Since June 28, 2025, the European Accessibility Act (Directive 2019/882) carries real financial teeth. Fines for non-compliance range from €5,000 in smaller member states to over €1,000,000 in Spain and Sweden. Each EU country has transposed the directive into national law with its own enforcement agency, penalty structure, and complaint mechanisms. This guide breaks down exactly what you risk in each country, who enforces it, and how to stay compliant.
Overview of EAA Enforcement Across Europe
The European Accessibility Act (Directive 2019/882) became enforceable on June 28, 2025. Every EU member state was required to transpose it into national legislation by that date, and most did. The directive covers digital products and services including websites, mobile apps, e-commerce platforms, banking services, e-books, and transport ticketing systems.
What makes the EAA different from previous accessibility directives? Enforcement. The directive explicitly requires each member state to establish penalties that are "effective, proportionate and dissuasive." That language matters. It means regulators cannot simply issue warnings indefinitely. They must impose consequences that actually deter non-compliance.
The result is a patchwork of national penalty regimes. Some countries like Spain and Sweden have set maximum fines approaching or exceeding €1,000,000. Others like Denmark operate on a case-by-case basis without published maximums. And a handful of countries, notably Ireland, have gone further by including potential criminal sanctions alongside financial penalties.
Enforcement authorities vary too. Germany uses its Federal Network Agency (Bundesnetzagentur). France splits responsibility between ARCOM, ARCEP, and the DGCCRF depending on the type of service. Italy relies on AgID. This fragmentation means businesses operating across multiple EU markets face multiple regulators with different expectations and timelines.
Country-by-Country Breakdown of EAA Fines
Below is a detailed breakdown of the penalties, enforcement agencies, and specific rules for each EU member state. The fines listed represent maximum amounts. Actual penalties depend on severity, duration of non-compliance, company size, and whether the violation was intentional.
Germany
Maximum fine: €100,000 per violation. Enforcement agency: Bundesnetzagentur (Federal Network Agency), with BFIT (Federal Accessibility Monitoring Body) handling monitoring. Germany transposed the EAA through the Barrierefreiheitsstärkungsgesetz (BFSG), which came into force on June 28, 2025.
The Bundesnetzagentur can impose fines up to €100,000 for each individual accessibility violation. That per-violation structure matters. A website with 15 accessibility failures could theoretically face €1,500,000 in aggregate penalties, though regulators typically apply proportionality.
Germany has also established a formal complaint mechanism. Users with disabilities can file complaints directly with the Bundesnetzagentur, which must investigate and respond within defined timelines. Early enforcement activity has focused on e-commerce platforms and banking apps, sectors where Germany sees the highest consumer impact.
France
Maximum fine: Up to €250,000 for repeated violations. Enforcement agencies: ARCOM (audiovisual and digital platforms), ARCEP (electronic communications), DGCCRF (consumer protection and general commerce), AMF and ACPR (financial services).
France has one of the more complex enforcement structures in the EU. The base penalty for a single EAA violation is a fifth-class fine: €1,500 per offence for individuals, €7,500 for legal entities. For repeat offenders, these double to €3,000 and €15,000 respectively. But the real risk comes from aggregate penalties for systemic non-compliance, which can reach €250,000.
France has already shown it means business. In late 2025, several major retailers including Carrefour, Auchan, and Leclerc received formal notices requiring their e-commerce platforms to be made accessible. The DGCCRF has been particularly active in the retail sector, while ARCOM focuses on media and streaming services.
French law also requires companies to publish an accessibility statement (declaration de conformite) detailing their compliance status. Failure to publish this statement is itself a finable offence, separate from the underlying accessibility issues.
Italy
Maximum fine: 5% of annual turnover for serious cases. Standard fines: €5,000 to €40,000 per violation. Enforcement agency: AgID (Agenzia per l'Italia Digitale).
Italy stands out because its penalty structure scales with company revenue. While the base fines range from €5,000 to €40,000, serious or persistent violations can trigger penalties of up to 5% of annual turnover. For a company doing €50 million in revenue, that is a potential €2,500,000 fine.
AgID grants a 90-day cure period after initial notification. If a company remediates all identified issues within that window, it can avoid financial penalties entirely. After the cure period expires, AgID can impose escalating fines and, in extreme cases, order the removal of non-compliant products or services from the Italian market.
Italy has historically been one of the more active EU members on accessibility enforcement, having had its own Stanca Law since 2004. The EAA builds on this existing framework.
Spain
Maximum fine: Up to €1,000,000 for very serious violations. Fine ranges: Minor violations €30,000-€90,000, serious violations €90,001-€300,000, very serious violations €300,001-€1,000,000. Enforcement: Ministry of Social Rights and regional authorities.
