The first BFSG Abmahnung arrived in August 2025 — barely six weeks after enforcement began. By the end of 2025, accessibility lawyers across Germany reported a steady stream of cease-and-desist letters targeting online shops with obvious violations. Fines from the MLBF enforcement authority followed in early 2026. This is not a theoretical risk anymore. This guide documents what BFSG enforcement actually looks like in practice: the penalty structure, real costs businesses have faced, the Abmahnung mechanics, and concrete steps to protect your business before the next letter arrives.
The BFSG Penalty Structure: Section 27
Section 27 of the BFSG classifies accessibility violations as Ordnungswidrigkeiten — administrative offenses. The penalty framework operates on three levels.
Standard violations (up to 10,000 euros): Missing accessibility statement, individual WCAG failures that do not constitute a pattern, failure to respond to a user complaint within the prescribed timeframe. These are the most common fines and typically result from targeted enforcement actions or user complaints.
Serious and repeated violations (up to 100,000 euros): Systematic non-compliance across an entire service, deliberate disregard of enforcement orders, repeated violations after a warning. The 100,000-euro ceiling applies when the authority determines that the business was aware of its obligations and failed to act.
Market access restrictions: The enforcement authority can prohibit the placing of non-compliant products on the German market entirely. For services, it can order cessation of the non-compliant service provision. This is the nuclear option — rarely used but available for persistent offenders.
Fines are assessed per violation, not per website. A shop with 15 distinct accessibility failures could theoretically face 15 separate fines, though enforcement authorities typically aggregate related issues into a single proceeding.
Abmahnungen: The Enforcement Mechanism Nobody Expected
Government enforcement was slow to start. The MLBF (Marktüberwachungsstelle Barrierefreiheit von Produkten) in Magdeburg spent its first months building processes and hiring staff. But competitors did not wait.
The Abmahnung system leverages Germany's Gesetz gegen den unlauteren Wettbewerb (UWG) — the Unfair Competition Act. Any competitor can send a formal cease-and-desist letter to a business that violates laws applicable to market conduct. The BFSG qualifies. Non-compliance with accessibility requirements constitutes an unfair competitive advantage over compliant businesses.
An Abmahnung typically demands three things: immediate cessation of the specific violation, a signed Unterlassungserklärung (cease-and-desist declaration) with a contractual penalty clause for future violations, and reimbursement of the sender's legal costs (typically 1,000 to 3,000 euros per letter).
The contractual penalty clause is the expensive part. If you sign an Unterlassungserklärung promising to fix missing alt text on product images and then a follow-up check finds new images without alt text, you owe the contractual penalty — typically 2,500 to 10,000 euros per occurrence. This is separate from any government fine.
What Abmahnungen Actually Cost in Practice
Based on cases reported by German accessibility law specialists through early 2026, the typical cost breakdown for a single Abmahnung looks like this:
Legal costs of the Abmahnung itself: 1,000 to 3,000 euros (reimbursement to the sender's lawyer). Your own legal counsel: 500 to 2,000 euros for reviewing and responding. Remediation costs: 2,000 to 15,000 euros depending on the scope of violations identified. Risk of contractual penalty: 2,500 to 10,000 euros per future occurrence if you sign the Unterlassungserklärung and relapse.
Total for a single Abmahnung with remediation: 3,500 to 20,000 euros. Businesses receiving multiple Abmahnungen for different violation categories face cumulative costs that can reach 50,000 euros or more before a single government fine is levied.
Compare this to the cost of proactive compliance: 5,000 to 30,000 euros for a full audit and remediation of a typical online shop. The math is unambiguous — proactive compliance costs less than a single round of Abmahnungen.
Who Sends BFSG Abmahnungen?
Three groups drive Abmahnung activity around the BFSG.
Direct competitors: A compliant online shop has a legitimate interest in ensuring its competitors also bear the cost of compliance. This is the most common source — particularly among shops in the same product niche that compete for the same German customers.
Abmahnvereine and consumer protection organizations: Qualified organizations under the UKlaG (Unterlassungsklagengesetz) can send Abmahnungen on behalf of consumers. Verbraucherzentralen (consumer advice centers) have started including BFSG violations in their monitoring activities.
