EAA fines by country 2026
Breakdown of EAA fines for 2026 by EU country, from Germany's 100,000 euros to Spain's 1,000,000 euros. Covers enforcement, scope, exemptions, and how to reduce risk.
Breakdown of EAA fines for 2026 by EU country, from Germany's 100,000 euros to Spain's 1,000,000 euros. Covers enforcement, scope, exemptions, and how to reduce risk.
Did you know?
Spain can fine you up to 1,000,000 euros for a single EAA violation.
Sweden's ceiling is approximately 900,000 euros, while Italy can charge 5% of your annual turnover.
These are not hypothetical risks. The European Accessibility Act (Directive 2019/882) has been enforceable since June 28, 2025, and national enforcement authorities across the EU are active.
In this guide, we are going to break down exactly what your business is exposed to in each EU country, who enforces it, and the practical steps that reduce your risk.
EAA fines are financial penalties enforcement authorities impose on businesses that fail to meet the European Accessibility Act's requirements. The directive explicitly requires each EU member state to establish penalties that are "effective, proportionate and dissuasive", language that prevents regulators from issuing warnings indefinitely. Once notified, businesses must act.
The directive sets the framework. Each member state decides the exact amounts, the enforcement body, and the process. That is why maximum fines range from approximately 2,500 euros in Bulgaria to 1,000,000 euros in Spain, with Italy's turnover-based model potentially exceeding both for large companies.
The technical benchmark for all EAA enforcement is EN 301 549, the harmonised European accessibility standard that maps to WCAG 2.1 Level AA. If your digital properties do not meet this standard, you are at risk.
The figures below represent maximum fines. Actual penalties depend on severity, duration, company size, and intent. Most enforcement processes include a remediation window before any financial penalty is imposed. Non-euro amounts are approximate EUR conversions.
Country | Maximum fine | Enforcement authority | Key notes |
|---|---|---|---|
Spain | Up to 1,000,000 euros | Ministry of Social Rights + regional authorities | Three-tier structure: minor from 30,000 euros, serious to 300,000 euros, very serious to 1,000,000 euros. No prior warning required for serious violations. |
Netherlands | 900,000 euros or 10% of annual revenue (whichever is higher) | ACM (Authority for Consumers and Markets) | One of the highest ceilings in Europe. No prior warning needed for serious violations. | One of the highest ceilings in Europe. No prior warning needed for serious violations. |
Sweden | SEK 10,000,000 (approx. 900,000 euros) | PTS + Konsumentverket | Market bans alongside financial penalties. Loss of Swedish market access often exceeds the fine itself. |
France | Up to 250,000 euros for repeat violations | ARCOM, ARCEP, DGCCRF, AMF, ACPR | Base: 7,500 euros per offence for legal entities. Doubles for repeat violations. Mandatory accessibility statement required separately. |
Belgium | Up to 200,000 euros per breach | Business suspension power. Trilingual market: a failure in any language version counts as a separate violation. | |
Finland | Up to 150,000 euros | Conditional daily fines accumulate until the issue is resolved. Mandatory independent audits possible at company expense. | |
Germany | Up to 100,000 euros per violation | Bundesnetzagentur (BFIT for monitoring) | Per-violation structure: 15 issues = up to 1,500,000 euros aggregate theoretical exposure. Early enforcement focused on e-commerce and banking. |
Greece | 10,000 to 100,000 euros (severity-based) | Fine ranges depend on severity category. | |
Czech Republic | Up to approx. 80,000 euros (CZK 2,000,000) | – | |
Austria | Up to 80,000 euros per violation | 14-day complaint response window. Priority enforcement in banking and financial services. | |
Hungary | Up to approx. 75,000 euros (HUF 30,000,000) | – | |
Ireland | Up to 60,000 euros + possible criminal sanctions | CCPC + sector regulators (ComReg, CBI, NTA) | Only EU country with potential imprisonment (up to 18 months on indictment). Multiple sector regulators involved. |
Italy | 5% of annual turnover; standard 5,000 to 40,000 euros per violation | Formal 90-day cure period. Turnover-based penalties apply for serious or persistent violations. One of the most active EU members on accessibility enforcement. | |
Luxembourg | Up to 50,000 euros per violation | Financial hub; banking and fintech enforcement expected to be rigorous. | |
Croatia | Up to 50,000 euros | Market surveillance authorities | Mandatory remediation requirements. |
Romania | 5,000 to 50,000 euros (category-based) | Amount depends on the violation category. | |
Portugal | Up to 44,890 euros | Lower headline fine but service suspension power applies. Users can report barriers through INCODE's portal. | |
Poland | Approx. 25,000 euros (PLN 100,000) | Mandatory third-party audit costs often exceed the fine. Must designate an accessibility coordinator. | |
Bulgaria | Approx. 2,500 to 25,000 euros (BGN 5,000 to 50,000) | Among the lowest maximum fines in the EU. | |
Denmark | Case-by-case (no published maximum) | Digitaliseringsstyrelsen + DSTA | No ceiling published. Unannounced digital inspections possible. Initial fines approx. 10,000 to 15,000 euros for first violations. |
Slovakia, Slovenia, Lithuania, Latvia, Estonia, Malta, Cyprus | 10,000 to 100,000 euros (varies by state) | National market surveillance authorities | Broadly aligned with EU framework guidance. Penalties vary by individual national legislation. |
The EAA applies to private-sector businesses placing products on the EU market or providing services to EU consumers. You do not need to be based in the EU. If your website or mobile app is accessible from an EU country and targets EU users, you are potentially in scope.
