ESG Reporting Standards 2026: A Complete Guide for Malaysian Organizations

ESG reporting has transformed from a voluntary best practice into a regulatory obligation for an increasing number of organizations globally — and Malaysia is no exception. In 2026, public-listed companies, financial institutions, and large enterprises face a more demanding set of ESG disclosure requirements than ever before.

This guide provides a comprehensive overview of the major ESG reporting frameworks relevant to Malaysian organizations, and practical guidance on how to navigate them.

Key Takeaways

• Bursa Malaysia's enhanced sustainability reporting requirements now mandate more granular climate-related disclosures for Main Market companies
• Supply chain pressure from multinational companies and European customers who must comply with CSRD and require supplier ESG data
• ESG-linked financing from local and international banks that requires verified sustainability KPIs for green loan eligibility

Why ESG Reporting Matters in 2026

Several converging forces have made robust ESG reporting non-negotiable for Malaysian organizations:

• Bursa Malaysia's enhanced sustainability reporting requirements now mandate more granular climate-related disclosures for Main Market companies
• Bank Negara Malaysia's Climate Change and Principle-based Taxonomy (CCPT) requires financial institutions to classify and report climate-related financial risks
• Supply chain pressure from multinational companies and European customers who must comply with CSRD and require supplier ESG data
• ESG-linked financing from local and international banks that requires verified sustainability KPIs for green loan eligibility

Key ESG Reporting Frameworks for Malaysian Organizations

1. Global Reporting Initiative (GRI)

GRI remains the most widely adopted ESG reporting framework globally. The GRI Universal Standards (published in 2021) provide the foundation for comprehensive sustainability reporting across all industries. Bursa Malaysia's sustainability reporting guide is largely aligned with GRI principles.

Who should report: All organizations looking to provide comprehensive stakeholder-facing ESG reports.

2. Task Force on Climate-related Financial Disclosures (TCFD)

TCFD has rapidly become the de facto standard for climate-related financial risk disclosure. Bursa Malaysia has incorporated TCFD recommendations into its enhanced sustainability reporting requirements for large companies, and Bank Negara Malaysia references TCFD in its climate risk guidelines.

Who should report: Large public-listed companies, financial institutions, and companies seeking climate-related financing.

3. Bursa Malaysia ESG Framework

Bursa Malaysia requires all Main Market and ACE Market companies to publish annual sustainability reports. In 2026, the enhanced requirements include mandatory climate-related disclosures aligned to TCFD and more specific environmental metrics including Scope 1 and Scope 2 GHG emissions.

Who must comply: All Bursa Malaysia Main Market and ACE Market listed companies.

4. EU Corporate Sustainability Reporting Directive (CSRD)

While CSRD is an EU regulation, it affects Malaysian companies that export to the EU, have European subsidiaries, or are suppliers to EU-based companies subject to CSRD. The supply chain implications are significant — EU companies subject to CSRD must report on their value chain sustainability impacts.

Who is affected: Malaysian exporters to Europe, subsidiaries of EU companies, suppliers to EU-based CSRD-obligated companies.

How Lestar Supports Multi-Standard ESG Reporting

One of the most common challenges organizations face is managing data for multiple reporting frameworks simultaneously. Lestar's approach is to build a unified ESG data model that maps your data to multiple frameworks automatically — so you collect ESG data once and generate reports for GRI, TCFD, Bursa, and other standards without duplicate data entry.

Getting Started: A Practical Roadmap

1. Conduct a materiality assessment to identify the ESG topics most relevant to your business and stakeholders
2. Map your applicable reporting obligations based on your listing status, industry, and geography
3. Audit your current data to identify gaps between what you collect today and what's required
4. Build your data collection infrastructure — either with standard ESG software or custom data pipelines for complex organizations
5. Generate and verify your first report with third-party assurance where required

ESG reporting is a journey, not a destination. The most important step is to start with a structured approach and build your program progressively over time.

Have questions about your compliance obligations? Talk to the Lestar ESG team today.