Corporate social responsibility and SA8000 certification

The SA8000 (Social Accountability 8000) is the longest-standing international standard in the field of corporate social responsibility. First published in 1997 by Social Accountability International (SAI), a non-profit organization based in New York, reflects the labor provisions contained in the Universal Declaration of Human Rights and the conventions of the International Labour Organization, and today supports over 2.8 million workers in certified companies across all sectors.

On January 1, 2026, the SA8000:2026, fifth edition of the standard, which replaces SA8000:2014 after a review process lasting from 2023 to 2025, with over a thousand contributions collected from more than six hundred stakeholders. The new version restructures the entire framework around the approach of due diligence of the United Nations Guiding Principles on Business and Human Rights and redesigns, with it, how audits are conducted and findings classified.

Legal context reference

The revision comes as the European framework on social due diligence is being scaled down. The Corporate Sustainability Reporting Directive (CSRD, EU Directive 2022/2464) and the Corporate Sustainability Due Diligence Directive (CSDDD, EU Directive 2024/1760) were amended by Directive (EU) 2026/470, the first of the simplification packages presented by the European Commission (Omnibus I):

• The reporting now concerns companies with over 1,000 employees and 450 million euros in net turnover, from financial years starting on January 1, 2027;
• The due diligence applies instead only to companies with over 5,000 employees and 1.5 billion euros in global net turnover, effective from July 26, 2029;
• the obligation for a climate transition plan and the harmonized civil liability regime have been removed, now subject to national law.

However, the reduction of the subjective scope does not ease the position of suppliers, who continue to face the same requirements contractually, through customer codes of conduct and tender conditions.

Meanwhile, in the United Kingdom, the UK Modern Slavery Act 2015 requires companies with turnover over 36 million pounds to issue an annual statement on measures taken against modern slavery in their supply chains.

Sustainability claim and certification obligation

A second regulatory area, until now less considered, concerns the commercial use of sustainability claims of companies and their products. Such claims now fall within the scope of Directive (EU) 2024/825 which integrates Directive 2005/29/EC on unfair commercial practices with specific provisions on the so-called (social and) environmental claim — and has been transposed into Italian law by Legislative Decree of February 20, 2026, No. 30, which in turn integrates the Consumer Code and applies from September 27, 2026 (Dongo et al., 2026; Dongo, 2026).

The scope is broader than what the debate on greenwashing might suggest, since thesustainability label is defined as any trust or quality mark, public or private, of voluntary nature, that distinguishes or promotes a product, a process, or a company with reference to its characteristics environmental or social or both. The social dimension therefore fully falls within the definition.

From this premise, two specific provisions follow prohibitions:

– it is forbidden to display a label of sustainability not based on a certification system or not established by a public authority. The certification system is in turn defined as a third-party verification, open to all operators under transparent and fair conditions, with public requirements developed in consultation with experts and stakeholders, complaint procedures and monitoring of non-conformities;

– it is forbidden to make ageneric environmental claim when the professional is not able to demonstrate the recognized excellence of environmental performance, anchored to Ecolabel EU or a type I system according to standard EN ISO 14024.

The two prohibitions operate on different levels: that on sustainability labels covers the entire spectrum, environmental and social, and is absolute; that on generic claims concerns only environmental claims. This, however, does not make vague social declaration lawful: directive 2024/825 has included the environmental characteristics and social — fairness of working conditions, adequate wages, social protection, safety, social dialogue, human rights along the value chain — among those for which a practice is misleading on a case-by-case basis (Consumer Code, article 21).

Thus, the burden of proof changes, not the lawfulness: for the label, incorrectness is presumed, for the social assertion it must be verified. In both cases, those without supporting certification must prove the validity of the statements to the Competition and Market Authority and other supervisory authorities in the destination EU countries.

In this context the certifications of schemes such as SA8000 and FSSC 24000 acquire a value that exceeds the reputational one: third-party verification, independent accreditation, public requirements, complaint mechanisms. Certification, in other words, is the condition of lawfulness of corporate social communication.

The SA8000 certification scheme

Regulatory foundations and structure

The SA8000:2026 is divided into two interdependent sections, preceded by five fundamental criteria (F1-F5). Among these, the rules according to which:

• when legal requirements differ from the standard, the organization applies the most favorable criteria to personnel;
• when the law contradicts the standard, the organization must still identify, prevent, mitigate and remedy risks to personnel within permitted limits.

