In 2026 and early 2027, freight forwarders face nine major regulatory milestones across the EU, US, and APAC. The EU Carbon Border Adjustment Mechanism moves into its definitive regime on 1 January 2026 and requires the first annual CBAM declaration by 30 September 2027. EU ICS2 completed its Release 3 rollout on 1 September 2025 but keeps limited road and rail derogations for Poland, Romania, and Slovakia running into June 2026. US Enhanced Air Cargo Advance Screening became effective on 21 November 2025 under an Interim Final Rule and moves to strict enforcement on 21 November 2026. The EU AI Act general purpose AI obligations have applied since 2 August 2025 for models placed on the market from that date, with the Commission's enforcement powers switching on from 2 August 2026. Missing any of these means blocked shipments, per shipment fines, or contract clauses that pass the cost back to the forwarder.
This article puts every 2026 and early 2027 deadline in one place, with the action a forwarder needs to take, the penalty for missing it, and where forwarder management software can help you stay on the calendar instead of firefighting each deadline the week it lands.
A freight forwarder that misses a regulatory milestone rarely pays a single penalty. The real cost is compounded. A late CBAM declaration triggers a per tonne penalty for missing carbon certificates, but it also triggers a review of every import in that quarter, delays the next quarter's clearance while records are rebuilt, and gives the importer a contract clause to claw the cost back from the forwarder. A missed ACAS filing does not just risk a Do Not Load message from CBP. It risks losing the air carrier relationship, because the carrier is exposed to the same enforcement.
The most expensive mistake is not the deadline itself. It is not knowing the deadline existed. Regulatory calendars slip through the cracks because they come from different sources: EU DG TAXUD publishes CBAM updates, DG MOVE publishes ICS2 updates, CBP publishes ACAS updates, and the European AI Office publishes GPAI updates. Trade bodies summarise them, but each summary is late by a few weeks and rarely maps to a forwarder's shipment volume by lane.
A compliance calendar owned by the operations team, refreshed each quarter, and shared with sales, customer service, customs, and finance is the cheapest single control a forwarder can put in place. It surfaces every deadline in one view, maps it to which lanes and which customers it affects, and drives the software configuration, template updates, and customer notifications that need to land before the deadline hits.
The nine milestones below are the deadlines every general cargo freight forwarder needs to plan around. The specific action varies by trade lane and cargo mix. The table lists the direction that applies to every forwarder handling that lane.
| Month | Regulation | Region | Action Required | Penalty for Non Compliance |
|---|---|---|---|---|
| 1 Jan 2026 | EU CBAM Definitive Regime start | EU import | Purchase and surrender CBAM certificates for embedded emissions on covered goods; free ETS allowance phase out begins on covered CBAM goods | Financial penalty per tonne of CO2 equivalent not surrendered; suspended authorised CBAM declarant status |
| 22 Jan 2026 | US ACAS Interim Final Rule corrections deadline | US import | Publish system corrections and update filing templates for the five new mandatory data elements introduced in the Enhanced ACAS Interim Final Rule (effective 21 Nov 2025) | Continued enforcement discretion, but any Do Not Load risk stays live |
| 31 Jan 2026 | Q4 2025 CBAM report (final transitional quarter) | EU import | Submit the last transitional CBAM report covering Q4 2025 imports through the CBAM Transitional Registry | Up to EUR 50 per tonne of unreported embedded emissions |
| Through Jun 2026 | ICS2 Release 3 rail and road derogations | EU import | Track lane by lane which Poland, Romania, and Slovakia rail and road corridors still operate under transitional flexibility versus full ENS filing | Rejected ENS submissions; refused entry at first EU border |
| Ongoing 2026 | CBAM certificate purchases (quarterly) | EU import | Purchase CBAM certificates each quarter based on 2026 average weekly ETS price; hold at least 80% of estimated liability by end of each quarter | Insufficient certificate balance penalty; potential withdrawal of authorised CBAM declarant status |
| 31 Jul 2026 | 17 Dec 2025 CBAM downstream proposal legislative window | EU import | Monitor Council and Parliament negotiations on downstream product extension (screws, bolts, cast iron products) proposed by the Commission on 17 Dec 2025 | No penalty yet; extension expected to apply from 2027 onwards |
| 2 Aug 2026 | EU AI Act GPAI Commission enforcement powers begin | EU wide | Confirm any general purpose AI model used in the freight operation is documented against the GPAI transparency obligations that already applied from 2 Aug 2025; ensure copyright policy and training data summary are on file for the model provider | Administrative fines under the AI Act (up to EUR 15 million or 3% of global turnover for GPAI provider breaches) |
| 21 Nov 2026 | US Enhanced ACAS strict enforcement | US import | All ACAS filings must include the full new data element set; no more Interim Final Rule flexibility | Do Not Load messages, USD 5,000 per violation, escalating penalties for repeat |
| 30 Sep 2027 | First CBAM Annual Declaration | EU import | Submit first annual CBAM declaration in the CBAM Registry covering all goods imported in 2026, surrender CBAM certificates equal to embedded emissions | EUR 100+ per tonne of missing certificates, potential loss of authorised CBAM declarant status |
CBAM is the single biggest 2026 change for any forwarder handling EU imports of cement, iron and steel, aluminium, fertilisers, hydrogen, or electricity. The transitional phase (running since 1 October 2023) required quarterly CBAM reports but no financial obligation. The definitive regime starts on 1 January 2026 and adds the financial layer.
