European Accessibility Act and Websites: The Complete Compliance Guide

What Every Business Selling to European Consumers Must Know About the EAA

The European Accessibility Act (EAA) — Directive 2019/882 — mandates that a broad range of digital products and services sold within the European Union meet defined accessibility standards by June 28, 2025. Unlike sector-specific regulations that preceded it, the EAA creates a harmonized, cross-sector accessibility baseline that applies to websites, mobile applications, e-commerce platforms, e-readers, banking interfaces, and transport ticketing systems alike.

Answer Block: The European Accessibility Act requires websites and web-based services that fall within its scope — including e-commerce, banking, transport, and audiovisual media services — to conform with EN 301 549 V3.2.1 (March 2021), which references WCAG 2.1 Level AA as its web accessibility baseline. The directive applies to private-sector businesses placing covered products or services on the EU market on or after June 28, 2025. Businesses with fewer than 10 employees and an annual turnover or balance sheet total not exceeding €2 million are exempt as microenterprises. Non-compliant organizations face market withdrawal orders, financial penalties set by each EU member state's enforcement body, and reputational exposure. Compliance requires both technical conformance — perceivable, operable, understandable, and robust interfaces — and documented accessibility statements accessible to users. Organizations uncertain about scope or technical requirements should conduct a gap analysis against EN 301 549 before the enforcement date.

Does the European Accessibility Act Apply to Websites?

The EAA directly and explicitly applies to websites when those sites are used to deliver a service covered by the directive. The regulation does not treat websites as optional delivery channels — it treats them as the service itself when the service is digital.

Which Website Categories Fall Within EAA Scope

The directive enumerates covered service categories. Websites and web-based interfaces that fall within scope include:

• E-commerce services: Any website that enables consumers to purchase goods or services online from traders operating in the EU market. Product pages, checkout flows, account management portals, and order confirmation systems are all in scope.
• Consumer banking services: Online banking portals, account dashboards, digital loan applications, and payment initiation interfaces provided by credit institutions to consumers.
• Audiovisual media services: Video-on-demand platforms and their web interfaces, including navigation, search, playback controls, and subtitle settings.
• Transport services: Websites for air, rail, bus, and waterborne passenger transport where ticketing, timetable lookup, and booking are offered digitally.
• Electronic communications services: Websites through which consumers access number-based and number-independent interpersonal communications services.
• E-books and dedicated reading software: Web-based reading environments and any web interface used to distribute e-book content.

What the EAA Does Not Cover

The directive explicitly excludes microenterprises providing services — those with fewer than 10 employees and annual turnover or balance sheet total not exceeding €2 million. Broadcasting content and websites of public sector bodies (already governed by the EU Web Accessibility Directive 2016/2102) also fall outside EAA scope. Pre-existing service contracts signed before June 28, 2025 receive a five-year transition window, expiring June 28, 2030.

The Technical Standard for Web Conformance

Websites within EAA scope must meet EN 301 549 V3.2.1 (March 2021), the harmonized European standard that incorporates WCAG 2.1 Level AA as its normative web accessibility requirement. Conformance is assessed across four WCAG principles: perceivable, operable, understandable, and robust. This means meeting all 50 Level A and AA success criteria defined in WCAG 2.1 — covering text alternatives, keyboard accessibility, sufficient color contrast, consistent navigation, input assistance, and compatibility with assistive technologies including screen readers and switch controls.

Does the European Accessibility Act Apply to the US?

The EAA has direct operational implications for US-based businesses that sell products or services to consumers in EU member states — even if those businesses have no physical European presence. Jurisdictional reach follows market access, not corporate domicile.

The Market Access Principle

Under the EAA, any business that places a covered product on the EU market or provides a covered service to EU consumers is subject to the directive's requirements. A US-headquartered e-commerce retailer shipping to Germany, a US bank offering digital accounts to French residents, or a US streaming platform serving subscribers in Spain must all comply with EAA website requirements if their services fall within the directive's enumerated categories.

Enforcement Mechanisms That Reach US Entities

Each EU member state designates a market surveillance authority responsible for EAA enforcement. These authorities can:

• Issue corrective action orders requiring non-compliant services to be remediated within defined timeframes
• Order temporary or permanent withdrawal of non-compliant services from the EU market
• Impose financial penalties — the scale of which is determined by each member state's transposing legislation
• Coordinate with customs authorities to intercept non-compliant products at the EU border

For US businesses without an EU establishment, enforcement typically operates through their EU-market presence — their website, their EU-facing payment processors, or their EU distributors. A US company that generates meaningful revenue from EU consumers cannot practically insulate itself from EAA enforcement risk by pointing to a US address.

