Clym Logo

European Accessibility Act fines by country: What businesses need to know in 2026

Published
AM
AuthorAlex Margau
10 min read

EAA fines by country 2026

Breakdown of EAA fines for 2026 by EU country, from Germany's 100,000 euros to Spain's 1,000,000 euros. Covers enforcement, scope, exemptions, and how to reduce risk.

Summarize full article with:

Did you know?

Spain can fine you up to 1,000,000 euros for a single EAA violation.

Sweden's ceiling is approximately 900,000 euros, while Italy can charge 5% of your annual turnover.

These are not hypothetical risks. The European Accessibility Act (Directive 2019/882) has been enforceable since June 28, 2025, and national enforcement authorities across the EU are active.

In this guide, we are going to break down exactly what your business is exposed to in each EU country, who enforces it, and the practical steps that reduce your risk.

Key takeaways

  • The European Accessibility Act has been enforceable across all EU member states since June 28, 2025.
  • Spain has the highest published maximum fine at 1,000,000 euros; Italy can charge up to 5% of annual turnover.
  • You do not need to be based in the EU: if your website serves EU users, the EAA applies to you.
  • Microenterprises with fewer than 10 employees and under 2,000,000 euros in turnover are exempt from service requirements only.
  • Most EU countries give businesses 30 to 90 days to fix identified issues before imposing financial penalties.
  • Documenting your accessibility efforts significantly reduces fine risk, even when gaps remain.

What are EAA fines?

EAA fines are financial penalties enforcement authorities impose on businesses that fail to meet the European Accessibility Act's requirements. The directive explicitly requires each EU member state to establish penalties that are "effective, proportionate and dissuasive", language that prevents regulators from issuing warnings indefinitely. Once notified, businesses must act.

The directive sets the framework. Each member state decides the exact amounts, the enforcement body, and the process. That is why maximum fines range from approximately 2,500 euros in Bulgaria to 1,000,000 euros in Spain, with Italy's turnover-based model potentially exceeding both for large companies.

The technical benchmark for all EAA enforcement is EN 301 549, the harmonised European accessibility standard that maps to WCAG 2.1 Level AA. If your digital properties do not meet this standard, you are at risk.

EAA fines by country: the complete 2026 breakdown

The figures below represent maximum fines. Actual penalties depend on severity, duration, company size, and intent. Most enforcement processes include a remediation window before any financial penalty is imposed. Non-euro amounts are approximate EUR conversions.

Country

Maximum fine

Enforcement authority

Key notes

Spain

Up to 1,000,000 euros

Ministry of Social Rights + regional authorities

Three-tier structure: minor from 30,000 euros, serious to 300,000 euros, very serious to 1,000,000 euros. No prior warning required for serious violations.

Netherlands

900,000 euros or 10% of annual revenue (whichever is higher)

ACM (Authority for Consumers and Markets) | One of the highest ceilings in Europe. No prior warning needed for serious violations.

One of the highest ceilings in Europe. No prior warning needed for serious violations.

Sweden

SEK 10,000,000 (approx. 900,000 euros)

PTS + Konsumentverket

Market bans alongside financial penalties. Loss of Swedish market access often exceeds the fine itself.

France

Up to 250,000 euros for repeat violations

ARCOM, ARCEP, DGCCRF, AMF, ACPR

Base: 7,500 euros per offence for legal entities. Doubles for repeat violations. Mandatory accessibility statement required separately.

Belgium

Up to 200,000 euros per breach

Business suspension power. Trilingual market: a failure in any language version counts as a separate violation.

Finland

Up to 150,000 euros

Conditional daily fines accumulate until the issue is resolved. Mandatory independent audits possible at company expense.

Germany

Up to 100,000 euros per violation

Bundesnetzagentur (BFIT for monitoring)

Per-violation structure: 15 issues = up to 1,500,000 euros aggregate theoretical exposure. Early enforcement focused on e-commerce and banking.

Greece

10,000 to 100,000 euros (severity-based)

Fine ranges depend on severity category.

Czech Republic

Up to approx. 80,000 euros (CZK 2,000,000)

Austria

Up to 80,000 euros per violation

14-day complaint response window. Priority enforcement in banking and financial services.

Hungary

Up to approx. 75,000 euros (HUF 30,000,000)

Ireland

Up to 60,000 euros + possible criminal sanctions

CCPC + sector regulators (ComReg, CBI, NTA)

Only EU country with potential imprisonment (up to 18 months on indictment). Multiple sector regulators involved.

Italy

5% of annual turnover; standard 5,000 to 40,000 euros per violation

Formal 90-day cure period. Turnover-based penalties apply for serious or persistent violations. One of the most active EU members on accessibility enforcement.

Luxembourg

Up to 50,000 euros per violation

Financial hub; banking and fintech enforcement expected to be rigorous.

