Security update: The recent PHP vulnerabilities don’t affect us. None of our products or infrastructure use PHP. We’ve also reviewed our app after the recent Shopify checkout phishing attack and ran Shopify’s new security check. No issues were found.

EU Compliance Guide

The European Accessibility Act for Shopify stores: who is covered and what the shop must meet

Since 28 June 2025 the European Accessibility Act applies to e-commerce services sold to consumers in the EU, wherever the shop is based. Here is who it covers, the exemption for businesses with fewer than ten staff and at most EUR 2 million turnover or balance sheet, what accessible means for a storefront and checkout, the public statement the law asks for, the fines in Germany, Austria and Ireland, and where a Shopify store starts.

Updated
Reading time
9 min
Source
EU law, cited in each section

The European Accessibility Act, Directive (EU) 2019/882, applies to e-commerce services provided to consumers after 28 June 2025. For a Shopify store that means the storefront, product pages, account, login, checkout and payment, in every EU country it sells to, wherever the company sits. It is a directive, so each country enforces it through its own law and its own fines. This page explains who is covered, the exemption for the smallest businesses, what “accessible” means in practice, the statement the law asks you to publish, and the national rules in the main markets. Complimus has no accessibility feature; this is the rule explained, not a product page.

In short

  • The law: Directive (EU) 2019/882, applied through national law to services provided to consumers after 28 June 2025 (Articles 2 and 31).
  • Who: anyone providing e-commerce services to consumers in the EU (Articles 2(2)(f) and 3(4)). B2C only; a pure B2B shop is outside the definition.
  • Exempt: microenterprises providing services: fewer than 10 staff and at most EUR 2 million turnover or balance sheet total (Articles 3(23) and 4(5)).
  • What: websites and apps that are perceivable, operable, understandable and robust (Annex I). The benchmark is EN 301 549, built on WCAG 2.1 AA; the Article 15 presumption of conformity applies once a version is cited in the Official Journal under this directive, which had not happened on 3 November 2026.
  • Also: a public statement on how the service meets the requirements (Article 13(2)), and a documented assessment where you claim a disproportionate burden (Article 14).
  • Penalties: national. Germany up to EUR 100,000, Austria up to EUR 80,000, Ireland up to EUR 60,000 on indictment.

1. Who is covered

“E-commerce services” are services provided at a distance, through websites and mobile apps, by electronic means and at the individual request of a consumer, with a view to concluding a consumer contract (Article 3(30)). A consumer is a natural person acting outside a trade or profession (Article 3(22)), so the Act covers B2C selling and not a shop that sells only to businesses. The provider is anyone who provides or offers such a service to consumers in the EU (Article 3(4)): the test is the market and the shopper, not the company's address.

Some content is out of scope (Article 2(4)): office files and media published before 28 June 2025, online maps, third-party content the shop neither funds nor controls, and archived content not updated since that date. Digital products sold through the shop are not listed products, so only the selling flow is covered; e-books with dedicated software are a separate scoped service.

2. The microenterprise exemption and disproportionate burden

A microenterprise employs fewer than 10 persons and has an annual turnover or an annual balance sheet total not exceeding EUR 2 million (Article 3(23)). Microenterprises providing services are exempt from the service requirements (Article 4(5)); the Irish CCPC reads it as the headcount test plus one of the financial tests. Larger businesses may invoke a disproportionate burden or a fundamental alteration of the service (Article 14), but only after an assessment against Annex VI, kept for five years and renewed when the service changes, and never where they received outside funding for accessibility. Outside the exemption, the authority of each country where the service is provided must be notified.

3. What accessible means for a storefront

Annex I asks for information that is perceivable through more than one sense, understandable, offered in text formats usable for alternatives, with readable fonts, sufficient contrast and adjustable spacing, and for websites and apps that are perceivable, operable, understandable and robust. For e-commerce it adds that identification, security and payment functions, electronic signatures and payment services meet the same four principles, and that the shop passes on the accessibility information the seller provides about the products it sells.

A service that complies with a harmonised standard cited in the Official Journal is presumed to meet the requirements the standard covers (Article 15). The standard prepared for it is EN 301 549. Version V3.2.1 builds on WCAG 2.1 and is cited under the Web Accessibility Directive for public bodies; version V4.1.1, published on 2 September 2026, moves the web baseline to WCAG 2.2 Level AA and adds a mapping to the Accessibility Act. Neither version had been cited in the Official Journal under this directive on 3 November 2026, so the Article 15 presumption is not yet available and EN 301 549 with WCAG 2.1 AA is the benchmark authorities work from, not a safe harbour. In practice a store checks the WCAG criteria: text contrast of at least 4.5 to 1, every control reachable by keyboard with visible focus, alternatives for images, labelled form fields and clear error messages.

4. The statement you must publish

A private provider of e-commerce services prepares the information in Annex V explaining how the service meets the accessibility requirements, publishes it in written and oral form in a way accessible to persons with disabilities, and keeps it for as long as the service runs (Article 13(2)). Where the service falls short, the provider corrects it and informs the authorities of the countries where the service is provided (Article 13(4)).

