ESG Due Diligence in M&A: Why Carbon Data Matters Before You Buy

In early 2025, a mid-market industrial acquirer we were talking to closed on a $40M bolt-on acquisition. Three facilities. Solid EBITDA. Clean financials. Textbook deal.

Six weeks after settlement, their environmental team flagged something that hadn't appeared in the data room. The acquired entity's combined emissions — when added to the parent's existing portfolio — pushed the corporate group past the 50,000 tonne CO2-e threshold under the NGER Act. That meant NGER registration by 31 August, a report due 31 October the same year, and — because every NGER-registrable corporation is automatically pulled into ASRS Group 2 — mandatory climate-related financial disclosures from the next financial year.

Nobody on the deal team had modelled it. Not legal. Not financial due diligence. Not the advisors. Because emissions weren't in the data room.

That's the thesis of this article: carbon data belongs in the M&A data room alongside financial statements, tax records, and legal compliance. Not as a nice-to-have ESG checkbox. As a material financial liability that changes your compliance obligations, your ongoing operating costs, and — increasingly — your purchase price.

You don't just buy revenue. You buy emissions

Every acquisition brings an emissions profile into your corporate group. Under the NGER Act, a "controlling corporation" must report on all facilities under operational control of any entity in its corporate group. That includes subsidiaries. Which means — if you acquire a company and it becomes your subsidiary, its facilities become your NGER facilities.

The NGER thresholds work at two levels. Corporate group: 50,000 tonnes CO2-e or 200 TJ of energy produced or consumed. Individual facility: 25,000 tonnes or 100 TJ. If you're currently at 35,000 tonnes and you acquire a business running at 18,000, you've just crossed the corporate group threshold. You're now an NGER reporter.

And that triggers a cascade.

Under the Treasury Laws Amendment that introduced mandatory climate disclosures, any NGER-registrable corporation that doesn't already qualify as a Group 1 entity is automatically classified as an ASRS Group 2 entity. Group 2 reporting started 1 July 2026. That means Scope 1 and 2 emissions in your annual report, governance and strategy disclosures aligned with AASB S2, limited assurance from year one, and Scope 3 from your second reporting period.

A deal team that doesn't model the target's emissions against the acquirer's existing profile is flying blind on compliance exposure. Full stop.

What "carbon due diligence" actually looks like

We don't think carbon due diligence needs to be a six-month workstream. It needs to answer five questions before you sign:

Does the target report under NGER? If yes, pull the last three years of NGER reports from the Clean Energy Regulator's public register. Check whether there have been any restatements, late filings, or — like Beach Energy in July 2025 — enforceable undertakings for misreporting. The CER publishes a list of late reporters. This takes 20 minutes.

Will the acquisition push your corporate group across an NGER threshold? Add the target's Scope 1 and 2 emissions to yours. If you're near the 50 kt CO2-e or 200 TJ boundary, model the combined figure. Remember, the NGER Act uses full-year figures for threshold calculations even if control changed mid-year. Don't assume you can pro-rate your way out of it.

Does the target have any Safeguard Mechanism facilities? The Safeguard Mechanism covers facilities emitting more than 100,000 tonnes CO2-e per year. In 2023-24, 219 facilities fell under it. If the target owns one, you're acquiring that facility's declining baseline — which drops 4.9% per year to 2030. You're also acquiring the obligation to surrender ACCUs or Safeguard Mechanism Credits for every tonne above baseline. At current spot prices, that's roughly $35 per tonne. At the government's cost-containment price cap, $75. At the penalty rate if you fail to surrender? $275 per tonne. For a facility 10,000 tonnes above baseline, that's a $2.75 million penalty in a single year.

What's the quality of the target's emissions data? This is the one that bites you 18 months post-acquisition. If the target's emissions data lives in spreadsheets — and based on the ANAO's performance audit finding that 72% of NGER reports contained errors — you're probably inheriting bad data. That data quality problem becomes your data quality problem when your assurance provider asks to see the underlying records. Assurance fees for limited assurance on a mid-market entity run $30,000 to $80,000. If data quality is poor, expect that to double, or expect the assurance provider to qualify their report.

Is the target exposed to ACCC greenwashing risk? If the target has made public claims about emissions reductions, net zero targets, or carbon neutrality, check whether those claims are substantiated. The ACCC has levied over $42 million in greenwashing penalties since mid-2024 — Vanguard ($12.9M), Mercer Super ($11.3M), Active Super ($10.5M), Clorox ($8.25M). The maximum penalty under the Australian Consumer Law is $50 million per contravention. Those liabilities don't disappear at settlement.

The NGER-to-ASRS pipeline is the hidden deal risk

This is the piece that most M&A advisors are still missing. It's not just about NGER compliance costs — which are real but manageable. It's about NGER being a tripwire for ASRS.

Under AASB S2, Group 2 includes all NGER-registrable corporations that aren't already in Group 1. So when your acquisition pushes you past the NGER corporate group threshold, you're not just signing up for an annual emissions report to the Clean Energy Regulator. You're signing up for climate-related financial disclosures in your annual report, reviewed by your auditors, subject to limited assurance, and visible to your shareholders, lenders, and customers.