Croatia

Up to 50,000 euros

Market surveillance authorities

Mandatory remediation requirements.

Romania

5,000 to 50,000 euros (category-based)

Amount depends on the violation category.

Portugal

Up to 44,890 euros

Lower headline fine but service suspension power applies. Users can report barriers through INCODE's portal.

Poland

Approx. 25,000 euros (PLN 100,000)

Mandatory third-party audit costs often exceed the fine. Must designate an accessibility coordinator.

Bulgaria

Approx. 2,500 to 25,000 euros (BGN 5,000 to 50,000)

Among the lowest maximum fines in the EU.

Denmark

Case-by-case (no published maximum)

No ceiling published. Unannounced digital inspections possible. Initial fines approx. 10,000 to 15,000 euros for first violations.

Slovakia, Slovenia, Lithuania, Latvia, Estonia, Malta, Cyprus

10,000 to 100,000 euros (varies by state)

National market surveillance authorities

Broadly aligned with EU framework guidance. Penalties vary by individual national legislation.

Who is at risk: scope and exemptions

The EAA applies to private-sector businesses placing products on the EU market or providing services to EU consumers. You do not need to be based in the EU. If your website or mobile app is accessible from an EU country and targets EU users, you are potentially in scope.

Products covered by the EAA

Computers and operating systems, smartphones and tablets, self-service terminals such as ATMs and ticketing kiosks, e-readers, and consumer equipment used to access audiovisual media services.

Services covered by the EAA

E-commerce websites and mobile apps, banking and financial services, electronic communications services, audiovisual media service access, e-books and dedicated reading software, and transport services covering ticketing systems and travel information.

The microenterprise exemption

Companies with fewer than 10 employees AND annual turnover or balance sheet total under 2,000,000 euros are exempt from service requirements only. Product requirements still apply to all businesses regardless of size. This exemption is strict: a company with 9 employees but 3,000,000 euros in turnover does not qualify.

The disproportionate burden defence

Businesses can argue that compliance would fundamentally change the nature of their service or impose costs wildly out of proportion to their resources. Regulators require detailed financial evidence to sustain this argument. A general claim that accessibility is expensive is not sufficient. The defence is available in theory but rarely succeeds for established businesses.

How EAA enforcement actually works

Most EAA enforcement follows a graduated process: notification, a remediation window, verification, then penalties if issues persist. Understanding this process is important because it shows exactly where you have the opportunity to avoid a fine.

Step 1: complaint or inspection triggers the process

Enforcement begins either when a user with a disability files a complaint through a national portal, or when an enforcement authority runs a proactive market inspection. Germany's Bundesnetzagentur, France's DGCCRF, and the Netherlands' ACM all have publicly accessible complaint systems that feed directly into enforcement pipelines.

Step 2: notification and remediation window

After identifying non-compliance, the authority notifies the business and sets a remediation deadline. In most countries this window runs between 30 and 90 days. Italy formally provides a 90-day cure period, during which a business can remediate all identified issues and avoid financial penalties entirely. Austria requires complaint responses within 14 days.

Step 3: verification and penalties

If the issues are not resolved within the remediation window, the authority imposes penalties. Spain and the Netherlands can skip the graduated process and impose immediate penalties for serious violations. France and Germany have been among the most active enforcers in the months since the June 2025 enforcement date.

Cross-border enforcement

A complaint filed in one EU country can trigger investigations in others. EU market surveillance authorities share information under the directive's coordination framework. A non-compliant website serving French, German, and Spanish users could face enforcement actions from all three countries simultaneously, with each applying its own fine structure independently.

The real cost of non-compliance

The fine is only one part of your financial exposure. Here are the costs that businesses consistently underestimate.

Market removal orders

Sweden, Portugal, and Italy can order non-compliant products and services removed from their national markets. For a business generating meaningful revenue in those countries, the revenue loss during suspension often exceeds the fine itself. Losing market access, even temporarily, creates costs no penalty schedule fully reflects.

Mandatory audit and remediation costs

Poland and Finland can require businesses to commission independent accessibility audits at the company's expense. For a large website, those costs run 15,000 to 40,000 euros and frequently exceed the base fine. Businesses may also be required to produce remediation plans with fixed deadlines and follow-up verification audits, adding further project and development costs.

Legal defence costs

Defending an enforcement action requires legal representation with expertise in national accessibility law. Fees mount quickly, and if proceedings extend over months, legal costs can reach 20,000 to 50,000 euros depending on the jurisdiction and complexity.

Reputational damage and missed market opportunity

Several EU countries publish compliance notices when they take enforcement action. A public notice that your platform is inaccessible is visible to the 100 million people in the EU with some form of disability, according to the European Disability Forum. That is a significant customer base with substantial purchasing power. An inaccessible platform is not just a legal risk. It is a missed market.

