Germany's Barrierefreiheitsstarkungsgesetz (BFSG) became enforceable on June 28, 2025. Within six weeks, the first Abmahnungen — formal cease-and-desist letters from competitors — started arriving in inboxes across the German e-commerce landscape. The numbers tell a bleak story: a November 2024 study by DataPulse found that 99 percent of German online shops had BFSG violations. Only 28 out of 2,446 shops tested were fully compliant. For a market worth 92.4 billion euros, that level of non-compliance is not just a legal risk — it is a competitive vulnerability waiting to be exploited. This guide breaks down what the BFSG actually requires, who enforces it, what the penalties look like in practice, how Germany compares to other EU countries, and the concrete steps you need to take right now.
What the BFSG Actually Is — And Why It Matters Now
The Barrierefreiheitsstarkungsgesetz — the Accessibility Strengthening Act — is Germany's national transposition of EU Directive 2019/882, the European Accessibility Act (EAA). The Bundestag signed it into law on July 16, 2021, giving businesses nearly four years to prepare. Enforcement started on June 28, 2025. The law exists because 7.9 million people in Germany live with a severe disability — 9.3 percent of the population. Millions more have temporary or age-related impairments. Germany's population is aging rapidly, which means the number of people who need accessible digital experiences is growing every year, not shrinking. What makes the BFSG different from earlier German accessibility regulations like the BGG or BITV 2.0 is its target. Those older rules applied to public-sector websites. The BFSG reaches into the private sector. If you sell products or services to consumers in Germany — whether you are based in Berlin, Barcelona, or Boston — the BFSG applies to you. The technical foundation is not new. The BFSG relies on EN 301 549, the European harmonized standard, which incorporates WCAG 2.1 Level AA for web content. Meeting WCAG 2.1 AA gets you most of the way there. But the BFSG adds legal teeth: mandatory accessibility statements, formal documentation requirements, and an enforcement authority with the power to pull products from the German market.The 99 Percent Problem: German E-Commerce and BFSG Readiness
The scale of non-compliance is staggering. In November 2024 — seven months before the BFSG enforcement date — DataPulse tested 2,446 German online shops against BFSG requirements. The results: only 28 shops (1.14 percent) were fully compliant. The remaining 2,418 shops had at least one violation.
Common failures included missing or meaningless alt text on product images, insufficient color contrast on buttons and text, forms without proper labels that screen readers could not interpret, keyboard navigation traps in shopping carts and checkout flows, and missing language declarations in HTML.
These are not obscure edge cases. They are fundamental accessibility barriers that prevent people with disabilities from completing basic tasks like browsing products, adding items to a cart, or checking out.
German e-commerce generated 92.4 billion euros in 2025. With roughly 190,000 companies falling under BFSG scope, the combination of regulatory pressure and competitor-driven enforcement is creating a compliance wave that most businesses are woefully underprepared for.
Who Must Comply: Scope, Exemptions, and the B2C Boundary
The BFSG applies to economic operators who place products on the German market or provide services to consumers. That includes manufacturers, importers, distributors, and service providers. The critical word is consumers — the law covers B2C transactions only. Pure B2B operations are out of scope. But if your platform serves both businesses and consumers, the consumer-facing parts must comply.
The law covers five product categories: general-purpose computers and laptops, smartphones and tablets, self-service terminals (ATMs, ticket machines, check-in kiosks), consumer equipment for electronic communications (routers, modems), and e-book readers.
It also covers five service categories: e-commerce (any online shop selling to consumers), consumer banking services, electronic communications services, passenger transport services (excluding urban and regional transit), and audiovisual media services including e-books.
Geography does not protect you. A French e-commerce site shipping to Germany, an American SaaS platform with German users, a Polish marketplace listing products for German buyers — all fall within scope if they serve German consumers.
The Microenterprise Exemption: Smaller Than You Think
Companies with fewer than 10 employees AND annual turnover below 2 million euros are exempt from the service requirements. Both conditions must be met simultaneously. A nine-person agency generating 3 million euros in revenue does not qualify.
The exemption only covers services, not products. If you manufacture or import covered hardware products, you must comply regardless of company size.
There is a practical trap here too. Growth eliminates the exemption instantly. Cross either threshold — hire your tenth employee or exceed 2 million euros in turnover — and the full BFSG obligations kick in immediately. Building accessibility into your workflows from the start is far cheaper than retrofitting under legal pressure later.
