EUDR Fines: What You Need to Know

What are the actual penalties?

EUDR establishes minimum penalty thresholds that every EU member state must implement in their national law. The penalties apply to operators and traders who place non-compliant products on the EU market — either through import, export, or domestic sale. Here's what you're exposed to:

Who actually enforces EUDR?

EUDR is not enforced by the European Commission directly. Enforcement is delegated to national competent authorities in each of the 27 EU member states. This means enforcement capacity, pace, and priority vary significantly by country.

What this means for operators: your exposure depends partly on where your products enter the EU. Timber entering through Germany's ports faces a well-resourced authority with a mature customs enforcement framework. Timber entering through a smaller member state may face different — sometimes less predictable — enforcement approaches.

The Commission publishes country risk classifications and monitors enforcement consistency, but it does not itself fine companies. That happens at the national level.

Enforcement timeline by operator size

The enforcement deadline varies by company size, based on the EU's SME classification:

What triggers enforcement?

Enforcement isn't random. Competent authorities focus on operators who can't produce valid due diligence statements at the point of customs clearance. The most common triggers:

• Missing or incomplete Due Diligence Statement (DDS) — No filed statement, wrong product classification, missing data fields
• Incomplete or inaccurate geolocation data — Plot coordinates that don't match actual sourcing area, missing polygon data for large production areas
• No documented risk assessment — The mandatory analysis showing your product is deforestation-free and legal, not done or not documented
• Undocumented supply chain — Gaps in traceability that prevent you from demonstrating a clean chain of custody from harvest to EU market
• Failure to respond to authority requests — Not cooperating with competent authority information requests within the prescribed timeframe
• High-risk country sourcing without enhanced due diligence — Sourcing from a Commission-classified high-risk country without the additional verification steps required

How to avoid EUDR fines

The compliance path is clear. Operators who build their due diligence system now — before enforcement ramps up — will face lower costs and fewer risks than those who scramble in Q4 2026. Here's the five-step path:

1. Map your supply chain completely Identify every supplier, origin plot, and logistics step from harvest to EU border. You can't file a complete DDS without knowing exactly where your timber comes from.
2. Collect geolocation data for all sourcing plots GPS coordinates or polygon data for every production area. This must be collected at the plot level — not the facility or country level. High-risk country sourcing requires enhanced verification.
3. Build and document your risk assessment Formal written analysis assessing deforestation risk and legal compliance for each product/sourcing combination. Must be maintained and updated as sourcing changes.
4. Implement a risk mitigation process Where risk is not negligible, document the specific measures you take to bring risk to negligible. Third-party certification, satellite monitoring, and supplier audits are common approaches.
5. File due diligence statements before each shipment Submit the DDS through the EU's information system before goods cross the EU border. Retain all supporting documentation for five years.

Fines are the floor, not the ceiling

The 4% turnover fine is the regulatory minimum. Real-world financial exposure can exceed this substantially:

• Shipment seizure — Lost revenue on confiscated goods, storage costs, re-export or disposal fees
• Supply chain disruption — A border hold on one shipment can cascade through your entire supply chain in days
• Contractual liability — EU buyers increasingly require EUDR compliance certifications in purchase contracts
• Reputational damage — Published infringement decisions are permanent public records