Authors: Meredith Outterson, Kim Grubert, & Dr. Rawlings Miller | October 27, 2025

Learn How to Navigate Compliance Amidst Regulatory Uncertainty

Corporate risk management and sustainability teams are abuzz across the country preparing for California’s upcoming climate-related financial risk disclosure requirements, which are due January 1, 2026, under state Senate Bill (SB) 261. These mandatory reports assess the resilience of a company’s business model under two or more future scenarios, including potential financial impacts from supply chain disruptions, storm-related flooding, regional droughts and wildfires, reputational impacts, increasing regulations and more.  

The California Air Resources Board (CARB) announced on October 14, 2025, that publication of the agency’s implementing regulations—the law’s formal compliance details—will be delayed until a to-be-specified date in the first quarter (Q1) of 2026. In the absence of implementing regulations, companies may feel uncertain about what to include in their climate-related financial risk reports, to comply with this first cycle of SB 261 reporting.  

For over a year, TRC’s climate risk experts have been helping companies develop these SB 261-aligned reports and illuminating a strategic path forward amidst the uncertainty. Whether your organization is just starting its climate risk disclosure journey, or is finalizing its Task Force on Climate-Related Financial Disclosures (TCFD)-aligned report, read on to learn how to quickly and strategically prepare for compliance. 

Key Actions to Take Now: Four Recommendations 

Adapting to a new regulatory framework on a tight timeframe can be overwhelming, especially with delayed regulatory instructions. There are clear steps that companies can take now, though, to achieve compliance. 

1. Determine your company’s eligibility status for SB 261.

If your organization has over $500M in annual revenue and does business in California, then it is likely in scope. If you are not sure whether your company does business in California, check the Secretary of State’s database, which lists entities that had an active agent for service of process in California as of 2022. You can also check whether your company pays sales tax in California as a likely indicator of activity there. Most critically, work with internal or external legal counsel regarding an eligibility determination.  

2. If your company is in-scope, assess its current climate-related reports.

Does your annual Environmental, Social and Governance (ESG) or Corporate Social Responsibility (CSR) report discuss climate risk-related topics? Has your organization conducted a qualitative or quantitative climate scenario analysis? Are climate-related risks explicitly integrated into your company’s Enterprise Risk Management (ERM) framework? Do you have a TCFD-aligned report published on your corporate website? If you answered “yes” to each of these questions then it will be fairly straightforward to follow CARB’s Draft Checklist to prepare a report for SB 261 compliance. If you answered “no” to most of the questions above, then additional work will be needed. 

3. Act quickly to launch a scenario analysis and develop disclosure responses, if needed.

The regulatory compliance deadline of January 1, 2026, is quickly approaching. If your company is in-scope and does not yet have a public report or a prior climate risk assessment, it is time to begin a climate scenario analysis, which can take one to two months to complete. Follow the TCFD’s technical recommendations for scenario analysis. Then, draft a public-facing report, following CARB’s Draft Checklist for minimum compliant disclosures. Keep in mind that the entire disclosure process can take three months or more, particularly if new to the TCFD framework. While the deadline for compliance remains January 1, 2026, CARB’s public docket to upload a link to your report is expected to remain open until July 1, 2026. TRC’s team of climate risk and resilience experts can also help you quickly level up your climate risk processes and draft a compliant report.

4. Plan for future compliance cycles.

Evaluate your company’s eligibility and preparedness for SB 261’s sibling bill, SB 253, which requires companies doing business in California with annual revenue over $1 billion to publish a greenhouse gas (GHG) inventory with limited assurance by the proposed deadline of June 30, 2026. Next, assess budgets, timelines, goals, and data gaps for the next SB 261 reporting cycle, due January 1, 2028. If you’ve done a qualitative climate scenario analysis for this first cycle, consider conducting a more rigorous, quantitative dive into your physical risks in 2026 or 2027. If your company already has a public TCFD-aligned report, work to understand what additional steps would be needed for IFRS S2 compliance.  

What To Know About SB 261

In October 2023, California passed two laws requiring increased climate-related reporting from large companies with economic activities in the state: SB 261 and SB 253. Please see our previous insight article for a detailed explanation of both laws.  

