Forced-Labour Due Diligence: Cotton Traceability and What Buyers Must Prove

For most of the last two decades, a buyer's forced-labour exposure was managed with a social audit at the factory gate and a supplier code of conduct in the contract file. That is no longer enough. The regulatory question has moved upstream, from "are the workers who cut and sewed this garment treated lawfully" to "can you prove the cotton in it was not produced with forced labour, all the way back to the field". The second question is much harder to answer.

What has really shifted is who carries the burden of proof. Under the newer forced-labour regimes, an importer no longer waits for an enforcement agency to prove wrongdoing; it is expected to demonstrate, on demand, that its inputs are clean. If you cannot show where your cotton came from, the absence of evidence works against you, not in your favour.

The regulatory direction, at a general level

Three strands of regulation push in the same direction. Understand what each does rather than memorise clause numbers that change.

The US Uyghur Forced Labor Prevention Act (UFLPA). This is the sharpest instrument in force. It creates a rebuttable presumption that any goods with content from the Xinjiang Uyghur Autonomous Region (XUAR) are made with forced labour and are barred from entry into the United States. "Rebuttable" is the operative word: the goods are presumed tainted, and it falls to the importer to rebut that presumption with clear and convincing evidence of a clean supply chain. Enforcement runs through US Customs and Border Protection (CBP), which detains shipments at the port. A detention is not a court case; it is a documentary demand, and a buyer who cannot produce a full traceable chain back past the yarn to the fibre origin has little to offer in response. Cotton is squarely in scope: much of the region's output is cotton, and it commingles into global yarn supply.

The EU Forced Labour Regulation. The EU has adopted a ban on placing products made with forced labour on its market, applied to products rather than to specific regions. It is structured differently from UFLPA, driven by investigation rather than a standing presumption tied to one geography, but the practical consequence for a buyer is similar: you need to be able to show your supply chain is clean when asked.

Corporate due-diligence law. Alongside the import bans sits a broader body of mandatory due-diligence legislation: the EU's Corporate Sustainability Due Diligence Directive (CSDDD) and Germany's Supply Chain Due Diligence Act (LkSG) are the reference points. These do not ban a product at the border; they oblige larger companies to run an ongoing due-diligence process, address human-rights risks in their supply chains, and document that they did so. The through-line across all three strands is the same: a defensible, evidenced process is now the compliance product.

Why cotton origin is genuinely hard to trace

Cotton is one of the harder fibres to trace to source, and the difficulty is structural: it comes from how cotton is physically handled. At the gin, seed cotton from many farms is cleaned and baled, and bales from different growers are already being mixed. At the spinning mill the mixing goes further: a spinner draws on bales from multiple origins, sometimes multiple countries, and blends them to hit a target price, staple length and consistency for a given yarn. This is the same fibre-blending step that opens up the traceability gap across the whole textile chain, and the transition from fibre to yarn count is exactly where origin gets mixed. Once fibres are commingled into a lot, individual field origin is effectively lost, and the documentary trail is the only thing linking that yarn to a farm.

That leaves the buyer relying on documents, and documents are the weak link. A transaction certificate is only as good as the honesty and record-keeping of every party in a chain that runs farm, gin, trader, spinner, knitter or weaver, garment factory. Paperwork can be recycled, mass-balanced loosely, or fabricated, and a clean-looking certificate does not prove that the physical fibre in the box matches it.

The traceability toolbox

There are two broad families of evidence, and a serious programme uses both.

Documentary and certificate-based approaches. This is the chain-of-custody paperwork: purchase records, transaction certificates from schemes that track material through processing stages, and supplier declarations of origin. It is the backbone of any programme, the only way to reconstruct the route a lot took. Its limit is that it verifies claims about the fibre, not the fibre itself: documents can be complete, consistent and wrong.

Forensic verification. This tests the physical fibre, not the paperwork around it, and is what regulators increasingly want to see on high-risk lots.

• Isotopic analysis. Cotton takes up stable isotopes from the soil, water and climate where it grew, leaving a signature that can be measured against reference data for candidate growing regions. It is well suited to confirming or excluding a claimed origin.
• Trace-element and elemental analysis. The trace elements a plant absorbs also reflect its growing environment, and can corroborate or challenge an origin claim, often alongside isotopic testing.
• DNA tagging and tracers. A marker, either the cotton's own genetic markers or a tracer added at the gin, follows a specific lot through processing. Applied tracers give a strong physical link but must be added at source, so they work in a managed programme rather than retrospectively.

Forensic methods are slower and more expensive than pulling a certificate, so the practical model is documents everywhere and forensics on risk: as a spot-check, on high-risk origins, and when a border authority has questioned a shipment.

Building a defensible due-diligence programme

The goal is not perfection on every unit; it is a documented, risk-based process you can put in front of a customs officer. Five components carry it.

Map the supply chain to gin and farm. Tier 1 factory visibility is the starting point, not the finish line. You need the mill, the spinner, and ideally the gin and growing region behind your cotton. This is vetting a textile supplier extended several tiers upstream, and most buyers who map honestly find the real chain runs longer than the one they disclosed.

Require origin evidence in writing. Make fibre-origin disclosure and supporting transaction certificates a contractual deliverable, not a favour. The evidence should name the growing region and carry the chain from gin to garment.

Test on risk. Reserve forensic testing for high-risk origins and lots you have reason to question. A small, well-targeted testing budget does more for your defensibility than a large volume of unread certificates.

Put it in the contract. Clauses that require origin disclosure, prohibit undisclosed sub-contracting and commingling, grant audit and testing rights, and warrant the absence of forced labour give you both leverage and a remedy. A social audit programme and a materials-traceability programme meet here, and neither substitutes for the other: a clean BSCI, SMETA or WRAP result tells you about conditions at the factory, not the origin of its cotton.

Have an escalation and withdrawal protocol. Decide in advance what happens when evidence is missing or a test comes back inconsistent with the claim: quarantine the lot, request further evidence within a set window, and be willing to withdraw from the supplier if it cannot be resolved. A due-diligence process that has no consequence when it finds a problem is not one. The same applies to reading the findings inside a compliance audit: the value is in what you do when something surfaces.

A short checklist

• Map your cotton chain past the spinner to the gin and growing region, and write down what you do not yet know.
• Make fibre-origin disclosure and transaction certificates a contractual requirement, with audit and testing rights attached.
• Run documentary checks on every order and reserve forensic testing for high-risk origins and questioned lots.
• Keep the evidence organised so a full chain back to origin can be produced on demand, because under a rebuttable presumption the burden is yours.
• Set an escalation and withdrawal protocol, and use it when the evidence does not hold.

Forced-labour compliance has quietly become an evidence-management discipline. The buyers who handle a detention calmly are not the ones with the most certificates on file; they are the ones who mapped their cotton back toward the field, wrote the requirement into the contract, and tested the fibre when it counted.