From 1 January 2026, only an authorised CBAM declarant may import CBAM goods into the EU. That declarant must purchase CBAM certificates each quarter and surrender them the following year against verified embedded emissions. The certificate price tracks the EU Emissions Trading System (ETS) price. Throughout 2026, the certificate price is set to the average weekly ETS price for the previous quarter (a quarterly price cycle). From 2027 onwards, the price switches to a weekly cycle.
The free ETS allowance phase out also begins on 1 January 2026 for CBAM covered goods. In year one, roughly 2.5% of the free allowance is removed, with the phase out schedule accelerating each year until 100% removal in 2034. This is what makes CBAM cost sensitive from year one: the free allowance that domestic EU producers had been receiving on the same goods is being clawed back at the same time the CBAM surcharge starts.
The first annual CBAM declaration is due by 30 September 2027, covering all CBAM goods imported in the 2026 calendar year. It must state the total embedded emissions of the goods and be accompanied by surrendered CBAM certificates equal to those emissions. Missing certificates trigger a penalty of at least EUR 100 per tonne of CO2 equivalent not covered.
The European Commission published a proposal on 17 December 2025 to extend CBAM scope to a first set of downstream products (typically screws, bolts, tubes, and cast iron articles that are made from CBAM covered inputs). The proposal is in the ordinary legislative procedure and is expected to enter into force from 2027 onwards. Forwarders handling downstream steel and iron products should track this file across 2026 to know which importers to notify.
Forwarders do not file the CBAM declaration themselves. The importer (or an indirect customs representative acting for the importer) files it. What forwarders do is capture and pass through the supplier's embedded emissions data at the shipment level, log the CN code correctly (CBAM is CN code driven), and update commercial invoice templates to carry the emissions data. If the emissions data is missing on a shipment, the importer defaults to the reference values published by the Commission, which are almost always higher than the supplier's actual data and produce a larger CBAM liability.
ICS2 is the EU pre arrival security filing system that replaced ICS1. Release 3 (the road and rail phase) went live on 1 September 2025 for maritime and inland waterway, and for road and rail carriers. From 1 September 2025 onwards, ICS2 is the sole system for filing Entry Summary Declarations (ENS) for air, maritime, road, and rail cargo entering the EU or moving in transit through it.
Three EU member states (Poland, Romania, and Slovakia) received transitional derogations for the road and rail phase, allowing specific corridors to continue under the legacy filing model into 2026. The derogations are lane specific and expire in June 2026, at which point every road and rail movement of cargo entering the EU through those corridors must file a full ICS2 ENS.
For forwarders running EU eastbound rail lanes from Asia through Poland and Romania, or truck lanes through Slovakia, this means confirming with the underlying rail or road carrier whether the ENS is being filed by the carrier, by the freight forwarder, or by the trader, and when the derogation on that specific corridor expires. A rejected ENS results in refused entry at the first EU border, which stalls the whole train or truck until resubmission.
ICS2 requires expanded data compared to ICS1: a full six digit HS code (previously four digit), consignee EORI, precise shipper details, and specific cargo description at the house bill level. A generic "freight all kinds" description is not accepted. Forwarders that batch process ENS filings need their booking data to carry the expanded fields end to end.
US Customs and Border Protection published the Enhanced Air Cargo Advance Screening Interim Final Rule with an effective date of 21 November 2025. The Interim Final Rule expands the ACAS data set with new mandatory data elements, adds additional consignee and shipper detail fields, and adds specific fields for high risk commodity types. The tracker context for this article cites the expansion as 5 new mandatory data elements, 12 additional detail fields, and 4 new commodity specific fields (confirm against the final CBP rule text before publish).
CBP set a comment period on the Interim Final Rule that closed on 22 January 2026, and used that window to publish technical corrections. Forwarders should confirm their ACAS filing system is updated against the corrected rule text before continuing bulk filing.
Under the Interim Final Rule, CBP retained enforcement discretion for one year. From 21 November 2026 onwards, that discretion ends. Every ACAS filing must include the full new data element set, filed at the earliest point practicable but no later than prior to loading on the aircraft. Non compliant filings can trigger a Do Not Load message from CBP, USD 5,000 per violation civil penalty, and escalating penalties for repeat violations.