Specialized law firms: Some firms systematically scan for accessibility violations and approach potential clients (both as senders and as defenders). This is a repeat of the pattern seen with GDPR cookie violations, Impressum deficiencies, and packaging law violations — the German Abmahnung ecosystem is well-practiced at monetizing regulatory gaps.
The BFSG Abmahnung wave follows a predictable pattern from German regulatory history: initial confusion, then early enforcement targeting obvious violators, then systematic scanning and mass Abmahnungen, then market normalization as compliance rates rise. As of early 2026, Germany is in phase two — early enforcement. Phase three is coming.
How the MLBF Enforces: Government Action
The MLBF is the federal authority responsible for enforcing BFSG product requirements across all 16 Bundesländer. For service requirements, enforcement lies with the respective Landesbehörden (state authorities), creating a patchwork of enforcement intensity.
Government enforcement typically begins with a complaint — from a consumer, a disability organization, or a competitor. The authority investigates, requests information from the business, and may conduct its own accessibility testing. If violations are confirmed, the authority issues a warning with a deadline for remediation. Only if the business fails to comply within the deadline does a formal fine proceeding begin.
This graduated approach means government fines are slower but more systematic than Abmahnungen. A business that responds promptly to an authority's request and demonstrates good-faith remediation efforts is unlikely to face maximum penalties. A business that ignores the authority faces escalating enforcement.
The MLBF has publicly stated that it prioritizes high-impact cases: large e-commerce platforms with many German users, services in essential categories (banking, transport), and repeat offenders who have already been warned.
How to Protect Your Business: A Defense Strategy
Step 1: Run a comprehensive accessibility audit now. Use Web Accessibility Checker for an immediate automated scan, then follow up with the manual testing described in our BFSG check guide. Document everything — the audit date, findings, and your remediation plan.
Step 2: Fix the low-hanging fruit immediately. Missing alt text, missing form labels, insufficient contrast, missing accessibility statement — these are the violations most commonly targeted in Abmahnungen because they are easy to verify. Fixing them takes hours, not weeks.
Step 3: Publish your accessibility statement. A missing statement is a standalone violation. Use the statement generator to create one that covers all BFSG requirements. Link it from your footer. This alone reduces your Abmahnung surface area significantly.
Step 4: Document your compliance efforts. Keep records of audits, remediation work, training sessions, and monitoring. If you receive an Abmahnung or an enforcement inquiry, documented good-faith efforts demonstrate that you take the law seriously — which influences both legal outcomes and penalty amounts.
Step 5: Set up continuous monitoring. Accessibility drifts over time. New content, updated widgets, redesigned pages — each can introduce new violations. Automated monitoring catches regressions before they become Abmahnung targets. Integrate accessibility checks into your deployment pipeline so violations never reach production.
Step 6: Respond to Abmahnungen carefully. Do not ignore an Abmahnung — that escalates the situation. Do not sign the Unterlassungserklärung without legal review — the contractual penalty clauses can be expensive. Consult an attorney specializing in competition law or accessibility law before responding. In many cases, a modified Unterlassungserklärung with reasonable penalty amounts is negotiable.
The Timeline: What to Expect in 2026 and Beyond
Based on the enforcement trajectory through early 2026 and patterns from comparable German regulatory rollouts (GDPR, VerpackG, TTDSG):
Q2 2026: Continued Abmahnung activity targeting obvious violators — shops with no accessibility statement, critical keyboard traps, and zero alt text. The MLBF issues its first formal enforcement decisions against larger e-commerce platforms.
Q3-Q4 2026: Systematic scanning begins. Specialized law firms develop automated tools to identify BFSG violations at scale. Mass Abmahnungen targeting specific violation patterns (like missing autocomplete attributes or inaccessible cookie banners) across hundreds of shops simultaneously.
2027: Court precedents establish penalty benchmarks. The first appeals define what constitutes disproportionate burden and how contractual penalties from Unterlassungserklärungen are enforced. Compliance rates rise significantly as the cost of non-compliance becomes undeniable.
The window for proactive compliance — before systematic enforcement scales up — is closing. Every month you wait increases the probability that an Abmahnung arrives before your remediation is complete.