still moving are added once their dates are firm.
From legal requirement to daily work
The rule says what you need to know; the work is asking for it, reading it, checking it and deciding, supplier by supplier. Nora, Traza's supplier qualification agent, requests documents by email, checks them against your policy, tracks expiries and prepares a file a person approves. She does not give legal advice or decide whether a rule applies to you. The guide to supplier management without a new portal explains the flow and Nora's profile shows the approval pack. To scope a diagnostic on your suppliers, book a call.
Keep reading
Sources
- U.S. Customs and Border Protection: Uyghur Forced Labor Prevention Act
- U.S. Department of Homeland Security: UFLPA Entity List
- U.S. Customs and Border Protection: Forced labor (Section 307 of the Tariff Act of 1930)
- Regulation (EU) 2024/3015 prohibiting products made with forced labour (EUR-Lex)
- Directive (EU) 2024/1760 on corporate sustainability due diligence (EUR-Lex)
- Directive (EU) 2026/470 (Omnibus I) amending the reporting and due diligence directives (EUR-Lex)
- Regulation (EU) 2024/1781 on ecodesign for sustainable products (EUR-Lex)
- Regulation (EU) 2023/1542 concerning batteries and waste batteries (EUR-Lex)
This page is for information and is not legal advice. It reflects US and EU rules as checked on October 22, 2026. Whether a rule applies to you depends on what you import or sell, where, and your company's size; check with counsel.