Technical Requirements: EN 301 549, WCAG 2.1 AA, and the Two-Sense Principle
The BFSG does not define its own technical standards. It points to EN 301 549, the European harmonized standard for ICT accessibility. For web content, EN 301 549 Clause 9 maps directly to WCAG 2.1 Level AA — all 50 success criteria across the four POUR principles (Perceivable, Operable, Understandable, Robust). Beyond WCAG, the BFSG emphasizes the two-sense principle (Zwei-Sinne-Prinzip): information must be accessible through at least two of the three sensory channels — sight, hearing, and touch. A video with no captions relies on sight and hearing but excludes deaf users. Adding captions makes the content accessible through sight alone. An audio-only podcast excludes deaf users entirely unless a transcript is provided. The law also mandates an accessibility statement (Erklarung zur Barrierefreiheit). This is not optional. Every covered service must publish a statement describing the current level of accessibility, any known limitations, the date of the last assessment, and contact information for accessibility feedback. Think of it as the digital equivalent of posting your food safety certificate — it signals compliance and provides a channel for accountability. For a detailed breakdown of what to include, see our accessibility statement template guide.Penalties: Fines, Market Bans, and the Abmahnung Problem
The BFSG classifies violations as Ordnungswidrigkeiten (administrative offenses) under Section 27. The penalty structure is graduated: standard violations carry fines up to 10,000 euros, while serious or repeated violations can reach 100,000 euros. Beyond fines, enforcement authorities can prohibit the sale of non-compliant products on the German market entirely, or order the withdrawal and recall of products already sold.
For services, the authority can order cessation of non-compliant service provision. That means your e-commerce site could be effectively banned from operating in Germany until you fix the issues.
But here is where it gets interesting — and where many businesses were caught off guard. The BFSG did not just create government enforcement. It also opened the door to competitor-driven Abmahnungen under the Gesetz gegen den unlauteren Wettbewerb (UWG), Germany's unfair competition law.
Abmahnungen: The Real Enforcement Mechanism
Germany has a well-established legal tradition of Abmahnungen — formal cease-and-desist letters that competitors or consumer protection organizations can send when they identify legal violations. The BFSG created a new category of potential violations, and the Abmahnung industry moved fast.
The first BFSG-related Abmahnungen were issued in August 2025, barely six weeks after enforcement began. These letters typically demand that the recipient fix specific accessibility violations, sign an Unterlassungserklarung (cease-and-desist declaration) with a contractual penalty clause, and pay the sender's legal costs — which can run into thousands of euros per letter.
For businesses receiving multiple Abmahnungen for different violations, costs escalate quickly. And unlike government enforcement, which tends to start with warnings and guidance, Abmahnungen arrive with immediate financial demands. Some accessibility law specialists have described the early wave of BFSG Abmahnungen as predictable, given Germany's history with similar enforcement patterns around GDPR, cookie consent, and Impressum requirements.
The lesson: waiting for the government to notice you is not the only risk. Your competitors have every incentive to weaponize your accessibility gaps.
The Enforcement Timeline: Where Things Stand
Understanding the enforcement timeline helps you gauge urgency.
July 16, 2021: BFSG signed into law, published in the Bundesgesetzblatt.
June 28, 2025: Enforcement begins. All new products and all services must comply from this date. No grace period for services.
August 2025: First Abmahnungen issued under UWG for BFSG violations.
September 2025: The MLBF AoeR (Marktueberwachungsstelle Barrierefreiheit von Produkten, Aoeffentliche Einrichtung des Rechts) becomes fully operational in Magdeburg as the dedicated cross-state market surveillance authority.
June 27, 2030: Transition period ends for products that were already on the market before June 28, 2025. After this date, all products must comply regardless of when they were first sold.
June 28, 2040: Absolute deadline for self-service terminals already in use on June 28, 2025.
The graduated approach means enforcement is ramping up, not winding down. The MLBF spent its first months building processes, training staff, and developing audit methodologies. As the authority matures, expect more systematic enforcement — not less.
Germany vs. Other EU Countries: A Penalty Comparison
Every EU member state transposed the European Accessibility Act into national law, but the enforcement regimes vary dramatically. Understanding these differences matters if you operate across borders. Germany tops out at 100,000 euros in fines and created a single centralized enforcement authority (MLBF). The approach is bureaucratic but structured, with a clear complaint mechanism. Spain takes the hardest line. Under Ley 11/2023, fines can reach up to 1 million euros for the most serious violations. Spain categorizes violations into minor, serious, and very serious, with proportional penalties at each level. Ireland went further than most by including criminal penalties alongside financial sanctions. Non-compliance can result in prosecution, not just administrative fines. The Netherlands requires mandatory reporting from businesses about their accessibility compliance status, creating a paper trail that makes enforcement more systematic. France assigned enforcement to ARCOM (formerly CSA) for companies above 250 million euros in turnover. France has been notably aggressive — lawsuits were filed against major retailers Auchan and Carrefour in the first months after the EAA took effect, signaling that large companies face immediate scrutiny. The practical takeaway: if you operate in multiple EU markets, complying with WCAG 2.1 AA and EN 301 549 satisfies the core technical requirements everywhere. But you need to understand the specific documentation, reporting, and enforcement mechanisms in each country. Our EAA compliance guide covers the pan-European requirements in detail.Who Enforces the BFSG: The MLBF and Beyond
The primary enforcement body is the MLBF AoeR, officially the Marktueberwachungsstelle der Laender fuer die Barrierefreiheit von Produkten und Dienstleistungen. Headquartered in Magdeburg, this is a joint authority of all 16 German federal states (Laender) created specifically for BFSG enforcement.
The MLBF has the power to investigate complaints, conduct audits, issue fines, order product withdrawals from the market, and require cessation of non-compliant services. Consumers and disability organizations can file complaints directly.
