Forced-labour risk cannot be managed effectively through a one-page promise that says “our supply chain is compliant”. Industrial products may contain raw materials, castings, fasteners, electronics, coatings and subcontracted processes from several tiers. The direct supplier may not know, or may not disclose, every upstream source without a structured request.
The practical preparation task is to create evidence that can answer a product-specific question: where did the relevant inputs and operations come from, what risk signals were assessed, and how were gaps investigated or remediated?
What the regulation establishes
Regulation (EU) 2024/3015 concerns prohibiting products made with forced labour on the Union market and repealing Directive (EU) 2019/1937. Article 37 provides that the regulation applies from 14 December 2027, with specified provisions applying earlier. EUR-Lex — Regulation (EU) 2024/3015
The regulation applies to products regardless of origin and provides an investigation and enforcement framework involving competent authorities and customs. Its operation should be read with forthcoming or current guidance, databases, implementing acts and related EU due-diligence requirements.
This article is an operational procurement guide, not a legal opinion. Buyers should obtain legal advice on scope, roles, procedures and interaction with other legislation.
Supplier declarations are one input, not the evidence chain
A signed code of conduct can establish a contractual expectation and create a basis for escalation. It does not prove the origin and labour conditions of every input in a specific product.
A stronger package may include:
- legal identity and location of production facilities;
- product-specific bill of materials and process route;
- source countries and, where necessary, source facilities for risk-relevant inputs;
- subcontractor and labour-provider information;
- purchase, production and shipment records connecting sources to the product;
- supplier due-diligence policy, assessments and corrective actions;
- worker-channel or audit evidence where appropriate and reliable; and
- records explaining unavailable data and the plan to close gaps.
Evidence depth should be risk-based. Requiring the same documentation for every low-risk consumable and every high-risk raw material can create paperwork without useful visibility.
Start with product and tier mapping
Map the product rather than the supplier in the abstract. Identify the manufacturing location, significant material inputs and outsourced operations for the item being placed on the EU market. Then assess which nodes need deeper investigation based on geography, sector, labour model, public risk information and lack of traceability.
The mapping should distinguish confirmed information from supplier assertion and unresolved assumptions. A trader address is not a production location. A country-of-origin statement may not identify upstream raw-material origin. An audit of one factory may not cover a subcontractor that performed the relevant operation.
Ask whether the supplier can trace the current order, not only describe its typical supply chain. If inputs are purchased from stock or mixed sources, record that limitation and decide whether segregation, batch traceability or alternative sourcing is needed.
Design requests that suppliers can answer accurately
Broad questionnaires invite broad assurances. Product-specific questions produce more useful information:
- Which facility performed each major manufacturing step?
- Which supplier provided the named high-risk input for this order?
- Can purchase and batch records connect that input to production?
- Were labour brokers or temporary-worker agencies used at relevant facilities?
- What change would trigger a new risk review?
- Who is authorised to verify and correct the response?
Provide definitions, a reporting period and a secure path for commercially sensitive records. Suppliers may have legitimate confidentiality concerns, but confidentiality does not make the buyer's evidence need disappear. Controlled disclosure, third-party review or redacted records may be options depending on the case.
Evaluate evidence quality, not volume
An audit report can be useful, but its scope, date, methodology, independence, worker access and facility coverage matter. Certifications and platform scores should not be treated as universal proof. Documentary consistency is also important: facility names, quantities, dates and product descriptions should reconcile.
Negative evidence—such as no findings in a limited audit—does not guarantee absence of forced labour. Buyers should assess whether the method was capable of detecting the relevant risk and whether workers could participate safely.
Where gaps exist, record the decision: request further information, commission qualified review, require corrective action, change the process or source, or decline the transaction. The appropriate response depends on severity, credibility and applicable legal duties.
Establish change and escalation controls
Supply chains change after onboarding. A supplier may add a subcontractor, purchase from a new region, use labour agencies during peak demand or substitute an upstream source. Contractual notification, periodic refresh and shipment-specific confirmation may all be needed for different risks.
Create an escalation route that prevents procurement deadlines from overriding unresolved high-risk signals. Assign responsibility across procurement, compliance, legal and senior management. Record why a decision was made and what evidence supported it.
Preparation checklist
- Which products and EU market roles are in scope for the company?
- Are manufacturing facilities distinguished from traders and offices?
- Is the product BOM and outsourced-process route mapped?
- Which inputs, regions or labour models require deeper review?
- Can evidence connect upstream sources to actual orders or lots?
- Are supplier assertions separated from independently checked facts?
- Are audit scope and limitations understood?
- Is there a secure route for sensitive supporting records?
- Are gaps, corrective actions and decisions documented?
- Do supplier and sub-tier changes trigger review?
- Can procurement stop or escalate an order?
- Have legal advisers reviewed the programme against current EU rules?