EAA vs. US Accessibility Law: Parallel Obligations

US businesses are already navigating domestic accessibility requirements. ADA Title II requires state and local government web content to conform with WCAG 2.1 Level AA — with the deadline of April 24, 2026 for entities serving populations of 50,000 or more. Section 508, effective January 18, 2018 following the ICT Refresh, applies to federal agencies and their contractors and references WCAG 2.0 Level AA as its baseline. The EAA adds a third compliance axis for any US business with EU market exposure. Rather than managing these as separate workstreams, most compliance teams find it efficient to build to the highest common denominator — WCAG 2.1 Level AA — which satisfies all three frameworks simultaneously.

European Accessibility Act Website Requirements: A Technical Breakdown

EAA website requirements operate at two levels: technical conformance with EN 301 549 (which incorporates WCAG 2.1 Level AA) and procedural obligations including accessibility statements and feedback mechanisms. Both layers are enforceable.

Technical Conformance Requirements

Web interfaces must satisfy WCAG 2.1 Level AA success criteria organized under four principles:

• Perceivable: All non-text content requires a programmatic text alternative. Time-based media needs synchronized captions and audio descriptions. Content must not rely on sensory characteristics alone, and color contrast ratios must meet defined minimums — 4.5:1 for normal text, 3:1 for large text and user interface components.
• Operable: All functionality must be operable via keyboard without requiring specific timing. Users must have control over moving, blinking, or auto-updating content. Navigation must provide multiple means of location, consistent identification of repeated components, and skip navigation mechanisms.
• Understandable: Page language must be programmatically determinable. Components that receive focus must not trigger unexpected context changes. Input fields must be labeled, and error identification must be specific and machine-readable.
• Robust: HTML and other markup must parse without errors that affect assistive technology interpretation. Name, role, and value must be programmatically exposed for all user interface components — this is the core requirement for compatibility with screen readers and other assistive technologies.

PDF Documents Embedded in or Linked from Websites

Any PDF document made available through an EAA-covered website is itself subject to the accessibility requirements of EN 301 549. PDFs must conform with PDF/UA-1 — ISO 14289-1:2014 — which requires a complete and correctly ordered tag tree, logical reading order, alternative text for all non-decorative images, language specification, document title metadata, and no security settings that block assistive technology access. A visually polished PDF that lacks a tag tree or uses scanned images without OCR is non-compliant regardless of the website's HTML conformance.

RemeDocs' PDF remediation process addresses each of these structural requirements systematically — tagging, reading order correction, alt text authoring, and metadata configuration — producing documents that meet both PDF/UA-1 and EN 301 549 requirements.

Accessibility Statements

Organizations must publish an accessibility statement on their website that discloses the conformance level achieved, lists any known non-conformances with explanation, and provides a contact mechanism for users to report barriers and request accessible alternatives. The statement must be updated whenever the conformance status changes.

Feedback and Redress Mechanisms

Beyond the statement, businesses must provide a functional channel — typically a dedicated email address or web form — through which users can request accessible formats or flag accessibility failures. Response procedures must be documented and operationally maintained.

European Accessibility Act Certification: What It Does and Does Not Mean

There is no single official "EAA certification" issued by a central European authority. Compliance with the EAA is demonstrated through conformance with EN 301 549, documented via an accessibility statement, and subject to audit by national market surveillance authorities — not through a third-party certificate.

What Passes for Certification in Practice

Several third-party audit firms issue conformance reports — often formatted as Voluntary Product Accessibility Templates (VPATs) or Web Accessibility Conformance Evaluation (WACE) reports — that document conformance with EN 301 549 or WCAG 2.1 Level AA. These reports serve two practical purposes:

• Regulatory evidence: A detailed conformance report demonstrates to a market surveillance authority that the organization has conducted a systematic accessibility evaluation and addressed known barriers.
• Procurement documentation: EU public procurement rules increasingly require accessibility conformance evidence from vendors; a third-party audit report satisfies that requirement more reliably than a self-declaration alone.

The Limits of Conformance Reports

A conformance report dated at the time of audit does not guarantee ongoing compliance. Websites change — new features are deployed, content management systems are updated, third-party widgets are integrated — and each change can introduce new barriers. Maintaining EAA compliance is an operational discipline, not a one-time certification event. Organizations should establish accessibility regression testing as part of their release pipeline, not treat a conformance report as a permanent credential.

Self-Declaration vs. Third-Party Audit

The EAA permits self-declaration of conformance. However, for organizations with significant EU market exposure — particularly those in regulated sectors such as banking or transport — a third-party audit provides substantially stronger legal defensibility if a complaint is filed with a national enforcement authority.

Best Practices from European Accessibility Act Websites: What Strong Compliance Looks Like

Organizations that achieve genuine EAA compliance — rather than checkbox compliance — share a set of operational characteristics observable in their public-facing implementations.

