EAA Penalties Decoded: A Country-by-Country Fine Schedule for Shopify Merchants
TABLE OF CONTENTS
- How Are EAA Penalties Structured at the EU Level?
- Germany: BFSG Penalties Up to €100,000 Per Violation
- France: Fines Up to €50,000 With CNIL/Defender of Rights Pathways
- Spain: €6,000 to €60,000 Tiered by Violation Severity
- Italy: Stanca Act + EAA Transposition With AGID Oversight
- Ireland: Aggressive Penalties Up to €60,000 + Daily Fines
- Netherlands: Tiered Fines With Strong Authority Coordination
- Other EU Member States: Range and Themes
- How Do I Estimate My Shopify Store's EAA Penalty Exposure?
- What Should I Do if I Receive an EAA Compliance Notice?
- Frequently Asked Questions
The European Accessibility Act sets a framework requiring penalties to be "effective, proportionate, and dissuasive," but it leaves the specifics to each EU member state. The result is a patchwork: Germany's fines max around €100,000 per violation; Ireland's go higher; some countries pair fines with market removal orders. For a Shopify merchant selling across the EU, understanding the per-country schedule is the difference between budgeting for a worst-case enforcement and being surprised. This article maps the schedule for the major EU markets and explains how to estimate exposure for your store.
How Are EAA Penalties Structured at the EU Level?
The EAA Directive 2019/882 requires member states to set penalties that are effective, proportionate, and dissuasive — language inherited from the GDPR enforcement framework. What that translates to in practice varies by country, but four common penalty mechanisms appear across implementations: per-violation administrative fines, daily fines for ongoing non-compliance, market surveillance removal orders, and disclosure orders requiring public notice of the violation.
Crucially, EAA enforcement happens through national market surveillance authorities — not private litigation as under the ADA. That changes both the risk profile and the response posture. There is typically a complaint phase, an investigation phase, and a formal decision before fines escalate, which gives merchants a window to remediate. The window is narrow but real.
For broader context on the directive itself, see our EAA compliance guide for Shopify.
Germany: BFSG Penalties Up to €100,000 Per Violation
Germany's transposition of the EAA is the Barrierefreiheitsstärkungsgesetz (BFSG), in force since June 28, 2025. Enforcement is led by the Bundesanstalt für Arbeitsschutz und Arbeitsmedizin (BAuA), Germany's federal occupational safety and health agency. Per-violation administrative fines reach €100,000.
Beyond the fine, the BAuA can order a non-compliant service removed from the German market — meaning your Shopify store could be blocked from accepting orders shipping to Germany. The agency can also impose disclosure orders. Germany matters disproportionately because it is the EU's largest ecommerce market — €54.2 billion in 2024 — and a 2024 survey by D21 ahead of BFSG enforcement found that 75% of Germany's most-visited online shops were not accessible. That base rate gives the BAuA an extensive enforcement field.
For Germany-specific implementation steps, see our forthcoming EAA + BFSG for Shopify stores selling to Germany.
France: Fines Up to €50,000 With CNIL/Defender of Rights Pathways
France enforces accessibility through a combination of the Référentiel Général d'Accessibilité (RGAA) and the EAA transposition. The penalty range for digital accessibility non-compliance reaches €50,000 per first violation, with escalating fines for non-remediation. The Défenseur des droits (Defender of Rights) handles individual complaints; the digital-accessibility regulator within the DINUM handles formal compliance audits.
France additionally requires a public accessibility statement for online services, and failure to publish one is itself a separate violation. French enforcement has historically targeted public-sector sites under RGAA; the EAA transposition extends private-sector enforcement. The 50-point RGAA audit checklist is the most prescriptive in the EU.
Spain: €6,000 to €60,000 Tiered by Violation Severity
Spain transposed the EAA via Ley 11/2023, passed in 2023 with full enforcement from June 2025. The Spanish penalty range is tiered: minor violations €6,000 to €30,000, major violations €30,001 to €60,000. Enforcement is handled by the Ministry of Inclusion, with audits conducted at the regional level by autonomous communities.
Beyond fines, Spanish authorities can publish lists of non-compliant sites — a reputational penalty that has driven faster remediation than some financial fines. Spain's ecommerce market grew at 12.1% annually (highest in the EU), making it a high-priority enforcement market for cross-border sellers.
Italy: Stanca Act + EAA Transposition With AGID Oversight
Italy operates under the long-standing Stanca Act (Law 4/2004) — Europe's oldest web accessibility law — plus the EAA transposition. The Agenzia per l'Italia Digitale (AGID) oversees compliance. Penalties scale by company size and violation count, and AGID publishes a compliance dashboard for major Italian sites.
Italian enforcement has historically focused on public-sector sites, but the EAA transposition extends private-sector reach with explicit ecommerce service inclusion. Italy's ecommerce market is €17.9 billion with 60% mobile traffic — accessibility violations on mobile checkout flows have been a documented enforcement focus.
Ireland: Aggressive Penalties Up to €60,000 + Daily Fines
Ireland's EAA transposition is notable for its high ceiling and explicit daily-fine mechanism. The Disability Act 2005 framework, extended through EAA transposition, allows fines up to €60,000 per violation plus daily ongoing-non-compliance penalties. Ireland's National Disability Authority (NDA) coordinates with the Workplace Relations Commission and consumer protection authorities for enforcement.
Ireland's penalty structure is more aggressive than its market size would suggest because of the country's role as European HQ for many US tech and ecommerce companies. A US-based Shopify Plus brand with European operations frequently has Irish-entity exposure regardless of where it ships from.
