If you ship CBD/THC beverages, topicals, or other regulated hemp/cannabis-derived products into the EU, there’s a 2025 packaging compliance risk hiding in plain sight: paper and paperboard cartons, corrugated shipper cases, and other fiber-based components.

Under the EU’s Regulation (EU) 2023/1115—commonly called the EU Deforestation Regulation (EUDR)—wood is a “relevant commodity,” and a long list of derived products (including many products under HS/CN Chapter 48 such as paper, paperboard and packaging articles) are “relevant products.” That means your secondary packaging and outer transport cartons can trigger EUDR obligations even when your product formula is unrelated to wood.

This article explains what “in scope” really looks like for paper/board SKUs, what data you need from converters, how geolocation-based due diligence works in practice, and how to build a documentation flow that can survive both EUDR enforcement and the EU’s fast-evolving packaging sustainability rules.

Informational only—this is not legal advice.

EUDR in one paragraph (and why packaging teams should care)

The EUDR restricts the EU market to products that are deforestation-free and legally produced in the country of production, supported by a documented due diligence process (information collection, risk assessment, and risk mitigation). “Deforestation-free” uses a hard cut-off date: products must not be linked to deforestation after 31 December 2020. The regulation also requires geolocation information to trace relevant commodities back to the plot(s) of land.

Official EU background and implementation resources are maintained by the European Commission on its EUDR implementation pages, including the Information System used to submit due diligence statements: https://green-forum.ec.europa.eu/nature-and-biodiversity/deforestation-regulation-implementation_en

The timeline: what “2025” means right now

Many North American exporters planned around a 2024/2025 go-live. The timeline has shifted.

The Commission’s implementation page reflects amended entry-into-application dates:

• Large and medium operators: 30 December 2026
• Micro and small operators: 30 June 2027
• Certain micro and small operators already covered by the former EU Timber Regulation: 30 December 2026

Source: European Commission implementation page (updated with amendments): https://green-forum.ec.europa.eu/nature-and-biodiversity/deforestation-regulation-implementation_en

So why talk about 2025?

Because 2025 is the year most packaging supply chains should be doing three things:

• Re-contracting and data onboarding with paper mills, merchants, and converters so geolocation and legality evidence is available before the deadline.
• Building the documentation flow (including how to store and reference due diligence statement numbers across shipments and SKUs).
• Aligning EUDR with other EU packaging changes—particularly the Packaging and Packaging Waste Regulation (PPWR), which entered into force in 2025 and begins applying broadly from 2026.

Does EUDR apply to cartons and shipper cases? Often, yes

“Wood” includes a lot of paper and board derivatives

EUDR scope is driven by two layers:

• the relevant commodities (including wood)
• the relevant products derived from them listed in Annex I of Regulation (EU) 2023/1115

The consolidated legal text is available on EUR-Lex: https://eur-lex.europa.eu/eli/reg/2023/1115/oj/eng

For packaging, the practical takeaway is:

• If you place paper/paperboard packaging on the EU market as a product in its own right (e.g., you sell cartons, boxes, labels, or paper bags as items), you may be placing a relevant product on the EU market.
• If you place a packaged product on the EU market, EUDR analysis can still matter because the packaging itself can be an in-scope derived product, and EU importers/brand owners are increasingly flowing EUDR requirements down to packaging procurement.

Packaging as “packaging” vs packaging as a “product”

A common confusion: when paperboard is used purely as packaging for something else, does it always trigger an additional EUDR due diligence statement?

The EUDR’s scoping logic is nuanced and continues to be clarified through Commission guidance and FAQs. Many compliance programs are treating fiber-based packaging as part of the in-scope “derived product” analysis and requiring documentation from the converter to support the importer/operator’s due diligence.

If your EU customer (importer, distributor, or retailer) asks for EUDR data on your cartons, they are typically trying to:

• confirm whether a due diligence statement (DDS) is required for the packaging material/product classification, and
• ensure they can defend their own due diligence file if audited.

What “due diligence” means for paper/board: the three-step EUDR workflow

EUDR due diligence is often summarized as:

1. Information collection
2. Risk assessment
3. Risk mitigation (if risk is more than negligible)

The Commission published a detailed guidance document in October 2024 (Commission Notice / Guidance). One key point for packaging teams: certification can be helpful, but it does not automatically replace EUDR requirements. The guidance highlights that mixing “known origin” and “unknown origin” material within certain chain-of-custody models is not acceptable for EUDR purposes.

Commission guidance PDF (C(2024) 7027 final): https://green-forum.ec.europa.eu/document/download/162138c8-7c22-4bb5-98ce-fd31c81d6936_en

Step 1: Information you need from your packaging converter (and their upstream suppliers)

For paper and board packaging, the hardest requirement is usually traceability back to the plot(s) of land—not the board spec.