Computers and operating systems, smartphones and tablets, self-service terminals such as ATMs and ticketing kiosks, e-readers, and consumer equipment used to access audiovisual media services.
E-commerce websites and mobile apps, banking and financial services, electronic communications services, audiovisual media service access, e-books and dedicated reading software, and transport services covering ticketing systems and travel information.
Companies with fewer than 10 employees AND annual turnover or balance sheet total under 2,000,000 euros are exempt from service requirements only. Product requirements still apply to all businesses regardless of size. This exemption is strict: a company with 9 employees but 3,000,000 euros in turnover does not qualify.
Businesses can argue that compliance would fundamentally change the nature of their service or impose costs wildly out of proportion to their resources. Regulators require detailed financial evidence to sustain this argument. A general claim that accessibility is expensive is not sufficient. The defence is available in theory but rarely succeeds for established businesses.
Most EAA enforcement follows a graduated process: notification, a remediation window, verification, then penalties if issues persist. Understanding this process is important because it shows exactly where you have the opportunity to avoid a fine.
Enforcement begins either when a user with a disability files a complaint through a national portal, or when an enforcement authority runs a proactive market inspection. Germany's Bundesnetzagentur, France's DGCCRF, and the Netherlands' ACM all have publicly accessible complaint systems that feed directly into enforcement pipelines.
After identifying non-compliance, the authority notifies the business and sets a remediation deadline. In most countries this window runs between 30 and 90 days. Italy formally provides a 90-day cure period, during which a business can remediate all identified issues and avoid financial penalties entirely. Austria requires complaint responses within 14 days.
If the issues are not resolved within the remediation window, the authority imposes penalties. Spain and the Netherlands can skip the graduated process and impose immediate penalties for serious violations. France and Germany have been among the most active enforcers in the months since the June 2025 enforcement date.
A complaint filed in one EU country can trigger investigations in others. EU market surveillance authorities share information under the directive's coordination framework. A non-compliant website serving French, German, and Spanish users could face enforcement actions from all three countries simultaneously, with each applying its own fine structure independently.
The fine is only one part of your financial exposure. Here are the costs that businesses consistently underestimate.
Sweden, Portugal, and Italy can order non-compliant products and services removed from their national markets. For a business generating meaningful revenue in those countries, the revenue loss during suspension often exceeds the fine itself. Losing market access, even temporarily, creates costs no penalty schedule fully reflects.
Poland and Finland can require businesses to commission independent accessibility audits at the company's expense. For a large website, those costs run 15,000 to 40,000 euros and frequently exceed the base fine. Businesses may also be required to produce remediation plans with fixed deadlines and follow-up verification audits, adding further project and development costs.
Defending an enforcement action requires legal representation with expertise in national accessibility law. Fees mount quickly, and if proceedings extend over months, legal costs can reach 20,000 to 50,000 euros depending on the jurisdiction and complexity.
Several EU countries publish compliance notices when they take enforcement action. A public notice that your platform is inaccessible is visible to the 100 million people in the EU with some form of disability, according to the European Disability Forum. That is a significant customer base with substantial purchasing power. An inaccessible platform is not just a legal risk. It is a missed market.