Spain has the most aggressive penalty regime in the EU. The three-tier structure means even minor accessibility failures start at €30,000, and the ceiling for very serious violations reaches €1,000,000. Repeated violations or those affecting large numbers of users push penalties toward the upper end of each range.
Spain distributes enforcement between the national Ministry of Social Rights and the autonomous communities (regional governments). This means a company operating across multiple Spanish regions could face enforcement actions from multiple authorities simultaneously.
The broad interpretation of "very serious" violations includes systematic failures to provide accessibility across an entire digital platform, discriminatory design patterns, and refusal to remediate after formal notification.
Netherlands
Maximum fine: Up to €900,000 or 10% of annual revenue. Enforcement agency: ACM (Authority for Consumers and Markets).
The Netherlands has positioned itself as one of the toughest enforcers, with maximum fines of €900,000 or 10% of annual revenue, whichever is higher. The ACM already has significant experience enforcing consumer protection regulations and digital market rules, so the EAA fits neatly into its existing mandate.
Dutch enforcement focuses heavily on the complaint mechanism. Citizens can file accessibility complaints through the ACM's online portal. The ACM then investigates, and if it finds systematic non-compliance, it can impose penalties without needing to go through lengthy court proceedings.
The Netherlands was also one of the first countries to finalize its transposition legislation, signaling a strong political commitment to accessibility enforcement.
Sweden
Maximum fine: SEK 10,000,000 (approximately €900,000). Enforcement agency: PTS (Post and Telecom Authority) for digital services, Konsumentverket (Consumer Agency) for products.
Sweden's penalty ceiling of SEK 10 million puts it among the highest in Europe. PTS handles enforcement for electronic communications and digital services, while Konsumentverket oversees physical products that fall under the EAA's scope.
Swedish enforcement emphasizes market bans alongside financial penalties. PTS can prohibit the sale or distribution of non-compliant products and services within Sweden, which for many companies represents a more severe consequence than the fine itself. Losing access to the Swedish market, even temporarily, can mean significant revenue loss.
Sweden's existing accessibility culture, shaped by decades of strong disability rights legislation, means consumer expectations are high and complaints are likely to come quickly.
Poland
Maximum fine: PLN 100,000 (approximately €25,000), with potential for higher penalties in repeat cases. Enforcement: Ministry of Digital Affairs and market surveillance authorities.
Poland's headline maximum of PLN 100,000 (around €25,000) appears modest compared to Western European counterparts. However, Polish enforcement also includes mandatory accessibility audits at the company's expense and the possibility of product removal from the market.
For companies targeting the Polish market, the real risk is not the fine itself but the remediation costs. Polish authorities can require third-party accessibility audits, detailed remediation plans with fixed deadlines, and follow-up verification audits. These cumulative compliance costs often exceed the fine amount.
Poland also requires businesses to designate an accessibility coordinator, and failure to appoint one is a separate offence.
Portugal
Maximum fine: €44,890 for the most serious violations. Enforcement agency: INCODE (formerly AMA, the Agency for Administrative Modernization).
Portugal's fines are among the lower end in Western Europe, capped at roughly €44,890 for the most serious accessibility violations. INCODE handles enforcement for both public and private sector compliance.
Despite the relatively modest fines, Portugal has a well-established complaint mechanism. Users can report accessibility barriers through INCODE's portal, and the agency is required to investigate within defined timelines. Portugal also requires all service providers to publish accessibility statements.
For companies considering Portugal a low-risk market due to its fine levels, a word of caution: INCODE can also order the suspension of non-compliant services, which carries commercial consequences well beyond the fine amount.
Denmark
Fines: Determined case-by-case, no published maximum. Enforcement agency: Digitaliseringsstyrelsen (Agency for Digital Government) and the Danish Safety Technology Authority.
Denmark does not publish a fixed maximum fine for EAA violations. Instead, penalties are determined on a case-by-case basis considering factors like severity, duration, company size, and the number of affected users. This approach gives Danish regulators significant discretion.
Initial fines for first-time violations in Denmark have been relatively modest, around €10,000-€15,000. But for repeat violations or refusal to remediate, Danish authorities have the power to escalate significantly. The absence of a published ceiling means there is theoretically no cap.
Denmark's enforcement relies heavily on its established market surveillance infrastructure, and the Danish Safety Technology Authority has the power to conduct unannounced inspections of digital products and services.
Belgium
Maximum fine: Up to €200,000 per breach. Enforcement agency: SPF Economie (Federal Public Service Economy). Persistent violations can lead to business suspension.