Build your data request package around:

• Supplier identity and chain-of-custody pathway (paper mill(s), pulp suppliers, merchants).
• Country of production for the wood/pulp input.
• Geolocation of the plot(s) of land where the wood was harvested (or where trees were grown/managed), provided in the form required by the EUDR information system (often via coordinates/polygons; many operators plan for GeoJSON support).
• Production date / harvest period linkage sufficient to demonstrate the material is not linked to deforestation after 31 December 2020.
• Legality evidence under the country of production’s applicable laws (rights to harvest, permits, taxes/fees, environmental and labor-related requirements relevant to legality under EUDR).
• Mass balance / segregation details where recycled content, virgin fiber, and multiple mills are involved.

Step 2: Risk assessment for paper packaging isn’t just “is it FSC?”

Your risk assessment should be designed to answer: is the risk of non-compliance negligible?

In a packaging context, that often means checking:

• Country benchmarking risk level (low/standard/high) once the EU benchmarking list is in effect. The Commission explains the benchmarking system and how it affects due diligence intensity: https://green-forum.ec.europa.eu/nature-and-biodiversity/deforestation-regulation-implementation/eudr-cooperation-and-partnerships_en
• Supply chain complexity: number of upstream tiers, whether fiber is comingled, whether your converter can trace lots to specific mills/forests.
• Recycled fiber content: recycled content can reduce exposure to forest conversion risk, but you still need a defensible explanation of the input mix and documentation.
• Geolocation completeness: incomplete plot data is a common failure point.

Step 3: Risk mitigation you can actually implement

If your assessment can’t conclude negligible risk, mitigation commonly looks like:

• switching to known-origin mills with mature traceability programs
• requiring plot-level geolocation delivery as a condition of purchase
• adding audit rights and document verification steps
• using independent verification as complementary evidence (helpful, not a full substitute)

The EUDR Information System: your documentation has to flow somewhere

EUDR isn’t only about collecting PDFs. It is designed around submission of a Due Diligence Statement (DDS) into an EU Information System repository.

The Commission explains that the Information System contains due diligence statements submitted under the EUDR and supports bulk submissions via API for larger organizations: https://green-forum.ec.europa.eu/nature-and-biodiversity/deforestation-regulation-implementation/information-system-deforestation-regulation_en

The system’s functioning is governed by Commission Implementing Regulation (EU) 2024/3084 (EUR-Lex): https://eur-lex.europa.eu/eli/reg_impl/2024/3084/oj/eng

One operational detail compliance teams should plan for: the Commission notes (referencing Implementing Regulation 2024/3084) that withdrawal or amendment of a submitted DDS is possible within 72 hours after the reference number is made available by the system. That puts pressure on data quality before submission.

Practical documentation flow for exporters using EU partners

Most non-EU brands ship into the EU via an EU importer/distributor who will be the party “placing on the market.” In practice, this means:

• Your EU partner may be the operator responsible for submitting the DDS.
• You, as the upstream brand/exporter, will still be expected to provide packaging traceability inputs to support that DDS and the underlying due diligence file.

A workable process in 2025 is to map every fiber-based packaging component to:

• a converter SKU and bill of materials
• an input fiber declaration (virgin/recycled percentages, mills)
• a geolocation package from the upstream forestry source(s)
• a shipment-level handoff so the DDS reference number can be associated to purchase orders, import entries, and retailer audit files

Paper packaging playbook (2025): how to get ahead without boiling the ocean

Below is a practical sequence we see working across regulated consumer product exporters.

1) Decide which packaging components are “EUDR-critical”

Start with:

• secondary packaging: folding cartons, sleeves, rigid boxes
• transport packaging: corrugated shippers, inserts, partitions, edge protectors
• paper-based leaflets/inserts (note: the scope of certain printed products has been subject to policy change; treat as a watch item and confirm your exact product classification)

Then identify the SKUs that:

• ship the most volume into the EU
• are sourced from the most complex supply chain
• involve mixed fiber sources or brokers where origin is opaque

2) Update supplier onboarding: ask for geolocation early

Packaging procurement teams often ask for:

• FSC/PEFC certificates
• recycled content statements
• mill letters

For EUDR readiness, add:

• plot-level geolocation coverage statement (and file format expectations)
• lot traceability method: how the converter maps your production lots to paper/board lots
• non-mixing assurance: how the converter prevents unknown-origin fiber from entering EUDR-designated supply

3) Build an internal “EUDR packaging dossier” per packaging SKU

Keep it simple and audit-ready:

• SKU spec and supplier
• fiber composition (virgin/recycled)
• upstream source list (mills/forestry sources)
• geolocation package
• risk assessment memo (what you checked; why you concluded negligible risk or what mitigation applies)
• reference numbers (where your EU operator shares them back to you)

Retention periods and audit expectations should be confirmed with counsel, but operationally you want a system that can quickly respond to:

• EU competent authority inquiries
• retailer sustainability audits
• customer compliance questionnaires

4) Design packaging to satisfy both EUDR and PPWR

The EU’s Packaging and Packaging Waste Regulation (PPWR) is now in force as Regulation (EU) 2025/40.

