EUDR: The April 2026 Simplification Package – What Has Changed and What It Means for Malaysian Exporters

The EU Commission has confirmed the December 2026 deadline is final, the core text will not be reopened – and Malaysian businesses face a mixed picture

As EuroCham Malaysia's Legal Knowledge Partner, Aqran Vijandran provides regular legal insights tailored for EuroCham members. This article examines the European Commission's April 2026 EUDR Simplification Package – what has changed in law and in practice, and what it means specifically for Malaysian palm oil, rubber, timber, and downstream businesses.

This article is accompanied by two free resources for Malaysian businesses: a practical EUDR Compliance Checklist and an EUDR FAQ covering the questions Malaysian exporters, mills, and EU buyers ask most frequently about Malaysian legal requirements. Both are available at the end of this article.

The question that has hung over the EUDR since late 2025 is now settled. On 4 May 2026, the European Commission published its mandatory Simplification Review Report together with a third edition of the Guidance Document and a fifth iteration of the Frequently Asked Questions – the package that has come to be known as the April 2026 Simplification Package. The Commission's conclusion is unambiguous: the EUDR will not be reopened. The December 2026 application date for large and medium operators is confirmed. The clock is running.

For Malaysian businesses exporting palm oil, rubber, timber and their derivatives to the EU, this EUDR update is important reading – not because it resolves every deforestation compliance question, but because it draws a clear line under a prolonged period of legislative uncertainty and introduces structural changes that materially affect how due diligence obligations are distributed across the supply chain.

The Legislative EUDR Picture: Where Things Stand

The EUDR has now been amended twice since it entered into force in June 2023. The most substantive amendment – Regulation (EU) 2025/2650, published on 23 December 2025 – introduced a one-year postponement of the application date and restructured due diligence obligations across the supply chain. The April 2026 package does not amend the EUDR again. Instead, it confirms that the changes introduced in December 2025 are sufficient, updates the interpretive guidance, and announces refinements to the product scope via a Delegated Act that is currently in public consultation.

The practical upshot is this: businesses that have been waiting for another reopening of the EUDR before committing to deforestation compliance programmes should stop waiting. There will not be one – at least not before December 2026. For context on what the Omnibus debate meant – and did not mean – for Malaysian exporters, see our earlier analysis (Read: EU Omnibus: What Went Unnoticed in Malaysia).

The Key Structural EUDR Change: A Three-Tier Supply Chain

The single most important development in the December 2025 amendment – now fully confirmed and elaborated by the May 2026 Guidance – is the restructuring of how EUDR compliance obligations are distributed across the supply chain. Under the original EUDR, every operator in the supply chain was expected to carry out its own full due diligence and submit its own Due Diligence Statement (DDS). In practice, this created redundant obligations and risked overloading the EU's information system.

The amended EUDR replaces this with a three-tier structure.

Tier 1: Primary Operators

These are the businesses that first place a relevant product on the EU market – typically the importer or the EU-based entity that sources from outside the EU. Full due diligence obligations remain with this group: information gathering, geolocation data, traceability documentation, risk assessment, risk mitigation, and DDS submission. Nothing has changed for them in terms of substantive obligation. What has changed is that they are now the sole point of DDS submission for their supply chain.

Tier 2: Downstream Operators and Traders

This is the new category that does the most practical work in the revised EUDR framework. A downstream operator is any business that places on the EU market or exports a relevant product made from relevant products that are already covered by a DDS or a simplified declaration. A chocolate manufacturer buying in-scope cocoa already covered by a DDS and then placing chocolate bars on the market is a downstream operator; a furniture company sourcing certified in-scope timber already backed by a DDS is a downstream operator.

These businesses no longer submit their own DDS. Instead, their primary obligation is to collect and retain the reference numbers of the upstream DDS, and – if they are the first downstream actor in the chain – to pass those numbers forward. Non-SME downstream operators must also register in the EU information system before placing products on the market.

The Commission's May 2026 Guidance is clear that downstream operators play a passive role: they collect and retain, they do not independently assess or mitigate. However, passivity has a trigger. Where a downstream operator or trader has a "concrete indication" – meaning a substantiated claim based on objective and verifiable information – that a product does not comply with EUDR requirements, they must verify that due diligence has been properly carried out and may not place the product on the market unless that verification returns a negligible risk finding.