Belgium takes a firm stance on EAA enforcement. The €200,000 maximum per breach is already significant, but the real deterrent is the business suspension power. SPF Economie can order a company to cease offering non-compliant services in the Belgian market until accessibility requirements are met.
Belgium's trilingual market (French, Dutch, German) adds complexity. Accessibility must be maintained across all three language versions of a service, and a failure in any one language version counts as a separate violation.
The Belgian enforcement approach emphasizes collaborative remediation before punitive action. SPF Economie typically issues warnings and sets remediation deadlines before imposing fines. But once those deadlines pass, enforcement is swift.
Austria
Maximum fine: Up to €80,000 per violation. Enforcement: Federal Ministry of Social Affairs, Health, Care and Consumer Protection, along with regional market surveillance authorities.
Austria transposed the EAA with fines reaching €80,000 per individual violation. Like Germany, the per-violation structure means aggregate penalties for websites or apps with multiple accessibility failures can be substantial.
Austrian enforcement gives particular attention to banking and financial services, reflecting the country's strong consumer protection tradition. Online banking platforms and insurance portals have been identified as priority sectors for initial enforcement activity.
Austria also requires companies to respond to accessibility complaints within 14 days, one of the shortest response windows in the EU.
Ireland
Maximum fine: €60,000 and/or up to 18 months imprisonment on indictment. Summary conviction: €5,000 fine and/or 6 months imprisonment. Enforcement: Competition and Consumer Protection Commission (CCPC) for products, with sector-specific regulators for services.
Ireland is unique in the EU for including criminal sanctions alongside financial penalties. While imprisonment is reserved for the most egregious cases (deliberate and sustained refusal to comply), the mere possibility of criminal liability changes the risk calculation for company directors.
The CCPC serves as the primary market surveillance authority for products, but services enforcement is distributed across multiple sector regulators: ComReg for communications, Coimisiun na Mean for media services, the National Transport Authority for transport, and the Central Bank for financial services.
Ireland's approach combines relatively moderate fines with strong non-financial enforcement powers, including product withdrawal orders and public compliance notices that can cause significant reputational damage.
Finland
Maximum fine: Up to €150,000. Enforcement agency: Finnish Transport and Communications Agency (Traficom) for digital services, Tukes (Finnish Safety and Chemicals Agency) for products.
Finland's maximum fine of €150,000 sits in the mid-range among EU states. However, Finnish enforcement also includes mandatory accessibility audits. If Traficom determines that a service is non-compliant, it can require the company to commission and pay for an independent accessibility audit.
Finland has a strong tradition of digital inclusion policy, and public awareness of accessibility rights is high. This means complaint-driven enforcement is likely to be active from the outset.
Traficom can also impose conditional fines, a daily penalty that accumulates until the accessibility issue is resolved. This mechanism can quickly exceed the headline maximum for companies that delay remediation.
Other EU Member States
The remaining EU member states have all transposed the EAA with varying penalty structures:
Luxembourg: Fines up to €50,000 per violation, enforced by ILNAS (Institut Luxembourgeois de la Normalisation). Despite its small market, Luxembourg's role as a financial hub means enforcement in banking and fintech is expected to be rigorous.
Greece: Fines ranging from €10,000 to €100,000 depending on severity. The Hellenic Telecommunications and Post Commission (EETT) oversees digital service compliance.
Czech Republic: Penalties up to CZK 2,000,000 (approximately €80,000). The Czech Trade Inspection Authority handles enforcement.
Hungary: Fines up to HUF 30,000,000 (approximately €75,000). The Government Office of the Capital City Budapest and county government offices serve as enforcement authorities.
Romania: Fines from €5,000 to €50,000 depending on the category of violation. ANCOM (National Authority for Management and Regulation in Communications) enforces for digital services.
Croatia: Penalties up to €50,000 with mandatory remediation requirements.
Bulgaria: Fines ranging from BGN 5,000 to BGN 50,000 (approximately €2,500-€25,000), among the lowest in the EU.
Slovakia, Slovenia, Lithuania, Latvia, Estonia, Malta, and Cyprus have all implemented penalty frameworks broadly ranging from €10,000 to €100,000 depending on severity and company size.
Who Gets Fined? Scope and Exemptions
The EAA applies to private sector businesses that place products on the EU market or provide services to EU consumers. This is broader than many people realize. You do not need to be based in the EU to fall under the EAA. If your website or app serves EU customers, you are potentially in scope.
Products covered include computers and operating systems, smartphones and tablets, self-service terminals (ATMs, ticketing machines, check-in kiosks), e-readers, and consumer equipment used for accessing audiovisual media services.
Services covered include e-commerce websites and mobile apps, banking and financial services, electronic communications, access to audiovisual media services, e-books and dedicated software, and transport services (urban, suburban, regional travel information and ticketing).
