Introduction: ESG and the Legislative Compliance Imperative
Environmental, Social, and Governance (ESG) reporting has transformed from a voluntary best-practice exercise into a mandatory compliance obligation for many Australian organisations — and the scope of mandatory requirements is expanding rapidly. Australia’s mandatory climate-related financial disclosure framework, modelled on the International Sustainability Standards Board (ISSB) standards, is being phased in from 2025 onwards for large entities, with smaller organisations entering scope in subsequent years. Modern slavery reporting obligations apply to entities with consolidated annual revenue above $100 million. Workplace gender equality reporting is mandatory for employers with 100 or more employees. ASIC has pursued enforcement action for greenwashing — making misleading ESG-related statements — and signalled that it will continue to do so.
For a detailed look at how GRC platforms support ESG programme management, see our guide to GRC software for ESG and sustainability reporting.
The legislative underpinning of ESG obligations is complex and multi-layered. Environmental obligations draw from the National Greenhouse and Energy Reporting Act 2007, state environmental protection legislation, and the new mandatory climate disclosure framework under Australian accounting standards. Social obligations draw from WHS legislation, the Modern Slavery Act 2018, the Workplace Gender Equality Act 2012, and the Privacy Act 1988. Governance obligations draw from the Corporations Act 2001, the ASX Corporate Governance Principles and Recommendations, and sector-specific regulation from ASIC and APRA. For further context, see our guide on legislation library for compliance.
A legislation library — the tool that tracks the laws and standards underpinning your compliance obligations — plays a critical role in ESG compliance management. This guide explains what the Australian ESG legislative landscape looks like, why a legislation library is essential for managing these obligations, and how Lahebo’s platform supports ESG compliance alongside other regulatory requirements.
ESG in the Australian Regulatory Context
ESG is a framework for measuring and reporting on an organisation’s performance across three dimensions: Environmental (the organisation’s impact on the natural environment), Social (the organisation’s relationships with people — employees, communities, supply chains), and Governance (the organisation’s internal structures, accountability mechanisms, and ethical standards).
In the Australian regulatory context, ESG obligations are not consolidated in a single piece of legislation — they arise from multiple, overlapping frameworks that have evolved independently over time. This fragmentation makes ESG compliance management particularly challenging: there is no single source of truth for what ESG-related obligations apply to your organisation, and changes to obligations in one area may not be apparent from monitoring another.
The ESG landscape is also rapidly evolving. Mandatory climate disclosure requirements introduced in 2024 represent one of the most significant changes to corporate reporting obligations in Australia’s history. ASIC’s greenwashing enforcement has put ESG marketing and reporting practices under regulatory scrutiny for the first time. International developments — the European Union’s Corporate Sustainability Reporting Directive (CSRD), the US Securities and Exchange Commission’s climate disclosure rules, and ISSB standards — are influencing Australian regulatory direction and may affect Australian businesses through supply chain and investor requirements even before they become Australian law.
Environmental (E): Key Legislation and Reporting Obligations
National Greenhouse and Energy Reporting Act 2007
The National Greenhouse and Energy Reporting (NGER) Act 2007 requires certain corporations to measure and report their greenhouse gas emissions, energy production, and energy consumption to the Clean Energy Regulator each financial year. The obligation applies to corporations that meet facility-level or corporate-level threshold requirements — currently 25,000 tonnes of carbon dioxide equivalent (CO2-e) for facility thresholds and 50,000 tonnes CO2-e for corporate thresholds.
NGER reporting is a foundational ESG obligation for larger Australian businesses. The data reported under NGER feeds into the National Greenhouse Gas Inventory and is used by the Clean Energy Regulator to administer the Safeguard Mechanism — the facility-level emissions reduction framework that applies to Australia’s largest industrial emitters.
The Safeguard Mechanism
The Safeguard Mechanism, reformed substantially in 2023, requires Australia’s largest industrial facilities — those emitting more than 100,000 tonnes of CO2-e per year — to keep their net emissions below a declining baseline. Facilities that exceed their baseline must surrender Australian Carbon Credit Units (ACCUs) or Safeguard Mechanism Credits (SMCs) to cover the excess.
The Safeguard Mechanism reforms, which came into effect on 1 July 2023, introduced declining baselines for covered facilities — meaning the compliance obligation is not static but tightens over time as baselines decrease. Organisations subject to the Safeguard Mechanism need to track not just their current baseline but the trajectory of future baselines to plan their emissions management strategy and compliance position.
Mandatory Climate-Related Financial Disclosure
Australia’s mandatory climate-related financial disclosure framework represents the most significant expansion of environmental reporting obligations in decades. Introduced through the Treasury Laws Amendment (Financial Market Infrastructure and Other Measures) Act 2024, the framework requires eligible entities to prepare annual climate statements disclosing their governance of climate-related risks and opportunities, their climate-related risk management processes, their climate targets and metrics, and scenario analysis of how their business strategy performs under different climate scenarios.
