- China’s social-responsibility and ESG framework now expects foreign-invested enterprises (FIEs) to extend due diligence beyond their own walls to the suppliers they engage.
中国的社会责任与ESG框架如今要求外商投资企业将尽职调查从自身延伸至其所合作的供应商。- The baseline is the national standard GB/T 36000-2015 (Guidance on Social Responsibility) and the CEFI-CSR reporting guide promoted by MOFCOM-affiliated bodies, which set out supplier social-responsibility admission and monitoring.
基础依据是国家标准 GB/T 36000-2015《社会责任指南》以及商务部相关机构推行的外商投资企业社会责任报告编写指南，明确了供应商社会责任准入与监测。- Labour compliance is the highest-risk dimension: forced labour, child labour, and unsafe working conditions at a supplier can trigger criminal, administrative, and reputational liability for the buying FIE.
劳工合规是风险最高的维度：供应商处的强迫劳动、童工与不安全作业，可能令采购方外资企业承担刑事、行政与声誉责任。- Environmental and data dimensions matter too — suppliers handling hazardous waste, conflict minerals, or personal information must meet permit, traceability, and PIPL obligations.
环境与数据维度同样重要——涉及危废、冲突矿产或个人信息的供应商须满足许可、溯源与《个人信息保护法》义务。- Best practice is a dual-track mechanism: written ESG questionnaires plus on-site third-party audits (e.g., SMETA/RBA), backed by contractual ESG clauses, audit rights, and exit provisions.
最佳实践是双轨机制：书面ESG问卷加第三方实地审核（如SMETA/RBA），并以合同ESG条款、审计权与退出条款为支撑。- FIEs should keep an auditable due-diligence evidence chain to satisfy regulators, customers, and cross-border ESG disclosure rules such as CBAM and EU directives.
外商投资企业应保留可审计的尽调证据链，以应对监管机构、客户以及碳边境调节机制（CBAM）与欧盟指令等跨境ESG披露要求。
Supply-Chain ESG and Labour Compliance in Supplier Due Diligence for Foreign-Invested Enterprises (2026) | 外商投资企业供应链 ESG 与劳工合规供应商尽调（2026）
Why this matters now
For a foreign-invested enterprise (FIE) operating in China, supplier due diligence has moved well beyond price, quality, and delivery. Buyers are now expected — by Chinese regulators, by overseas customers, and by their own headquarters — to verify that suppliers respect labour rights, protect the environment, and handle data responsibly. A single supplier incident (forced labour allegations, a fatal safety accident, an illegal discharge, or a data leak) can halt shipments, trigger investigations, and damage a brand that took years to build.
This article explains the Chinese ESG and labour-compliance baseline for supplier due diligence, the highest-risk dimensions, a practical dual-track operating model, and the documentation an FIE should keep. It pairs with our supplier due-diligence and export-control coverage.
The Chinese baseline
China does not yet impose a single consolidated “supply-chain ESG due diligence” statute on domestic purchasers, but a coherent baseline already exists:
- GB/T 36000-2015 (Guidance on Social Responsibility), the national standard aligned with ISO 26000, defines how organisations should address labour, environment, fair operating practices, and supply-chain responsibility.
- The CEFI-CSR reporting guide (China Foreign-Funded Enterprises Social Responsibility Reporting Guide), promoted by MOFCOM-affiliated industry bodies, explicitly calls for a *supplier social-responsibility admission mechanism* — evaluating and selecting suppliers on labour practices, social impact, and environmental performance — and for ongoing monitoring.
- The Labour Law, the Occupational Safety and Health regime, and the Production Safety Law impose direct obligations on employers; a buying FIE can be drawn into liability where it knowingly benefits from a supplier’s violations.
- The Law on Prevention and Control of Environmental Pollution by Solid Waste and the PIPL (Personal Information Protection Law) reach into the supply chain wherever hazardous waste or personal data is involved.
MOFCOM’s 2025 *Guidance on FIEs Fulfilling Social Responsibility Overseas* reinforces the same logic for outbound supply chains and signals that ESG risk management is now part of responsible operation.
Highest-risk dimensions
Labour. Forced labour, child labour, and unsafe working conditions are the flashpoints. Article 244 of the Criminal Law criminalises forced labour; the Labour Law prohibits child labour and mandates occupational health and safety. An FIE that sources from a supplier with these defects faces not only reputational harm but also potential administrative penalties and, in egregious cases, criminal exposure under complicity or product-safety theories.
Environment. Suppliers generating hazardous waste, discharging wastewater, or handling conflict minerals (e.g., 3TG) must hold the correct permits and maintain traceability. A buyer’s name on a non-compliant supplier’s shipment can attract environmental-enforcement scrutiny and customer rejection under import-market ESG rules.
Data. Where a supplier processes personal information (e.g., HR records, customer data) on an FIE’s behalf, PIPL obligations — including a lawful basis, cross-border transfer mechanisms, and breach notification — extend to that processor. Due diligence should confirm the supplier’s data-handling controls.
A practical dual-track model
- Written ESG questionnaire. Capture basic facts: entity identity, licences, workforce profile, certifications (ISO 9001/14001/45001), environmental permits, and prior violations.
- Risk tiering. Classify suppliers by sector and exposure — high-risk tiers cover conflict minerals, high-energy-intensity processing, and labour-intensive assembly.
- On-site third-party audit. For high-risk suppliers, commission independent audits (SMETA, RBA, or equivalent) rather than relying on self-assessment.
