PFAS in your supply chain: The liability you didn't know you had

Published: 16 July 2026

There is a version of the PFAS problem that most industrial operators are at least broadly familiar with: legacy contamination from firefighting foam, historical industrial processes, or proximity to a known hotspot. That version has a physical location. It shows up (or might show up) in a site investigation report.

There is another version that is less visible, growing in regulatory significance, and almost entirely absent from conventional due diligence and risk management frameworks. It does not show up in a soil sample. It lives in the materials, components and chemicals that organisations procure, install and use every day - often without knowing that PFAS are present at all.

Why supply chains are the PFAS blind spot

PFAS have been used in an extraordinarily wide range of industrial products and applications over the past seven decades. Many of these applications persist in current use. Fire suppression systems in industrial buildings frequently contain PFAS-based foams or suppressant agents. Industrial coatings applied to process equipment, pipework and structures may contain fluoropolymers. Membrane liners used in containment bunds and lagoons may be PFAS-based. Seals, gaskets and process chemicals across multiple industries have historically incorporated PFAS compounds as functional ingredients.

The problem is disclosure. Material safety data sheets, the standard reference document for industrial chemicals and materials, are not required to list PFAS unless the specific compound has been formally classified as hazardous. Most PFAS have not been formally classified in this way, particularly the short-chain variants that have replaced long-chain compounds as restrictions have tightened. Standard procurement agreements do not typically include PFAS-specific clauses. Supplier questionnaires, where they exist at all, rarely ask the right questions about indirect PFAS content.

The result is that many operators are carrying PFAS liability through their supply chains without knowing it, and without the contractual protections that would help them manage it if they did.

The regulatory audit trail that is coming

This opacity is becoming legally and commercially untenable. The February 2026 UK PFAS Plan commits to requiring industrial site operators with environmental permits to be more transparent about their PFAS use. That commitment will create, for the first time, a formal disclosure requirement around PFAS in permitted operations, and with it, an audit trail that will be accessible to regulators, litigants and insurers.

In parallel, the European Union's regulatory programme is extending traceability requirements several tiers into supply chains. The Digital Product Passport, being introduced under the Ecodesign for Sustainable Products Regulation, will require documented knowledge of PFAS content in materials and components across a wide range of product categories. The EU's universal REACH restriction on all PFAS, currently advancing toward formal adoption in 2027, will apply to imported goods as well as EU-manufactured products. UK operators supplying the EU market will need to demonstrate PFAS compliance regardless of where their products are manufactured.

In the United States, the EPA's TSCA Section 8(a)(7) rule requires disclosure of all PFAS manufactured, imported or processed between 2011 and 2022, creating a retrospective public record that will inform litigation, insurance underwriting and investor due diligence for decades.

The pattern across all three jurisdictions is the same: the era of PFAS opacity in supply chains is ending. The audit trails that do not yet exist will soon. And the organisations that have already mapped their exposure will be in a fundamentally different position from those who have not.

What indirect PFAS exposure looks like in practice

To understand the scale of the risk, it helps to think through the specific pathways by which PFAS from supply chains can create liability:

Fire suppression systems. Aqueous Film Forming Foam (AFFF) containing PFOS, PFOA and related compounds was standard specification for industrial, aviation and defence fire suppression for decades. Many installations remain in service. Where AFFF has been discharged - in a fire, a test, a training exercise, a system fault - PFAS enter the ground and groundwater. The operator who deployed the system is within the scope of downstream liability claims, regardless of whether they manufactured or specified the foam.

Industrial coatings and surface treatments. Fluoropolymer coatings are widely used in process industries for their chemical resistance, non-stick properties and durability. As coatings degrade, are stripped or are disposed of, PFAS compounds can enter the environment. The waste classification implications of PFAS-containing coating residues are also changing, with formal hazardous classification anticipated, significantly restricting disposal routes and increasing costs.

Membrane liners and geotextiles. Some containment structures such as bunds, lagoons, and landfill caps use PFAS-containing membrane materials. Where these structures are tested, repaired or decommissioned, PFAS can be released. The due diligence burden on operators inheriting these structures through acquisition or occupancy is not currently well-defined, but it is growing.

Process chemicals. PFAS have been used as process aids, surfactants, lubricants and functional additives across a wide range of manufacturing operations. Discharge of process wastewater, disposal of spent process chemicals, and historic on-site spills can all create legacy contamination that is traceable, via its chemical fingerprint, to the specific application.

How to get ahead of the exposure

Addressing supply chain PFAS risk requires a different approach from site investigation and groundwater remediation. The starting point is not a soil sample but an inventory.

A supply chain PFAS mapping exercise systematically reviews the materials, components and chemicals procured and used in an operation, identifies those with known or probable PFAS content, assesses the exposure and compliance obligations that flow from that content, and establishes the contractual and procurement frameworks needed to manage the risk going forward. For organisations with EU market access or supply chains touching EU manufacturers, it also identifies the specific disclosure and traceability obligations that apply under REACH, PPWR and the emerging Digital Product Passport framework.

This is not a one-time exercise. The regulatory standards against which PFAS content in products is assessed are changing, and will continue to change. An organisation that completes a supply chain PFAS mapping exercise in 2026 and does not revisit it in 2028 when UK REACH reform is expected and the EU restriction enters force, will find that the map needs updating. The process needs to be embedded as a regular programme activity, not a point-in-time project.

The transparency argument

There is a strategic dimension to supply chain PFAS transparency that goes beyond compliance. Organisations that can document the PFAS content of their supply chains and demonstrate that they are actively managing it are materially better positioned with customers, investors and insurers than those that cannot.

Major procurement frameworks are beginning to require PFAS transparency as a condition of market access. ESG-mandated investors are screening supply chain PFAS exposure as a governance indicator. Environmental liability insurers are asking, at renewal, whether operators have assessed indirect PFAS risk through their supply chains and adjusting terms accordingly.

The organisation that can answer yes - and produce the documentation to support it - is not just managing a risk. It is differentiating itself from competitors who have not yet asked the question.

Where to start

Supply chain PFAS mapping starts with an operational review: what materials, coatings, fire suppression systems and process chemicals are in use; which of those have known or probable PFAS content; what the exposure and disclosure obligations are for each; and what contractual and procurement changes are needed. Our specialist team can structure and deliver this review as part of a broader PFAS Exposure Assessment, giving you the complete picture, from site to supply chain, in a single integrated programme.