Human Rights Due Dilligence
Mining At The Source: The Operational Architecture Of Human Rights Due Diligence In The Extractive Sector
The frameworks that govern human rights due diligence in mining converge on a single operational requirement.
THE BRIEF
Mining sits at the front of the supply chains that the global economy is being asked to clean. The OECD Due Diligence Guidance for Responsible Supply Chains of Minerals from Conflict-Affected and High-Risk Areas (3rd Edition, 2016), most recently affirmed in the 2023 OECD Guidelines for Multinational Enterprises, articulates a five-step methodology that begins not at the smelter or the importer, but at the mine and its surrounding chain [1][2].
The regulatory frame has caught up. The EU Battery Regulation (Regulation (EU) 2023/1542) imposes binding supply chain due diligence obligations on cobalt, natural graphite, lithium, and nickel sourced for battery manufacturing, applicable from August 18, 2025 [3]. The EU Critical Raw Materials Act (Regulation (EU) 2024/1252) ties strategic project recognition to demonstrable sustainability, labor, and human rights performance [4]. The Corporate Sustainability Due Diligence Directive, as recalibrated by the 2025 Omnibus, retains a chain-of-activities reach that begins at extraction [5].
The case record is no longer abstract. The UK Supreme Court's rulings in Lungowe v. Vedanta Resources (2019) and Okpabi v. Royal Dutch Shell (2021) confirmed that a parent company's published policies and supervisory practices can create a duty of care toward communities affected by its subsidiaries' operations [6][7]. The Vedanta claim was subsequently settled, without admission of liability, in January 2021 [6].
The question for operators, mid-stream processors, and downstream buyers in 2026 is not whether mining HRDD is required. The question is whether the operational architecture supporting it produces evidence that survives audit, civil suit, and regulator inquiry.
I. THE ADOPTION REALITY
The extractive sector occupies a structural position in the human rights due diligence architecture that distinguishes it from other industries subject to the same frameworks. Minerals enter the global economy at a discrete number of sites, in jurisdictions where state capacity, regulatory enforcement, and civil society oversight vary across an order of magnitude. The downstream supply chain stretches from those sites through smelters, refiners, traders, manufacturers, and brand-owning end users, with the human rights and environmental exposures concentrated at the point of extraction and progressively diffused as the material moves toward final products.
The demand surge from the energy transition has compressed the operational timeline. The EU Critical Raw Materials Act identifies a defined list of strategic raw materials, including cobalt, copper, lithium, natural graphite, nickel, and rare earth elements, and sets benchmarks for Union extraction, processing, and recycling capacity by 2030 [4]. The EU Battery Regulation places cobalt, natural graphite, lithium, and nickel under specific binding due diligence obligations [3]. These are not aspirational scope statements. They are scope statements that designate particular minerals as objects of regulatory attention because of where they come from and how they are produced.
The point of regulatory and operational convergence is the mine, the surrounding community, and the labor force, public and private, that secures and runs the operation. Frameworks that treat mining HRDD as a matter of supplier questionnaires and traceability spreadsheets do not produce the evidence the law now contemplates.
II. WHY MINING HRDD IS DISTINCTIVELY OPERATIONAL
Most supply chain due diligence in non-extractive sectors begins with the deploying organization and works outward through tiered suppliers. Mining inverts this geometry. The most consequential human rights and environmental exposures occur at the first tier of activity, often in jurisdictions where the operating entity is a subsidiary, joint venture partner, or contract operator whose practices the downstream buyer cannot inspect from a desk.
The factual record on this point is well-developed. Amnesty International's 2016 report on cobalt mining in the Democratic Republic of the Congo documented hazardous working conditions in artisanal and small-scale mining sites supplying global battery supply chains, with child miners working without basic protective equipment [8]. The International Labour Organization, working with the U.S. Department of Labor, launched the GALAB Project in the DRC in 2024 specifically to address child labor in the cobalt sector [9]. Estimates of artisanal and small-scale mining's share of DRC cobalt output range from 15% to 30% of the annual volume reaching the world market [8].
