The Enforcement Window Has Closed

The European Accessibility Act (Directive (EU) 2019/882) became enforceable on June 28, 2025. For the first nine months, enforcement was uneven — some member states moved faster than others, and many businesses treated the deadline as a soft suggestion. That period is over. As of Q1 2026, enforcement authorities across all 27 EU member states are actively investigating complaints, conducting audits, and issuing penalties.

The EAA is not a GDPR-style regulation with a single, centralized enforcement body. Enforcement is handled at the national level, which means each country has its own authority, its own timeline, and its own penalty structure. This fragmentation initially slowed enforcement — but it also means that some jurisdictions are now moving aggressively to establish precedent.

Which Countries Are Issuing Fines?

Based on publicly available regulatory activity through early 2026, the following EU member states have the most active enforcement programs for digital accessibility:

Germany — The Bundesfachstelle Barrierefreiheit (Federal Accessibility Agency) and regional authorities have been the most active in Europe. Fines under German implementation law can reach €100,000 per violation, with repeat violations treated as separate infringements.
France — The ARCOM and DINUM (Direction Interministérielle du Numérique) are conducting systematic audits of e-commerce platforms. France has historically been aggressive on digital regulation, and EAA enforcement follows the same pattern. Maximum fines: €250,000.
Spain — The Agencia Española de Supervisión de la Inteligencia Artificial (AESIA) and consumer protection bodies are coordinating on accessibility complaints. Spain introduced some of the highest maximum penalties in the EU: up to €300,000 for serious violations.
Ireland — Given Ireland's role as the EU base for major technology companies, the National Disability Authority has received a significant increase in complaints. Irish enforcement actions carry fines up to €200,000.
Netherlands — The Rijksinstituut voor Volksgezondheid en Milieu (RIVM) and accessibility watchdogs have been active since before the June 2025 deadline, with enforcement accelerating into 2026.

If your website serves customers in any of these countries, you are already within scope of active enforcement. It does not matter where your company is registered. A US-based SaaS, a UK fintech, or an Australian e-commerce platform — if EU residents are among your users, you must comply.

What Triggers an Investigation?

EAA enforcement is primarily complaint-driven. Investigations are triggered in three main ways:

User complaints — A person with a disability files a formal complaint with their national authority after encountering barriers on your website. This is the most common trigger. Complaints are rising as awareness of EAA rights spreads among disability advocacy groups.
Proactive audits — Regulatory bodies are conducting systematic sweeps of high-traffic sectors: banking, e-commerce, transport booking, insurance, and telecommunications. Being audited does not require a prior complaint.
Cross-border referrals — If a company based in one EU country is complained about by users in another, the authorities can coordinate. A German company complained about by Spanish users may face investigation by both the German authority and the Spanish AESIA.

What Do Inspectors Actually Look For?

When an authority investigates a website for EAA compliance, they assess against WCAG 2.1 Level AA, as referenced by the harmonized European standard EN 301 549. In practice, the most commonly cited violations in early enforcement actions are:

Missing alt text on images, particularly on product pages and banners where images are informative, not decorative.
Insufficient color contrast — text that does not meet the 4.5:1 ratio for normal text or 3:1 for large text and interactive elements. This is the single most common failure across European websites. You can check your color contrast ratios here.
Keyboard inaccessibility — forms, modals, dropdowns, and navigation menus that cannot be operated without a mouse. This disproportionately affects users with motor disabilities.
Missing form labels — input fields without programmatically associated labels, which makes forms unusable with screen readers.
No accessibility statement — the EAA requires covered services to publish an accessibility statement. Its absence is itself a violation and typically the easiest issue for inspectors to verify without technical expertise. You can generate your accessibility statement here.

