NHS Carbon Reduction Plan Requirements 2027: What Suppliers Need to Do Now

If you supply the NHS — or plan to bid for NHS work — the carbon bar is about to rise sharply.

In June 2026, NHS England published its 2027 Carbon Reduction Plan requirements for the procurement of NHS goods, services and works. From 1 April 2027, these replace the existing CRP and Net Zero Commitment requirements for all in-scope procurements.

The headline change: suppliers on the largest contracts will need to report all relevant Scope 3 categories, not the subset of five they report today. For most businesses, that's a step change in the work involved — and it's coming with about eight months' notice by the time most suppliers hear about it.

Here's what's actually changing, who it hits, and what to do now.

The two-tier system

The new policy applies proportionately, splitting suppliers into two tiers by contract value.

Tier 1 — the 2027 NHS CRP. This applies to procurements worth £5 million per annum or more (including VAT), and to all new frameworks operated by in-scope NHS organisations regardless of the framework's value, where relevant and proportionate. Suppliers in this tier must cover all scope 1, scope 2 and relevant scope 3 emissions.

Tier 2 — the 2024 CRP. This applies to lower-value procurements below £5m per annum that sit above the relevant procurement thresholds. These suppliers continue with the current standard: scope 1, scope 2, and a subset of scope 3.

So if you're a smaller supplier on sub-£5m contracts, the immediate change is limited — you stay on the existing requirements. If you're bidding for major contracts or onto any new NHS framework, the enhanced tier applies.

That framework point is worth reading twice. Frameworks are caught irrespective of contract value, which pulls in suppliers who might otherwise have assumed they were below the threshold.

What actually changes in the enhanced tier

Scope 3 goes from a subset to everything relevant. Today's NHS CRP requires five Scope 3 categories — broadly upstream transport, waste, business travel, employee commuting and downstream transport. The 2027 standard requires all relevant categories under the GHG Protocol, which runs to fifteen. For most businesses, the ones that get added are the big ones: purchased goods and services, and capital goods. (Not sure what Scope 3 means? See our plain English explainer.)

Exclusions need justification. You can't simply omit a category because it's hard. Any Scope 3 category you leave out has to be justified in writing, with your reporting boundaries clearly defined.

Reporting becomes public. Suppliers must publicly report their targets and emissions and publish the CRP — this isn't a document you hand over privately in a bid.

It's global, not just UK. The requirement covers relevant global emissions, not only UK operations.

It's a procurement gate, not a sustainability nicety. A non-compliant CRP is a compliance failure in the bid — the same disqualification logic as PPN 006.

How this relates to PPN 006

The NHS guidance is explicitly built to be used alongside central government's PPN 006 guidance, not instead of it. The structure of a compliant CRP is the same: your baseline and current emissions, environmental management measures, reduction targets, and the actions you'll take to reach net zero — with director-level sign-off and publication on your website.

If you already have a PPN 006-compliant CRP, you have the right shape of document. What changes for the enhanced tier is the scope of the emissions data inside it. (If you're starting from nothing, begin with our PPN 006 Carbon Reduction Plan guide.)

Worth noting the wider context: the NHS has committed to reaching net zero for its directly-controlled emissions and is working toward 2045 for the emissions it influences — the vast majority of which sit in its supply chain. That's you. This policy is the mechanism.

The real problem: full Scope 3 is a different kind of task

Here's the honest difficulty. The current five categories are mostly activity-based and reasonably tractable — mileage, litres, tonnes of waste. You can count them.

Adding purchased goods and services means accounting for the emissions embedded in everything you buy, across potentially hundreds of suppliers, most of whom publish no emissions data at all. Surveying your supply chain is not realistic for a mid-sized business, and it isn't what the standard expects on day one.

The recognised route is to estimate from spend. Your purchase data, categorised, multiplied by published emission factors, gives you a defensible figure for the categories where primary data doesn't exist — which is exactly the situation the guidance anticipates for suppliers still maturing their data collection. You state the method, you label the estimates, and you improve the biggest categories over time. (We explain the mechanics in how to calculate Scope 3 from spend data.)

The catch is that doing this by hand, across every category, and then repeating it annually because the reporting cycle resets — that's where a spreadsheet approach falls over.

What to do now

1. Work out which tier you're in. Look at your current NHS contracts and your pipeline. Anything at £5m+ per annum, or any new framework, puts you in the enhanced tier.

2. Don't wait until 2027. You'll need a baseline and a current reporting year in the CRP. Data you haven't started collecting can't be retrospectively invented — so the year you begin measuring matters.

3. Audit your Scope 3 gaps. Compare what you report today against the full GHG Protocol category list. Identify which additional categories are relevant to your business, and decide now which you'll estimate and which you'll exclude — because exclusions need a written rationale.

4. Fix the data pipeline, not the document. The CRP itself is a few pages. The hard part is producing accurate emissions data every year without it becoming a project each time.

5. Get your reduction targets and governance in place. Public targets and board-level ownership are part of the requirement, not an afterthought.

Turning your accounts into the answer

The reason full Scope 3 reporting feels daunting is the assumption that it means chasing suppliers. It doesn't have to.

Your purchase ledger already contains the spend data the estimate needs. SpendToScope connects to Xero, QuickBooks or Sage and produces a Scope 1, 2 and 3 footprint at invoice level — with the method and factor set stated, in a form you can publish. And because it refreshes as your invoices sync, next year's CRP update is a review rather than a rebuild.

The bottom line

• From 1 April 2027, new NHS CRP requirements replace the current CRP and NZC rules for in-scope procurements.
• Two tiers: £5m+ per annum contracts and all new frameworks need the enhanced 2027 NHS CRP (all scope 1, 2 and relevant scope 3); below £5m stays on the 2024 CRP (scope 1, 2 and a subset of scope 3).
• The big shift is full relevant Scope 3, publicly reported, with written justification for any exclusions.
• It sits alongside PPN 006 — same CRP structure, broader emissions data.
• Start now: you need a baseline year, and spend-based estimation is the realistic route to the categories you can't measure directly.