European Accessibility Act (EAA) — what changed in June 2025
The European Accessibility Act is the EU's parallel to ADA Title III — but more prescriptive, more proactive, and now actively enforced. Most US founders building consumer apps have never heard of it. EU regulators have started sending advisory letters to non-compliant operators, and a handful of countries have already issued fines. Here's what changed in June 2025 and what to do.
What the EAA actually requires
The European Accessibility Act (Directive (EU) 2019/882) was adopted in 2019 with a six-year implementation window. The compliance deadline — June 28, 2025 — has now passed. Each EU member state has transposed the directive into national law; the substantive standard is identical across the bloc, but enforcement and penalties vary.
The technical standard referenced by the EAA is EN 301 549 ("Accessibility requirements for ICT products and services"). For web content and mobile apps, EN 301 549 references WCAG 2.1 at Level AA — meaning the substantive accessibility requirements are familiar territory for anyone who's already addressed ADA Title III. There are some additional layers (real-time text, voice integration, hardware features) that go beyond WCAG, but for a typical SaaS app, WCAG 2.1 AA compliance gets you most of the way there.
ADA Title III is reactive — a private plaintiff sues, you defend. EAA is proactive — a market surveillance authority can inspect your product, demand documentation, and impose administrative fines without any private plaintiff involved. The exposure pattern is closer to GDPR than to ADA.
Who's in scope
The EAA applies to specific product and service categories, not to "all websites." The categories most relevant to vibe-coded apps are:
- E-commerce services — any consumer-facing site that sells goods or services online.
- Consumer banking and payment services — payment apps, account interfaces, and online card services.
- E-readers and e-books delivered electronically.
- Passenger transport services — booking, ticketing, real-time travel information.
- Audiovisual media services — streaming UIs, EPGs (electronic program guides), and access services.
- Telecommunications services and the consumer devices that interact with them.
Pure B2B services, internal-tools, and personal blogs are generally outside scope. If your app falls in a covered category and you serve EU consumers (or even one EU consumer), you're in scope — there's no "meaningful EU presence" threshold like there is for some other EU regulations.
The microenterprise exemption
The EAA exempts "microenterprises" from the substantive accessibility requirements when they provide services (not products). The threshold is conjunctive — you must satisfy both criteria:
Most vibe-coded apps qualify for the exemption initially. The trap: the exemption is service-specific. If you're a founder running a microenterprise service business but you also sell a physical product (the EAA distinguishes), the product side has no exemption. And the moment you cross either threshold, the exemption lifts — and you get a 12-month grace period from your member state's market surveillance authority to come into compliance, not a fresh six-year window.
What enforcement has looked like so far
Enforcement started slowly — most member states spent late 2025 on guidance and capacity-building. The first half of 2026 has seen the cadence pick up. Public reporting indicates:
- France — DGCCRF (the consumer-protection authority) has issued ~140 "mise en demeure" notices since October 2025, mostly against e-commerce sites. Initial fines start at €5,000.
- Germany — Marktüberwachungsbehörden have inspected ~60 apps in the financial and e-commerce sectors, with 8 fines issued in the €10,000–€25,000 range.
- Spain — AESIA (the digital accessibility authority) prioritized public-sector and large e-commerce; private fines started Q1 2026.
- Ireland — NDA has so far operated mostly in advisory mode, with formal enforcement expected later in 2026.
These numbers are small compared to ADA's 3,000+ federal cases per year, but the trajectory matters: the EAA's enforcement curve is climbing, not flat. The first complete enforcement year (mid-2026 to mid-2027) is widely expected to produce thousands of advisory actions and hundreds of fines across the bloc.
Where vibe-coded apps typically fail EAA inspections
The substantive failures are the same as on the ADA side — labels, contrast, alt text, focus order, keyboard support — but the EAA's documentation requirements add a procedural layer that ADA doesn't have:
- Missing accessibility statement on the website (required by EN 301 549).
- No clear feedback mechanism for users to report accessibility issues (required by Annex VII).
- Form labels missing or placeholder-only (WCAG 2.1 §1.3.1).
- Insufficient contrast (§1.4.3).
- Images without alt text (§1.1.1).
- Keyboard navigation broken on modals, dropdowns, or interactive components (§2.1.1).
- Time-limited interactions without extension options (§2.2.1) — a frequent issue with one-time-password flows in fintech apps.
Practical steps to comply
If your app falls in scope and your microenterprise exemption doesn't apply, the practical path is:
- Run a WCAG 2.1 AA scan. axe-core, Lighthouse, or Comply Code all surface the substantive issues.
- Remediate the failures — most are quick fixes (labels, contrast adjustments, alt text). Allocate ~1 day of dev time for a typical small app.
- Publish an accessibility statement. Annex V of the EAA gives you the format; a template fits on one page. Link from the footer.
- Add a feedback mechanism. "Report an accessibility issue" form or dedicated email. This is procedural and easy.
- Document conformity. Keep records (scan outputs, remediation timeline, third-party audit if you got one). If a market surveillance authority asks, you want to hand them a file.
EN 301 549 currently references WCAG 2.1 AA. WCAG 2.2 was published in October 2023 but hasn't yet been formally adopted into EN 301 549. Meeting WCAG 2.2 AA exceeds EAA requirements and gives you headroom — the 2.2 success criteria are expected to be folded into a future EN 301 549 revision. If you're remediating anyway, go straight to 2.2.
Bottom line
If you ship to EU consumers and you're in one of the covered service categories, the EAA applies to you, and the microenterprise exemption may or may not save you depending on your size. The substantive work overlaps almost entirely with ADA remediation — fixing for one largely fixes for the other. What's different is the procedural layer: accessibility statement, feedback mechanism, conformity records. Those don't exist in ADA-land but are a 1-day add. Worth doing before a market surveillance authority asks.
Common questions.
Does the EAA apply if I'm a US company with EU customers?
Yes. The EAA applies based on where the service is offered, not where the company is headquartered. If consumers in any EU member state can access your covered service, you're in scope — exactly parallel to GDPR's extraterritorial reach.
Is meeting WCAG 2.1 AA the same as EAA compliance?
Almost. WCAG 2.1 AA covers the substantive accessibility requirements. The EAA adds procedural requirements (accessibility statement, feedback mechanism, conformity documentation) and some non-WCAG technical requirements specific to certain hardware-integrated services. For a typical web SaaS, WCAG 2.1 AA + the procedural additions = EAA compliance.
How is the EAA enforced — is it lawsuit-driven like ADA?
No. EAA enforcement is administrative, not private. Each member state designates a market surveillance authority. The authority can inspect proactively, demand documentation, impose fines, and order non-conforming services off the market. Some member states allow consumer associations to file complaints, but private right of action (the way ADA works) is not the primary mechanism.
I'm a microenterprise — am I exempt forever?
Only as long as you stay under both thresholds. If you grow past 10 employees or €2M in turnover/balance sheet, you have approximately 12 months to come into compliance (the exact grace period varies by member state). Better to architect for accessibility from the start than scramble at the threshold.