The Section 1 governs the management system, governance and due diligence, with eleven principles — leadership, responsibility, decision-making autonomy and dignity, integration, long-term planning, responsiveness, transparency, participation and inclusion, social dialogue, support, continuous improvement — and ten criteria (M1-M10), built on the United Nations Guiding Principles, the OECD guidelines on due diligence and onAnnex SL of ISO.

The Section 2 sets out the principles of decent work and the related performance criteria. The definitions in Appendix A also have normative value.

A distinctive element of the scheme's governance is the separation between ownership of the standard, which belongs to SAI, and accreditation oversight, entrusted to Social Accountability Accreditation Services (SAAS).

The seven principles of decent work

Section 2 of the standard is structured into seven clauses, each composed of legal principles and performance criteria:

– protection of children and young workers (D1): prohibition of employment under fifteen years of age, or below the compulsory school age if higher, with strict working hour limits for young workers and protections for children present in workplaces;

– freedom of association and right to collective bargaining (D2), including good faith bargaining and respect for sectoral agreements;

– free and fair hiring, employment, and dismissal (D3): prohibition of forced labor, debt bondage and worker-borne recruitment charges, freedom of movement and continuous access to identity documents, regulation of disciplinary practices, prohibition of conditions that isolate personnel or force them to be separated from their children;

– adequate working hours, wages and benefits (D4): forty-eight ordinary weekly hours and a maximum of twelve overtime hours, living wage or legal minimum if higher, twenty-four hours rest after six consecutive days, clear and complete payslip;

– freedom from discrimination (D5), with explicit prohibition of pregnancy, HIV and virginity tests;

– health and safety (D6), extended to psychosocial risks, housing, transport and catering provided by the employer;

– privacy (D7): collection and processing of personal data limited to the purposes of the employment relationship and role requirements.

Scope of application

Certification covers the entire site and all operations, including remote sites and home workers operating under a common management system. The scope is broader than the notion of employee suggests: the standard defines ‘personnel’ anyone performing work for the organization or its business partners, including indirect personnel — temporary workers, drivers, home workers, small farmers, security staff, maintenance, cleaning, and canteen staff — and the ‘work environments’ include accommodation and transport provided by the employer.

This leads to precise operational consequences:

– suppliers operating at the certified site are treated as part of the organization and their workers are included in the audit day count; the same applies to exclusive suppliers, both on-site and off-site;

– temporary work agencies and labor cooperatives must include temporary workers, each counted as a unit and not full-time equivalent;

– certification is denied to companies without effective operations. The organization must have carried out the declared activity for at least six months and have active contracts at the time of application.

A rule is expressly written for Italy: when the scope is derived from the business register extract, the certification must be limited to activities actually carried out and under the operational control of the organization, as registration in the business register, often broad and programmatic, does not in itself prove exercise of the activity. Maritime activities covered by the MLC convention are excluded, as well as those indicated in the exclusion list published by SAI.

Each certified organization finally receives a primary SAI sector code, which determines its indexing in the public register. The sector D — Food & Beverage distinguishes agricultural products, alcoholic beverages, food distribution and retail, meat, poultry and dairy, non-alcoholic beverages, processed foods, catering and tobacco (whose supply chain is excluded by FSSC 24000).

Certification process and surveillance cycle

The process begins with the implementation of the management system and the selection of a SAAS accredited certification body, and continues with a initial audit in two stages: Stage 1, of a documentary nature, and Stage 2, to verify the actual implementation.

The certificate has three-year validity and the cycle starts from the date of the certification decision. For single sites, the schedule is predetermined in windows: first surveillance audit within six months, check of follow-up usually remotely within twelve months, second surveillance audit within eighteen months, second check of follow-up within twenty-four months, recertification audit within thirty months, final review between the thirty-third and thirty-fifth month. This results in two surveillance audits on site per cycle and in any case at least one check every twelve months. Multi-site organizations follow a distinct regime.

The surveillance audits are semi-announced: the organization knows the eight-week window, communicated with at least the same advance notice, but not the day of the visit. The window is non-negotiable and cannot be moved once communicated, and those who do not accept the visit within the deadline see their certificate canceled. Postponements are only allowed for force majeure, with immediate suspension of the certificate and withdrawal if the resumption exceeds three months; two surveillances can never be combined.

Two provisions deserve attention in the food supply chain, where seasonality is the rule:

• each surveillance must collect evidence relating to both peak production and low season, with particular attention to working hours;
• over the three-year period all elements of the standard must be re-examined, although not all in each visit.

