Lumosh // Shutterstock
One year after the European Accessibility Act, most businesses are still catching up
Eight years ago, GDPR became enforceable across the European Union. The first two years were quiet enough that plenty of organizations took the silence as a sign the urgency had been overstated. Then came Google’s 50 million euro fine in 2019 and Meta’s record-breaking 1.2 billion euro fine in 2023. The organizations that had waited were suddenly doing the work twice: the retrofit, the fine, and then the long process of earning back customer trust.
The European Accessibility Act (EAA) is at that same point on the curve right now, AudioEye reports. And new data from AudioEye’s 2026 Digital Accessibility Index shows just how much ground remains to close.
One year in, the accessibility gap between EU and US sites is still wide
AudioEye scanned more than 166,000 web pages across seven industries for its 2026 Digital Accessibility Index, including sites in both the U.S. and the EU. One year after the EAA took effect, EU sites average 25% more accessibility issues per page than their U.S. counterparts. That gap showed up across nearly every industry measured: EU professional services sites carry 44% more issues per page than comparable U.S. sites. Public and nonprofit organizations run 42% higher. Industrial and manufacturing sites are 41% behind.
The one exception is tech. EU tech companies are essentially on par with U.S. tech companies, not because they prioritized accessibility for its own sake, but because their enterprise buyers required it. Procurement standards and B2B sales cycles pushed accessibility up the priority stack, and the gap closed. Every other industry is still waiting for that same pressure to arrive.
It’s worth noting that the same five Web Content Accessibility Guidelines (WCAG) failures account for 40% of all detected issues globally: missing image alt text, inaccessible link labels, unlabeled buttons and form fields, insufficient color contrast, and missing keyboard skip navigation. These issues that prevent users from completing basic tasks are the same ones that appear most often in litigation.
Enforcement is already underway across multiple countries and mechanisms
The EAA didn’t produce a headline fine in year one. What it produced instead was something more instructive: enforcement starting in pieces, across different countries, through different mechanisms, on different timelines. That’s exactly how GDPR started as well.
Within days of the June 28, 2025, deadline, French disability organizations issued formal legal notices to four major retailers demanding their e-commerce platforms meet accessibility standards. When those responses proved inadequate, emergency injunctions followed in a French court. Those cases are still pending, but the precedent they set is significant: In France, civil society actors with legal standing are driving enforcement, on a timeline that doesn’t run through a government agency.
In Norway, a healthcare portal faced daily fines of 50,000 Norwegian kroner after an inspection found 119 accessibility errors. In Germany, e-commerce operators began receiving warning letters citing accessibility violations within weeks of the EAA taking effect. In the Netherlands, companies that failed to proactively report their accessibility compliance status to regulators by October 2025 are now flagged for follow-up audits.
None of these is anything like the Meta fine. But neither was Google’s 50 million euros, at the time.
GDPR taught a lesson that goes beyond the fines. The cost of unpreparedness didn’t start when enforcement arrived. It started the moment the gap existed, because users were already experiencing the consequences. The fine was the visible cost. The erosion of trust was the real one.
The same dynamic applies to accessibility. According to the Click-Away Pound report, 71% of users with disabilities leave sites they find difficult to use, highlighting that often, the damage doesn’t show up as a complaint but as a conversion that never happened, a customer who doesn’t come back, a referral that never gets made.
The organizations that moved early on GDPR avoided the fine, and something more valuable came with it: an audience their competitors couldn’t buy back, and trust that took years to build. That’s the choice sitting in front of every business right now: wait for the fines to come, or get ahead of them and build that same advantage. The EAA is one year in. The GDPR timeline took about five years to go from quiet enforcement to billion-euro fines. The businesses that act now will spend the next few years building trust.
This story was produced by AudioEye and reviewed and distributed by Stacker.
