Measuring what matters: compliance as a bridge between data and practice

Daniela Ortega

Mijares, Angoitia, Cortés y Fuentes, Mexico City

dortega@macf.com.mx

Nathalie Zyman

Mijares, Angoitia, Cortés y Fuentes, Mexico City

nzyman@macf.com.mx

Today companies today face converging pressures to demonstrate their commitment to diversity, equity, and inclusion. Most jurisdictions have enacted anti-discrimination legislation covering employment which establish a legal baseline for equal treatment. Such legislation includes: Title VII of the Civil Rights Act in the United States; the EU Equal Treatment Directives; the UK Equality Act 2010; and Mexico’s Ley Federal para Prevenir y Eliminar la Discriminación.

Yet expectations increasingly extend beyond compliance with legal minimum standards, and come from several directions: ESG-focused investors represent a significant and growing share of institutional capital; consumers increasingly reward companies they perceive as socially responsible while punishing those that appear to backtrack; and employees – particularly younger generations – evaluate prospective employers on their demonstrated commitment to inclusion. Between 2008 and 2021, DEI-related discussions in corporate financial filings increased fivefold, far outpacing any corresponding growth in actual workforce diversity.^[1] The message is clear: companies face a growing demand not only to promote diversity, but also to demonstrate it credibly.

This pressure has created perverse incentives. When the benefits of appearing committed to diversity are tangible – higher ESG ratings, greater investment flows, stronger brand perception – while the costs of exaggerating that commitment are perceived to be small, a predictable behaviour emerges. Companies begin projecting an image of social responsibility without substantive actions to back it up. This practice, known as ‘diversity washing’, describes firms that discuss DEI excessively relative to their actual workforce diversity, misrepresenting their real commitments.^[2]

The term is a subset of ‘social washing’, itself parallel to greenwashing, and reflects a growing concern that corporate ESG reports serve more as branding tools than as catalysts for genuine change.^[3] The flexibility inherent in sustainability reporting frameworks – combined with the absence of mandatory verification in most jurisdictions – compounds the problem, enabling companies to engage in selective disclosure: highlighting awareness events and aspirational statements while leaving deeper systemic issues unaddressed.

The consequences extend beyond branding, they distort capital markets. Research demonstrates that diversity-washing firms receive approximately 12 per cent higher ESG scores from major rating agencies, despite those ratings having no discernible relation to underlying diversity. They attract 10.4 per cent more ownership from socially responsible investment funds – meaning that capital intended for genuinely responsible companies is being misallocated. The result is a distortion of sustainability-oriented asset flows that benefits the companies engaged in washing while representing an economic and social loss for ESG-focused investors.

But the damage is not only financial. The recent backlash against DEI reflects a combination of political, social, cultural and legal factors – but it may itself have been reinforced by diversity washing. When companies engaged in performative commitments – projecting concern without substance – stakeholders eventually noticed the gap between rhetoric and reality. That loss of trust did not only discredit the companies that were faking it; it offered ammunition to critics who now characterise all diversity initiatives as hollow or politically motivated, eroding confidence in DEI as a concept. This erosion underlines why performative policies are no longer sufficient, and why effective compliance has become essential.

Compliance is a natural part of the response to diversity washing. Research shows that diversity washers are 1.21 times more likely to have diversity policies without quantifiable targets – policies that amount to little more than posturing. This finding illustrates the central distinction between formal and effective compliance. A policy that exists on paper satisfies a tick-box; a programme with measurable targets, independent verification and governance accountability produces outcomes.

The compliance officer is in a unique position to bridge this gap. Unlike human resources, which designs and champions DEI initiatives, the compliance function provides independent oversight. It tests whether published data reflects organisational reality, challenges unsupported claims, and ensures that commitments translate into verifiable conduct.^[4] In practice, this takes several forms: deploying third-party verification tools to assess inclusion gaps; conducting periodic audits that compare disclosed metrics against actual workforce composition; and reporting findings directly to the board or audit committee – independent of the functions responsible for the programmes being evaluated.

The compliance officer also connects DEI reporting with governance structures. This means embedding diversity objectives in executive compensation frameworks so that leadership accountability is tied to measurable outcomes. It means tracking promotion and retention data with the same rigour as financial reporting – because representation at recruitment means little if diverse employees do not advance or choose to leave. And it means establishing confidential feedback channels that allow employees to expose systemic issues before they escalate into crises.

Effective compliance in this context shifts measurement from mere representation to actual influence and decision-making power. It asks not only whether diverse employees are present, but whether: they advance; pay equity holds under scrutiny; and the organisation’s culture supports the safety and belonging of all employees regardless of rank. These are not aspirational ideals; they are operational mechanisms which transform diversity from a disclosure exercise into a governed, measurable commitment.

The regulatory landscape is moving in this direction. Under the EU’s Corporate Sustainability Reporting Directive (CSRD), covered companies must report in accordance with the European Sustainability Reporting Standards (ESRS), which include disclosure requirements on workforce diversity, gender pay gaps and working conditions. The CSRD operates on the principle of double materiality: companies must disclose both how sustainability matters affect the undertaking and how the undertaking affects people and the environment. Reported sustainability information is subject to mandatory assurance by an independent third party.^[5]

Mexico has followed a similar path. Under its Securities Market Law, public companies must report sustainability information in accordance with the ISSB’s sustainability disclosure standards (IFRS S1 and S2) beginning in 2026, with independent assurance requirements phased in progressively until 2028.^[6]

Yet globally, most diversity reporting remains voluntary. The ISSB standards provide a baseline for financial-risk reporting but do not yet require specific social metrics. This leaves workforce diversity particularly vulnerable to the selective disclosure that diversity washing exploits. A growing number of companies are producing DEI reports that go well beyond regulatory mandates, but without independent verification, this proliferation of disclosure risks becoming another vector for washing rather than a safeguard against it.

The implications are significant for legal practitioners. As the regulatory environment shifts from voluntary disclosure towards mandatory, verified reporting, the role of compliance counsel in designing and overseeing DEI programmes will only increase. Advising clients on how to build diversity frameworks which are measurable, auditable, and legally sound – rather than performative – is no longer a niche practice. It sits at the intersection of employment law, corporate governance, and ESG strategy. Effective compliance is not only a tool for legal risk mitigation, it is a safeguard for the long-term credibility of diversity efforts themselves.