The framework is aligned with AASB S2 (the Australian Accounting Standards Board’s sustainability disclosure standard, based on the ISSB’s IFRS S2 standard) and is being phased in across groups of entities. Group 1 entities — large listed corporations and others meeting defined size thresholds — entered scope in financial years beginning on or after 1 January 2025. Group 2 and Group 3 entities enter scope in subsequent years. The framework also progressively expands to include Scope 3 value chain emissions disclosures.
Social (S): Key Legislation and Reporting Obligations
Modern Slavery Act 2018
The Modern Slavery Act 2018 (Cth) requires entities based or operating in Australia with an annual consolidated revenue of $100 million or more to prepare and submit an annual Modern Slavery Statement. The statement must describe the risks of modern slavery (forced labour, human trafficking, child labour, debt bondage, and related practices) in the entity’s operations and supply chains, and the actions taken to address those risks.
Modern slavery reporting is a compliance obligation with direct ESG relevance — it sits squarely within the Social pillar and is increasingly scrutinised by institutional investors as part of their ESG due diligence. The Australian Border Force administers the Act and publishes an online register of Modern Slavery Statements. Statements that do not meet the mandatory criteria can result in the entity being named in the Home Affairs Annual Report, creating reputational risk.
Workplace Gender Equality Act 2012
The Workplace Gender Equality Act 2012 (Cth) requires non-public sector employers with 100 or more employees to submit an annual report to the Workplace Gender Equality Agency (WGEA). Reports must cover gender composition of the workforce, gender composition in management roles, equal remuneration between women and men, flexible working arrangements, and actions taken to support employees with family or caring responsibilities.
Amendments to the Act in 2023 significantly expanded reporting requirements and introduced the public disclosure of gender pay gaps at the employer level — meaning individual employers’ median gender pay gaps are now published by WGEA. This transparency has elevated gender pay equity from an HR management issue to a publicly visible ESG metric, with direct implications for employer reputation and talent attraction.
WHS Legislation as an ESG Social Obligation
Workplace health and safety performance is increasingly recognised as a core Social ESG metric. Lost time injury rates, fatality rates, WHS prosecution history, and the maturity of safety management systems are all factors that ESG analysts and investors assess when evaluating an organisation’s Social performance. Compliance with WHS legislation — a legal obligation in any case — takes on additional significance as an ESG indicator.
For organisations subject to ESG reporting obligations, their WHS compliance register feeds directly into their ESG program — providing the evidence base for Social disclosures about safety management systems, injury rates, and compliance with applicable safety laws. A compliance register that tracks WHS obligations in detail provides both the legal compliance function and the ESG reporting function with the data they need.
Governance (G): Key Legislation and Reporting Obligations
ASIC and Greenwashing
The Australian Securities and Investments Commission (ASIC) has been active in pursuing greenwashing — the practice of making misleading or deceptive ESG-related statements or representations to the market. ASIC’s greenwashing enforcement guidance makes clear that ESG marketing materials, sustainability reports, and climate-related financial disclosures are subject to the same misleading and deceptive conduct standards that apply to all corporate communications under the Corporations Act 2001 and the Australian Securities and Investments Commission Act 2001.
For compliance purposes, this means that ESG statements — including claims about emissions targets, sustainability initiatives, supply chain practices, and governance standards — need to be accurate, substantiated, and consistent with the organisation’s actual practices. The compliance register’s role here is to ensure that ESG commitments are documented, ownership is clear, and the evidence supporting any public ESG claims is maintained and readily accessible if ASIC asks questions.
APRA and Climate Risk (Financial Sector)
For entities regulated by the Australian Prudential Regulation Authority (APRA) — banks, insurers, superannuation funds, and other financial institutions — APRA’s Prudential Practice Guide CPG 229 on climate change financial risks provides guidance on managing climate-related risks as part of the institution’s broader risk management framework. While CPG 229 is a practice guide rather than a binding standard, APRA has made clear that it expects regulated entities to incorporate climate risk into their governance, risk, and disclosure frameworks.
APRA-regulated entities subject to both CPG 229 and the mandatory climate disclosure framework need to manage a complex web of overlapping obligations. A compliance register that tracks both frameworks — and links climate-related obligations to the relevant legislation and regulatory guidance — provides the governance infrastructure that APRA expects to see in an organisation’s risk management system.
Why a Legislation Library Is Essential for ESG Compliance
The ESG legislative landscape is not just complex today — it is changing faster than almost any other area of corporate compliance. The mandatory climate disclosure framework commenced its phased implementation in 2025. The Modern Slavery Act is under review. Gender pay gap reporting has been transformed in its transparency requirements. ASIC’s greenwashing guidance continues to evolve. International ESG reporting standards are being adopted or adapted into Australian requirements on an ongoing basis.
