The SEC Climate Disclosure Rule: What CFOs Need to Know Now

The SEC's climate disclosure rule has had a turbulent path. Finalized in March 2024, immediately challenged in court, voluntarily stayed by the SEC itself in April 2024 while litigation consolidated in the Eighth Circuit, and still unresolved going into 2025 and 2026. If you are a CFO at a publicly traded company, you might be tempted to wait until the legal situation clears up before doing anything. That is a mistake, and here is why.

What the Rule Actually Requires

The final SEC climate disclosure rule, as adopted, requires public companies to disclose material climate-related risks, the actual and potential financial impacts of those risks, governance structures for managing climate risk, and certain greenhouse gas emissions data. Specifically:

Large accelerated filers (LAFs) with a public float over $700 million must begin disclosing Scope 1 and Scope 2 emissions for fiscal years starting in 2025, with limited assurance required starting in 2026 and reasonable assurance in 2029. Accelerated filers follow one year later on most requirements. Smaller reporting companies and non-accelerated filers have further delayed timelines. Scope 3 disclosure was required only if material or if the company had publicly committed to Scope 3 targets — but the Scope 3 provision has been the most contested element and was already scaled back from the original proposal.

The stay does not eliminate these requirements. It delays enforcement while the courts review whether the SEC had authority to adopt the rule in its current form. The Eighth Circuit could uphold it, narrow it, or strike it down. Any of those outcomes is possible, and the timeline is uncertain.

Why Waiting Is the Wrong Move

Even setting aside the legal uncertainty, companies that wait to build climate disclosure infrastructure are making a strategic error for three reasons.

First, institutional investors are not waiting for the SEC. BlackRock, Vanguard, State Street, and most large pension funds have been requesting standardized climate data for years through CDP and through direct engagement letters. The investors who own 30 to 50% of most large-cap companies already expect this information. The SEC rule codifies and standardizes what they were asking for anyway.

Second, CSRD applies regardless of SEC status. If NetZero Trail has any EU operations — subsidiaries, branches, significant sales — and crosses the relevant thresholds, you may already be subject to CSRD disclosure requirements with timelines that predate whatever the Eighth Circuit decides. A US multinational cannot treat SEC and CSRD as separate problems. The data collection and assurance infrastructure for one feeds the other.

Third, building climate reporting infrastructure takes 12 to 24 months for most organizations. You need to establish your emissions inventory boundary, identify data sources for Scope 1 and 2, set up data collection processes, engage an assurance provider, and integrate climate risk into your existing financial risk management framework. Companies that start now will meet timelines comfortably. Companies that wait for the legal outcome will be scrambling.

What "Limited Assurance" Actually Demands

The assurance requirements in the SEC rule are stricter than many CFOs realize, and they change what kind of emissions data is acceptable. Limited assurance means an external third party reviews your methodology, tests some of your data, and provides a conclusion that your emissions figures contain no material misstatements. This is not the same as having your sustainability team calculate the numbers and state them in your annual report.

For most companies, achieving limited assurance on Scope 1 and 2 data requires documented measurement procedures, metering or utility data with audit trails, consistent emission factors with documented sources, and controls around data aggregation. If you have been calculating emissions informally — copying numbers from utility bills into a spreadsheet, applying emission factors from memory, making year-end adjustments without documentation — that process will not survive an assurance review.

Getting your emissions data to assurance-ready quality typically takes one to two reporting cycles. That is why 2026 preparation should start now, not when the court ruling comes in.

The Risk Disclosure Section Is Often Overlooked

Most of the public commentary on the SEC rule focuses on the GHG disclosure requirements. But the risk disclosure provisions are arguably more significant for many companies. The rule requires disclosure of material physical risks (flooding, heat, drought affecting operations) and transition risks (policy changes, shifts in customer preferences, stranded asset exposure). It requires quantification of actual expenditures incurred and capitalized due to climate risks, and it requires disclosure of how climate risk factors into your financial estimates and assumptions.

This is new territory for most finance teams. Climate risk is not currently integrated into how most US public companies develop their financial projections, impairment tests, or asset life assumptions. Building that integration requires collaboration between sustainability, treasury, and financial reporting teams that rarely work together.

The scenario analysis work that TCFD-aligned companies have been doing for years is directly relevant here. If NetZero Trail has not done scenario analysis, this is a good time to start — not because the SEC requires specific scenarios, but because scenario analysis is the analytical foundation for quantifying climate-related financial impacts in a way that satisfies both the SEC rule and investor expectations.

Practical Priorities for 2026

If you are a CFO trying to figure out where to focus right now, here is what I would prioritize in roughly this order. Establish your emissions baseline with documented methodology — even a spend-based Scope 3 estimate with clear caveats is better than nothing. Assess your CSRD exposure separately from your SEC exposure, since those may have different timelines and thresholds. Engage your audit firm early about assurance readiness, because they need lead time too. Build a cross-functional climate data governance process that includes finance, not just sustainability. And document your current state clearly enough that you can explain it to your board, your auditors, and eventually regulators.

The legal uncertainty around the SEC rule is real. But the business case for climate disclosure infrastructure is not contingent on any one regulation. It is driven by investors, lenders, customers, and a global regulatory environment that is moving in one direction regardless of what one US court decides.