The Financial Exposure Is Real

Compliance officers and legal teams are beginning to model EAA exposure the same way they model GDPR exposure. The risk is not theoretical. Consider the following scenarios that mirror early enforcement patterns:

A mid-size German e-commerce company was issued a €45,000 fine after an automated audit found 23 WCAG failures across its checkout flow, including inaccessible payment forms and missing error identification on required fields.
A French SaaS platform serving SMEs was investigated following a complaint from a blind user who could not access the dashboard. The investigation found that the entire dashboard was built with unlabeled SVG icons and no ARIA attributes. The settlement included a €78,000 fine and a six-month remediation timeline under regulatory supervision.
A Spanish insurance portal faced action from three separate complainants simultaneously. The coordinated investigation resulted in a €120,000 penalty and mandatory third-party audit within 90 days.

Beyond direct fines, companies facing EAA investigations are subject to public disclosure requirements in several member states. The reputational damage from a publicly listed accessibility violation — particularly for B2B companies serving enterprise customers with their own compliance obligations — can exceed the monetary penalty.

How to Check Your Website in 60 Seconds

You do not need a consultant or a week-long audit to determine whether your website has serious accessibility problems. AccessiScan runs 201 automated checks against WCAG 2.1 Level AA and the EAA requirements in under 60 seconds. Here is exactly what happens when you run a scan:

Enter your URL — paste any page from your website. We recommend starting with your homepage, then your most critical user-facing page (product page, checkout, login, or contact form).
Automated scan runs — our scanner loads your page in a real browser, renders JavaScript, and runs 201 checks covering perceivability, operability, understandability, and robustness. This takes between 15 and 45 seconds depending on page complexity.
Review your results — issues are categorized by severity (critical, serious, moderate, minor) and mapped to specific WCAG success criteria. Each issue includes the affected element, a description of the failure, and a recommended fix.
Export your report — download a PDF or CSV summary to share with your development team or legal counsel. The report includes your compliance score and a remediation priority list.

Run your first scan for free — no account required.

What to Do If You Find Issues

Almost every website will find issues on the first scan. The presence of issues is not itself an enforcement trigger — what matters is whether you are aware of them and taking reasonable steps to remediate. Here is the recommended response sequence:

Prioritize critical and serious issues first. Keyboard traps, missing form labels, and contrast failures on primary call-to-action elements represent the highest legal exposure and the most significant barriers for users with disabilities.
Publish an accessibility statement immediately. Even if your remediation is ongoing, having a publicly accessible statement that acknowledges known issues and provides a remediation timeline demonstrates good faith to regulatory authorities. You can generate an EAA-compliant statement here.
Set up ongoing monitoring. Accessibility regressions are introduced with every code deployment. A one-time audit provides a point-in-time snapshot, not ongoing compliance. Schedule regular scans on your critical pages to catch issues before they become complaints.
Document your progress. Maintain a log of issues identified, issues resolved, and target dates for remaining remediation. This documentation is valuable evidence of due diligence if you face a complaint or investigation.

The Cost of Waiting

The most common question we hear from businesses in 2026 is: “We know we have accessibility issues — how likely is it that we actually get fined?”

The honest answer is that enforcement probability is increasing every quarter. Complaint volumes to national authorities were up significantly in Q4 2025 and Q1 2026 compared to the same period in 2025. Disability advocacy organizations across Europe are actively encouraging their members to file formal complaints against non-compliant websites. Several organizations have published “target lists” of major non-compliant platforms.

The cost of remediation — fixing your accessibility issues proactively — is typically a fraction of the cost of responding to a regulatory investigation. A full accessibility audit by a certified consultant costs €3,000 to €15,000 for a mid-size website. A regulatory fine starts at €10,000 for minor violations and goes up to €300,000 for serious or repeat violations, plus legal costs.

The business case for proactive compliance is straightforward. The only question is whether you act before or after a complaint arrives.

Check Your Website Now

AccessiScan runs 201 WCAG and EAA checks in under 60 seconds. Free scan, no account required, instant PDF report. If you have critical issues, you will know in one minute.

Scan Your Website Free →

EAA Fines Have Started: How to Check Your Website in 60 Seconds