The Bundesfachstelle Barrierefreiheit (Federal Office for Accessibility) serves as the advisory body, publishing guidance documents and answering business questions about compliance. The BFIT-Bund provides technical oversight.
With 7.9 million severely disabled people in Germany and an active disability rights community, complaint-driven enforcement is a real and ongoing threat. The MLBF does not need to proactively audit every business — grassroots complaints create a continuous pipeline of enforcement actions.
The Mandatory Accessibility Statement
The BFSG requires every covered service to publish an Erklarung zur Barrierefreiheit (accessibility statement). This is a legal document, not a marketing page. It must include the conformance status — whether the service fully meets, partially meets, or does not meet EN 301 549 requirements. It must list any known accessibility barriers, with an explanation of why they exist and a timeline for remediation. It must state the date of the last accessibility assessment and the methodology used. And it must provide contact information — a specific person or department responsible for accessibility, with a way for users to report barriers and request accessible alternatives. The statement must be easily findable — typically linked from the website footer alongside the Impressum and Datenschutzerklaerung. Hiding it behind multiple clicks or burying it in a PDF defeats the purpose. A missing or incomplete accessibility statement is itself a BFSG violation. Even if your site is technically accessible, failing to publish the statement exposes you to enforcement action. Our accessibility statement template walks through every required element.Practical Compliance Steps: From Audit to Ongoing Monitoring
Compliance is not a one-time project. It is a continuous process that needs to be embedded in how your team builds and maintains digital products. Here is the sequence that works.
Step 1: Run an Automated Accessibility Audit
Start with a baseline. Use an automated scanner to identify the most common WCAG 2.1 AA violations across your site. Automated tools catch roughly 30 to 40 percent of accessibility issues — missing alt text, contrast failures, missing form labels, broken heading hierarchies, and missing language attributes. These are the low-hanging fruit that you can fix quickly. Run a free scan at web-accessibility-checker.com to get an instant compliance report. Focus first on your highest-traffic pages: homepage, category pages, product pages, cart, and checkout. For a structured approach to what to test, see our accessibility audit checklist.Step 2: Conduct Manual Expert Testing
Automated tools cannot evaluate context. They can tell you an image has alt text but not whether that alt text is meaningful. They can confirm a form has labels but not whether those labels make sense to someone using a screen reader.
Manual testing should cover keyboard navigation (can you complete every user flow without a mouse?), screen reader compatibility (does the content make sense when read aloud by NVDA, JAWS, or VoiceOver?), logical reading order, focus management in dynamic components like modals and accordions, and error handling in forms.
Step 3: Fix Critical Issues First
Prioritize by user impact, not by WCAG success criterion number. An inaccessible checkout flow blocks purchases. A contrast issue on a rarely-visited policy page is less urgent. Typical high-impact fixes include making the entire checkout flow keyboard-accessible, adding meaningful alt text to all product images, fixing form labels and error messages so screen readers can announce them, ensuring sufficient color contrast on buttons and calls to action, and adding skip navigation links.
Track your remediation progress. Document what was found, what was fixed, and what remains. This documentation serves as evidence of good faith compliance efforts if you face enforcement action.
Step 4: Publish Your Accessibility Statement
Do not wait until everything is perfect. The BFSG requires transparency about your current state, including known limitations. A statement that honestly discloses remaining barriers with remediation timelines demonstrates compliance intent. A missing statement demonstrates nothing except negligence.
Link the statement from your site footer. Update it whenever you complete remediation milestones or discover new issues.
Step 5: Train Your Team and Monitor Continuously
Every content editor who publishes a product description without alt text, every developer who builds a custom dropdown without keyboard support, every designer who picks a color combination with insufficient contrast — they are all creating potential BFSG violations. Accessibility training is not a one-time workshop. It needs to be part of onboarding, part of code review checklists, and part of content publishing workflows. Schedule automated scans on a regular cadence — weekly or monthly depending on how frequently your site changes. Re-audit manually at least once per year. The ADA compliance guide covers many of the same technical fundamentals that apply to BFSG compliance.The Business Case: Beyond Legal Compliance
The BFSG is a legal obligation, but framing accessibility purely as a compliance cost misses the bigger picture.
Germany has 7.9 million people with severe disabilities. That is a market segment larger than the entire population of Bulgaria. Add the millions with mild impairments, temporary disabilities, and age-related limitations, and you are looking at a substantial portion of the German consumer base that struggles with inaccessible digital experiences.
Accessible websites also tend to perform better in search rankings. Proper heading structures, descriptive alt text, clean semantic HTML, and good keyboard navigation all align with what search engines reward. Accessibility improvements often reduce bounce rates and increase conversion rates because they make sites easier to use for everyone, not just people with disabilities.
Then there is brand risk. A publicly disclosed Abmahnung or MLBF enforcement action creates negative press. In a market where consumers increasingly value corporate responsibility, being called out for excluding people with disabilities from your digital services is a reputational hit that extends well beyond the fine amount.
The 92.4 billion euro German e-commerce market is growing. The businesses that build accessibility into their DNA — rather than treating it as a checkbox to rush through — will have a structural advantage as enforcement tightens and consumer expectations evolve.