These facts cannot be addressed through paperwork upstream. They can only be addressed through on-the-ground assessment, engagement with site-level operators and communities, and operational change at the point of extraction. The frameworks that govern mining HRDD reflect this structural reality.
III. THE FRAMEWORKS THAT GOVERN AT THE SITE
Four standards together compose the operational architecture of mining HRDD as it now stands.
The first is the OECD Due Diligence Guidance for Responsible Supply Chains of Minerals from Conflict-Affected and High-Risk Areas, the most widely adopted minerals-specific HRDD framework in the world. The Guidance specifies a five-step process: adoption of a policy and the establishment of management systems; identification and assessment of risks in the supply chain; design and implementation of a strategy to respond to identified risks; independent third-party audit of supply chain due diligence at identified points in the supply chain; and annual public reporting on supply chain due diligence [1]. The Guidance is global in scope, applies to all minerals, and structures the EU Conflict Minerals Regulation and major industry programs across electronics, automotive, and jewelry.
The second is the Initiative for Responsible Mining Assurance Standard for Responsible Mining, launched in June 2018 as a site-level certification system. The IRMA Standard organizes more than 400 requirements across 28 chapters, including a dedicated Chapter 1.3 on Human Rights Due Diligence, and is assessed by an integrated audit conducted at the operating mine site by a multi-disciplinary team covering social impact, free prior and informed consent, labor, environment, and technical operations [10]. The IRMA assessment produces a public report. The standard is voluntary, but it has become the most operationally demanding mining-specific HRDD certification available.
The third is the International Council on Mining and Metals Mining Principles, the operating framework of an industry association whose member companies represent a substantial share of large-scale industrial mining output. The Mining Principles articulate 10 principles supported by 38 performance expectations, including explicit performance expectations on human rights due diligence, alignment of conflict-affected and high-risk area sourcing with the OECD Guidance, security arrangements consistent with the Voluntary Principles on Security and Human Rights, and the prohibition of child and forced labor [11].
The fourth is the Voluntary Principles on Security and Human Rights, a multi-stakeholder initiative established in 2000 that governs the interaction between extractive operations and the public and private security forces that protect them. The Principles require companies to conduct human rights risk assessments in the engagement of security providers, integrate human rights provisions into contracts with private security, and support training of public and private security forces in human rights, international humanitarian law, and use-of-force standards [12]. Implementation guidance jointly published by the International Finance Corporation, ICMM, and IPIECA in 2011 operationalizes the Principles for site-level adoption [12].
Behind these four sector-specific frameworks sit the foundational international standards: the United Nations Guiding Principles on Business and Human Rights, which articulate the corporate responsibility to respect human rights and the requirement to exercise human rights due diligence applicable to all business enterprises [13]; and the United Nations Declaration on the Rights of Indigenous Peoples, Article 32 of which requires consultation and cooperation in good faith with indigenous peoples through their own representative institutions to obtain their free, prior and informed consent prior to the approval of any project affecting their lands, territories, or resources, particularly in connection with the exploitation of mineral, water, or other resources [14].
IV. THE OPERATIONAL NODES
The architecture above translates into six operational nodes at which HRDD work must actually occur. Each is a discrete operational function with its own owners, evidentiary outputs, and audit signatures.
Site-level risk assessment is the foundation. Under the OECD Guidance, on-the-ground assessment teams are required for red-flagged supply chains, with assessment outputs that document mine of origin, conditions of extraction, identities of suppliers, and conflict-affected or high-risk area status [1]. IRMA's integrated audit produces a single public site-level report covering social, FPIC, labor, environmental, and technical findings [10]. Site assessments are not annual reports; they are the documentary core of the company's risk position.
