EAA Enforcement: Germany & France First-Wave Cases (2026 Update)

The European Accessibility Act took practical effect across Member States on June 28, 2025. Through the second half of 2025 and into Q1-Q2 2026, the first wave of enforcement actions has emerged, and the pattern is clarifying. Germany (BAuA + BFSG) and France (DGCCRF + national accessibility authority) have been the most publicly active enforcement jurisdictions. This article walks through actual enforcement examples, the legal mechanisms invoked, and what Shopify and ecommerce merchants can learn from the early cases.

What's the General Shape of First-Wave EAA Enforcement?

Three patterns have crystallized. First, complaint-driven investigations dominate over proactive enforcement. Member-State authorities aren't running unilateral compliance scans of every ecommerce site; they're processing complaints submitted by consumers (often consumers with disabilities, often through accessibility-advocacy organizations). Second, Member States have varied enforcement readiness. Germany (BAuA) and the Netherlands have processed the most complaints publicly; France was slower in early 2025 but accelerated through Q4 2025 and Q1 2026. Spain and Italy lag in publicly-reported actions. Third, first-wave fines are calibrated as deterrent rather than punishment. Most observed fines fall in the €5,000-€25,000 range — meaningful enough to motivate compliance, structured to encourage remediation rather than impose existential cost.

For broader EAA-enforcement context, see first European Accessibility Act lawsuits France 2025 and EAA penalties and enforcement.

What Has Germany's BAuA Done in 2025-2026?

Germany's BAuA (*Bundesanstalt für Arbeitsschutz und Arbeitsmedizin*) has been the most publicly active Member-State authority. Patterns observed: BAuA published its complaint portal in mid-2025, accumulated approximately 3,000-5,000 consumer complaints in the first six months of operation per public reporting, and has issued formal compliance inquiries to several hundred ecommerce operators including some US-headquartered Shopify brands.

The BAuA inquiry pattern: consumer complaint received, BAuA forwards to merchant within 30 days, merchant has 30-60 days to respond with compliance documentation or remediation plan, BAuA reviews response, formal investigation opens for non-responsive or non-compliant merchants, fine issued for confirmed violations. Through Q1 2026, public reports indicate roughly 50-100 fines have been issued under BFSG/EAA, predominantly in the €5,000-€25,000 range, with several €50,000+ fines for willful or repeat non-compliance. For Germany-specific guidance, see our EAA + BFSG for Shopify stores selling to Germany.

What Has France Done?

France's enforcement structure splits between consumer-protection (DGCCRF — Direction Générale de la Concurrence, de la Consommation et de la Répression des Fraudes) and accessibility-specific (DINUM — Direction interministérielle du numérique — which oversees public-sector accessibility but interfaces with private-sector enforcement). The complaint mechanism for private ecommerce flows primarily through DGCCRF.

French enforcement was slower to ramp than Germany's, partly because of administrative-organizational integration of EAA implementation across multiple ministries. Through Q4 2025 and Q1 2026, French enforcement actions have included: formal compliance inquiries to roughly 100-200 ecommerce operators, approximately 20-40 fines issued (most under €15,000), and several high-profile cases against French-headquartered ecommerce brands that attracted press coverage. The pattern matches Germany's: complaint-driven, calibrated as deterrent, focused on motivating remediation rather than maximum fine. For broader French context, see first European Accessibility Act lawsuits France 2025.

What Are the Specific Lessons from First-Wave Cases?

Response time matters more than perfect remediation status. Merchants who responded promptly to BAuA or DGCCRF inquiries (within the 30-60 day window) with remediation plans typically resolved at the inquiry stage without fine. Merchants who didn't respond or responded late typically progressed to formal investigation and fine. Accessibility statement publication is the most-frequently-cited compliance gap. Many merchants receiving inquiries had accessibility issues but no published statement; the statement is structurally simple to publish and disproportionately important in compliance posture.

Overlay widgets do not satisfy enforcement scrutiny. Merchants citing AccessiBe, UserWay, or similar overlays as their compliance approach received unsatisfied responses from supervisory authorities; the underlying source-code WCAG violations remained the basis for finding non-compliance. Multi-language storefront language requirements matter. Brands with German-language pages but no German-language accessibility statement specifically faced higher scrutiny in Germany than brands with consistent statement-language alignment. For the overlay-context specifically, see accessibility overlays vs source code remediation Shopify.

What Categories of Merchants Have Been Investigated?

Per public reporting, the investigated-merchant pool has skewed toward: large EU-headquartered ecommerce brands (most easily identifiable by Member-State authorities), US-headquartered direct-to-consumer brands with significant EU shipping volume (identified through consumer complaints from EU-resident customers), travel and digital-services brands (where accessibility barriers in booking flows generated frequent complaints), and brands with accessibility overlay widgets installed (the marketing-promise gap drew complaint volume).

For Shopify merchants specifically, the investigation pattern has favored brands with €1M+ EU turnover. Brands below that threshold have received fewer inquiries; brands above have received proportionally more. For broader context, see EAA impact on US ecommerce brands selling to EU and EAA timeline and deadlines.

