It's obvious that it's difficult for companies to truly track throughout their supply chain. For this reason, it is mainly companies of a certain size that are required to do this. This means carrying out audits and collecting a lot of information about suppliers. After all, it is the entire supply chain that is targeted, even when it is located abroad.
In addition, we realize that companies are very poorly equipped to carry out this kind of monitoring. As we know, a single device can be made of parts from several countries and different companies.
Sometimes a subcontract is given to one company, and that company will itself give the contract to another company. So it's quite difficult to follow up realistically, but the fact remains that you have to start somewhere. To do this, clear, precise and ambitious normative frameworks need to be put in place.