I want to buy timber but need to know it's legally harvested. What does EU law require?

What the Law Says

The EU Timber Regulation (EUTR) sets binding obligations for operators placing timber and timber products on the EU market for the first time.

Under the EUTR, 'operators' — businesses that place timber or timber products on the EU market for the first time — must apply a due diligence system to minimise the risk of placing illegally harvested timber on the market.

The due diligence system has three core elements: access to information (including species, country of harvest, and evidence of compliance with applicable legislation), risk assessment (evaluating the likelihood of illegality), and risk mitigation (taking action if risk is identified, e.g., requesting additional documentation or third-party verification).

Traders (businesses that buy or sell timber already placed on the EU market) must keep records of their suppliers and customers for at least five years — though the EUTR text specifies 'at least three years' for operators’ due diligence documentation.

Statutory Text

Operators shall not place timber or timber products on the market unless the timber has been harvested in accordance with the applicable legislation of the country of harvest.

— Regulation (EU) No 995/2010, Art. 4(1)

Statutory Text

Operators shall exercise due diligence when placing timber or timber products on the market.

— Regulation (EU) No 995/2010, Art. 4(2)

Statutory Text

The due diligence system shall include access to information, risk assessment and risk mitigation.

— Regulation (EU) No 995/2010, Art. 6(1)

Sources