The European Commission’s packaging waste page summarizes that PPWR covers all packaging and packaging waste on the EU market and sets lifecycle requirements: https://environment.ec.europa.eu/topics/waste-and-recycling/packaging-waste_en

In 2025–2026, the key planning point is timing:

• PPWR entered into force on 11 February 2025
• General application begins 12 August 2026 (18 months after entry into force)

A PPWR timeline slide deck published by DG ENV (commonly cited by compliance teams) summarizes these dates: https://marketac.eu/wp-content/uploads/2025/03/DG-ENV-Presentation-PPWR.pdf

How to align EUDR + PPWR in packaging decisions:

• Prefer simpler mono-material fiber designs where feasible (easier recyclability story; fewer composite-material complications).
• Reduce unnecessary packaging layers (PPWR waste prevention pressure will intensify).
• Document recyclability design choices alongside EUDR origin proof—retailers increasingly treat these as one combined sustainability file.

5) Prepare for retailer audits: what they will ask for

EU retailers and distributors are tightening supplier standards beyond law. In audits, expect questions like:

• Provide your EUDR due diligence process description for paper/board packaging.
• Show how you obtained geolocation from upstream sources.
• Explain how you prevent mixing of unknown origin fiber.
• Provide PPWR readiness (recyclability pathway, labeling readiness, and waste prevention approach).

Contract clauses to consider (converter + distributor): allocate EUDR duties clearly

A recurring failure mode is assuming “the converter handles it” or “the importer handles it.” EUDR responsibilities attach to supply-chain roles, and commercial contracts need to reflect who does what.

Work with counsel, but here are clause themes that packaging programs are adding in 2025:

Converter / packaging supplier clauses

• Data delivery covenant: supplier must provide all EUDR-required information, including geolocation, for materials used in your SKUs.
• Change notification: supplier must notify you before changing mills, fiber sources, or chain-of-custody method.
• Right to audit: document audit rights and timelines (especially for geolocation verification and lot traceability).
• Indemnity / allocation of liability: allocate responsibility for inaccurate origin claims or missing documentation.
• Sub-supplier flow-down: require the converter to impose equivalent obligations upstream.

Distributor / importer clauses (EU partner)

• Role clarity: specify who is the “operator” submitting DDS in the EU information system and who retains the due diligence file.
• DDS reference number sharing: importer must share the due diligence reference number(s) relevant to your shipments/SKUs.
• Document retention + access: define how long records are retained and how quickly they can be produced if a competent authority or retailer requests them.
• Recalls/holds: define what happens if a shipment is held due to EUDR questions.

Enforcement and penalties: why “paperwork only” thinking is risky

EUDR is built around controls by Member State competent authorities and meaningful penalties.

The EUDR legal text includes minimum enforcement intensity linked to country risk classification (e.g., annual checks at least 1% for low-risk and 3% for standard-risk sourcing—higher for high-risk). See Regulation (EU) 2023/1115 on EUR-Lex: https://eur-lex.europa.eu/eli/reg/2023/1115/oj/eng

Penalties are set by Member States but the regulation framework points to serious consequences that can include:

• fines (often summarized in guidance as at least up to 4% of EU turnover for serious infringements)
• confiscation of relevant products/revenue
• temporary exclusion from public procurement

Because packaging is upstream of the finished product, a packaging documentation gap can cascade into:

• import delays
• customer chargebacks
• delisting risk

Key takeaways for exporters and compliance teams

• Paper and paperboard packaging is not a “free pass” under the EUDR—fiber-based cartons and shippers can create due diligence obligations.
• Even with the main application dates now in late 2026 / 2027, 2025 is the year to renegotiate packaging contracts, onboard geolocation data, and build a DDS reference number flow.
• Treat EUDR and PPWR as a combined program: origin traceability plus recyclability/waste prevention is where EU customer expectations are heading.

How CannabisRegulations.ai can help

EUDR readiness for paper packaging is a cross-functional project: procurement, packaging engineering, sustainability, quality, logistics, and regulatory all touch the same data. If you’re building an EU export program or expanding your product lines, use https://cannabisregulations.ai/ to centralize cannabis compliance requirements, track regulations by market, and operationalize documentation workflows so your packaging and product compliance stay aligned as rules evolve.

Need a practical checklist? Start by mapping every EU-bound SKU to its packaging bill of materials, then pressure-test whether you can obtain geolocation-based due diligence from each fiber supplier before your next contracting cycle.