Microenterprises are the main exemption. Companies with fewer than 10 employees AND annual turnover or balance sheet total under €2 million are exempt from the service requirements (but not product requirements). This exemption is narrow and strictly defined. A company with 9 employees but €3 million in turnover does not qualify.
The EAA also includes a "disproportionate burden" defence. Companies can argue that compliance would require alterations so fundamental that they would change the basic nature of the product or service, or impose a disproportionate financial burden. But this defence is hard to sustain. Regulators expect documented evidence of the cost analysis, and the argument that "accessibility is expensive" is not sufficient.
How Enforcement Actually Works
EAA enforcement operates through three main channels: market surveillance, consumer complaints, and proactive inspections.
Market surveillance is the primary mechanism for products. National market surveillance authorities monitor products entering the EU market and can test them for accessibility compliance. Non-compliant products can be pulled from shelves or blocked at borders.
Consumer complaints drive most service enforcement. Every member state must establish accessible complaint mechanisms where users with disabilities can report accessibility barriers. Enforcement agencies are required to investigate these complaints and respond within defined timelines, typically 30 to 90 days depending on the country.
Proactive inspections are the third channel, though they vary significantly by country. Some member states like Denmark and Finland have announced plans for systematic accessibility audits of major digital platforms. Others are taking a more reactive, complaint-driven approach.
The enforcement process typically follows a pattern: notification of non-compliance, a remediation period (usually 30-90 days), verification of remediation, and then penalties if the issues persist. Most countries offer this graduated approach, but it is not universal. Spain and the Netherlands can impose immediate penalties for egregious violations without a prior warning.
Cross-border enforcement is coordinated through the EU's market surveillance framework. If a product or service is found non-compliant in one member state, that finding can trigger investigations in other member states. This means a single accessibility complaint in one country can cascade across the EU.
How to Avoid EAA Fines: A Compliance Checklist
Avoiding EAA fines is not primarily about legal manoeuvring. It is about building accessibility into your products and services from the start. Here is what that looks like in practice.
First, conduct a comprehensive accessibility audit against EN 301 549, the harmonised European standard that maps to WCAG 2.1 Level AA. This standard is the benchmark that enforcement agencies use when assessing compliance. An audit will identify your current gaps and prioritise remediation.
Second, publish an accessibility statement. Most member states require this, and it demonstrates good faith. The statement should describe your current compliance level, known limitations, and your remediation timeline. It should also provide a contact mechanism for users to report accessibility barriers.
Third, establish an internal accessibility process. Train your developers, designers, and content creators on accessibility requirements. Integrate automated accessibility testing into your CI/CD pipeline. Conduct manual testing with assistive technologies (screen readers, keyboard navigation, voice control).
Fourth, set up a complaint handling process. When users report accessibility barriers, you need a defined workflow for triaging, investigating, and resolving those complaints. Response time matters, some countries require responses within 14 days.
Fifth, document everything. If you ever face an enforcement action, documented evidence of your accessibility efforts, audit reports, remediation plans, training records, and complaint logs will significantly influence the outcome. Regulators distinguish between companies making genuine efforts and those ignoring accessibility entirely.
Sixth, monitor regulatory developments in each country where you operate. Enforcement priorities and interpretations evolve. What passes scrutiny today might not in twelve months.
Cost of Compliance vs Cost of Fines
The financial argument for accessibility compliance is overwhelming. A comprehensive accessibility audit for a medium-sized website typically costs between €5,000 and €20,000. Remediation of common issues might run another €10,000 to €50,000 depending on complexity. Ongoing monitoring and maintenance might add €5,000 to €15,000 annually.
Compare those numbers to the penalty exposure. A single violation in Spain could cost up to €1,000,000. In the Netherlands, up to €900,000 or 10% of revenue. In Italy, up to 5% of turnover. And remember, these are per-violation figures in many countries. A website with multiple accessibility barriers faces multiplied risk.
But fines are only part of the cost equation. Non-compliance also risks product removal from national markets, which means lost revenue for the entire period the product is unavailable. There are legal costs for defending enforcement actions. There is reputational damage, particularly in sectors where brand trust matters.
And then there is the market opportunity. Over 100 million people in the EU have some form of disability. An accessible website or app serves this market. An inaccessible one does not. Companies that invest in accessibility are not just avoiding fines. They are reaching more customers, improving usability for everyone, and strengthening their brand.
The average return on accessibility investment, factoring in market expansion, reduced legal risk, and improved SEO performance, is estimated at 4:1 to 10:1. That makes accessibility one of the highest-ROI investments a digital business can make.