REGULATORY RISK · SERIES A · ARTICLE 02

Your Portfolio Companies Are Already Exposed to Regulations You Have Not Mapped. The Clock on That Exposure Is Running.

CSRD, CSDDD, California SB 253. The regulatory perimeter around mid-market PE portfolios has expanded faster than most GP teams have had bandwidth to track. The exposure is real. The window for orderly remediation is narrowing.

A mid-sized US industrial supplier recently received a compliance questionnaire from its largest European customer. Scope 1, 2, and 3 emissions data. A human rights due diligence policy. Environmental management system documentation. The customer needed it within thirty days. The supplier had none of it and had never been asked before.

That supplier is in a PE portfolio. The GP did not know the questionnaire was coming. This is not a rare situation. It is the new baseline for any portfolio company with supply chain exposure to Europe, which in a diversified mid-market portfolio is most of them.

The question is not whether your portfolio companies are exposed. It is whether you have mapped the exposure before a buyer, an LP, or a regulator does it for you.

The Regulatory Architecture That Mid-Market GPs Are Missing

CSRD is European legislation. But its reach is not limited to European companies. It flows upstream through supply chains. Any company that supplies goods or services to an entity subject to CSRD reporting faces data requests, audit exposure, and in some cases direct compliance obligations.

CSDDD goes further. It creates affirmative due diligence obligations for large EU companies across their entire value chain. The companies in that value chain, including US-based suppliers, face the downstream consequences of their customers’ compliance obligations. The costs of non-compliance are not borne only by the EU company. They are borne by the supplier that loses the contract.

California SB 253 and SB 261 apply to companies with revenues above one billion and five hundred million dollars respectively that do business in California. For a mid-market PE fund with portfolio companies selling into California, these thresholds are closer than they appear, particularly when portfolio companies are aggregated at the fund level.

The Bandwidth Problem and Why It Is a GP Problem

The gap between regulatory exposure and GP awareness is not a knowledge problem. Most GPs know regulation is moving. The gap is bandwidth and, more honestly, prioritisation. A small GP team running three active deals, managing a portfolio of eight companies, and preparing for a fundraise does not put regulatory mapping at the top of the list. It falls. Until it surfaces at exactly the wrong moment.

That moment is almost always one of three: a buyer’s diligence team flags an unmapped obligation during a sale process and it becomes a price chip; an LP asks a governance question at a re-up conversation and the answer is inadequate; or a portfolio company loses a customer contract because it cannot meet a compliance demand that was embedded in the exit valuation. All three are avoidable. None of them feel avoidable in the moment.

What Orderly Remediation Looks Like

A regulatory liability mapping exercise conducted eighteen months before exit takes weeks and produces a prioritized remediation plan. The same exercise conducted during a live sale process produces a negotiating liability. The difference in outcome, measured in purchase price, is not marginal.

The funds I have seen handle this well maintain a live register: obligations mapped by jurisdiction, threshold tracking for incoming requirements, and a quarterly update cycle. They do not frame this as compliance. They frame it as value protection. That distinction changes how much attention it gets.

THE PRACTICAL TAKEAWAY

  • Map regulatory exposure at acquisition, not in response to a buyer’s question.

  • CSRD, CSDDD and California disclosure law reach US portfolio companies through customers and revenues, not only direct operations.

  • A live regulatory register maintained during the hold period is a diligence asset. A reactive mapping exercise during a sale is a liability.

  • The cost of orderly remediation is a fraction of the cost of discovering the same exposure in a negotiation.

START HERE

Not sure where to begin?

If you are eighteen months from an exit and have not stress-tested your governance posture, this is where to start.