- Contractual ESG clauses. Embed ESG commitments, audit rights, cure periods, and a compliance-termination right in procurement contracts.
- Dynamic rating and exit. Maintain an internal ESG score; trigger remediation or offboarding for persistent underperformance, preserving the evidence chain.
Documentation to keep
FIEs should retain, for at least the relevant limitation period, the questionnaire responses, audit reports, corrective-action plans, contractual clauses, and training records. This evidence chain is what regulators, customers, and cross-border disclosure regimes (the EU CBAM, the EU battery and deforestation regulations, and similar directives) will ask to see. Treating supplier ESG due diligence as a documented programme — not a one-off checklist — is the cheapest insurance against disruption.
Related reading
- Supplier due diligence and export-control screening for foreign-invested enterprises.
- PIPL and cross-border data transfer compliance for HR and operations.
- Environmental permitting and hazardous-waste compliance for manufacturers in China.
外商投资企业供应链 ESG 与劳工合规供应商尽调（2026）/ Supply-Chain ESG and Labour Compliance in Supplier Due Diligence for Foreign-Invested Enterprises (2026)
为何重要
对在中国运营的外商投资企业而言，供应商尽职调查早已超越价格、质量与交期。如今，采购方须同时面对中国监管机构、海外客户与集团总部的期待，核实供应商是否尊重劳工权益、保护环境并妥善处置数据。一次供应商事件——强迫劳动指控、致命安全事故、违法排放或数据泄露——就可能中断发货、引发调查，并摧毁多年积累的品牌的信任。
本文说明中国语境下供应商尽调的 ESG 与劳工合规基线、最高风险维度、可落地的双轨操作模型，以及外资企业应当留存的文档，与本站供应商尽调与出口管制专题相互呼应。
中国基线
中国尚未对境内采购方出台单一的”供应链 ESG 尽调”成文法，但一套连贯的基线已经存在：
- GB/T 36000-2015《社会责任指南》——与 ISO 26000 接轨的国家标准，界定组织应如何对待劳工、环境、公平运营及供应链责任。
- 中国外商投资企业社会责任报告编写指南（CEFI-CSR）——由商务部相关机构推行的指引，明确要求建立*供应商社会责任准入机制*，从劳工实践、社会影响与环境影响等维度评价并选择供应商，并持续监测。
- 《劳动法》《职业病防治法》《安全生产法》对用人单位施加直接义务；采购方若在知情情形下受益于供应商的违规，亦可能被卷入责任。
- 《固体废物污染环境防治法》与《个人信息保护法》（PIPL）在涉及危废或个人信息的环节延伸至供应链。
商务部 2025 年《企业境外履行社会责任工作指引》对走出去的供应链重申了同样的逻辑，释放出 ESG 风险管理已成为负责任经营组成部分的信号。
最高风险维度
劳工。强迫劳动、童工与不安全作业是引爆点。《刑法》第二百四十四条将强迫劳动入罪；《劳动法》禁止童工并规定职业健康安全。从存在这些缺陷的供应商处采购的外资企业，不仅面临声誉损害，还可能招致行政处罚，情节严重时依共犯或产品安全理论承担刑事责任。
环境。涉及危废、废水排放或冲突矿产（如 3TG）的供应商须持有效许可并保持溯源。采购方名字出现在不合规供应商的货单上，可能引发环保执法关注，并在进口市场 ESG 规则下遭客户拒收。
数据。当供应商代表外资企业处理个人信息（如人事档案、客户数据）时，PIPL 义务——包括合法基础、跨境传输机制与泄露通知——延伸至该处理者。尽调应确认供应商的数据处置控制能力。
可落地的双轨模型
- 书面 ESG 问卷。采集基本事实：主体身份、执照、用工结构、体系认证（ISO 9001/14001/45001）、环保许可与既往违规。
- 风险分层。按行业与敞口对供应商分类——高危层涵盖冲突矿产、高能耗加工与劳动密集型组装。
- 第三方实地审核。对高危供应商委请独立审核（SMETA、RBA 或等效），而非仅依赖自评。
- 合同 ESG 条款。在采购合同中嵌入 ESG 承诺、审计权、整改期限与合规解约权。
- 动态评级与退出。建立内部 ESG 评分；对持续不达标者触发整改或退出，并保留证据链。
应留存的文档
外资企业应将问卷回复、审核报告、整改计划、合同条款与培训记录至少保留至相关时效期满。这条证据链，正是监管机构、客户以及跨境披露制度（欧盟碳边境调节机制 CBAM、电池与反 deforestation 法规及类似指令）会要求出示的材料。将供应商 ESG 尽调视为一项有文档支撑的常态化机制，而非一次性勾选清单，是防范中断最经济的风险对冲。
延伸阅读
- 外商投资企业的供应商尽调与出口管制筛查。
- 人力资源与运营中的 PIPL 及跨境数据传输合规。
- 中国制造企业的环保许可与危废合规。
Sources
- 商务部 中国外商投资企业协会：《中国外商投资企业社会责任报告编写指南（CEFI-CSR1.0）》— https://images.mofcom.gov.cn/caefi/201801/20180109102351464.pdf
- 国家市场监督管理总局 国家标准委：GB/T 36000-2015《社会责任指南》— https://std.samr.gov.cn/
- 人力资源和社会保障部：《中华人民共和国劳动法》— http://www.mohrss.gov.cn/
- 商务部：《企业境外履行社会责任工作指引》（2025-12-05）— https://be.mofcom.gov.cn/jmxw/art/2026/art_55c2cab9499443c9bcee6a9f7df47da8.html