On November 10, 2026, every U.S. company with more than $1 billion in revenue that does business in California owes the California Air Resources Board a Scope 1 and Scope 2 emissions report — or, in a narrow first-year alternative, a letter saying it did not have the data. CARB’s Initial Regulation took effect October 12, 2026, when the Office of Administrative Law approved it. The compliance story is a deadline. The risk story is what the filing leaves behind: a dated, signed, regulator-filed statement about a company’s operations, produced under a statute with a $500,000-per-year penalty ceiling, that will be read later by people who were never its intended audience.
This desk’s concern is not whether a given client finds emissions accounting interesting. It is what happens when the document a company files with CARB disagrees with the document it files with its insurer — and what a broker or carrier should be doing in the three weeks before the first of those documents goes on record. For the mechanics of the filing itself — who is covered, which fiscal year applies, how to submit — our sister desk at BC ESG has the full compliance checklist for the November 10 filing. What follows is the liability read.
The penalty stack, kept separate
Penalty talk around SB 253 tends to collapse three different mechanisms into one number. They are not one number, and the differences matter when a client asks what a miss actually costs.
The reporting penalty. Health and Safety Code section 38532 directs CARB to adopt regulations authorizing administrative penalties for nonfiling, late filing, or other failure to meet the law’s requirements. Penalties imposed on a reporting entity shall not exceed $500,000 in a reporting year. That is the ceiling for the filing violation itself.
Good faith is a priced factor. In imposing penalties, CARB must consider all relevant circumstances, including the violator’s past and present compliance and whether the violator took good-faith measures to comply, and when it took them. That clause makes the preparation record a financial asset: the applicability memo, the data inventory, the documented decision about which fiscal year to report — the paperwork a compliance team produces anyway — is the same paperwork that reduces penalty exposure if something still goes wrong.
Fee enforcement is a separate track. The regulation’s fee subarticle carries its own consequences: each calendar day of a violation is a separate offense, violations may be enjoined, and failure to pay the annual fee is a separate violation for each day it remains unpaid. Late fees cover CARB’s added administration costs and are assessed in addition to penalties. A client that files on time but lets the fee slide has not avoided enforcement; it has moved to a different, daily-accruing track of it.
One more boundary worth naming: the statute’s express safe harbor for misstatements covers Scope 3 — no penalty for a Scope 3 misstatement made with a reasonable basis and disclosed in good faith, and Scope 3 penalties from 2027 to 2030 only for nonfiling. Scope 3 is not in the 2026 filing at all. The Scope 1 and 2 statements your clients file this November do not carry that statutory safe harbor, which is precisely why their accuracy matters more, not less, than the 2027 numbers will.
Who is actually exposed — and who is not
The covered population is U.S.-organized business entities with gross receipts over $1 billion — tested on the lesser of the two previous fiscal years, entity by entity — doing business in California. That test sweeps in companies whose California footprint is a sales territory and a handful of remote employees, provided the payroll-only exemption does not apply, and it reaches subsidiaries whose parents would prefer to answer for them. Parent-level consolidation is allowed for the report itself, but the obligation, the fee, and the penalty exposure are assessed per reporting entity.
The insurance industry’s own position is the part most likely to be mis-stated at a renewal meeting: insurance businesses are exempt from this regulation. Entities regulated by the California Department of Insurance, or in the business of insurance in any other state, sit outside the article, alongside tax-exempt nonprofits, government entities and companies they majority-own, wholesale-electricity-only operators, and payroll-only presences. So carriers generally meet SB 253 through their insureds, not as filers. The carrier-side exposure is underwriting and claims exposure — the quality of the representations in the book — not a November 10 filing of the carrier’s own.
Brokers sit in a third position: no filing obligation, real advice exposure. A broker who tells a borderline client “you’re under the threshold” or “the letter covers you” without an entity-level revenue analysis behind it has created an errors-and-omissions fact pattern with a regulator’s deadline as the loss date. The advice file matters as much as the filing file.
Three documents that must agree
A CARB filing does not stay at CARB. From November 10 forward, a covered company has made emissions representations in at least three places that sophisticated readers will compare:
- The CARB submission itself — the Scope 1 and 2 report, or the statement of non-reporting, filed under a statute that contemplates public disclosure of these reports.
- The D&O application and renewal file — which asks about regulatory compliance, about disclosures the company has made, and about circumstances that could give rise to a claim.
- The company’s public claims — sustainability reports, customer responses, lender questionnaires, marketing statements about environmental data and progress.
The risk is rarely a bad emissions number. It is the gap between documents: a D&O submission describing a mature environmental reporting program next to a letterhead statement telling CARB the company was not collecting emissions data as of December 5, 2024; a sustainability report whose headline claims outrun the inventory filed with the state; an underwriting presentation citing emissions intensity the filed inventory does not support. Each gap is a misrepresentation argument waiting for a loss to attach to it — in a coverage dispute, a securities claim, or a greenwashing action. This desk has already walked through what a signed emissions statement does inside a D&O application; the short version is that the first exhibit in those disputes is increasingly a disclosure the company made to someone else.
The first-year safety nets do not close those gaps. CARB will accept 2026 submissions whether or not limited assurance has been obtained, and it will accept a report built from data the company possessed or was collecting by December 5, 2024. That is CARB’s enforcement discretion. It binds CARB. It does not bind the SEC, the FTC, a state attorney general, a private plaintiff, or a carrier evaluating a misrepresentation defense — and it says nothing about the standard a court applies to whether a public statement was accurate when made. “The regulator was lenient this year” is a transition posture, not a defense.