Tier 3: Micro or Small Primary Operators (MSPOs) in Low-Risk Countries

For small-scale producers established in countries classified as low risk under the EUDR benchmarking system, the amended framework creates a significantly lighter regime. Instead of submitting repeated DDS filings, MSPOs submit a single simplified declaration – a one-time filing that covers their annual production. Crucially, MSPOs in low-risk countries may also substitute geolocation coordinates with a postal address, removing one of the most operationally burdensome traceability requirements for smallholder producers.

What the Guidance and FAQ Now Clarify

The third edition of the Guidance Document and the fifth FAQ iteration address a number of questions that have created uncertainty since the EUDR entered into force. Several of the clarifications are directly relevant to Malaysian businesses.

On the question of how many DDS filings are required, the Commission confirms that a single DDS may cover multiple shipments or batches of the same product from the same supply chain over a defined period. This is a significant practical relief for operators managing high-frequency shipments.

The Guidance also clarifies that forest associations and cooperatives may submit information and declarations on behalf of individual forest owners and smallholder members – a provision with direct relevance to the structure of Malaysia's palm oil smallholder sector, though its utility is qualified by the risk classification issue discussed below. We examined the relationship between MSPO certification and EUDR compliance in detail in an earlier article – the short answer is that MSPO facilitates compliance but does not substitute for it (Read: EUDR: MSPO Helps, But Is Not Carte Blanche).

On legality assessments, the Commission confirms that information gathering related to legal compliance should be proportionate to the level of deforestation risk in the supply chain. More detailed evidence is required only in higher-risk situations. This introduces a graduated approach that should reduce EUDR compliance costs in well-documented and well-governed supply chains.

The FAQ also addresses e-commerce obligations in detail for the first time, clarifying that online retailers and marketplace platforms supplying EU customers are subject to EUDR obligations as operators – not the consumer receiving the goods.

Product Scope: What Has Already Changed and What Is Still Moving

One product scope change is already in force. Printed products – books, newspapers, printed images and related items falling under HS code ex 49 – were removed from the EUDR's scope by the December 2025 amendment. This was a targeted relief measure for the publishing and paper sector.

A further set of scope changes is currently in public consultation via a draft Delegated Act. The Commission proposes to add soluble coffee and certain palm oil derivatives – including soap made with palm oil – to the list of in-scope products. At the same time, it proposes to exclude leather, samples, and retreaded tyres from scope.

Malaysian businesses in the oleochemical sector should pay close attention to the palm oil derivatives expansion. Soap and related downstream palm products are currently outside EUDR scope; if the Delegated Act is adopted in its current form, they will not be. The Commission's aim is to finalise the Delegated Act before the December 2026 application date, so affected businesses should not assume the current position will continue indefinitely.

What This Means for Malaysian Exporters and Smallholders

Malaysia is directly affected by the EUDR across three of its most significant export sectors: palm oil, rubber, and timber. The April 2026 package brings both relief and continued challenges, and the picture is materially different depending on a business's size, position in the supply chain, and whether it operates in a segment covered by the Delegated Act.

Malaysia's Standard Risk Classification – and Why It Matters

On 22 May 2025, the European Commission published its first official EUDR country risk classifications under the benchmarking system. Malaysia was placed in the standard risk category – as were Brazil and Indonesia, Malaysia's major competitors in palm oil and related commodities. Only four countries were classified as high risk (Belarus, Myanmar, North Korea, and Russia); approximately 140 countries, including all EU Member States, the United States, Canada, and China, were classified as low risk.

Malaysia has publicly contested this benchmarking outcome. The Malaysian Palm Oil Council has noted that Malaysia reduced primary forest loss by 65% between 2014 and 2023, and that the country's mandatory MSPO 2022 standard requires zero conversion of natural forests after 31 December 2019. These are legitimate arguments, and the Commission's benchmarking methodology has been questioned by NGOs from the opposite direction – noting that countries with more significant deforestation profiles were not classified as high risk.

Whether or not the classification is warranted, its practical effect on EUDR compliance is significant and clear. Standard risk classification means that EU member state authorities must conduct documentary and identity checks on at least 3% of consignments from Malaysia, compared to 1% for low-risk origins. It also means that the simplified due diligence pathway available to low-risk origin suppliers – where risk assessment and mitigation steps are not required unless there are specific red flags – is not available for Malaysian products. Every consignment from Malaysia requires full EUDR due diligence by the EU importer.

The first review of EUDR country benchmarking classifications is scheduled for 2026, using updated FAO forest data. Malaysian industry associations and government have indicated they will make submissions in support of reclassification. The outcome of that review is uncertain, but the process is worth monitoring and, where possible, actively participating in.