How Should Shopify Merchants Read These Early Cases?

Three operational implications. Establish responsive-posture before receiving an inquiry. Designated EU representative, accessibility statement published in relevant Member-State languages, documented remediation status with date-stamped evidence — these reduce time-to-respond when an inquiry arrives. Treat the first inquiry as the meaningful action point, not the first fine. Most fines are imposed because merchants didn't respond or responded inadequately; inquiry-stage response is where most merchants resolve. Source-code remediation, not overlay, is the operational compliance approach. Member-State authorities have been consistent in finding overlay-only postures insufficient; source-code remediation is the structural answer.

For Shopify-specific implementation, see our Shopify accessibility audit checklist WCAG 2.2 Liquid and Shopify accessibility statement template generator.

What Does TestParty's Approach Look Like?

TestParty supports EAA/BFSG/national-implementation compliance across EU Member States. Approach: source-code remediation against WCAG 2.2 AA mapped to EN 301 549, accessibility statement template generation per Member-State language and content requirements, accessibility-feedback channel implementation with appropriate language routing, daily automated scans plus monthly expert manual audits, date-stamped compliance reports formatted for supervisory-authority inquiry response. Compliance scope spans ADA Title III, WCAG 2.2 AA, EAA Directive 2019/882, BFSG, BITV 2.0 alignment, CIPA, and GDPR. TestParty was named to the Forbes Accessibility 100 in 2025 and has remediated 1,575,000+ WCAG issues across 100+ brands.

For US-headquartered Shopify brands new to EU compliance, our typical engagement: initial audit and Member-State-language statement preparation (week 1-2), remediation plan and prioritization (week 2-3), source-code remediation execution (weeks 3-12), conformance verification and statement publication (weeks 12-14). Brands launching this process in April 2026 reach EAA conformance in Q3 2026 — well-positioned for any Q4 2026 enforcement inquiries.

Frequently Asked Questions

How quickly should we respond to a BAuA or DGCCRF inquiry? Within 30 days of receipt, ideally with a substantive remediation plan rather than just an acknowledgment. Authorities calibrate fine severity based on response-completeness and timeliness. Acknowledgment-only responses delay but don't resolve; remediation-plan responses with timelines typically close inquiries at the inquiry stage.

Can we contest jurisdiction if we don't have an EU representative? Possibly, but the practical posture is unfavorable. Member-State authorities can issue findings and fines in absentia; cross-border enforcement is operationally slower but available. Designating an EU representative and engaging with the inquiry is structurally preferable to contesting jurisdiction.

What if our overlay vendor claims their widget satisfies EAA? Document the claim in writing from the vendor and present it to the supervisory authority alongside your compliance response. The supervisory authority will independently evaluate the storefront's WCAG 2.2 AA conformance regardless of the overlay's marketing claims; in practice, overlay-only postures have not been found compliant in 2025-2026 enforcement actions.

Are these cases public records we can read? Some are, some aren't. BAuA publishes summary statistics but generally redacts merchant names in public reports. DGCCRF publishes higher-profile cases as press releases. Most individual merchant cases remain confidential. Industry reporting (in trade publications and accessibility-advocacy publications) provides additional case-level visibility.

What's the trend in fine sizes over 2025-2026? Fines have remained calibrated at deterrent rather than punitive levels through Q1 2026. Average German fine ~€10,000-€20,000; average French fine ~€5,000-€15,000. Repeat-violator fines and willful-violation fines have hit €50,000+ in several reported cases. We expect calibrated fines to continue into 2026; Member States are likely to adjust upward for repeat or willful violations as the regime matures.

How does cross-border enforcement actually work? EU Member States cooperate on cross-border cases via formal coordination mechanisms. A French merchant with a complaint from a German consumer can be investigated by either French authorities (DGCCRF) or German authorities (BAuA) depending on case specifics. For US-headquartered merchants, investigation typically originates in the Member State where the consumer lodged the complaint; cross-Member-State coordination follows if the merchant operates in multiple Member States.

What documentation should we keep ready in case of inquiry? Five things: current accessibility statement with date of last review, remediation history with date-stamped issue lists and resolution actions, automated scan reports from a recognized scanning tool (axe, WAVE, or platform-equivalent), expert manual audit reports if available, and EU-representative designation if applicable. This package satisfies most supervisory-authority inquiries when presented within the 30-60 day response window.

Are these enforcement patterns expected to expand to other Member States in 2026? Yes. Spain, Italy, and the Netherlands have all stated intentions to ramp enforcement through 2026. Smaller Member States (Belgium, Austria, Ireland) are operationalizing more slowly but are expected to follow Germany and France's pattern. By Q4 2026, we expect 8-12 Member States to have active enforcement programs.

Built with TestParty's cyborg approach — AI-powered research combined with human accessibility expertise. This article contains TestParty's editorial analysis based on publicly available information. We're an accessibility vendor with opinions informed by working with 100+ brands, and we encourage readers to do their own due diligence when evaluating any solution.