The non-reporting statement is a representation too
Attention naturally goes to the inventory. Give the letter equal weight. The statement of non-reporting is a statement on company letterhead that the company is not submitting a report because it did not possess Scope 1 or Scope 2 information and was not collecting it on or before December 5, 2024. CARB requests it before November 10, 2026, through the intake platform or by email.
Two failure modes follow. A company that was collecting data — for a customer requirement, a lender, a voluntary program — and files the letter anyway has made a false statement to a regulator: the worst version of this document, and one made entirely voluntarily. A company that files the letter honestly but described a functioning data program to its insurer has the same problem arriving from the opposite direction. Neither failure is about emissions. Both are about whether a signed statement was true on the day it was signed, which is the ground coverage counsel fights on.
The defensive asset is the methodology file. CARB’s own guidance encourages filers to attach the context behind the numbers — methodologies, data sources, emission factors and their sources, organizational boundaries, assumptions. Read that as evidence advice: the contemporaneous record that shows a number was produced by a defensible process is what a good-faith penalty argument, an underwriting review, and a greenwashing defense all run on. Brokers should tell clients to build that file as if an underwriter and a litigator will both read it, because both eventually will.
What brokers should do before November 10
- Triage the client list against the actual test. Entity by entity: lesser of the two previous fiscal years’ gross receipts over $1 billion, doing-business analysis, exemption check. Near the line is where the advice risk lives — document the basis either way.
- Ask which door each covered client is using. A report, a report built from data held by December 5, 2024, or the letterhead statement. Each answer has a different consistency check against the insurance file.
- Reconcile before the record sets. Compare the intended CARB position with the client’s D&O representations and public sustainability claims while a gap can still be fixed quietly — not at renewal, when the underwriter does the reconciling.
- Calendar the fee, not just the filing. CARB issues fee determination notices by December 10, payment due within 60 days, assessed per entity even when a parent pays. An unpaid fee is a daily violation on a separate enforcement track.
- Keep the methodology file with the policy file. When a claim or a renewal question arrives, the people who need the provenance of the numbers should not have to go find them.
What carriers should do
- Add three questions to the renewal conversation for large insureds: Are you an SB 253 reporting entity? What did you file on November 10 — a report or a non-reporting statement? Does the inventory use the same boundaries and factors as the data in your submission to us?
- Do not over-read the statute. SB 253 creates no new coverage trigger and rewrites no policy form; this desk’s earlier read of the deadline’s implications for carriers and brokers stands on that point. What it creates is a documentation baseline that later claims handling will test prior statements against.
- Price the record, not the press release. A filed, methodology-backed inventory is a management-quality signal; a last-minute letter from a company that markets its ESG maturity is one too, in the other direction.
- Watch the exemption line. Insurance businesses are exempt as filers under this regulation. That status belongs to this rule; it is not a general climate-disclosure pass, and it does not extend to a carrier’s non-insurance affiliates, which are tested like any other entity.
The through-line is simple. November 10 converts emissions data from a voluntary narrative into a regulated record with a penalty ceiling, a daily-accrual fee track, and a five-year recordkeeping tail — CARB requires the California tax records behind each applicability determination to be kept for five years and produced on request. Companies that treat the filing as a paperwork exercise will discover it was an evidence exercise. The brokers and carriers who understand that first will own the renewal conversation.
Frequently asked questions
What is the maximum penalty for missing the November 10 filing?
Administrative penalties for nonfiling, late filing, or other failure to comply with SB 253 may not exceed $500,000 in a reporting year. CARB weighs all relevant circumstances in setting the amount, including past and present compliance and whether the company took good-faith measures to comply. Separately, fee violations accrue per calendar day, and an unpaid annual fee is a separate violation for each day it remains unpaid.
Are insurance companies required to file SB 253 reports?
No — under this regulation, business entities regulated by the California Department of Insurance, or in the business of insurance in any other state, are exempt. Carriers encounter SB 253 through their insureds: the filings their large corporate clients make become part of the underwriting and claims record. Non-insurance affiliates of insurance groups are tested like any other entity.
If CARB accepts an unassured 2026 filing, is the client protected?
Protected from CARB’s assurance enforcement for this cycle — nothing more. CARB’s decision to accept 2026 submissions with or without limited assurance is enforcement discretion by one agency. It does not bind other regulators, private plaintiffs, or a carrier assessing whether application statements were accurate. The statutory limited-assurance requirement itself begins in 2026 and rises to reasonable assurance in 2030.
Is filing the non-reporting statement the low-risk option?
Only if it is true. The statement asserts, on company letterhead, that the company did not possess Scope 1 or Scope 2 information and was not collecting it on or before December 5, 2024. A company that was collecting data for any purpose — a lender, a customer, a voluntary program — and files the statement anyway has made a false representation to a regulator, and has handed every future coverage and greenwashing dispute its first exhibit.
What should a broker do this week?
Build the triage list: which clients meet the revenue and doing-business tests, which exemption might apply, and which of the three filing routes each covered client will use. Then reconcile the intended CARB position against each client’s D&O application and public sustainability claims, and put the fee notice date — December 10, payment within 60 days — on the same calendar as the filing deadline. Do it before November 10, while inconsistencies can still be fixed before they become the record.
Does SB 253 change any policy’s coverage?
No. The law creates a disclosure obligation and a penalty regime; it does not create a coverage trigger or amend policy forms. Its insurance significance is evidentiary: from November 10, 2026 there is a dated, filed baseline of what each large company said about its emissions and its data — and every later statement, application, and claim will be measured against it.