Smallholders: The Simplification That Does Not Apply

The MSPO simplified declaration regime is the EUDR amendment most directly designed for smallholder producers. A one-time declaration, no repeated DDS submissions, and the option to use a postal address instead of geolocation coordinates – on paper, this is a meaningful reduction in deforestation compliance burden for small-scale producers feeding into EUDR-covered supply chains.

The critical limitation is the low-risk country requirement. The MSPO simplified declaration regime is available exclusively to operators established in countries classified as low risk under the EUDR benchmarking system. Because Malaysia is classified as standard risk, Malaysian smallholders – however small their operation, however well-documented their deforestation-free practices – do not qualify. They are subject to the same full geolocation and traceability requirements as large plantation operators.

This is the most pointed practical consequence of Malaysia's EUDR risk classification for the sector, and it is one that is rarely stated clearly in general commentary. The Malaysian government's stated ambition to bring its MSPO certification framework into alignment with EUDR requirements is relevant here, as is the work underway to extend MSPO certification access to smallholders. But certification alignment does not change the benchmarking classification; it addresses a different question. Smallholder relief under the EUDR will not follow from certification progress alone – it requires reclassification. In the meantime, the practical burden of aggregating geolocation and traceability data from smallholder supply bases falls on Malaysian exporters and mills, who must collect this information before their EU customers can complete a DDS. Companies that have not yet built this capacity should treat it as an immediate operational priority.

Aqran Vijandran has prepared a practical FAQ on EUDR compliance for Malaysian businesses – covering the questions we are most frequently asked by exporters, mills, and EU buyers about Malaysian legal requirements.

Large Exporters: Clearer Path, but Greater Scrutiny

For Malaysia's large plantation groups, palm oil refiners, rubber glove manufacturers, and timber processors, the April 2026 package provides greater clarity without reducing substantive EUDR obligation. The confirmation that a single DDS can cover multiple shipments from the same supply chain over a defined period is a meaningful operational relief. The clearer articulation of how downstream operators interact with the primary DDS system reduces the risk of duplicative due diligence efforts within integrated supply chains.

The incoming inclusion of additional palm oil derivatives in scope – if the Delegated Act proceeds as currently drafted – will require oleochemical producers to extend their EUDR compliance programmes to products they have until now treated as outside scope. Companies that have been building deforestation due diligence infrastructure around crude and refined palm oil should now assess whether their downstream product range will be affected.

The commercial stakes of getting this right are real and already visible. As the first author noted in a recent interview with the New Straits Times – subsequently highlighted by the Malaysian Palm Oil Council – EUDR compliance pressure is already reshaping Malaysia's export geography, with European buying slowing under tighter compliance rules while growth markets in Asia and the Gulf expand their intake. For producers able to meet EUDR standards, Europe may become a smaller but significantly more valuable market, with compliant palm oil attracting a meaningful premium. For those who cannot, the question is not simply one of losing European market share – it is one of whether the long-term strategic interest lies in deferring the compliance pathway or resolving it.

The One Moving Piece: The Delegated Act

The only significant legal element of the EUDR still unresolved is the Delegated Act on product scope. Once adopted by the Commission, Parliament and Council each have a two-month period to object, extendable by a further two months. Absent an objection, the act enters into force on publication. The Commission has signalled its intention to finalise this before the December 2026 application date.

For businesses in sectors potentially affected – oleochemicals, instant coffee, leather, retreaded tyres – this is an active EUDR development that should be tracked. Based on the current political climate and the technical nature of the Delegated Act – which adjusts a product list rather than reopening the regulation's core framework – we do not expect Parliament or Council to raise a formal objection during the scrutiny period. Both institutions moved swiftly and with broad alignment on the December 2025 amendment, and there is no indication of appetite to obstruct a narrowly scoped implementing measure. That said, EU legislative processes have surprised observers before, and the Parliament demonstrated in July 2025 that it is willing to use its scrutiny powers on EUDR-related acts when it objected to the country benchmarking methodology. Businesses should therefore monitor the scrutiny period rather than assume adoption is certain – a business that discovers it is in scope after December 2026 will not have the benefit of the transitional period.

What Malaysian Businesses Should Do Now

The April 2026 package closes the door on further EUDR legislative delay. The most useful response is not to wait for the Delegated Act, the 2026 benchmarking review, or further guidance – it is to act now on the compliance steps that are already certain. Readers looking for the foundational overview of EUDR obligations for Malaysian palm oil, rubber, and timber exporters may wish to consult our earlier comprehensive guide, which remains relevant as background. (Read: EUDR 2025–2026: What Malaysian Palm Oil, Rubber and Wood Exporters Must Know and Do Next)

Legal due diligence under Malaysian law: the most underestimated challenge

Most commentary on EUDR compliance for Malaysian businesses focuses on geolocation and traceability data. These are real operational challenges, but they are ultimately logistical ones – commercial service providers, satellite-based polygon mapping tools, and industry aggregation schemes can supply plot-level coordinates at scale. The cost is real but bounded and outsourceable.

