The EU Timber Regulation was Europe's first major law against illegal logging. Understanding what it required — and where it fell short — is essential context for companies now transitioning to the EUDR.
The EU Timber Regulation — formally Regulation (EU) No 995/2010 — was adopted on 20 October 2010 and became applicable on 3 March 2013. It was the European Union's primary legislative instrument for combating the trade in illegally harvested timber and timber products. The regulation was part of the EU's broader Forest Law Enforcement, Governance and Trade (FLEGT) Action Plan, which aimed to reduce illegal logging through a combination of trade measures, development cooperation, and governance support.
The EUTR was built on a simple premise: it should be illegal to place illegally harvested timber on the EU market. While this sounds straightforward, implementing it required a regulatory framework that defined who was responsible, what they had to do, and how compliance would be verified.
The EUTR applied exclusively to timber and timber products. Its scope was defined by reference to specific product categories, including:
Notably, the EUTR did not cover several categories of wood-derived products, including printed paper (books, newspapers, magazines), recycled timber products, and certain composite products where wood was a minor component. It also did not cover any non-timber commodities — agricultural products such as soya, palm oil, cocoa, coffee, rubber, and cattle were entirely outside its scope.
The regulation applied to timber from all sources — both imported timber from third countries and timber harvested within the EU. However, timber covered by a valid FLEGT licence (issued under a Voluntary Partnership Agreement between the EU and a timber-producing country) or a valid CITES permit was considered to comply with the EUTR's requirements automatically.
Article 4(1) of the EUTR established a clear prohibition: the placing on the internal market for the first time of illegally harvested timber or products derived from such timber shall be prohibited.
"Illegally harvested" was defined broadly. Timber was considered illegal if it was harvested in contravention of the applicable legislation in the country of harvest. This included not just forestry laws but also:
This broad definition meant that timber could be considered illegal not just because it was harvested without a permit, but also because the harvester failed to pay required taxes, violated environmental regulations, or infringed on the land rights of local communities.
The EUTR required operators — defined as entities that first placed timber or timber products on the EU market — to exercise due diligence. The due diligence system consisted of three elements:
Operators had to collect information about the timber they placed on the market, including:
Unlike the EUDR, the EUTR did not require geolocation coordinates. Operators were required to identify the country and, where applicable, the region of harvest, but they did not need to provide GPS coordinates or polygon boundaries of the specific harvest area.
Based on the information gathered, operators had to assess the risk that the timber was illegally harvested. The risk assessment had to take into account several criteria:
If the risk assessment concluded that the risk of illegal harvesting was negligible, the operator could proceed to place the timber on the market. If the risk was assessed as non-negligible, the operator had to take risk mitigation measures.
Where the risk was non-negligible, operators had to take additional measures to reduce it. These could include:
The EUTR did not prescribe specific mitigation measures — it left it to operators to determine what was appropriate based on the nature and level of the risk. This flexibility was both a strength (allowing operators to tailor their approach) and a weakness (allowing operators to adopt minimal measures and still claim compliance).
One of the distinctive features of the EUTR was the concept of Monitoring Organisations (MOs). These were private entities recognised by the European Commission that developed and maintained due diligence systems for use by operators. The idea was that MOs could provide ready-made due diligence frameworks, reducing the burden on individual operators — particularly smaller companies that might lack the resources to develop their own systems.
To be recognised, an MO had to demonstrate that it maintained a due diligence system that met the EUTR's requirements, including procedures for information gathering, risk assessment, and risk mitigation. Recognised MOs were listed on the European Commission's website and were subject to periodic checks.
Operators that used an MO's due diligence system were still legally responsible for compliance — the MO did not assume the operator's liability. However, in practice, the use of an MO's system was often treated as evidence of compliance by competent authorities, which created a potential gap between formal compliance and substantive due diligence.
Several organisations were recognised as MOs under the EUTR, including NEPCon (now Preferred by Nature), the Timber Trade Federation (UK), and various national timber industry associations. The MO system was unique to the EUTR and has not been carried over to the EUDR.
Each EU Member State was required to designate one or more Competent Authorities responsible for enforcing the EUTR. These authorities had the power to:
The regulation required Member States to lay down rules on penalties that were "effective, proportionate and dissuasive." However, it did not specify minimum penalty levels, which led to significant variation across the EU:
A 2021 fitness check by the European Commission found that enforcement of the EUTR was "insufficient" in many Member States, with low check rates, weak penalties, and limited deterrent effect. This finding was one of the factors that led to the development of the EUDR with its stronger enforcement provisions.
The EUTR left penalty levels largely to the discretion of Member States, requiring only that they be "effective, proportionate and dissuasive." In practice, this resulted in a patchwork of penalty regimes across the EU:
The overall picture was one of weak and inconsistent enforcement. The penalties were generally too low to serve as an effective deterrent, particularly for large companies for whom a fine of a few thousand euros was a negligible cost of doing business.
While the EUTR was an important step forward, it had several significant limitations that ultimately led to its replacement by the EUDR:
The EUTR focused exclusively on the legality of timber harvesting. It did not address deforestation as such. Timber that was legally harvested from recently deforested land — for example, land that was legally cleared for agriculture and then had its timber sold — could comply with the EUTR. This meant that the regulation did nothing to prevent legal deforestation, which accounts for a significant share of global forest loss.
Operators were required to identify the country and region of harvest, but not the specific geographic coordinates of the harvest area. Without geolocation data, it was impossible to use satellite imagery to verify claims about the origin and legality of timber. This made the EUTR's due diligence system heavily reliant on paper documentation, which could be falsified or incomplete.
The EUTR predated the widespread availability of high-resolution satellite imagery for forest monitoring. While satellite data was available from programmes like Landsat and later Copernicus, the EUTR did not incorporate satellite verification into its compliance framework. Operators were not required to cross-check their supply chain information against satellite data, and competent authorities generally did not use satellite imagery in their enforcement activities.
There was no centralised EU information system for recording or submitting due diligence information. Operators maintained their records internally, and competent authorities checked them on a case-by-case basis during inspections. This made it difficult to aggregate data, identify patterns, or conduct systematic risk-based enforcement across the EU.
The EUTR covered only timber and timber products. It did nothing to address the much larger problem of deforestation driven by agricultural expansion — particularly for commodities like soya, palm oil, cattle, cocoa, coffee, and rubber. These commodities are collectively responsible for far more deforestation than logging, yet they were entirely outside the EUTR's scope.
While MOs were intended to help operators comply, the system had weaknesses. Some operators used MO membership as a compliance shield without rigorously implementing the MO's due diligence system. The Commission's oversight of MOs was limited, and there were concerns about the quality and independence of some MO systems.
The European Commission's decision to replace the EUTR with the EUDR was driven by several factors:
The EUDR does not simply amend the EUTR — it repeals and replaces it entirely. The EUTR will cease to apply once the EUDR becomes fully applicable. Companies that previously operated under the EUTR must transition to the EUDR's requirements, which are significantly more demanding in terms of scope, data requirements, and enforcement.
If your business operated under the EUTR, the transition to the EUDR is not optional — it is a legal requirement. The EUDR's broader scope, geolocation requirements, satellite verification, DDS submission process, and stronger penalties represent a fundamental upgrade from the EUTR framework. Companies should begin their transition planning now, focusing on supply chain mapping, geolocation data collection, technology investment, and compliance system development.
Sources: This article draws on Regulation (EU) No 995/2010 (EUTR) and the European Commission's page on EU rules against illegal logging.
See how Plotwiser's AI-powered solution handles your entire due diligence pipeline — from satellite verification to DDS generation.