Supply chain traceability entails the collection and retention of information, documents, and data by operators and traders (excluding SMEs) for a period of five years to demonstrate compliance with the Regulation. This involves:

– Due Diligence System Implementation: Operators and non-SME traders must implement a due diligence system, including:

Gathering necessary information, data, and documents outlined in Article 9 and Annex II.

Conducting risk assessment (Art. 10) and risk mitigation measures (Art. 11).

– Maintenance Requirements: Establishment, maintenance, reporting, and record-keeping requirements are specified in Art. 12.

–Information Sharing: Operators must communicate relevant information to downstream traders to demonstrate due diligence and risk assessment.

– Responsibilities Down the Chain: Traders lower in the supply chain may base their own due diligence on received information but remain obligated to fulfil their responsibilities regardless of upstream due diligence.

Furthermore, operators and non-SME traders must ensure the accuracy of traceability information provided to enforcing authorities via the due diligence statement submitted to the Information System. The Information System’s development and operation will comply with relevant data protection provisions and include security measures to uphold information integrity and confidentiality.