What this means for procurement
The decision is no longer just whether a direct supplier has signed a policy. Buyers need to judge whether the product route is sufficiently visible to investigate credible risk and support regulatory engagement. Early preparation matters because upstream records cannot always be reconstructed after goods reach customs.
Morning Sunlight Asia can help collect and organise China-side facility, subcontractor and order information requested by a client's compliance programme. Discuss Your Requirement to plan the operational evidence process; legal due diligence and regulatory conclusions remain with the client and qualified advisers.
法規已確定什麼
Regulation (EU) 2024/3015 禁止以強迫勞動製成的產品在歐盟市場投放或提供，以及從歐盟出口。第 37 條規定法規一般自 2027 年 12 月 14 日適用，部分條款更早適用。EUR-Lex — Regulation (EU) 2024/3015
法規不以產品原產國作為唯一邊界，並建立主管機關和海關參與的調查與執行架構。實際操作仍需結合最新指引、資料庫、實施文件及其他歐盟盡職調查要求。本文章只討論採購準備，不構成法律意見。
聲明只是起點
供應商行為準則可以建立合約期望，但不能證明特定產品每一項投入的來源與勞動條件。更強的資料可能包括生產設施身份與地址、產品 BOM 和工藝路線、風險投入的來源國或設施、外協方與勞務提供方、連接來源和產品的採購及生產記錄、供應商評估與改善，以及無法取得資料的原因與補救計畫。
證據深度要按風險決定。對所有低風險耗材和高風險原料要求完全相同的資料，只會增加文件而不一定增加可見性。
按產品畫供應鏈
不要只抽象評估「這家供應商」。應針對進入歐盟市場的產品，識別製造地點、主要材料和外協工序，再根據地區、行業、用工模式、公開風險資訊與追溯缺口決定深入節點。
要區分已確認資訊、供應商聲明和未解假設。貿易商地址不是生產地址；原產國聲明未必說明上游原料；一家工廠的審核未必涵蓋完成關鍵工序的外協方。
提出可準確回答的問題
與其詢問「是否完全合規」，不如問：哪個設施完成每個主要工序？本訂單的特定風險投入由誰提供？採購與批次記錄能否連到生產？是否使用勞務仲介或臨時工？哪些變更會觸發重審？由誰核驗和更正回答？
敏感資料需要安全傳輸。保密是合理關切，但不能消除採購方的證據需要；可視情況考慮受控披露、第三方審查或遮蔽非必要字段。
評估品質而不是頁數
審核報告是否有用，取決於範圍、日期、方法、獨立性、工人訪談條件和設施覆蓋。認證或平台分數不能被視為普遍證明。設施名稱、日期、數量和產品描述還應互相一致。
有限審核「沒有發現問題」也不保證風險不存在。要判斷方法是否有能力發現相關問題，以及工人能否安全參與。遇到缺口時應記錄採取補充資料、專業調查、改善、換源或拒絕交易的理由。
準備清單
- 公司哪些產品及歐盟市場角色受影響？
- 生產設施、貿易商和辦公室是否被區分？
- 產品 BOM 和外協路線是否已映射？
- 哪些投入、地區或用工模式需要深入審查？
- 證據能否連到實際訂單或批次？
- 聲明與獨立核實事實是否分開？
- 審核範圍和限制是否清楚？
- 敏感資料是否有安全通道？
- 缺口、改善及決策是否記錄？
- 供應商或次級來源變更是否觸發重審？
- 採購能否停單並升級問題？
- 法律顧問是否按最新規則審查制度？
在正式適用前做一次產品級演練
可選擇一個具有多層材料或外協工序的實際產品，從成品向上追查設施、投入和勞務安排，再檢查文件能否在合理時間內取回。演練不是宣告合規，而是找出貿易商與工廠混淆、上游來源不明、審核範圍不足及資料責任人缺失等操作問題。
每個缺口應記錄風險原因、補充資料、責任人和期限。若供應商無法提供上游身份，也應把「無法確認」明確列出，而不是以一份新的廣泛聲明掩蓋。公司可依法律顧問建議決定改善、第三方審查、限制來源或停止交易。
準備工作還要覆蓋內部治理。採購績效不能只獎勵價格和交付，否則遇到高風險訊號時仍會被迫繼續。需要讓合規、法務和管理層在明確節點參與，並保存決策理由。所有結論還應按最新官方指引重新核對。
每次復核都應保存日期、使用的官方資料與決策人。
對採購決策的意義
問題不再只是直接供應商有沒有簽署政策，而是產品路線是否足夠透明，可以調查可信風險並支援監管溝通。上游記錄在貨物抵達海關後未必能重建，因此應提前準備。
晨陽亞洲可依客戶合規制度要求，協助收集中國境內設施、外協與訂單資訊。歡迎 Discuss Your Requirement 規劃操作證據流程；法律盡職調查和監管結論仍由客戶及合格顧問負責。