The ACAS obligation sits with the inbound air carrier, but freight forwarders (both direct air carriers and indirect air carriers acting as consolidators) are the practical source of most of the data. Any forwarder issuing house air waybills into the US needs its filing system aligned to the new data set before 21 November 2026, and needs its shipper master data updated so the additional consignee and shipper fields are captured at booking time, not scrambled together the hour before departure.
The EU AI Act creates staged obligations by system risk category, and the general purpose AI (GPAI) provisions are the ones freight forwarders using AI in their operations most often ask about.
The GPAI obligations have applied since 2 August 2025 for any GPAI model placed on the market from that date. The European Commission's enforcement powers on GPAI begin on 2 August 2026. GPAI models placed on the market before 2 August 2025 have until 2 August 2027 to comply.
Watch out
The wording that gets published across trade press and vendor blogs, and which is wrong, is "GPAI obligations apply from 2 August 2026". That date is when the Commission can enforce, not when the obligations start. They started a year earlier. A forwarder using a GPAI powered document extraction, quoting assistant, or classification model needs the provider's GPAI documentation on file now, not from August 2026.
Freight forwarders themselves are not GPAI providers. The obligations sit with the model provider (the OpenAI, Anthropic, Mistral, or in house model developer that placed the model on the market). What forwarders need is the paperwork: a technical documentation summary from the provider, a copyright policy, and a summary of the training data. Ask the AI vendor for the GPAI compliance pack. If they cannot produce it, that is the risk signal.
Beyond the four big regulatory tracks, forwarders should keep the following on the calendar. None are new for 2026, but each has updates in the year.
The forwarders that get through 2026 without a fine are the ones that treat compliance as a workflow, not a memo. Six steps carry the weight:
STEP 1
Publish the compliance calendar as a shared operations document
Not a legal team spreadsheet buried in a shared drive. A shared page that sales, ops, customs, and finance can subscribe to.
STEP 2
Map each deadline to the lanes and customers affected
CBAM does not apply to every EU import, only CBAM covered goods on covered CN codes. ACAS does not apply to every US inbound, only air cargo. Tag customers by which regulation touches their shipments.
STEP 3
Update booking templates and shipment master data
Every new data element in ACAS, every additional data field in ICS2, and every emissions data field for CBAM needs to be captured at booking time, not chased at filing time.
STEP 4
Update commercial invoice templates for the new customer data pass through
For CBAM in particular, the supplier's embedded emissions data needs a defined field on the commercial invoice or the packing list, not a free text note in the notes field.
STEP 5
Notify customers before the deadline lands
Send a customer notice the month before each deadline, with the specific action they need to take (register as authorised CBAM declarant, provide an EORI, supply an embedded emissions statement). Do not wait until the first rejected filing.
STEP 6
Confirm software vendor updates
Every filing platform (ISF, AES, ACAS, ENS, CBAM Registry access) publishes release notes when the regulation changes. Subscribe to the vendor's release notes, do not wait for a support ticket after a filing fails.
Compliance calendars work when the operational system that files, tracks, and invoices the shipment is aware of them. Freight management software that captures the new data at booking, passes it into the filing partner, and holds the shipment record until every required filing is confirmed removes the "did anyone remember" step from the workflow.
For US ocean and air inbound, in product filing coverage matters: ISF 10 and ISF 5 for ocean, AES for US exports (Ocean Export and Air Export via AESDirect), and Japan AFR filing for Japan bound air cargo from the Air Export house are the filings that a freight management system for US and Asia focused forwarders handles natively. ACE integration (the US Customs Automated Commercial Environment) is not in every freight management system: confirm scope with the vendor before assuming it is covered. Forwarders that need it should plan on a filing broker integration.
For CBAM data capture, the ability to add embedded emissions as a custom shipment field, roll it into commercial invoice templates, and export a per CN code report at quarter end is the practical operational requirement. For ICS2 and ACAS, the practical requirement is that the shipment record carries the full expanded data set from booking through to filing, without a manual re entry step at the airport handling agent.
The GoFreight Customs Management Software for Forwarders is the module inside GoFreight that ties the customs filings (ISF, AES, Japan AFR) to the same shipment record used for booking, tracking, and invoicing. It captures the data at booking time, passes it to the filing partner, and holds the shipment status until the filing is confirmed accepted, so the operations team does not need a separate compliance queue to shepherd every filing through.
Ship Faster. Scale Smarter.
See how GoFreight lets forwarders capture compliance data at booking, file customs and security documents from the same shipment record, and hold the shipment status until every filing confirms accepted.
The EU Carbon Border Adjustment Mechanism enters its definitive regime on 1 January 2026. From that date, only an authorised CBAM declarant may import CBAM covered goods (cement, iron and steel, aluminium, fertilisers, hydrogen, electricity) into the EU. The declarant must purchase CBAM certificates each quarter and surrender them the following year against verified embedded emissions. The first annual CBAM declaration for 2026 imports is due by 30 September 2027.
