Skip to main content
The Three Letters

Social Factors in ESG: What the S Covers

Pomegra Learn

What Does the "S" in ESG Actually Cover?

The Social pillar of ESG covers a company's relationships with people — employees, workers in the supply chain, customers, and communities. It is simultaneously the most important letter for assessing a company's real-world conduct and the most analytically challenging: social metrics are less standardized than environmental metrics, more dependent on self-reporting, more culturally variable across geographies, and more contested in their financial materiality. The COVID-19 pandemic, the Black Lives Matter movement, and mounting evidence linking employee satisfaction to corporate performance have all elevated social analysis in ESG investment practice.

Quick definition: Social factors in ESG assess a company's management of its relationships with employees, suppliers, customers, and communities. Key metrics include workforce safety, labor rights compliance, pay equity, supply-chain human rights, data privacy, product safety, and community economic impact.

Key takeaways​

  • Social factors cover five broad areas: human capital management (workforce), supply-chain social responsibility, customer relations (data, safety, fair treatment), community impact, and human rights.
  • The COVID-19 pandemic demonstrated that workforce treatment — particularly paid sick leave, healthcare benefits, and safety protocols — has direct, measurable financial consequences.
  • Supply-chain social risk is harder to assess than direct company performance because it requires information from suppliers who may themselves lack the data or incentives to disclose accurately.
  • Data privacy and cybersecurity have emerged as dominant social metrics for technology companies, given the scale of personal data they hold and the financial consequences of breaches.
  • Social data quality improvement is the most urgent unresolved challenge in ESG — without better, comparable, independently verified social data, social analysis remains more qualitative than quantitative.

Human Capital Management​

Human capital management (HCM) covers how companies manage and develop their workforces. Key metrics include:

Workforce safety: The Total Recordable Incident Rate (TRIR) — number of recordable injuries per 100,000 hours worked — is the most widely used safety metric. Fatality rates provide an extreme-event measure. High safety performance reduces operational disruptions, insurance costs, regulatory liability, and reputational risk.

Turnover and retention: High voluntary turnover rates indicate employee dissatisfaction and create recruitment and training costs. Research consistently finds that high-turnover companies have lower productivity and profitability. JUST Capital's annual ranking of companies on workforce factors finds that companies in the top quartile for employee satisfaction generate significantly higher long-term total shareholder returns.

Pay equity: Gender and racial pay gaps are the most commonly disclosed HCM metrics. The UK requires large employers to report mean and median gender pay gaps annually; the EU Pay Transparency Directive extends comparable requirements across Europe. Pay equity disclosure allows investors to assess whether companies are managing the litigation, regulatory, and talent-retention risks associated with systemic pay disparities.

Benefits quality: Healthcare coverage, retirement benefits, paid leave, and flexible work arrangements affect employee welfare and recruitment competitiveness. The pandemic demonstrated that companies with comprehensive healthcare benefits and paid sick leave had lower pandemic-related operational disruptions.

Training and development: Investment in workforce skills development is both a social indicator (are workers given opportunities to grow?) and a financial investment (better-skilled workforces generate higher productivity). Many institutional investors have begun asking for human capital development metrics as part of expanded social disclosure.

Supply-Chain Social Risk​

For companies with complex global supply chains — apparel, electronics, food, and automotive companies are the most prominent examples — social risk in the supply chain often exceeds social risk in direct operations. Supply-chain social analysis focuses on:

Labor standards compliance: Are suppliers using child labor? Forced labor? Paying minimum wages? Allowing freedom of association? These questions require answers from suppliers who may operate in jurisdictions with weak legal protections and who have financial incentives to underreport violations.

Audit programs: Many large companies conduct periodic audits of key suppliers against social standards (SA8000, SMETA, or company-specific frameworks). Audit quality varies enormously — announced audits with limited scope miss many violations; unannounced audits with worker interviews are more rigorous but more expensive.

Traceability: The ability to identify and map multi-tier supply chains is a precondition for meaningful social risk assessment. Many companies can map Tier 1 suppliers (direct contractors) but lose visibility at Tier 2 and beyond — where the highest social risks often reside.

Modern slavery: The UK Modern Slavery Act (2015) requires companies with £36+ million in annual turnover to publish annual modern slavery statements. The US Uyghur Forced Labor Prevention Act (2022) creates import restrictions on goods linked to forced labor in Xinjiang. These regulatory requirements create legal liability for supply-chain social failures, making supply-chain due diligence a compliance issue as well as an ESG concern.

Social risk assessment framework​

Data Privacy and Cybersecurity​

For technology companies, financial institutions, healthcare providers, and retailers — which together represent a large share of market capitalization in most developed markets — data privacy and cybersecurity have become the dominant social ESG metrics. The financial consequences of data breaches and privacy violations have been large and growing:

  • Facebook (Meta): Cambridge Analytica scandal (2018) contributed to over $100 billion in market-cap loss in days; ongoing regulatory fines under GDPR and other frameworks have totaled billions.
  • Equifax: 2017 data breach affecting 147 million Americans resulted in approximately $700 million in FTC and state attorney-general settlements.
  • Uber: 2022 cybersecurity breach covered up by management created SEC disclosure-violation liability in addition to data-protection regulatory penalties.

ESG social analysis of data privacy typically assesses: whether a company has a board-level data privacy and cybersecurity oversight structure; whether it has a documented incident response plan; its track record of breaches and how they were managed; its compliance posture under GDPR, CCPA, and other applicable data regulations; and its investment level in cybersecurity infrastructure.

