ESG Data: Finding the Risks That Aren’t on the Surface

Every sustainability decision rests on ESG data: which suppliers to onboard, which counterparties to keep, which risks to escalate. But most ESG data has a structural weakness. It describes what companies choose to show, or what ratings agencies can measure for large listed firms. The environmental violation at an unlisted supplier, the labour controversy reported only in a regional newspaper, the pollution case working through a local court: none of it appears in a sustainability report or a rating.
This guide covers what ESG data is, where it comes from, what the 2026 EU rule changes mean in practice, and how ESG screening surfaces the risks that never make it to the surface.

ESG Data: Finding the Risks That Aren’t on the Surface

What is ESG data?

ESG data is information about a company’s environmental, social, and governance conduct: emissions and pollution, labour practices and human rights, corruption, and regulatory compliance. Sustainability teams use it for reporting, procurement uses it for supplier decisions, and risk teams use it to protect the organisation from being connected to harm it never sees coming.

Why most ESG data only covers the surface

The ESG data most organisations rely on comes from two places, and both have the same blind spot:

What companies disclose. Sustainability reports, CSRD/ESRS datapoints, and questionnaire responses are structured and comparable, but they are self-reported and updated at best once a year. No company discloses the controversy it hopes will stay local.

What ratings cover. ESG ratings and scores are useful for comparing large, listed companies, because that is who ratings agencies cover. Lists of top ESG data providers are dominated by ratings and disclosure-based ESG datasets, and their coverage reflects it: the average supplier base of a European enterprise is full of private, unlisted, small and mid-sized companies whose ESG performance data no ratings agency tracks at all.

The result is a surface layer of ESG data that looks complete and isn’t. The risks that damage reputations and trigger regulatory consequences (the pollution incident, the child labour case in the supply chain, the corruption investigation at a distributor) surface first in the news, usually in the local language of the market where they happen, and often at companies too small for any rating to exist. Reaching below the surface requires a different kind of ESG data source: systematic, worldwide adverse media monitoring.

ESG rules in the EU: what changed 

The EU recalibrated its sustainability framework in early 2026, and the changes cut in two directions at once:

Fewer companies must report. The Omnibus I Directive, in force since 18 March 2026, limits mandatory CSRD reporting to companies with more than 1,000 employees and over €450 million net turnover, and a simplified set of ESRS with far fewer datapoints is being finalised. The CSDDD survives with a narrower scope (5,000+ employees, €1.5 billion turnover, applying from 2029), but its core duty stands: risk-based human rights and environmental due diligence across the value chain.

The risk didn’t shrink with the scope. Companies outside the mandatory perimeter still feel the expectations through customer contracts and value chain requests. And under EU anti-money laundering law, environmental crime is a predicate offence for money laundering, which means an environmental controversy at a counterparty can become a financial crime risk question, not just a reputational one.

The practical direction for ESG data reporting and collection is the same in both cases: less exhaustive box-ticking, more targeted, risk-based evidence about what is actually happening with the companies you work with.

What ESG screening actually looks for

ESG screening means monitoring the companies in your portfolio or supply chain for real-world signals across the full breadth of environmental, social, and governance risk. Concretely, that spans categories such as:

  • Environmental: pollution, environmental damage, illegal waste disposal, deforestation, and environmental enforcement actions
  • Social: child labour, forced labour, human rights abuses, workplace safety incidents, and labour exploitation
  • Governance: corruption, bribery, fraud, and misconduct by directors and owners

Three properties determine whether screening reaches below the surface:

Source depth. Global newswires report what is already big. The signal starts smaller: regional and niche newspapers, trade press, and local-language outlets. Business Radar screens 17M+ global sources daily, including 100,000+ validated news outlets, precisely because the first mention of a pollution case or a labour violation is rarely in the international press.

Coverage of unlisted companies. Because the signal comes from the news rather than from disclosures or ratings, any company that gets mentioned is covered, including the private, unlisted, and smaller companies that make up most real supplier bases and that no ratings provider tracks.

Ownership context. An ESG controversy two ownership layers away is still your risk. Corporate structure and UBO data (via the Dun & Bradstreet partnership) connects signals at parents, subsidiaries, and related entities to the counterparty you actually monitor.

Global map highlighting company locations for ESG risk analysis.

Depth on your terms

Not every organisation needs the same depth of ESG information, and a screening setup that ignores this produces either blind spots or alert fatigue. How to collect ESG data across a large portfolio is ultimately a question of risk appetite, not of your tool’s defaults, and good ESG data governance means being able to show why you monitor what you monitor.

Business Radar is built around that choice: organisations decide which of the 210+ risk categories to monitor, at what depth, and for which parts of the portfolio, with everything held in one continuously updated ESG database rather than scattered across point solutions. A procurement team might track a broad supplier base against severe environmental and social categories only, while a risk team applies the full category set to high-risk counterparties. The materiality flag then checks whether an event has a meaningful material impact on the monitored entity, so what reaches an analyst is a signal, not a headline. And every signal is explainable, time-stamped, and linked to its source, so conclusions can always be traced back to the underlying reporting.

How Business Radar helps with ESG screening

For ESG, adverse media is the core of what Business Radar does. The platform turns the world’s news, including the regional and niche outlets where ESG risk surfaces first, into structured, validated ESG data intelligence across environmental, social, and governance categories, from pollution to child labour, worldwide. Portfolios of any size are uploaded via Excel or CSV, and ESG data integration via the API delivers signals straight into the systems where decisions are made. Corporate structure and UBO data connects risk through the ownership chain, and each organisation decides the categories and depth that match its own risk appetite. In practice, 9 out of 10 teams find critical risks that legacy screening missed entirely, and users report a 32% average efficiency increase over traditional screening tools.

Frequently asked questions

What is ESG data? ESG data is information about a company’s environmental, social, and governance conduct, used for sustainability reporting, supplier decisions, and risk management.

What are the main ESG data sources? Corporate disclosures, ESG ratings, and outside-in signals such as adverse media. Disclosures and ratings mainly cover large, listed companies; adverse media also covers unlisted and smaller companies, and typically surfaces risks earliest.

Who has to report ESG data under the CSRD after the Omnibus? Since March 2026, mandatory CSRD reporting applies to companies with more than 1,000 employees and over €450 million net turnover. Value chain expectations still reach smaller companies through customer requests.

What is ESG screening? ESG screening is the continuous monitoring of companies for real-world environmental, social, and governance risk signals, such as pollution, child labour, or corruption, drawn from news and other outside-in sources rather than self-reported data.

How do I find a company’s ESG score? For large listed companies, ratings providers publish scores, though methodologies differ widely. For the unlisted and smaller companies that make up most supplier bases, no score exists; the practical alternative is screening outside-in sources such as adverse media for actual ESG risk signals.

Get in touch met us naar discuss hoe Business Radar kan help uw bedrijfsvoering make meer profound risico decisions