The first-year cost of ASRS compliance for a mid-market company — governance documentation, climate risk assessment, scenario analysis, Scope 1-2-3 calculations, disclosure drafting, and assurance preparation — runs between $200,000 and $350,000. That's a recurring cost. And it wasn't in your acquisition model.

We know of companies that crossed the NGER threshold through acquisition and didn't realise they'd triggered ASRS until their auditors flagged it during the next annual report cycle. By then they were already behind. The modified liability period (which shields protected statements like Scope 3 and scenario analysis from private action until 31 December 2027) offers some breathing room — but Scope 1 and 2 emissions carry full liability from day one. There's no safe harbour for getting those numbers wrong.

How to value carbon liability in the deal model

We're not going to pretend there's a standard methodology for this yet. Carbon liability valuation in M&A is still emerging, and anyone who tells you they've got it nailed is selling something. But here's how we'd approach it.

Start with the direct compliance costs. If the acquisition triggers NGER registration, budget $40,000 to $120,000 per year for reporting (depending on whether you use consultants or carbon accounting software). If it triggers ASRS, add $200,000 to $350,000 in year one and $80,000 to $150,000 annually after that.

Then model the Safeguard Mechanism exposure. If you're acquiring a covered facility, calculate the gap between current emissions and the projected baseline for each of the next five years — remembering the 4.9% annual decline rate. Multiply the gap by your assumed ACCU price. At $35/tonne spot, a 5,000-tonne gap costs $175,000 per year and grows as the baseline declines. At $75 (the government cap), it's $375,000. Over five years, that's $875,000 to $1.875 million in carbon credit costs alone — before you've spent a dollar on actual abatement.

Then add the data remediation cost. If the target doesn't have a proper carbon accounting system — if it's spreadsheets and PDF bills in a shared drive — budget $50,000 to $150,000 to rebuild their emissions baseline with audit-grade data. This isn't optional if you need to pass limited assurance.

Add it all up and you've got a carbon liability figure that deserves a line item in the purchase price adjustment. A PwC study found that 75% of dealmakers encounter material ESG issues during due diligence. And research published in the Journal of Corporate Finance found that carbon emissions impose a market-implied equity discount of roughly $79 per tonne for the median S&P 500 firm — around 0.5% of market capitalisation. We're not saying Australian mid-market deals see the same discount. But the direction is clear.

What belongs in the data room

Here's our argument: emissions data should be a standard data room category alongside financial statements, employment records, and IP schedules. Specifically, we'd want to see:

NGER reports for the last three years (or a statement that the entity is not a registered NGER reporter)
Scope 1 and 2 emissions by facility, with underlying source data (utility bills, fuel purchase records, refrigerant logs)
Safeguard Mechanism baseline determinations and any ACCU/SMC surrender history
Details of any Clean Energy Regulator correspondence, audits, or enforcement actions
A register of public environmental claims (net zero commitments, carbon neutral certifications, offset purchases) with supporting substantiation
The methodology used for emissions calculations, including which emission factors and GWP values were applied

If the target can't produce this within a week, that tells you something about their data maturity. And that data maturity gap is itself a cost you'll bear post-acquisition.

We'd also want to see whether the target uses AR5 or AR6 Global Warming Potential values. NGER uses AR5. AASB S2 requires AR6. If you're acquiring a company that reports under NGER and you need to produce ASRS disclosures, you'll need to convert — and the numbers won't match perfectly. That's a reconciliation headache that someone needs to plan for.

The honest caveat

We're not M&A lawyers. We're not deal advisors. We build carbon accounting technology. So take our views on deal structuring with appropriate scepticism.

But we do see the downstream consequences every week. Companies that acquired entities with poor emissions data, who are now scrambling to reconstruct two or three years of historical emissions for their first ASRS disclosure. Companies that crossed NGER thresholds without knowing it and are now on the Clean Energy Regulator's radar. Companies that inherited Safeguard Mechanism facilities and hadn't budgeted for ACCU purchases.

These aren't hypothetical risks. They're the phone calls we get.

We're also not sure the M&A advisory market has caught up to this yet. ESG due diligence is increasingly common in large-cap transactions — Norton Rose Fulbright's 2025 deal trends report notes that foreign bidders accounted for 30% of Australian public M&A, the highest in a decade, and those bidders bring ESG expectations from jurisdictions with mature disclosure regimes. But in the mid-market — the $20M to $200M range where most Australian deals happen — carbon data is still an afterthought.

That's going to change. Not because of some abstract shift in corporate consciousness, but because the regulatory framework now attaches dollar consequences to emissions. NGER penalties of up to $660,000 for failure to report. ASRS penalties of up to $15 million or 10% of annual turnover. Safeguard penalties of $275 per excess tonne. ACCC greenwashing penalties of up to $50 million per contravention.

One thing you can do this week

If you've got an acquisition in progress or on the horizon, ask your deal team one question: what are the target's annual Scope 1 and 2 emissions, and what happens when we add them to ours?

If nobody can answer that, you've found the gap. Fix it before settlement — not after.

Related reading: