What is SB 261 climate risk reporting?

SB 261 is California’s climate-related financial risk disclosure law that requires companies doing business in California with over 500 million dollars in annual revenue to publish a biennial climate risk report. The report must explain how climate change may affect the company’s operations, strategy, and financial performance.

Who needs to comply with SB 261?

SB 261 applies to both public and private companies, including non-U.S. firms, that generate more than 500 million dollars in global annual revenue and are considered to be doing business in California. Insurance companies regulated by the California Department of Insurance are generally exempt.

What framework should be used for SB 261 reporting?

The report should be aligned with the TCFD framework or an equivalent standard such as IFRS S2. This includes disclosures across governance, strategy, risk management, and metrics and targets.

What risks must be covered in the SB 261 report?

Companies must disclose both physical risks such as wildfires, floods, heatwaves, and supply chain disruption, as well as transition risks such as carbon pricing, policy changes, market shifts, and stranded assets.

How often must companies publish SB 261 reports?

SB 261 requires companies to publish the climate-related financial risk report every two years, with the first report originally expected from January 1, 2026, subject to current legal and enforcement developments.

Is third-party assurance required for SB 261?

Unlike SB 253, SB 261 does not currently require mandatory third-party assurance. However, companies should still maintain strong documentation and governance controls because the report is public and may be reviewed by investors, regulators, and stakeholders.

How should companies prepare for SB 261 climate risk reporting?

Companies should identify climate-related financial risks, integrate climate scenarios into enterprise risk management, establish board oversight, align with TCFD or IFRS S2, and prepare a public-facing risk report with clear mitigation and adaptation strategies.

What SB 261 Means for Climate Risk Disclosures

3 min. read
Anviksha Mishra

SB 261 climate risk reporting timeline and compliance guide for California companies

SB 261 is California’s landmark climate risk reporting law, requiring companies with over $500 million in annual revenue to publish biennial SB 261 climate risk reports starting in 2026, aligned with the TCFD framework or an approved equivalent.

This post breaks down:

What SB 261 requires
Who it applies to
What counts as climate-related financial risk
Reporting format and timelines
How this connects with SEC, CSRD, and ISSB regulations
What steps risk teams should take now

What Is SB 261?

Senate Bill 261 — passed in 2023 — requires large companies operating in California to publicly disclose climate-related financial risks and explain how they’re addressing them.

Unlike emissions-focused regulations (like SB 253), SB 261 focuses on the economic impact of climate change on the company itself — including both physical risks (like wildfires and floods) and transition risks (like policy changes, stranded assets, and customer shifts).

Which Companies Must Comply?

Requirement	Threshold
Entity Type	Public or private corporations, LLCs, partnerships
Revenue	Over $500 million USD (global annual revenue)
Geography	Must “do business” in California
Exemptions	Insurance companies regulated by the CA Department of Insurance

This applies to both U.S. and non-U.S. companies if they meet the revenue and presence thresholds.

What Is a Climate-Related Financial Risk Report?

Companies must prepare a public-facing, biennial report covering:

Identification of climate-related financial risks
Actions and strategies to mitigate or adapt to those risks

The definition of “climate-related financial risk” is broad. It includes material risks to operations, supply chains, employees, customers, capital investments, and market valuation — caused by climate impacts or the transition to a low-carbon economy.

Reporting Standards: TCFD, IFRS S2, or Equivalent

SB 261 aligns with globally recognized standards:

Primary framework: Task Force on Climate-related Financial Disclosures (TCFD)
Also accepted: IFRS Sustainability Disclosure Standards (IFRS S2)
Equivalents allowed: SEC climate disclosure rules (once finalized), other government mandates

The report must include TCFD’s four pillars:

TCFD Pillar	What It Covers
Governance	Who’s responsible for managing climate risks?
Strategy	What are the actual and potential impacts of climate change?
Risk Management	How are climate risks identified and managed?
Metrics & Targets	How are risks measured and progress tracked?

Disclosure Timeline and Publication Requirements

Requirement	Date
First report due	January 1, 2026
Update frequency	Every 2 years
Publication method	Company’s website (public access required)
Consolidated reporting	Allowed at parent level if subsidiaries meet threshold

Companies must submit their report to a state-designated climate reporting organization, which will produce an independent biennial review of public disclosures.

Penalties and Enforcement

Violation	Penalty
No report published	Up to $50,000 annually
Inadequate/incomplete disclosure	Same threshold, based on severity
Factors considered	Effort, timing, and compliance history

Companies must also pay an annual administrative fee to fund state oversight. Fee amounts will be published by CARB and adjusted annually for inflation.