Legal due diligence is a different matter entirely, and it is consistently underestimated – particularly by EU importers who assume that MSPO certification resolves the legality question. It does not. The EUDR requires that relevant products were produced in compliance with the laws of the country of production, specifically including land tenure, environmental permitting, and labour law. In Malaysia, demonstrating this requires substantive legal work that cannot be delegated to a sustainability consultant or a geolocation provider.

Depending on the estate or production unit, this means verifying land title at the relevant State land office – a process that involves distinct bureaucratic procedures across Peninsular Malaysia, Sabah, and Sarawak, and that routinely takes weeks to months depending on the state and the nature of the title. It means confirming that any land conversion was lawfully conducted under the National Land Code or the applicable Sabah or Sarawak land legislation. It means verifying environmental impact assessment approval status where land was converted after the EUDR's 31 December 2020 cut-off date. It means confirming MPOB licensing compliance and, increasingly, demonstrating labour law compliance in a regime where foreign worker documentation requirements are both complex and actively enforced.

For a mill aggregating fruit from hundreds of smallholders across multiple land title categories – the standard structure in Malaysian palm oil – this is not a box-ticking exercise. It is a legal project, and one where the timeline for obtaining documents from Malaysian authorities should not be underestimated. Land office searches and regulatory confirmations that take days in some European jurisdictions can take significantly longer in Malaysia. EU importers who expect their Malaysian suppliers to produce a complete legal due diligence file on short notice are routinely disappointed. Malaysian exporters who have not started this process have less time than they may realise.

If you would like to discuss the legal due diligence requirements specific to your supply chain – including land title verification, environmental permit status, and MPOB licensing compliance – please contact us at info@aqranvijandran.com. We also offer a structured two-week EUDR readiness audit covering gap analysis, a red-flag register, and an implementation timetable.

Not ready to engage yet? Download our free EUDR Compliance Checklist for Malaysian Businesses – a practical one-page reference covering the key steps for exporters, mills, and processors preparing for the December 2026 deadline.

Practical steps

• Map your supply chain role under the revised three-tier EUDR structure. Determine whether you are a primary operator, a downstream operator, or a trader in relation to each relevant product. The due diligence obligations differ materially.
• Begin legal due diligence now, not after geolocation is resolved. Document collection from land offices, environmental authorities, and licensing bodies should be initiated immediately – these processes cannot be accelerated to meet a compliance deadline.
• Review whether your product range will be affected by the Delegated Act. If you produce soluble coffee, palm oil-derived soap, or other oleochemical products currently outside EUDR scope, assess your exposure to the proposed scope expansion before December 2026.
• Engage with your EU customers about DDS expectations – and set realistic timelines. EU importers need to understand that legal due diligence under Malaysian law is not a documentation exercise that can be completed in days. Early alignment on what evidence is required, and how long it takes to obtain, protects both parties.
• Monitor the 2026 EUDR benchmarking review. A reclassification of Malaysia – in either direction – has significant compliance implications. Businesses with a material interest should consider whether to engage with the process directly.
• Check your contracts. EUDR compliance obligations are increasingly written into EU buyer contracts as warranty and indemnity provisions. Malaysian exporters should review how deforestation compliance risk has been allocated and whether current obligations are achievable within realistic Malaysian regulatory timelines.

At Aqran Vijandran, we advise Malaysian businesses and European companies with Malaysian supply chains on the local implications of EU regulatory developments, including EUDR compliance, supply chain due diligence, and contract risk allocation under Malaysian law.

Prof. Dr. Harald Sippel is admitted in Austria as Rechtsanwalt and has been advising European companies doing business in Asia since 2008. His practice focuses on Malaysian-European supply chains and EU market access compliance, including EUDR, CSDDD, and LkSG. He plays a leading role in ESG compliance advisory in Malaysia.

Raja Nadhil Aqran is the Managing Partner of Aqran Vijandran admitted to the Malaysian Bar, with expertise in land disputes, ESG regulatory compliance, and corporate advisory for multinational organisations. He regularly advises Malaysian businesses on supply chain matters.

If you would like to discuss how the EUDR affects your Malaysian operations or supply chain, please contact us at info@aqranvijandran.com.