Free, prior and informed consent processes are the second. FPIC is operationally distinguishable from community consultation in three respects: it is sought before authorization or commencement of activities; the information provided is accessible, accurate, and in culturally appropriate format; and it is sought from indigenous peoples through their own representative institutions [14]. FPIC is most often discharged poorly when it is treated as a one-time event at the permitting phase rather than an ongoing process across the life of an operation.
Security and human rights interfaces are the third. The Voluntary Principles framework requires that the engagement of public and private security forces be preceded by a risk assessment, that contracts with private security include human rights provisions, and that company processes for receiving and addressing reports of allegations of human rights abuses by security forces be documented and operative [12]. The interface with public security forces, including national militaries and police, is among the highest-risk operational nodes in mining HRDD; the framework does not eliminate the risk but requires that the company maintain documented engagement and escalation processes.
Grievance mechanisms are the fourth. The UN Guiding Principles require business enterprises to establish or participate in effective operational-level grievance mechanisms for individuals and communities adversely impacted [13]. The OECD Guidance, ICMM Performance Expectations, and IRMA Standard each operationalize the requirement at the site level, requiring intake from indirect parts of the value chain, tracking of complaints, and operational linkage to remediation [1][10][11]. A mechanism that does not connect to remediation action is not a grievance mechanism in the sense the frameworks contemplate.
Labor and working conditions monitoring is the fifth. The ICMM Mining Principles prohibit the employment of child or forced labor, prohibit the assignment of hazardous work to those under 18, eliminate harassment and discrimination, and require respect for freedom of association and collective bargaining [11]. Operational monitoring of these obligations occurs through documented hiring practices, age verification, contractor management, and worker representation, with audit trails that survive regulator and counterparty inquiry.
Audit and disclosure is the sixth. The OECD Guidance requires an independent third-party audit at identified points in the supply chain, with annual public reporting [1]. IRMA's verification produces a public report against the full standard [10]. The EU Battery Regulation requires third-party verification by a notified body and periodic public reporting [3]. The audit is not a self-attestation document; it is independent evidence that the upstream activity is producing the outputs the framework contemplates.
V. THE DOWNSTREAM CASCADE AND THE PARENT-COMPANY QUESTION
The operational architecture above sits within a legal environment that has materially shifted since 2019. Two UK Supreme Court decisions in succession established that parent companies and downstream buyers cannot rely on corporate separation to insulate themselves from operational decisions made by subsidiaries or contractors.
In Lungowe v. Vedanta Resources [2019] UKSC 20, 1,826 Zambian villagers sued a UK-incorporated parent company and its Zambian subsidiary, Konkola Copper Mines, over alleged pollution from the Nchanga copper mine. The Supreme Court held that the existing principles of tort law permit a parent company to owe a duty of care to those affected by its subsidiary's operations where the parent has taken active steps, including through published group sustainability standards and supervisory practices, to influence how the subsidiary operates [6]. The Court emphasized the role of group-wide policies and the parent's monitoring and enforcement of those policies. The claim was permitted to proceed in the English courts and was settled in January 2021, without admission of liability [6].
In Okpabi v. Royal Dutch Shell [2021] UKSC 3, more than 40,000 residents of two Niger Delta communities sued the UK parent of the Shell group and its Nigerian operating subsidiary over alleged oil spill damage. The Supreme Court confirmed the Vedanta framework: a parent company's duty of care to those affected by a subsidiary's operations depends on the degree of intervention in the affairs of the subsidiary and the extent of control and supervision exerted [7]. Corporate global policy frameworks, the Court observed, can themselves give rise to liability in respect of subsidiary operations.
For mining and extractives organizations, the practical implication is direct. Group-level human rights policies, sustainability standards, and supervisory frameworks are themselves operative facts in the legal analysis of parent-company duty. A parent that publishes a robust group HRDD policy but does not staff, monitor, or enforce it at the subsidiary level accumulates exposure on both fronts: it is held to the policy it published, and it cannot defeat the duty-of-care claim by pointing to corporate separation. The defensible posture is built infrastructure, not paper.
