EU Accessibility Act Fines by Country (2026): What Non-Compliance Actually Costs

If you have searched for what the EU Accessibility Act (EAA) costs you in penalties, you have probably seen a different number on every page. €250,000 per breach. €100,000. €1,000,000. Up to 5% of turnover. They cannot all be right — and most aren't.

Here is the honest version. The EAA itself sets no fixed fine. It is a directive, which means each member state writes its own penalty rules into national law, and those rules range from a few thousand euros to seven figures plus jail time. This guide lays out what each country has actually legislated, marks clearly where a figure is confirmed in law versus repeated by vendors, and explains the part that matters more than any headline number: how a fine actually gets triggered, and how much time you get to fix things first.

There is no single EU-wide fine

The EAA (Directive 2019/882) became enforceable on 28 June 2025. Article 30 requires only that national penalties be "effective, proportionate and dissuasive." It deliberately leaves the amounts to member states. That single design choice is why the numbers vary so much — and why a figure that is real in Madrid is meaningless in Berlin.

One number you can safely ignore: the widely repeated "€250,000 per breach." It does not appear anywhere in the Directive. It originated in vendor marketing and compliance-tool websites, and has been copied from page to page ever since. Treat any source that quotes it as a statutory EU figure with caution — it tells you how carefully they sourced the rest.

Fines by country at a glance

A note on reading this table: a "maximum" is a ceiling for the worst, repeated, large-company case — not what a first-time finding on a mid-sized store will cost. And in many countries fines are levied per violation, so a site with ten barriers carries ten times the exposure of a site with one.

The countries that matter most

Germany — €100,000, but watch the warning letters

Germany transposed the EAA through the Barrierefreiheitsstärkungsgesetz (BFSG). Credible legal analyses put the administrative fine at up to €100,000, dropping to €10,000 for less severe cases, with a forced shutdown of the non-compliant service possible in serious cases. Enforcement follows a graduated path: the authority first requests that you bring the service into conformity, and the fine applies only if you ignore that request.

The near-term risk in Germany, though, is not the regulator. Within weeks of the BFSG taking effect, e-commerce operators began receiving private warning letters (Abmahnungen) built on competition law (UWG), sent by opportunistic law firms rather than regulators or disability groups. Specialist firms have characterised most of these early letters as legally weak, and retail associations have advised members not to settle without legal review — but they prove the point: a visible accessibility gap creates immediate, real-world legal friction in Germany, with or without a regulator involved.

Spain — the steepest confirmed regime

Spain has the harshest confirmed penalties in the EU, structured in three tiers: minor infractions from roughly €301 to €30,000, serious from €30,001 to €90,000, and very serious from €90,001 to €1,000,000. Authorities can also suspend business activity for an extended period. Enforcement is real and predates the EAA deadline — the airline Vueling was fined €90,000 in 2024 for an inaccessible website. Spain is the market where the headline number is both high and credible.

Ireland — the only country that can jail you

Ireland is the outlier worth flagging to any nervous founder or board: it is the only EU member state where EAA violations can carry criminal liability. The maximum is €60,000 in fines and/or up to 18 months imprisonment, applied to service providers who fail to comply after being formally put on notice. The cash ceiling is modest; the criminal exposure is not.

Italy — high turnover-based ceiling, generous cure window

Italy extended its long-standing Stanca Law to cover EAA requirements, enforced by AgID. Penalties reach €40,000, or up to 5% of turnover for in-scope private entities — which for a large company can exceed Spain's fixed ceiling. Italy also offers the most forgiving timeline: a 90-day cure period after notification before penalties bite.

France — a misleading headline, real litigation

France is where sourcing matters most. The figures you will see quoted — up to €250,000 — largely belong to France's older public-sector accessibility regime (RGAA), not the EAA transposition into the Consumer Code. The confirmed EAA-route penalty is far smaller, around €7,500 per infraction, rising to €15,000 for repeat offences. But France's real exposure is not the fine schedule at all: it is civil-society litigation. Disability organisations have already brought actions against major retailers, which is a faster, more public, and more reputationally costly path than waiting for a regulator.