Netherlands: Tiered Fines With Strong Authority Coordination
The Netherlands enforces accessibility through the Authority for Consumers and Markets (ACM) and the College for Human Rights. EAA transposition fines range up to €87,000 per violation, with daily-fine mechanisms for repeat or ongoing violations.
The Dutch authority coordinates closely with German and Belgian regulators on cross-border ecommerce cases — meaning a single non-compliant Shopify storefront that sells across Benelux can trigger multi-jurisdictional enforcement. Dutch courts have also been receptive to consumer-organization collective complaints, which can scale enforcement reach.
Other EU Member States: Range and Themes
Across the rest of the EU, penalty schedules cluster in three groupings. The high-fine group (Belgium, Sweden, Denmark) reaches €50,000 to €100,000 per violation with relatively active enforcement. The mid-tier group (Austria, Portugal, Czech Republic, Poland) sits at €10,000 to €50,000 per violation with developing enforcement infrastructure. The lower-fine group (Greece, Romania, Bulgaria, Slovakia) tops out at €5,000 to €25,000 per violation, though enforcement is less mature.
A common pattern across all groups: market removal orders can apply regardless of the financial fine, and they often have higher operational impact than the fine itself. Losing the ability to accept orders from a member state is more expensive than a €50,000 fine for most ecommerce brands.
How Do I Estimate My Shopify Store's EAA Penalty Exposure?
Three inputs. First, identify your EU member-state exposure: in which countries do you have customers, accept orders, or actively market? Each country adds its own potential fine ceiling. Second, count discrete violations on your store: each accessibility barrier (missing alt text, inaccessible checkout, missing accessibility statement, inaccessible PDF invoice) is potentially a separate violation. A store with 50 distinct WCAG failures could theoretically face 50× the per-violation fine in worst cases, though enforcement typically aggregates similar violations. Third, factor remediation timeline: most member states reduce or suspend penalties for documented active remediation, which is why the response posture matters as much as the gross exposure number.
For a working compliance plan, see our EAA compliance action list for online stores. For an EU-specific status check, see our EAA status check for EU-selling Shopify stores.
What Should I Do if I Receive an EAA Compliance Notice?
Five steps. First, do not ignore it — most member-state authorities offer remediation windows (typically 30 to 90 days) that vanish if the notice is unanswered. Second, document your current state with an accessibility audit and capture exactly what is non-compliant. Third, publish (or update) your accessibility statement disclosing the gap and remediation plan — this is itself a separate EAA requirement that authorities will check. Fourth, begin remediation immediately, prioritizing the violations cited in the notice. Fifth, communicate with the authority on remediation milestones — most authorities reduce penalty exposure for transparent, time-bound remediation.
TestParty's standard EAA-targeted remediation completes in 14 days for theme- and app-layer issues, with a 30-to-60-day full-site path for content debt. In our experience working with Shopify brands selling across the EU, including customers based in Germany, Spain, and Ireland, this remediation pace is consistent with member-state expectations for active compliance.
Frequently Asked Questions
Are EAA penalties cumulative across member states? Yes, in principle. A Shopify store selling to multiple EU member states could face separate enforcement actions in each. In practice, member-state authorities increasingly coordinate — particularly Germany-Netherlands-Belgium — and a remediation plan accepted by one major authority is often persuasive to others.
Does the EAA's micro-enterprise exemption apply to my Shopify store? The exemption applies to businesses with fewer than 10 employees AND less than €2 million in annual turnover. Both conditions must be met. Most Shopify merchants selling internationally cross at least one threshold and are not exempt.
What's the difference between EAA penalties and ADA settlement amounts? EAA penalties are administrative fines imposed by government regulators. ADA settlement amounts are negotiated outcomes of private litigation. EAA enforcement is proactive — authorities can audit without a complaint — while ADA enforcement is reactive (someone must sue you). The dollar amounts overlap but the dynamics differ.
Can EAA fines be appealed? Yes. Each member state has an administrative appeal process; many also allow judicial review. Successful appeals typically center on procedural defects, the proportionality test, or evidence that remediation was already underway. The appeal window is short, often 30 days from notice.
Do EAA penalties apply if I block EU shipping? If you genuinely block EU orders — no EU shipping, no EU currencies, geo-blocking EU IP addresses — you may fall outside the EAA's scope. Simply removing EU shipping without blocking access may not be sufficient, as some national interpretations consider mere availability of a website to EU consumers as in-scope. Consult an attorney familiar with EU digital accessibility law before relying on this approach.
How quickly do member-state authorities issue penalties after a violation is found? Typically there is a notice-and-investigation phase (30 to 120 days depending on country) before formal penalty assessment. Most authorities prefer remediation to penalty. The fastest enforcement cycle we have observed in EU markets is roughly 90 days from initial complaint to formal decision.
Are individual store owners personally liable, or is it the entity? EAA enforcement targets the legal entity operating the service. Personal liability is rare in standard cases but possible in willful-violation circumstances under some national implementations (notably Ireland and Spain).
Does an accessibility statement protect against EAA penalties? Publishing an accessibility statement is itself a separate EAA requirement, so omitting one is its own violation. A clear statement disclosing known issues and a remediation plan does not insulate from penalties for the underlying violations, but it can support a finding of good-faith remediation that reduces or suspends penalties.
Humans + AI = this article. TestParty uses a cyborg approach to content — combining human accessibility expertise with AI capabilities to produce accurate, comprehensive guides. This content is for educational purposes and reflects our analysis of publicly available information as of the publication date. TestParty competes in the digital accessibility market, and we encourage readers to evaluate all solutions independently based on their specific needs.
Stay informed
Accessibility insights delivered
straight to your inbox.


Automate the software work for accessibility compliance, end-to-end.
Empowering businesses with seamless digital accessibility solutions—simple, inclusive, effective.
Book a Demo