The EU Battery Regulation extends this logic to downstream buyers. In-scope economic operators (manufacturers and importers above the regulation's turnover threshold) placing batteries on the EU market are required to maintain a risk-based supply chain due diligence policy aligned with international standards including the OECD Guidelines for Multinational Enterprises, identify and assess upstream risks, implement a strategy to respond to identified risks, maintain a grievance mechanism, undergo third-party verification by a notified body, and report publicly [3][15]. The obligations are not satisfied by supplier attestation; they require demonstrable upstream visibility into cobalt, natural graphite, lithium, and nickel sourcing.
VI. THE LEADERSHIP IMPERATIVE
The structural conclusion that follows from the framework architecture and the case law record is that mining HRDD is not a discrete compliance function. It is an integrated operational system whose success or failure occurs at the point of extraction and whose evidentiary outputs flow upward to the board, outward to the regulator, and forward to the downstream counterparty.
Boards and senior leadership of mining operators carry the primary accountability. The OECD Guidance requires that a senior manager be ultimately accountable for the supply chain due diligence policy and that the necessary budget be assigned [1]. The ICMM Mining Principles place oversight of human rights performance among the foundational expectations of member companies [11]. The Vedanta and Okpabi rulings establish that group-level policy choices are not strategy documents; they are facts that bear on legal exposure [6][7].
Boards and senior leadership of downstream buyers carry a parallel responsibility. The EU Battery Regulation and the CSDDD's chain-of-activities reach both place the deploying organization at the center of compliance for upstream exposures it cannot directly control [3][5]. The defensible response is not to attempt to control what the company does not own; it is to build the contractual, audit, and engagement architecture that produces credible evidence of risk-based management.
The leadership question is therefore not whether mining HRDD is the operator's concern or the downstream buyer's. It is both, in different but interlocking forms, and the architecture of each is now defined with sufficient specificity that absence of infrastructure is itself a material exposure.
VII. CONCLUSION
The frameworks that govern mining HRDD have moved from aspirational standards to enforceable obligations within a fifteen-year window, with the most material acceleration occurring since 2019. The OECD five-step methodology, the IRMA site-level standard, the ICMM performance expectations, the Voluntary Principles, the UN Guiding Principles, and UNDRIP collectively define what infrastructure is required at the operational level. The EU Battery Regulation, the EU Critical Raw Materials Act, and the CSDDD impose binding obligations on downstream buyers, manufacturers, and importers whose products depend on mined inputs. The UK Supreme Court's rulings in Vedanta and Okpabi establish that parent-company policy and supervisory practice are legally cognizable facts that can ground duty-of-care liability.
For the extractive operator and the downstream counterparty alike, the analytic question of the next twelve months is not which framework applies. The analytic question is whether the operational architecture in place at the mine, at the procurement function, and at the board produces the evidence the frameworks now require, on the schedule that current enforcement contemplates.
The institutions that build that infrastructure as a function of how they extract and how they buy, rather than as a retrofit applied after a complaint, an audit finding, or a court ruling, will find the operational environment manageable. The institutions that have not will find that the frameworks they have not built around have already specified what the consequence is.
RECOMMENDATIONS
Within 30 days:
Compile a current inventory of every mine and mineral source from which the organization extracts, processes, or sources strategic raw materials (cobalt, copper, lithium, natural graphite, nickel, and rare earth elements). Identify, for each, the operating entity, the jurisdictional status, and the current OECD Guidance risk classification.
Within 60 days:
For each site identified, document the current state of the six operational nodes: site-level risk assessment, FPIC processes, security and human rights interface, grievance mechanism, labor and working conditions monitoring, and audit and disclosure. Identify which nodes lack documented operational infrastructure and which depend on supplier attestation rather than independent verification.