Several countries, including Germany and Austria, apply fines per individual violation rather than per incident. A website with 15 distinct accessibility failures in Germany faces a theoretical maximum of 1,500,000 euros in aggregate exposure. Regulators apply proportionality in practice, but the structure means a single notification can carry significant financial weight.
Most EAA enforcement outcomes are within your control. Businesses that take documented, good-faith steps toward accessibility rarely face maximum penalties. Here is what that looks like in practice.
Conduct an accessibility audit against EN 301 549, the harmonised European standard that incorporates WCAG 2.1 Level AA. This is the technical benchmark every EU enforcement authority uses. An audit maps your current gaps and gives you a prioritised remediation list. A comprehensive audit for a mid-sized website typically costs 5,000 to 20,000 euros. That is a fraction of the fine exposure you carry without one.
Publish an accessibility statement. Most EU member states require this, and failure to publish one is a separate finable offence in France and Portugal. Your statement should describe your current compliance level, list known limitations, and provide a user contact mechanism. Clym's accessibility statement solution makes it straightforward to create, maintain, and update your statement as your programme evolves.
Set up a structured issue reporting channel. Much EAA enforcement is complaint-driven. A dedicated channel lets you capture and resolve accessibility issues directly with users before they escalate to a regulator. Clym's accessibility issue reporting tool provides a structured mechanism with a documented trail of how each report was handled, which also serves as evidence of good-faith effort if enforcement action does occur.
Integrate accessibility testing into your development process. Automated testing in your CI/CD pipeline catches common issues at source. Combine automated checks with manual testing using screen readers and keyboard navigation for realistic coverage. Automated testing alone covers roughly 30 to 40% of WCAG criteria, so manual testing is not optional for meaningful risk reduction.
Document everything. Audit reports, remediation plans, developer training records, and complaint logs all influence how enforcement authorities respond. Regulators distinguish between businesses making genuine, documented efforts and those ignoring accessibility entirely. Documentation does not prevent enforcement, but it significantly changes the outcome when it occurs.
Monitor enforcement developments in each market you operate. Countries that started with complaint-driven models are shifting toward proactive inspections. France has already served formal notices to major retailers including Carrefour and Auchan. Germany's Bundesnetzagentur has been active on e-commerce and banking platforms. What passes scrutiny today may not in twelve months.
EAA fines are a live financial risk for any business serving EU consumers digitally. The scale varies widely, from a few thousand euros in smaller markets to 1,000,000 euros in Spain and potential market bans in Sweden, Italy, and Portugal. But the enforcement process is predictable: notification, a remediation window, then penalties. That predictability means most businesses that engage seriously with accessibility will never face a fine.
The ROI on accessibility investment is clear. An audit and remediation programme typically costs a fraction of the fine exposure you carry without one. Beyond risk reduction, accessible digital products reach the 100 million EU users with disabilities who are actively excluded by inaccessible design. That is not just compliance. It is good business.
The best time to start was before June 28, 2025. The next best time is now.
Spain has the highest published maximum fine at 1,000,000 euros for very serious violations. The Netherlands follows with 900,000 euros or 10% of annual revenue, whichever is higher. Italy's turnover-based penalty of up to 5% of annual revenue can exceed both for large companies.
Yes. If your website, app, or digital service is accessible from EU countries and serves EU consumers, the EAA applies regardless of where your business is registered. Non-EU companies cannot opt out by pointing to their country of registration.
Most EU countries offer 30 to 90 days between initial notification and any financial penalty. Italy formally provides a 90-day cure period. Spain and the Netherlands can impose immediate penalties for serious violations without a prior warning period.
The EAA references EN 301 549, the harmonised European standard that incorporates WCAG 2.1 Level AA. Enforcement authorities assess digital compliance against EN 301 549. The requirements are substantially equivalent to WCAG 2.1 Level AA, but EN 301 549 is the formal enforcement benchmark.
Yes. Each national authority enforces independently. A non-compliant website serving customers in France, Germany, and Spain could face enforcement actions from all three countries simultaneously. A finding in one country can also trigger investigations in others through EU market surveillance coordination.
Microenterprises with fewer than 10 employees and annual turnover under 2,000,000 euros are exempt from service requirements only. Product requirements apply to all businesses regardless of size. Companies just above these thresholds receive no exemption.