Without a legislation library that monitors these changes and alerts obligation owners when relevant legislation is amended, an ESG compliance register is built on a foundation that degrades over time. The legislation that underpins ESG obligations today may be materially different in 12 months — and organisations that fail to track those changes may find themselves reporting against outdated requirements or making disclosures that are no longer consistent with current law.
A legislation library tailored to ESG obligations tracks all three pillars — Environmental legislation including the NGER Act, Safeguard Mechanism, state EPA Acts, and climate disclosure standards; Social legislation including the Modern Slavery Act, Workplace Gender Equality Act, WHS legislation, and Privacy Act; and Governance legislation including the Corporations Act, ASIC instruments and guidance, and APRA prudential standards. When any of these are amended, the relevant obligation owners in the compliance register are notified to review and update.
Building an ESG Compliance Register
An ESG compliance register is, at its core, a compliance register focused on the obligations that fall under the ESG framework. It follows the same structure as any compliance register — obligations, owners, review cycles, status, and evidence — but is organised around the E, S, and G pillars to provide a coherent view of the organisation’s ESG compliance position.
For the Environmental pillar, the register captures obligations under the NGER Act (thresholds, reporting timelines, measurement methodology), the Safeguard Mechanism (baseline levels, credit surrender obligations, declining baseline trajectory), the mandatory climate disclosure framework (which Group the organisation falls into, what disclosures are required, and by when), state EPA licensing and permit conditions, and any other applicable environmental obligations.
For the Social pillar, the register captures Modern Slavery obligations (reporting timeline, mandatory criteria, supply chain due diligence requirements), Workplace Gender Equality reporting obligations (employee thresholds, report timing, new gender pay gap disclosure requirements), WHS compliance obligations across all applicable jurisdictions, and privacy obligations under the Privacy Act.
For the Governance pillar, the register captures Corporations Act disclosure obligations, ASX Listing Rule compliance for listed entities, ASIC reporting and disclosure requirements, APRA prudential standards for regulated entities, and the organisation’s own governance-related commitments and policies that create internal compliance obligations.
Each obligation in the ESG compliance register should be linked to the relevant legislation in the legislation library, assigned to an owner, given a review cycle, and supported by evidence of compliance. The compliance register and the ESG report should speak to each other — the ESG report should be able to be traced back to specific obligations and evidence in the compliance register, providing the audit trail that ASIC and other regulators expect to see.
How Lahebo Supports ESG Compliance Management
Lahebo’s Compliance Register and Legislation Library provide the infrastructure for managing ESG compliance obligations alongside an organisation’s other regulatory requirements. Rather than maintaining a separate ESG compliance system, organisations can integrate their ESG obligations into their existing compliance framework — creating a single, coherent view of all regulatory obligations across the business.
Within Lahebo, ESG obligations can be categorised by pillar (E, S, G) and by legislation source — providing a filtered view of ESG compliance status alongside the broader compliance landscape. The Legislation Library monitors all relevant ESG legislation for amendments, ensuring that when the NGER Regulations are updated, the climate disclosure standards are revised, or the Modern Slavery Act is amended, the relevant obligation owners receive immediate alerts.
For organisations preparing for mandatory climate disclosure — whether in Group 1, 2, or 3 — Lahebo provides a structured environment for building the compliance register that supports the disclosure program. Climate-related obligations can be tracked against the AASB S2 standard, with owners assigned for governance disclosures, risk management disclosures, metrics and targets, and scenario analysis. The audit trail generated by Lahebo provides the documentation that external auditors and regulators will require as assurance requirements for climate disclosures increase.
For organisations that are building their ESG compliance infrastructure from scratch, Lahebo’s onboarding support can help map the ESG legislative landscape to your specific operations and jurisdictions, creating a starting point that reflects your actual ESG compliance footprint rather than a generic template.
Conclusion
ESG compliance is no longer a matter of voluntary disclosure and good intentions — it is a growing body of mandatory regulatory obligations with real enforcement consequences. Australia’s mandatory climate disclosure framework, Modern Slavery reporting requirements, gender pay gap disclosure obligations, and ASIC’s greenwashing enforcement all impose compliance obligations that organisations need to manage systematically.
A legislation library is the foundational tool for managing ESG compliance obligations in a rapidly changing regulatory environment. It tracks the laws and standards that underpin your ESG obligations, monitors for amendments and new requirements, and alerts relevant owners when the legislative landscape changes. Without it, ESG compliance registers built on today’s requirements will progressively drift out of alignment with tomorrow’s laws.
For organisations ready to build or strengthen their ESG compliance infrastructure, Lahebo provides a purpose-built platform that integrates ESG obligations with broader compliance and risk management — delivering the single source of truth that modern ESG governance requires.