Within 90 days:
Review group-level human rights and sustainability policies for alignment with operational practice at each subsidiary, joint venture, and contract operation. Where the policy commits the organization to standards that the operational architecture does not deliver, identify whether the remedy is policy adjustment or infrastructure build. The Vedanta and Okpabi rulings make this an active legal question, not a communications question.
Within six months:
Establish or formalize executive ownership of the mining HRDD program, with reporting lines to the board and explicit linkage to procurement, legal, and ESG functions. Align the program with the OECD Guidance, the relevant industry framework (ICMM, IRMA, or sector equivalent), and the binding regulatory obligations applicable to the organization's downstream markets (EU Battery Regulation, CSDDD as applicable, EU Critical Raw Materials Act for strategic projects).
Continuously:
Track the operational and regulatory environment. The EU Battery Regulation's due diligence obligations have applied since August 18, 2025 [3]. The CSDDD's recalibrated obligations enter into force at member state transposition (deadline 26 July 2028) [5]. Mining-sector enforcement under the French Duty of Vigilance Law, EU national contact points, and home-jurisdiction civil claims continues to develop.
Benchmarks that should change the recommendation:
A revised OECD Due Diligence Guidance for Responsible Minerals (the current edition's next review cycle is anticipated); finalized rulemaking under the EU Critical Raw Materials Act on strategic project criteria; new appellate decisions extending or narrowing the Vedanta-Okpabi framework; or the enactment of comparable national HRDD statutes in additional Member States.
CAVEATS
Framework scope: The OECD Due Diligence Guidance for Responsible Mineral Supply Chains, the IRMA Standard, and the ICMM Mining Principles operate at different levels of the value chain and different categories of mineral. Operators and buyers should apply the framework that matches their position in the supply chain rather than treating the four as interchangeable.
Jurisdictional variation: The framework analysis in this article addresses internationally recognized standards and EU regulatory architecture as of May 2026. Mining-specific HRDD obligations under national mandatory due diligence laws (France's Duty of Vigilance Law, Germany's LkSG, Norway's Transparency Act) vary in scope and enforcement intensity and were addressed in the Solari Perspectives article "After the Omnibus" (May 16, 2026).
Case law status: The Lungowe v. Vedanta and Okpabi v. Royal Dutch Shell rulings established jurisdictional and threshold legal principles. The Vedanta claim settled in January 2021 without admission of liability and without a substantive merits judgment. The Okpabi case proceeded to merits stages following the 2021 Supreme Court ruling. The principles articulated by the UK Supreme Court are persuasive but have not been universally adopted across other common-law jurisdictions.
Regulatory dates: The EU Battery Regulation's due diligence obligations apply from 18 August 2025 [3]. The EU Critical Raw Materials Act entered into force in 2024 [4]. CSDDD transposition deadline is 26 July 2028 per the 2025 Omnibus revision [5]. Implementation timelines for EU regulations have been modified before and may be modified again before the effective dates referenced.
Indigenous Peoples and FPIC: The UNDRIP framework is the leading international articulation of FPIC. National implementation varies materially, with some jurisdictions affording FPIC stronger legal force than others. Operators should apply the international standard while engaging with relevant national legal frameworks.