Since the bills passed, CARB has been drafting “implementing regulations” outlining the nuances of the eligibility definitions and compliance requirements for climate disclosure reports. CARB originally intended to publish these implementing regulations on October 14, 2025, but the agency has now delayed that release. CARB now expects to finalize approval of the implementing regulations at a public Board hearing during Q1 2026. CARB’s public calendar states that the Board’s spring 2026 meetings will occur on January 22-23, February 26-27 and March 26-27, although CARB has not stated which of these meetings will be used to vote on SB 261’s implementing regulations. Until the implementing regulations are finalized, CARB recommends that companies follow the public guidance already released by the agency, making a “good faith effort” to comply. 

Both SB 261 and SB 253 apply to corporate entities based on annual revenue thresholds and “doing business in California,” which will be officially defined in the implementing regulations. During public webinars in May and August 2025, CARB signaled that they are considering the following definitions: 

  • Annual revenue is “the total global amount of money or sales a company receives from its business activities, such as selling products or providing services.” This definition does not deduct operating costs or other business expenses and, according to CARB, is consistent with metrics used by major data reporting entities, such as Dunn & Bradstreet, Standard & Poor, and Data Axle. 
  • “Doing business in California” may be indicated by any of the following: 
    • Being organized or commercially domiciled in California 
    • Having an “active” listing on the CA Secretary of State’s database 
    • Having $735,019+ of sales in CA, inflation-adjusted in future years OR >25% of total sales 
    • Having $73,502+ of total real and tangible property OR >25% of total property in state 
    • Having $73,502+ payroll compensation OR >25% of total payroll in CA 

Note that CARB is considering defining parent and subsidiary relationships based on ≥50% operational control. Parent entities can choose to report for their in-scope subsidiary companies for SB 261 and 253, if desired, or in-scope subsidiaries can report individually. 

CARB has stated that the following entities may be exempted from SB 261 compliance:  

  • Non-profit and government entities 
  • The CA Independent System Operator (CAISO) 
  • Businesses whose only activity in CA consists of wholesale electricity transactions that occur in interstate commerce 
  • Any company whose only business in CA is the presence of teleworking employees 
  • Entities that are “in the business of insurance” are exempted from SB 261, but not SB 253

To comply with SB 261, companies need to publish a climate-related financial risk report biannually, on or before January 1, 2026, and pay an annual program administration fee (currently anticipated to be ~$3,000) to avoid a non-compliance penalty of $50,000 per reporting year. Note that each in-scope subsidiary is subject to the fee, and companies subject to both SB 261 and SB 253 must pay both program fees. SB 261 reports should use the most-recent and best-available data. Once reports are finalized, companies should submit a link to their publicly accessible report via CARB’s public docket, which is expected to open on Dec. 1, 2025, and close on July 1, 2026. 

Reports should apply either the 2017 TCFD recommendations or their successor framework, the International Financial Reporting Standards body’s second standard (IFRS S2, discussed in more detail in the following section). Regardless of the chosen framework, reports need to cover climate-related governance, strategy, metrics and risk management topics. Reports should include a qualitative or quantitative climate scenario analysis, assessing the resilience of the organization’s strategy and how risks and opportunities may change under two or more plausible future scenarios. Required disclosures include management and Board oversight of climate-related risks; the potential impacts of climate-related risks and opportunities on the company’s operations, strategy and financial planning; metrics used to manage climate-related risks and opportunities; and the integration of climate-related risks into the company’s ERM. 

Note that IFRS S2 compliance requires disclosure of Scope 1, 2 and 3 emissions, in accordance with the GHG Protocol. However, CARB has clarified that GHG emissions disclosures are not required in this first cycle of SB261 reporting, even if companies are following the IFRS S2 standard. This reporting exemption is due to the difference in eligibility requirements and reporting deadline between SB 261 and SB 253. 

Reach out to TRC for further guidance based on CARB announcements, reporting best practices and your company’s unique situation. 

In selecting required climate risk reporting frameworks, CARB is seeking to enable interoperability with existing international climate disclosure requirements, such as the European Union’s Corporate Sustainability Reporting Directive (CSRD), mandatory TCFD reporting in many countries and growing international momentum toward TCFD’s successor framework, IFRS S2. Therefore, CARB currently allows reporting entities to follow either the TCFD recommendations or IFRS S2’s more rigorous and detailed standards.  