Characteristics of Strong EAA Compliance

• Semantic HTML structure: Headings form a logical document outline; landmark regions (main, nav, aside, footer) are correctly implemented; lists are marked up as lists rather than simulated with spacing or bullets in paragraph text.
• Keyboard accessibility with visible focus indicators: Every interactive element — menus, modals, carousels, form fields, custom widgets — is reachable and operable via keyboard alone, with a visible focus ring that meets the contrast and minimum-size thresholds defined in WCAG 2.1 Level AA.
• Accessible PDFs linked from web content: Downloadable documents — reports, terms and conditions, product data sheets, application forms — carry a complete tag tree, correctly sequenced reading order, and substantive alt text for all informational images. PDF/UA-1 conformance is verified with automated tools and manual screen reader testing.
• Live accessibility statements with accurate conformance disclosure: Statements specify which WCAG 2.1 Level AA success criteria are partially or not met, provide a dated audit reference, and include a functional feedback mechanism with a defined response commitment.
• Accessible third-party components: Cookie consent banners, chat widgets, payment forms, and analytics overlays are vetted for keyboard operability and screen reader compatibility before deployment — not after a complaint is received.
• Regular automated and manual testing cycles: Automated scanning tools catch a subset of WCAG 2.1 violations (studies consistently estimate 30–40% detection rates for automated tools alone); manual testing with assistive technologies — NVDA, JAWS, VoiceOver — covers the remaining gap.

The PDF Gap in Otherwise Compliant Sites

A pattern observed across organizations working toward EAA compliance is strong HTML conformance paired with non-compliant PDF content. Legacy reports, fillable forms, and policy documents are frequently published without tagging, with incorrect reading order, or as image-only scans. Each of these documents is independently subject to EN 301 549 when accessible via an EAA-covered website. When using RemeDocs for document remediation, the workflow addresses tag tree construction, reading order verification, alt text authoring, and PDF/UA-1 metadata — converting legacy PDFs into EN 301 549-conformant documents without requiring source file reconstruction.

European Accessibility Act 2025 and 2026: Timeline and Forward Obligations

The EAA's primary enforcement trigger is June 28, 2025, but the compliance calendar extends beyond that date with additional obligations that organizations must track.

2025: Primary Enforcement Date

New products placed on the EU market and new services launched on or after June 28, 2025 must comply immediately. Organizations already providing covered services as of that date enter a compliance obligation for any new or substantially modified service components. The practical implication: any website redesign, new feature release, or platform migration launched after June 28, 2025 must be built to EN 301 549 / WCAG 2.1 Level AA from day one.

2026: Member State Enforcement Maturation

By 2026, all EU member states are expected to have fully operationalized their market surveillance and enforcement infrastructure. Early 2025 enforcement may be uneven across member states as national authorities ramp up capacity; by 2026, organizations should expect more consistent and potentially more aggressive enforcement activity, particularly in Germany, France, and the Netherlands — jurisdictions with established accessibility enforcement track records under the prior Web Accessibility Directive.

2030: Pre-Existing Service Contract Transition Expiry

Service contracts signed before June 28, 2025 have until June 28, 2030 to achieve full compliance. This transition window does not apply to products, and it does not permit indefinite deferral — organizations should be building remediation roadmaps now to avoid a 2030 deadline compression.

Interaction with the EU Web Accessibility Directive

Public sector bodies remain governed by Directive 2016/2102, which predates the EAA and applies WCAG 2.1 Level AA to public sector websites and mobile applications. The EAA extends comparable requirements to the private sector. Organizations that serve both public sector clients and direct consumers may have simultaneous obligations under both directives.

EAA Compliance Checklist for Website Owners

The following checklist covers the primary technical and procedural requirements for EAA website compliance. Each item maps to a specific obligation under EN 301 549 or the directive's procedural provisions.

Technical Website Requirements

• ☐ All images carry programmatic alt text — decorative images are marked with empty alt attributes (alt="")
• ☐ All video content includes synchronized captions; pre-recorded video includes audio descriptions
• ☐ Color contrast meets 4.5:1 for body text and 3:1 for large text and UI components
• ☐ All functionality is operable by keyboard; no keyboard traps exist in any component
• ☐ Focus order follows a logical reading sequence; focus is never lost or obscured after user interaction
• ☐ Visible focus indicators are present on all interactive elements
• ☐ Page titles are descriptive and unique per page
• ☐ HTML lang attribute is set correctly at document level; language changes within content are marked inline
• ☐ Form fields have programmatically associated labels; error messages are specific and machine-readable
• ☐ ARIA roles, states, and properties are used correctly; no ARIA misuse that exposes invalid semantics to assistive technology
• ☐ Skip navigation links are implemented for pages with repeated navigation blocks
• ☐ Third-party widgets (chat, cookie consent, payment) are keyboard accessible and screen reader compatible

