Over the past three weeks, we’ve covered the EU’s new regulatory framework, the scale of U.S. cotton’s exposure, and the forced labor regulation that’s driving the most immediate compliance urgency. This week, let’s tackle a question we hear a lot:

“We’re already part of a sustainability program. Isn’t that enough?”

The short answer: not for what’s coming.

The EU Forced Labor Regulation (2024/3015) establishes a clear standard: any product placed on the EU market must be free of forced labor at every stage of production, harvest, and extraction. When a competent authority has “substantiated concern” about a product, it can launch an investigation—and the evidence it considers isn’t limited to paperwork.

Here’s what that means in practice for cotton. To satisfy an EU investigation, you’ll need:

• Product-level proof of origin. Not an industry enrollment statistic. Not a certificate that says your company participates in a program. Verifiable evidence that the cotton in that specific product came from where you say it came from.
• Evidence that survives the full supply chain. Cotton moves through gins, ports, spinning mills, weavers, and garment factories—often across multiple countries. At every handoff, there’s an opportunity for the chain of custody to break or be compromised through transshipment, commingling, or falsification. The evidence needs to hold up through all of it.
• Traceability from the field forward. The regulation targets products, not companies. That means traceability needs to begin at the farm—the first mile—and follow the cotton through the gin, port, and beyond. Starting at the port of export isn’t enough.
• Independence from self-reported data. The regulation allows authorities to consider all available evidence. The industry is increasingly recognizing that the most credible proof of origin won’t come from the supply chain’s own paperwork—it will come from scientific verification that can independently confirm where fiber was grown.

The U.S. cotton industry has made real progress on sustainability. Voluntary programs have improved environmental practices, provided field-level data, and built digital chain-of-custody systems. That work matters. But sustainability and EU regulatory compliance are two different things—and the gaps between them are significant.

Gap #1: Enrollment is voluntary. Current programs are opt-in. Roughly a quarter of U.S. cotton acreage is enrolled in voluntary sustainability initiatives. That means a finished product can contain a mixture of enrolled and non-enrolled cotton, with no reliable way to distinguish between them at the garment level. EU enforcement doesn’t operate at the field level—it operates at the finished-product level.

Gap #2: Documentation can be compromised. Digital chain-of-custody records are a step forward from paper trails, but they’re still vulnerable to the same risks that have complicated enforcement under the UFLPA: transshipment, commingling, and falsification. Consider the journey: a bale leaves a gin in Texas, ships to Savannah, crosses the ocean to a spinning mill in Turkey, becomes yarn blended with fiber from other origins, gets woven into fabric, and eventually becomes a garment. At every handoff, there’s an opportunity for the chain of custody to break—or be manipulated.

Gap #3: No physical marker. This is the most consequential gap. Current voluntary programs do not incorporate physical verification technology—DNA tagging, isotopic fingerprinting, or any other mechanism that allows an authority to test a finished garment and independently confirm the cotton’s origin without relying on the supply chain’s own paperwork. The industry is moving toward a standard where you can take a shirt off the rack, run a test, and scientifically verify where the cotton was grown. That’s the kind of evidence that will carry the most weight in a regulatory investigation—and no voluntary program currently offers it.

The industry has built a foundation with sustainability programs. But foundation isn’t the same as compliance. The EU isn’t asking whether your cotton was grown sustainably—it’s asking whether you can prove it wasn’t produced with forced labor, with evidence that holds up under investigation.

Being a member of a respected sustainability program is a good start. But membership alone won’t clear your cotton through EU enforcement in December 2027.

The question every company in the cotton supply chain needs to answer: What are you doing—right now—to prove where your cotton comes from?

The industry has built a foundation. The question now is who builds the next layer—before the deadline arrives.

Next in the series: The Clock Is Ticking — Your Cotton Traceability Timeline and What to Do Now

Follow Silverleafe Cotton Tracing for weekly insights on cotton traceability and the regulations shaping the future of the industry.