5. National laws and penalties

CountryLawAuthority and penalties
GermanyBarrierefreiheitsstärkungsgesetz (BFSG)E-commerce services in § 1(3) no. 5; microenterprise services exempt under § 3(3). A service that does not meet the requirements: a fine of up to EUR 100,000; information failures up to EUR 10,000 (§ 37).
AustriaBarrierefreiheitsgesetz (BaFG), BGBl. I No. 76/2023Supervised by the Sozialministeriumservice. Providing a service in breach: up to EUR 80,000, or EUR 50,000 for micro, small and medium enterprises; information failures up to EUR 40,000 (§ 36).
IrelandEuropean Union (Accessibility Requirements of Products and Services) Regulations 2023The CCPC is the compliance authority for e-commerce services. Per Coimisiún na Meán: on summary conviction up to EUR 5,000 or six months; on indictment up to EUR 60,000 or 18 months, or both.
SpainLey 11/2023, de 8 de mayoE-commerce services in Article 2(2)(f); microenterprises providing services exempt under Article 3(3). Market surveillance sits with the autonomous communities, with a state coordination unit.
ItalyDecreto legislativo 27 maggio 2022, n. 82Applied from 28 June 2025. AgID supervises service providers, including e-commerce, under its supervision regulation of 29 May 2026.
NetherlandsImplementation of Directive 2019/882The ACM supervises e-commerce services since 28 June 2025, and states that the duties apply to businesses with 10 or more staff or a turnover above EUR 2 million. The AFM covers banking and financial services.
PolandUstawa z dnia 26 kwietnia 2024 r. (Polski Akt o Dostępności)Applied from 28 June 2025, with general supervision by the President of PFRON.
FranceLoi n° 2023-171 du 9 mars 2023 and décret n° 2023-931; Code de la consommation art. L. 412-13The DGCCRF controls e-commerce services. Existing sites got no deferral.

Amounts above come from the national texts (Germany and Austria) or the national authority (Ireland), read on 3 November 2026. Where a country's fine is not listed, its law sets one and we have not confirmed the figure from a primary source.

6. Transition rules

Article 32 lets a provider keep using products it lawfully used for similar services before 28 June 2025 until 28 June 2030, and lets service contracts agreed before that date run unchanged until they expire, at most five years. The storefront itself gets no deferral: a shop serving consumers after 28 June 2025 must meet the requirements now.

7. First steps for a Shopify store

  • Check the thresholds: fewer than 10 staff and an annual turnover or balance sheet total of at most EUR 2 million means the service requirements do not apply; with 10 or more staff, or above EUR 2 million on both measures, they do.
  • Tab through the menu, product options, cart and checkout with the keyboard alone. Every control needs visible focus (WCAG 2.1.1 and 2.4.7).
  • Write alt text for product and banner images, and mark decorative ones as decorative (WCAG 1.1.1).
  • Check text and button contrast against 4.5 to 1, including sale badges and footer links (WCAG 1.4.3).
  • Give every form field a visible label and a clear error message, in checkout, account and newsletter forms (WCAG 3.3.1 and 3.3.2).
  • Publish the Article 13(2) statement on how the shop meets the requirements, and keep it current.

For the four EU shopping rules an app can carry, see the EU compliance apps overview.

Frequently asked questions

Does the European Accessibility Act apply to a small Shopify store?

Not if the store is a microenterprise: fewer than 10 staff and an annual turnover or balance sheet total of at most EUR 2 million (Article 3(23)). Microenterprises providing services are exempt from the service requirements (Article 4(5)). With 10 or more staff, or above EUR 2 million on both turnover and balance sheet, the Act applies.

Does it apply to a store based outside the EU?

Yes. A service provider is anyone who provides or offers a service to consumers in the EU (Article 3(4)), so a UK or US store selling to EU consumers is covered and answers to the authority of each country it sells in.

What does accessible mean for an online shop?

The website and checkout must be perceivable, operable, understandable and robust (Annex I). The benchmark is EN 301 549, built on WCAG 2.1 Level AA. Article 15 gives a presumption of conformity once a standard is cited in the Official Journal under this directive; on 3 November 2026 that citation was still pending.

Is there a transition period for existing shops?

Not for the shop itself. Article 32 lets a provider keep using products it used before 28 June 2025 until 28 June 2030 and lets older service contracts run out, but a storefront serving consumers after 28 June 2025 must meet the requirements.

Does Complimus make a Shopify store accessible?

No. Complimus covers four other EU rules: the Omnibus prior price, GPSR product safety details, the EU guarantee notice and the withdrawal button. Accessibility is a theme, content and checkout matter, and this page only explains the rules.
Omnibus, GPSR, guarantee notice, withdrawals.
Install Complimus and set up the four EU shopping rules from one app. No code.
Install from Shopify