If companies have not yet written a climate-related financial risk report, TRC recommends starting with a TCFD-aligned report and then evolving toward IFRS S2 compliance in future reporting cycles. Following the TCFD framework is an excellent step toward insightful climate risk analysis and transparent reporting. IFRS S2 compliance requires additional quantitative analysis, more specific metrics, transition plan details and more thorough governance disclosures. See additional details in the graphic below. TRC can help you evaluate gaps in IFRS S2 readiness and accelerate gap-filling progress, if desired. 

Key Disclosures Included in IFRS S2 Compliance vs. TCFD Recommendations

Several additional US states are currently considering laws similar to SB 261 and SB 253, including New York, New Jersey, Illinois, Colorado and Washington. What’s more, over 35 countries already have laws requiring TCFD- or IFRS-aligned climate risk reporting, with at least seven more nations currently drafting such laws. Even if companies do not currently operate in these states or countries, they may choose to publish climate risk reports, to prepare for future possible market expansions. 

An increasing number of companies are also choosing to voluntarily assess their climate-related financial risks, even if they’re not operating in states or countries implementing such laws. TCFD- or IFRS-aligned reporting is rapidly becoming a market and customer expectation. Additionally, in 2024, MSCI found that annual returns from climate risk “leaders” on their All Country World Index (ACWI) outperformed those of “laggards” by 2-3% annually over the last 10 years. By rigorously assessing climate-related risks and opportunities, companies can improve enterprise risk management processes, prepare for potential supply chain and productivity impacts, and boost corporate and community resilience. Organizations can also increase efficiency, uncover innovative revenue opportunities, enhance brand value, raise employee engagement, future-proof their portfolios and more. Therefore, climate risk reports represent a sizeable value creation opportunity above and beyond the current compliance needs. 

GettyImages-1395545952-scaled

TRC Can Help You Create Value Through Disclosures 

TRC’s tested practitioners have extensive experience helping companies adapt to evolving climate risk regulations with insightful and carefully-crafted analysis that creates value far beyond compliance. Our solutions can help you uncover efficiencies, streamline processes, improve brand loyalty and recover more quickly from climate-related challenges.   

Our specialists provide case-by-case advice to meet you where you’re at, crafting a bespoke climate scenario analysis that integrates your existing mitigation measures and focuses on the material impacts you care about. We understand the nuances of regulatory compliance and are grounded in business realities, while helping you unlock the full value of climate risk assessment. Our climate resilience practitioners can also streamline your time to compliance and minimize the effort needed. 

Contact us today to jumpstart your organization’s climate risk disclosure improvements. 

Contact Us

MeredithOutterson_Headshot-1
Meredith Outterson

Meredith is a Senior Associate in TRC’s Climate Risk and Resilience practice. With 8 years of climate consulting experience, Meredith is skilled at helping companies navigate evolving environmental frameworks, including TCFD, IFRS S2 and CSRD. She specializes in transition risks and insightful communication of climate scenario analysis to improve resilience. She has built bespoke tools modeling the financial impact of climate risks and written TCFD-aligned reports for several multinational companies. Before joining TRC, Meredith consulted at EY, McKinsey and the U.S. EPA.

Kim_Gruber_Headshot
Kim Grubert

Kim is an Associate Director in TRC’s Climate Risk & Resilience practice. With 12 years of experience, she specializes in integrating climate and nature considerations into decision-making for public and private sectors. Kim has guided dozens of companies across diverse industries in advancing climate mitigation and adaptation initiatives, including aligning strategies with the TCFD recommendations and conducting climate scenario analyses. She holds a Masters in Environmental Management from Duke University and a Bachelor of Science in Environmental and International Studies from the University of Kansas. Contact Kim at KGrubert@trccompanies.com.

b7e080a3-trc-miller_rawlings-e1655148108441
Dr. Rawlings Miller

Rawlings Miller is the Director of Climate Risk and Resilience in TRC’s ESG and Climate Advisory practice. A climate scientist based out of Boston, MA, Rawlings has been working in climate resilience research and policy since 1995. She has led a range of climate vulnerability and risk assessments including significant experience with climate financial risk disclosures, TCFD reporting and corporate resilience programs.