PDF Document Requirements

• ☐ All PDFs linked from or embedded in covered web services carry a complete, correctly ordered tag tree
• ☐ Reading order matches visual presentation for all PDF content
• ☐ All non-decorative images in PDFs have substantive alt text
• ☐ PDFs specify document language in metadata
• ☐ PDF document title is set in document properties
• ☐ No security settings block assistive technology access
• ☐ Scanned PDFs have been OCR-processed and tagged — image-only PDFs are non-compliant

Procedural Requirements

• ☐ Accessibility statement is published on the website and accurately reflects current conformance status
• ☐ Statement lists known non-conformances with explanation and planned remediation timeline
• ☐ Functional feedback mechanism is operational and monitored
• ☐ Accessibility statement is updated following significant content or feature changes
• ☐ Disproportionate burden claims (if applicable) are documented and filed with the relevant national authority

Frequently Asked Questions: European Accessibility Act and Websites

Does the EAA apply to websites of companies based outside the EU?

Yes. Any organization placing a covered product on the EU market or providing a covered service to EU consumers is subject to EAA requirements, regardless of where the organization is incorporated or headquartered. US, UK, and other non-EU businesses with EU customer bases are within scope.

What WCAG version does the EAA require?

The EAA references EN 301 549 V3.2.1 (March 2021) as its harmonized technical standard. EN 301 549 V3.2.1 incorporates WCAG 2.1 Level AA — W3C Recommendation June 5, 2018 — as the normative web accessibility requirement. WCAG 2.2 (W3C Recommendation October 5, 2023) is not yet incorporated into EN 301 549 V3.2.1, though building to WCAG 2.2 Level AA is forward-compatible with expected future standard revisions.

Are PDFs covered by EAA website requirements?

Yes. PDF documents made available through EAA-covered web services are subject to EN 301 549's document accessibility requirements. The applicable standard for PDF conformance is PDF/UA-1 — ISO 14289-1:2014. PDFs that lack a tag tree, use scanned images without OCR, or block assistive technology access are non-compliant.

What is the EAA enforcement date?

June 28, 2025 is the primary enforcement date for new products and services. Pre-existing service contracts have a transition window until June 28, 2030. There is no grace period for products or for new services launched after the enforcement date.

Is there an official EAA certification?

No central authority issues EAA certification. Compliance is demonstrated through conformance with EN 301 549, documented in an accessibility statement, and subject to audit by national market surveillance authorities. Third-party conformance audit reports provide stronger legal evidence than self-declaration alone, particularly for organizations in regulated sectors or with high EU market exposure.

How does the EAA differ from the EU Web Accessibility Directive?

The Web Accessibility Directive (2016/2102) applies to public sector bodies' websites and mobile applications. The EAA applies to the private sector across a defined set of product and service categories. Some organizations — government contractors, mixed public-private digital services — may have obligations under both directives simultaneously.

Does the microenterprise exemption apply to product manufacturers?

No. The microenterprise exemption — fewer than 10 employees and annual turnover or balance sheet total not exceeding €2 million — applies only to service providers. Manufacturers of covered products, regardless of size, must comply with EAA requirements.

Immediate Next Steps for EAA Website Compliance

Organizations with EU market exposure that have not yet completed a structured EAA gap analysis are operating with unquantified legal and reputational risk. The following five actions are executable within current planning cycles:

1. Conduct a scope determination audit: Map all web-based products and services against the EAA's enumerated categories. Document which services are in scope, which fall within the microenterprise or pre-existing contract transitions, and which require immediate action. Scope ambiguity should be resolved with external legal counsel familiar with the relevant member state's transposing legislation.
2. Commission a WCAG 2.1 Level AA conformance evaluation: Run both automated scanning (for coverage breadth) and manual assistive technology testing (NVDA, JAWS, VoiceOver) against all in-scope web interfaces. Document findings against EN 301 549 / WCAG 2.1 Level AA success criteria with remediation priority assignments.
3. Audit all PDFs accessible through in-scope websites: Identify every PDF linked from or embedded in covered services. Classify each as compliant, remediable, or requiring full reconstruction. Legacy documents without source files, scanned documents, and complex forms typically require professional PDF remediation against PDF/UA-1 — ISO 14289-1:2014 standards. RemeDocs provides structured remediation workflows for exactly this document class.
4. Draft and publish an accessibility statement: Create a conformance disclosure that accurately reflects current status, lists known gaps with remediation timelines, and includes a monitored feedback mechanism. Publish it at a consistent, findable URL — typically linked from the site footer.
5. Establish accessibility regression testing in your release pipeline: Integrate automated accessibility scanning into CI/CD workflows, assign accessibility sign-off requirements for new feature releases, and schedule quarterly manual testing cycles. EAA compliance is an ongoing operational state, not a project deliverable with a completion date.