The first annual CBAM declaration is due by 30 September 2027, covering all CBAM covered goods imported into the EU during the 2026 calendar year. It must state the total embedded emissions of the goods and be accompanied by CBAM certificates surrendered in equal quantity to those emissions. Missing certificates trigger a penalty of at least EUR 100 per tonne of CO2 equivalent not covered.
On 17 December 2025 the European Commission published a legislative proposal to extend the CBAM scope to a first set of downstream products made from CBAM covered inputs, typically screws, bolts, tubes, and cast iron articles. The proposal follows the ordinary legislative procedure through Council and Parliament during 2026 and is expected to enter into force from 2027 onwards. Forwarders handling downstream steel and iron products into the EU should monitor the proposal and prepare importers on the affected CN codes.
EU ICS2 Release 3 completed on 1 September 2025 for maritime, inland waterway, road, and rail cargo entering the EU or moving in transit through it. From that date, ICS2 is the sole system for Entry Summary Declaration filings. In 2026, the operational deadline to track is the expiry of the road and rail derogations granted to Poland, Romania, and Slovakia. These derogations run into June 2026 and are lane specific. Once they expire, every road and rail movement on the affected corridors must file a full ICS2 ENS with the expanded data set.
The US Enhanced Air Cargo Advance Screening Interim Final Rule became effective on 21 November 2025. CBP retained enforcement discretion for one year, and strict enforcement of the full new data element set begins on 21 November 2026. From that date, every ACAS filing must include the expanded set of mandatory data elements, and non compliant filings can trigger a Do Not Load message from CBP, USD 5,000 per violation civil penalty, and escalating penalties for repeat violations.
The EU AI Act general purpose AI obligations have applied since 2 August 2025 for any GPAI model placed on the market from that date. The European Commission's enforcement powers on GPAI begin on 2 August 2026. GPAI models placed on the market before 2 August 2025 have until 2 August 2027 to comply. Content that says "GPAI obligations apply from 2 August 2026" mixes up the two dates: obligations started a year before enforcement powers switched on.
Missing CBAM certificates trigger a financial penalty of at least EUR 100 per tonne of CO2 equivalent not surrendered against the first annual CBAM declaration. Separate penalties apply during 2026 for failing to hold the required rolling balance of quarterly CBAM certificate purchases (at least 80% of the estimated liability by the end of each quarter). Repeat non compliance can trigger withdrawal of authorised CBAM declarant status, which effectively blocks the operator from importing CBAM goods.
Enhanced ACAS applies to inbound US air cargo. The ACAS filing obligation sits with the inbound air carrier, but freight forwarders acting as direct or indirect air carriers (issuing house air waybills into the US) are the practical source of most of the data. Any forwarder consolidating US bound air cargo needs its filing system aligned to the new data element set before 21 November 2026 and its shipper master data updated so the additional consignee and shipper fields are captured at booking, not scrambled together the hour before departure.
No. The CBAM declaration is filed by the authorised CBAM declarant, who is the importer or an indirect customs representative acting for the importer. What forwarders do is capture and pass through the supplier's embedded emissions data at the shipment level, log the correct CN code (CBAM is CN code driven), and update commercial invoice templates so the emissions data is captured on a defined field, not as free text. If the emissions data is missing, the importer defaults to the reference values published by the Commission, which are almost always higher than the supplier's actual data.
ICS2 is the EU pre arrival security filing system that requires an Entry Summary Declaration for cargo entering the EU by air, maritime, road, or rail. ISF (Importer Security Filing, also known as 10+2) is the US pre arrival security filing for ocean cargo bound for the US. Both exist to give customs authorities advance visibility of cargo before it arrives, but the systems, data sets, filers, and deadlines are different. A forwarder handling both lanes files both filings on the same shipment where applicable, and the shipment record needs to carry the data required by each system.
Publish the calendar as a shared operations document that sales, operations, customs, and finance can subscribe to. Map each deadline to the lanes and customers affected. Update booking templates so the new data elements are captured at booking, not chased at filing. Update commercial invoice templates for pass through of customer supplied compliance data such as CBAM embedded emissions. Notify affected customers before the deadline lands. Confirm software vendor release notes are current for every filing platform in use.
Freight management software varies by module coverage. Systems built for US and Asia focused forwarders typically cover ISF (10+2), AES for US exports, and Japan AFR natively, with ACAS filing driven by shipment data captured at booking. ICS2 ENS and CBAM data capture are typically handled through filing partner integrations rather than in product filing. The practical requirement across all four is that the shipment record carries the full expanded data set from booking to filing, without a manual re entry step at the handling agent or the customs broker.