REFERENCES
[1] Organisation for Economic Co-operation and Development. "OECD Due Diligence Guidance for Responsible Supply Chains of Minerals from Conflict-Affected and High-Risk Areas." 3rd Edition, 2016 (reaffirmed in 2023 OECD Guidelines for Multinational Enterprises on Responsible Business Conduct). https://www.oecd.org/en/publications/2016/04/oecd-due-diligence-guidance-for-responsible-supply-chains-of-minerals-from-conflict-affected-and-high-risk-areas_g1g65996.html
[2] Organisation for Economic Co-operation and Development. "OECD Guidelines for Multinational Enterprises on Responsible Business Conduct." 2023 update; in force 8 June 2023. https://www.oecd.org/en/publications/2023/06/oecd-guidelines-for-multinational-enterprises-on-responsible-business-conduct_a0b49990.html
[3] European Parliament and Council of the European Union. "Regulation (EU) 2023/1542 of the European Parliament and of the Council of 12 July 2023 concerning batteries and waste batteries." Official Journal of the European Union, 28 July 2023. https://eur-lex.europa.eu/eli/reg/2023/1542/oj
[4] European Parliament and Council of the European Union. "Regulation (EU) 2024/1252 of the European Parliament and of the Council of 11 April 2024 establishing a framework for ensuring a secure and sustainable supply of critical raw materials." Official Journal of the European Union, 2024. https://eur-lex.europa.eu/eli/reg/2024/1252/oj/eng
[5] Latham & Watkins LLP. "EU Sustainability Omnibus Published in the Official Journal." 2026. https://www.lw.com/en/insights/eu-sustainability-omnibus-published-in-the-official-journal
[6] Norton Rose Fulbright LLP. "UK Supreme Court clarifies issues on parent company liability in Lungowe v Vedanta." Norton Rose Fulbright Publications, 2019. https://www.nortonrosefulbright.com/en/knowledge/publications/70fc8211/uk-supreme-court-clarifies-issues-on-parent-company-liability-in-lungowe-v-vedanta
[7] White & Case LLP. "Okpabi v Royal Dutch Shell Plc: UK Supreme Court allows Nigerian citizens' environmental damage claim to proceed against UK parent company." White & Case Insight Alert, 2021. https://www.whitecase.com/insight-alert/okpabi-v-royal-dutch-shell-plc-uk-supreme-court-allows-nigerian-citizens
[8] Amnesty International. "This is what we die for: Human rights abuses in the Democratic Republic of the Congo power the global trade in cobalt." January 2016. https://www.amnesty.org/en/documents/afr62/3183/2016/en/
[9] International Labour Organization. "ILO Launches GALAB project in Democratic Republic of the Congo to address child labour in cobalt mining sector." ILO News, 2024. https://www.ilo.org/resource/news/ilo-launches-galab-project-democratic-republic-congo-address-child-labour
[10] Initiative for Responsible Mining Assurance (IRMA). "IRMA Standard for Responsible Mining IRMA-STD-001." Launched June 2018. https://responsiblemining.net/what-we-do/standard/irma-mining-standard/
[11] International Council on Mining and Metals. "Mining Principles: Performance Expectations." ICMM, latest version December 2024. https://www.icmm.com/en-gb/our-principles/mining-principles/mining-principles
[12] Voluntary Principles on Security and Human Rights. "The Voluntary Principles on Security and Human Rights." Established 2000. https://www.voluntaryprinciples.org/the-initiative/
[13] Office of the United Nations High Commissioner for Human Rights (OHCHR). "Guiding Principles on Business and Human Rights: Implementing the United Nations 'Protect, Respect and Remedy' Framework." 2011. https://www.ohchr.org/sites/default/files/documents/publications/guidingprinciplesbusinesshr_en.pdf
[14] United Nations General Assembly. "United Nations Declaration on the Rights of Indigenous Peoples." Resolution 61/295, 13 September 2007. https://www.un.org/development/desa/indigenouspeoples/declaration-on-the-rights-of-indigenous-peoples.html
[15] Anthesis Group. "EU Battery Regulation Due Diligence: Requirements & Compliance." Anthesis Insights, 2024. https://www.anthesisgroup.com/insights/eu-batteries-regulation-due-diligence-requirements/
[16] Mayer Brown LLP. "Okpabi and others v Royal Dutch Shell plc and another – UK Supreme Court provides further clarification on parent company liability for the actions of its foreign subsidiary." Mayer Brown Insights, March 2021. https://www.mayerbrown.com/en/insights/publications/2021/03/okpabi-and-others-v-royal-dutch-shell-plc-and-another-uk-supreme-court-provides-further-clarification-on-parent-company-liability-for-the-actions-of-its-foreign-subsidiary
Lastest blog posts