Theintensity of the audit is itself predetermined:

• in a company with 251-500 employees each surveillance requires four individual interviews and one group interview with three workers, for at least two and a half hours overall, plus the examination of six personal files with related payslips;
• above one thousand employees it rises to ten workers interviewed and five hours. The files of the interviewed workers must be fully examined, the others at least skimmed for anomalies. Certified organizations are listed in the public register available on the SAI website.

Audit findings and certification thresholds

The SA8000:2026 scheme does not replace the model pass/fail with a score, but with a risk matrix applied to each finding. The use of the new SA8000 Audit Tool is mandatory and each detected deviation must flow into at least one formal finding. Thus, three institutions of the previous system have fallen away: opportunities for improvement and term non-conformities, which allowed for postponements, and the Management System Maturity Declaration, replaced by the maturity assessment within the audit.

The audit group first consolidates deviations that share the same system deficiency, the same organizational responsibility, or the same root cause, with an explicit prohibition on using consolidation to mitigate the severity of the most serious finding. This is followed by a double classification:

• the first concerns the criticality, determined by crossing the severity of the impact with the incidence of actual impacts or the probability of potential ones. Four outcomes result: concern, minor non-conformity, major non-conformity, critical non-conformity. A high severity always leads to a major non-conformity, even in the case of an isolated incident; critical non-conformity is reserved for flagrant violations, fraudulent acts, obstruction of audit group access, and repetition within five years of a major or critical non-conformity already closed;
• the second classification, borrowed from the United Nations Guiding Principles, concerns the contextthe organization causes the finding, causes it together with others, contributes to it, or is connected to it. It is not a descriptive label, because it determines the timing. Non-conformities caused by the organization must be closed within six months if minor, three if major, one if critical. Those not caused exclusively follow a path of periodic checks, with decisions on extension or escalation up to twenty-four or forty-eight months depending on the severity, subject to proof of documented commitment, actions proportional to the available resourcesavailable, plans with measurable objectives and verifiable progress.

The most significant change for companies lies in thresholds: unlike SA8000:2014, an organization can obtain and maintain certification with an open major non-conformity, provided it is not caused exclusively by it and the corrective path is followed. A critical non-conformity, in any context, instead prevents the issuance of the certificate and, for already certified organizations, initiates the suspension process.

Certification bodies and auditor qualification

Certification bodies must be accredited by SAAS according to Procedure 200 and the standard ISO/IEC 17021-1:2015, with separate accreditation for each country in which they operate. The certification decision requires an independent review by a Senior Lead Auditor unrelated to the audit process in every case of initial certification, re-certification, scope modification, suspension or withdrawal, and whenever a surveillance produces major or critical non-conformities.

On the front ofindependence, the scheme stipulates that the audit team leader cannot hold this role for more than one certification cycle at the same organization without an interval cycle, a rule that applies to the auditor even when the client changes the body. The composition of the group must also reflect gender balance and other characteristics of the workforce, so as to allow, where practicable, individual interviews conducted by an auditor of the same gender as the worker.

The preliminary research charged to the body have been expanded: estimate of the living wage for the territory and sector, verification of ongoing or past legal proceedings, review of complaints and disputes in the six months prior to Stage 1, consultation with trade unions, NGOs and local stakeholders at least once a year. The audit plan must require the organization to calculate the living wage and the lowest wage paid, with evidence of the applicable legal or contractual minimum.

Transition to the 2026 version

From January 1, 2027, every new certification and re-certification must be according to SA8000:2026; by May 31, 2029, all certified organizations must have completed the transition, which can only occur during re-certification. Already certified enterprises had to complete, by December 31, 2026, the training and self-assessment required by SAI.

Advantages and burdens related to the adoption of SA8000

Advantages

The adoption of the standard offers organizations Advantages of various kinds:

– provides an independent and internationally recognized verification of working conditions, enforceable against clients, investors, and authorities;

– meets the certification system requirement requested by the Consumer Code for the lawful use of a social sustainability label;

– reduces theaudit fatigue, because it allows responding to compliance of multiple clients without hosting repeated second-party audits.

The 2026 revision adds a methodological advantage. The shift from the logic of pinpoint observation to that of the risk matrix and the context recognizes that some social problems do not depend solely on the certified company, and allows maintaining certification while working on causes requiring third-party collaboration. It is a realism that the previous version did not contemplate.

Burdens

The burdens, in turn, are not negligible. Thesystem setup requires investments in training, procedure review, risk mapping and, often, external consultancy; in addition to audit fees, calculated based on the days provided by the scheme tables, indirect costs of permanent availability imposed by semi-announced visits are added.