Multiplied exposure from per-violation structures

Several countries, including Germany and Austria, apply fines per individual violation rather than per incident. A website with 15 distinct accessibility failures in Germany faces a theoretical maximum of 1,500,000 euros in aggregate exposure. Regulators apply proportionality in practice, but the structure means a single notification can carry significant financial weight.

How to reduce your EAA fine exposure

Most EAA enforcement outcomes are within your control. Businesses that take documented, good-faith steps toward accessibility rarely face maximum penalties. Here is what that looks like in practice.

  1. Conduct an accessibility audit against EN 301 549, the harmonised European standard that incorporates WCAG 2.1 Level AA. This is the technical benchmark every EU enforcement authority uses. An audit maps your current gaps and gives you a prioritised remediation list. A comprehensive audit for a mid-sized website typically costs 5,000 to 20,000 euros. That is a fraction of the fine exposure you carry without one.

  2. Publish an accessibility statement. Most EU member states require this, and failure to publish one is a separate finable offence in France and Portugal. Your statement should describe your current compliance level, list known limitations, and provide a user contact mechanism. Clym's accessibility statement solution makes it straightforward to create, maintain, and update your statement as your programme evolves.

  3. Set up a structured issue reporting channel. Much EAA enforcement is complaint-driven. A dedicated channel lets you capture and resolve accessibility issues directly with users before they escalate to a regulator. Clym's accessibility issue reporting tool provides a structured mechanism with a documented trail of how each report was handled, which also serves as evidence of good-faith effort if enforcement action does occur.

  4. Integrate accessibility testing into your development process. Automated testing in your CI/CD pipeline catches common issues at source. Combine automated checks with manual testing using screen readers and keyboard navigation for realistic coverage. Automated testing alone covers roughly 30 to 40% of WCAG criteria, so manual testing is not optional for meaningful risk reduction.

  5. Document everything. Audit reports, remediation plans, developer training records, and complaint logs all influence how enforcement authorities respond. Regulators distinguish between businesses making genuine, documented efforts and those ignoring accessibility entirely. Documentation does not prevent enforcement, but it significantly changes the outcome when it occurs.

  6. Monitor enforcement developments in each market you operate. Countries that started with complaint-driven models are shifting toward proactive inspections. France has already served formal notices to major retailers including Carrefour and Auchan. Germany's Bundesnetzagentur has been active on e-commerce and banking platforms. What passes scrutiny today may not in twelve months.

Conclusion

EAA fines are a live financial risk for any business serving EU consumers digitally. The scale varies widely, from a few thousand euros in smaller markets to 1,000,000 euros in Spain and potential market bans in Sweden, Italy, and Portugal. But the enforcement process is predictable: notification, a remediation window, then penalties. That predictability means most businesses that engage seriously with accessibility will never face a fine.

The ROI on accessibility investment is clear. An audit and remediation programme typically costs a fraction of the fine exposure you carry without one. Beyond risk reduction, accessible digital products reach the 100 million EU users with disabilities who are actively excluded by inaccessible design. That is not just compliance. It is good business.

The best time to start was before June 28, 2025. The next best time is now.

Frequently asked questions

Spain has the highest published maximum fine at 1,000,000 euros for very serious violations. The Netherlands follows with 900,000 euros or 10% of annual revenue, whichever is higher. Italy's turnover-based penalty of up to 5% of annual revenue can exceed both for large companies.

Yes. If your website, app, or digital service is accessible from EU countries and serves EU consumers, the EAA applies regardless of where your business is registered. Non-EU companies cannot opt out by pointing to their country of registration.

Most EU countries offer 30 to 90 days between initial notification and any financial penalty. Italy formally provides a 90-day cure period. Spain and the Netherlands can impose immediate penalties for serious violations without a prior warning period.

The EAA references EN 301 549, the harmonised European standard that incorporates WCAG 2.1 Level AA. Enforcement authorities assess digital compliance against EN 301 549. The requirements are substantially equivalent to WCAG 2.1 Level AA, but EN 301 549 is the formal enforcement benchmark.

Yes. Each national authority enforces independently. A non-compliant website serving customers in France, Germany, and Spain could face enforcement actions from all three countries simultaneously. A finding in one country can also trigger investigations in others through EU market surveillance coordination.

Microenterprises with fewer than 10 employees and annual turnover under 2,000,000 euros are exempt from service requirements only. Product requirements apply to all businesses regardless of size. Companies just above these thresholds receive no exemption.

Alex Margau

Compliance Content Manager

Compliance Content Manager | CPACC (IAAP)

Alex is a Compliance Content Manager at Clym, where he researches and writes about everything related to data privacy and web accessibility compliance for businesses, helping them stay informed on their compliance needs and spreading awareness about making the web safer and more inclusive. When he's not writing about compliance, Alex has his nose in a book or is hiking in the great outdoors.

Find out more about Alex