Netherlands and Sweden — handle the numbers with care

Both are priority enforcement markets — the Dutch ACM introduced mandatory self-reporting, and Sweden's authorities run systematic e-commerce inspections — but the specific fine figures circulating online (anywhere from ~€100,000 to ~€900,000) are not clearly backed by primary legislation in public sources. We have flagged them as indicative rather than confirmed. The enforcement activity is real even where the published ceiling isn't verifiable; do not let a fuzzy number lull you in two of the EU's most active markets.

How a fine actually happens

This is the part the scare-tactic pages skip, and it changes everything about how you should plan.

In most member states, fines are not the first move. Enforcement typically begins with a notification and a corrective-action window — commonly 30 to 90 days (Italy's is 90) — during which you are expected to remediate. The penalty applies if you don't. A few regimes, notably Spain and the Netherlands, reserve the right to act immediately on serious violations, but the notice-then-cure pattern is the norm.

The practical implication: your real adversary is time, not the fine schedule. When a notice or a warning letter lands, you have weeks to demonstrate good-faith remediation. Teams that can turn findings into shipped fixes inside that window — and produce a dated record of having done so — rarely see the penalty. Teams that scramble to understand their own codebase do.

The exposure most guides miss

• Market withdrawal and service suspension. Several countries can order a non-compliant product or service off the market — lost revenue for the entire downtime, often worse than the fine.
• Daily penalties. Some regimes add per-day fines for issues left unresolved past the deadline, so cost compounds the longer you wait.
• Reputational damage. Accessibility failures attract press, social backlash, and — in France especially — named lawsuits.
• The upside you forfeit. Over 100 million people in the EU live with a disability. An accessible store serves that market; an inaccessible one quietly turns it away. Compliance spend is also revenue recovery.

What to do before a notice arrives

You cannot buy "compliance" — and any tool that claims to certify you as blanket-compliant is overselling, because conformance is assessed per page, per standard, on a given date. What you can do is be demonstrably ready:

1. Audit against EN 301 549, the harmonised standard the EAA points to (it incorporates WCAG 2.1 Level AA). Meeting it satisfies the technical bar across member states.
2. Fix the real barriers in your codebase — unlabeled controls, low contrast, keyboard traps, missing alternatives — rather than masking them with an overlay widget, which regulators and courts increasingly discount.
3. Keep a dated, tamper-evident record of what you found and what you remediated. When a notice or warning letter arrives, evidence of good-faith remediation is your strongest position.

If you want to see where you stand right now, you can run a free EN 301 549 audit on any page — no signup, results in under a minute. It shows the barriers, who they block, and exactly which fixes close them.

Frequently asked questions

When did the EU Accessibility Act take effect? It became enforceable on 28 June 2025. Some transitional periods extend to 2030 for existing service contracts and to 2040 for certain self-service terminals.

Who has to comply? Businesses placing in-scope digital products or services on the EU market — e-commerce, banking, e-books, ticketing, telecoms and more — above the micro-enterprise threshold. This includes non-EU companies selling into the EU.

Are small businesses exempt? Micro-enterprises providing services (fewer than 10 staff and under €2M turnover) are largely exempt. Product manufacturers do not get the same carve-out. Check your national transposition.

Can a non-EU company be fined? Yes. The Act applies to anyone offering products or services to EU consumers, and each national authority can enforce within its territory.

Is meeting WCAG 2.1 AA enough? Technically, yes — EN 301 549 incorporates WCAG 2.1 Level AA, and that is the benchmark enforcement bodies assess against. It is a floor, not a guarantee against every complaint.

How long do I get to fix issues? It varies: most countries give 30 to 90 days after formal notice (Italy gives 90). Spain and the Netherlands can act immediately on serious violations.

---

This article is general information, not legal advice. Penalty figures are drawn from national transposition laws and reputable legal and industry analyses; several national figures remain unverified against primary legislation and all are subject to change as enforcement matures. Confirm your obligations against the law in each market you operate in, with qualified local counsel.