However, the greater burden concerns the extension of the due diligence. The standard requires identifying, evaluating, and addressing negative impacts not only in one’s own operations, but along the entire value chain, upstream and downstream, and establishing with business partners documented mutual expectations, including conditions for terminating relationships.

Conclusions

The SA8000:2026 scheme updates a model that has thirty years of application, aligning it with the due diligence of the United Nations Guiding Principles and the logic of risk analysis. The core remains that of 1997: seven rights, a management system that oversees them, an independent audit that verifies it.

However, its use changes in nature with the reform of the discipline of unfair commercial practices. No sustainability label, environmental or social, can be displayed without a supporting certification system: SA 8000 thus becomes the title that legitimizes what the company declares to the consumer.

Dario Dongo

Credit cover SAI – Social Accountability Consultant

References

European Union normative sources

Directive (EU) 2022/2464 of the European Parliament and of the Council of 14 December 2022 amending Regulation (EU) No 537/2014, Directives 2004/109/EC, 2006/43/EC and 2013/34/EU, as regards corporate sustainability reporting. Consolidated text: 18/03/2026. http://data.europa.eu/eli/dir/2022/2464/2026-03-18

Directive (EU) 2024/825 of the European Parliament and of the Council of 28 February 2024 amending Directives 2005/29/EC and 2011/83/EU as regards empowering consumers for the green transition through better protection against unfair practices and through better information. Official Journal of the European Union, L, 6.3.2024. http://data.europa.eu/eli/dir/2024/825/oj

Directive (EU) 2024/1760 of the European Parliament and of the Council of 13 June 2024 on corporate sustainability due diligence and amending Directive (EU) 2019/1937 and Regulation (EU) 2023/2859. Consolidated text: 18/03/2026. http://data.europa.eu/eli/dir/2024/1760/2026-03-18

Directive (EU) 2026/470 of the European Parliament and of the Council of 24 February 2026 amending Directives 2006/43/EC, 2013/34/EU, (EU) 2022/2464 and (EU) 2024/1760. Official Journal of the European Union, L, 26.2.2026. http://data.europa.eu/eli/dir/2026/470/oj

Italian normative sources

Legislative Decree 6 September 2005, no. 206. Consumer Code, pursuant to Article 7 of Law 29 July 2003, no. 229. Normattiva. Last update to the act published on 05/15/2026. https://www.normattiva.it/uri-res/N2Ls?urn:nir:stato:decreto.legislativo:2005-09-06;206

Legislative Decree 20 February 2026, no. 30. Implementation of Directive (EU) 2024/825. Official Gazette of the Italian Republic, General Series no. 56 of 9 March 2026. https://www.gazzettaufficiale.it/eli/id/2026/03/09/26G00047/SG

Scheme documents and institutional sources

SAAS. (2020). SAAS Procedure 200:2020. Procedures and Requirements for Accredited Certification Bodies, version 4.2, in force from 6 March 2020. Social Accountability Accreditation Services. https://sa-intl.org/resources/saas-document-library/

SAI. (2026). SA8000:2026. Standard for decent work. Social Accountability International. https://sa-intl.org/wp-content/uploads/2026/01/SA8000-2026_final_IT-1.pdf

SAI. (2026). SAI Procedure 200 Supplement. SA8000:2026 Interim (Bridging) Requirements, revision 1, valid from 1 June 2026. Social Accountability International. https://sa-intl.org/resources/saas-document-library/

SAI. (2026). SA8000 Certification Program Timeline. Transitioning to SA8000:2026. Social Accountability International. https://sa-intl.org/sa8000-certification-program-timeline/

SAI. (2026). 2023-2025 SA8000 Standard Revision. Social Accountability International. https://sa-intl.org/sa8000-standard-revision/

SAI. (2026). SA8000:2026 Standard. Social Accountability International. https://sa-intl.org/resources/sa8000-standard/

In-depth legal articles

Dongo, D., Della Penna A.A. (2026, May 15). Environmental claims and unfair commercial practices. FT (Food Times). https://www.foodtimes.eu/it/consumatori-e-salute/direttiva-asserzioni-ambientali-pratiche-sleali/

Dongo, D. (2026, July 14). Environmental claims and inventory, the roadmap. FT (Food Times). https://www.foodtimes.eu/it/sistemi-alimentari/environmental-claims-scorte-magazzino-road-map/