Community Impact​

Community impact analysis covers a company's economic contribution to and relationship with the communities where it operates. Key metrics include:

Local tax payments: Country-by-country tax reporting (required under OECD BEPS standards for large multinationals) allows assessment of whether companies pay taxes proportional to their economic activity in each jurisdiction. Aggressive tax avoidance — locating profits in low-tax jurisdictions — is considered a social and governance risk because it shifts tax burdens to other taxpayers and damages relationships with governments.

Local employment and procurement: Companies that employ significant local labor and source from local suppliers contribute more to community economic development than those that import both.

Community investment programs: Corporate community investment (formerly "corporate social responsibility" or CSR programs) is evaluated for substance versus marketing. Programs with clear theory of change, measurable outcomes, and community co-design are differentiated from token philanthropic gestures.

Real-world examples​

Amazon warehouse worker controversy (2020–2023): Amazon's warehouse workforce conditions — high injury rates (significantly above industry average), production-quota monitoring, limited bathroom breaks — generated sustained media coverage, regulatory investigations, and investor engagement. Worker organizing efforts led to the first Amazon union in the US (Staten Island, 2022). The controversy illustrated how workforce treatment becomes an ESG financial issue through regulatory risk, reputational damage, and recruitment challenges.

Apple supply-chain audit history: Apple publishes annual Supplier Responsibility Progress Reports covering audits of hundreds of suppliers. The reports have documented recurring violations — excessive working hours, underpayment, poor dormitory conditions — even while demonstrating audit program improvements. Apple's case illustrates both the value of supplier audit transparency and the persistent challenge of supply-chain labor compliance at scale.

Nestlé child labor in cocoa supply chain: Despite years of voluntary commitments to eliminate child labor from its cocoa supply chain in West Africa, Nestlé continued to face documented child labor violations through the mid-2020s. Litigation in US courts sought to hold Nestlé and other chocolate companies liable for child-labor abuses by their supply-chain participants — a legal development with significant ESG implications for supply-chain social risk materiality.

Common mistakes​

Treating DEI metrics as equivalent across all contexts: Gender pay gap figures, board diversity percentages, and workforce diversity statistics are meaningful metrics — but their significance varies across contexts. A company with equal-pay policies in all jurisdictions it operates in is different from one reporting aggregate figures that average across very different country-level situations.

Accepting social data at face value without triangulation: Social metrics are heavily self-reported. A company that claims excellent labor standards while facing active regulatory investigations or NGO documentation of violations presents a data quality problem. Sophisticated social ESG analysis triangulates self-reported data against independent sources: litigation records, regulatory enforcement actions, NGO research, and media controversy monitoring.

Ignoring sector-specific social materiality: Supply-chain labor standards are highly material for apparel and electronics companies but much less so for utilities or financial services. Data privacy is highly material for technology and financial companies but irrelevant for most manufacturers. Social analysis should be sector-calibrated, not generically applied.

FAQ​

How do ESG raters assess companies with no social disclosures?​

Different providers handle non-disclosure differently. Some apply a penalty score for non-disclosure; others substitute sector-average data; others simply exclude inadequately disclosing companies from ratings. Bloomberg's ESG disclosure scores specifically measure the quantity and quality of disclosure rather than underlying performance — making non-disclosure directly negative for the score.

Are there internationally recognized labor standards for ESG assessment?​

The ILO's core labor standards — freedom of association, prohibition of forced and child labor, non-discrimination — are the primary international reference. The ILO Declaration on Fundamental Principles and Rights at Work (1998) defines four categories of fundamental rights that apply to all ILO member states. Supply-chain ESG analysis typically references ILO core conventions and, for company assessments, SA8000 certification or equivalent audit programs.

How is worker wellbeing measured in ESG contexts?​

Worker wellbeing metrics have expanded significantly beyond safety statistics. They now include: employee net promoter scores (likelihood to recommend the employer), Glassdoor ratings, employee engagement survey participation rates, mental health benefit provision, rates of "presenteeism" (working while sick), and turnover by demographic group. The challenge is that self-reported wellbeing data is subject to the same pressures as any employee survey — workers in precarious situations may feel unable to report accurately.

What regulatory frameworks drive social disclosure in the US?​

The SEC's human capital disclosure rule (adopted 2020) requires public companies to disclose material human capital information without specifying exact metrics, resulting in highly variable disclosure. The SEC has considered more prescriptive human capital metrics requirements. State-level pay-transparency laws (California, New York, others) create mandatory pay-range disclosure that supplements federal requirements. OSHA (under the Department of Labor at dol.gov) governs workplace safety standards and enforcement. All these requirements continue to evolve.

Does ESG social analysis penalize companies in industries with inherently higher hazard levels?​

Sophisticated ESG analysis should normalize social metrics by industry — comparing a mining company's safety record against mining sector peers rather than against software companies. Most major ESG raters apply sector-adjusted scoring for safety metrics for this reason. Absolute metrics (injury rates, fatality rates) are often supplemented with trend analysis (is the company improving?) and program quality assessment (has it implemented best-practice safety management systems?).

Summary​

The S in ESG covers human capital management, supply-chain labor rights, customer data protection, community economic impact, and human rights — an enormous range of factors that vary in analytical rigor and financial materiality by sector and geography. Social factors are the hardest letter to analyze systematically because data is sparse, self-reported, and poorly standardized. But the financial consequences of social failures — demonstrated by Amazon's workforce controversies, Apple's supply-chain labor issues, Equifax's data breach, and dozens of other cases — confirm that social risk is real, material, and manageable through investment analysis. The data quality challenge is not an argument for ignoring social factors; it is an argument for developing better tools to assess them.

Next​

→ Governance Factors: What the G Covers