The EU passed laws that require companies (under conditions) to ensure base requirements in their supply chain.

I think a digital equivalent could be possible and similar. Requiring reasonable security and sustainability assessment.

It’s not very obvious or simple to enforce, but would set requirements, and open up opportunities for fines and prosecution.