Corporate sustainability laws do not require the use of social audits or certifications. But how can companies use them to implement human rights due diligence?