Shopify EAA Compliance 2026: Avoid the €3M Accessibility Fine
8 min read
The Law Is Already in Effect — and Most Stores Are Not Compliant
On June 28, 2025, the European Accessibility Act (EAA) became enforceable across all 27 EU member states. If your Shopify store sells to customers in the EU — regardless of where your business is registered — your storefront, checkout, account pages, and order communications must meet WCAG 2.1 Level AA. There is no grace period, no soft launch, and no exemption for stores that "just sell to a few EU customers."
Almost a year later, the reality is sobering. Independent audits of mid-size European Shopify stores in early 2026 show that the overwhelming majority still have multiple Level A and Level AA violations on their live storefronts. Most merchants either don't know the law applies to them, assume their theme "handles it," or believe a generic accessibility widget bolted onto the page is enough. None of those assumptions are correct, and the fines for non-compliance are not theoretical.
This article explains exactly what the EAA requires for Shopify stores in 2026, what to actually fix, and how to keep your store compliant without bolting on yet another monthly subscription.
Almost a year later, the reality is sobering. Independent audits of mid-size European Shopify stores in early 2026 show that the overwhelming majority still have multiple Level A and Level AA violations on their live storefronts. Most merchants either don't know the law applies to them, assume their theme "handles it," or believe a generic accessibility widget bolted onto the page is enough. None of those assumptions are correct, and the fines for non-compliance are not theoretical.
This article explains exactly what the EAA requires for Shopify stores in 2026, what to actually fix, and how to keep your store compliant without bolting on yet another monthly subscription.
Who Has to Comply (And the Tiny Exemption Most Stores Don't Qualify For)
The EAA applies to any business that sells products or services to consumers in the EU. This is jurisdiction by destination, not by origin. A US-based Shopify store that ships to Germany falls under the EAA. A UK store selling to Ireland falls under the EAA. A Swiss store with EU customers falls under the EAA.
There is one narrow exemption: microenterprises providing services. This means fewer than 10 employees AND less than €2 million in annual turnover AND your offering is classified as a service (not a product). Almost no e-commerce store qualifies, because selling physical or digital goods is treated as providing a product, not a service. If you ship anything tangible or sell a downloadable product, you are not exempt, regardless of headcount or revenue.
The EAA also covers more than just your homepage. Every interactive element of the customer journey is in scope: product pages, search and filtering, cart, checkout, account creation, login, password reset, order confirmation pages, transactional emails, customer service chat widgets, and any embedded forms. If a screen reader user, a keyboard-only user, or someone with low vision cannot complete a purchase end-to-end, your store is in violation — even if the homepage looks fine.
There is one narrow exemption: microenterprises providing services. This means fewer than 10 employees AND less than €2 million in annual turnover AND your offering is classified as a service (not a product). Almost no e-commerce store qualifies, because selling physical or digital goods is treated as providing a product, not a service. If you ship anything tangible or sell a downloadable product, you are not exempt, regardless of headcount or revenue.
The EAA also covers more than just your homepage. Every interactive element of the customer journey is in scope: product pages, search and filtering, cart, checkout, account creation, login, password reset, order confirmation pages, transactional emails, customer service chat widgets, and any embedded forms. If a screen reader user, a keyboard-only user, or someone with low vision cannot complete a purchase end-to-end, your store is in violation — even if the homepage looks fine.
What WCAG 2.1 AA Actually Requires on a Shopify Store
WCAG 2.1 Level AA includes 50 testable success criteria. For a typical Shopify store, the violations cluster around the same handful of issues, and these are what we see flagged in real audits over and over again:
Color contrast (1.4.3, 1.4.11): Body text needs a contrast ratio of at least 4.5:1 against its background. Large text and UI components need at least 3:1. Most Shopify themes ship with light gray text or muted accent colors that fail by 10-30%. Product price tags shown in faded gray, "Add to cart" buttons in pastel shades, footer links at low opacity — all common failures.
Keyboard navigation (2.1.1, 2.4.7): Every interactive element must be reachable and operable using only a keyboard, and the currently focused element must be visibly highlighted. Custom dropdowns, image carousels, mega menus, modal dialogs, and "quick view" product overlays are repeatedly built without keyboard support.
Form labels and errors (1.3.1, 3.3.1, 3.3.2): Every form input needs a programmatically associated label. Error messages must be announced to screen readers and clearly identify which field has the problem. Most checkout customizations and contact forms fail at least one of these.
Image alt text (1.1.1): Every product image, banner, and decorative graphic needs appropriate alt text. Decorative images need empty alt attributes (not missing). Most Shopify stores have alt text that says something like "image1.jpg" or repeats the file name verbatim.
Page structure and headings (1.3.1, 2.4.6): Headings must be properly nested (one H1 per page, H2s for sections, H3s underneath). Many themes use heading tags purely for styling, producing pages with multiple H1s or H4s with no H3 above them.
Focus management in dynamic content (4.1.3): When a modal opens, focus must move into the modal. When it closes, focus must return to the trigger. When new content loads (filters, search results), screen readers must be informed. Most Shopify apps that inject content dynamically — popups, currency switchers, cart drawers — get this completely wrong.
Color contrast (1.4.3, 1.4.11): Body text needs a contrast ratio of at least 4.5:1 against its background. Large text and UI components need at least 3:1. Most Shopify themes ship with light gray text or muted accent colors that fail by 10-30%. Product price tags shown in faded gray, "Add to cart" buttons in pastel shades, footer links at low opacity — all common failures.
Keyboard navigation (2.1.1, 2.4.7): Every interactive element must be reachable and operable using only a keyboard, and the currently focused element must be visibly highlighted. Custom dropdowns, image carousels, mega menus, modal dialogs, and "quick view" product overlays are repeatedly built without keyboard support.
Form labels and errors (1.3.1, 3.3.1, 3.3.2): Every form input needs a programmatically associated label. Error messages must be announced to screen readers and clearly identify which field has the problem. Most checkout customizations and contact forms fail at least one of these.
Image alt text (1.1.1): Every product image, banner, and decorative graphic needs appropriate alt text. Decorative images need empty alt attributes (not missing). Most Shopify stores have alt text that says something like "image1.jpg" or repeats the file name verbatim.
Page structure and headings (1.3.1, 2.4.6): Headings must be properly nested (one H1 per page, H2s for sections, H3s underneath). Many themes use heading tags purely for styling, producing pages with multiple H1s or H4s with no H3 above them.
Focus management in dynamic content (4.1.3): When a modal opens, focus must move into the modal. When it closes, focus must return to the trigger. When new content loads (filters, search results), screen readers must be informed. Most Shopify apps that inject content dynamically — popups, currency switchers, cart drawers — get this completely wrong.
The Fines Are Real and Vary by Country
Each EU member state implemented its own enforcement and penalty scheme, and the ranges are wider than most merchants realize:
Germany: Up to €100,000 per violation under the BFSG (Barrierefreiheitsstärkungsgesetz), enforced by market surveillance authorities. Repeat or systematic violations can compound across multiple inspection cycles.
France: Up to €50,000 per non-compliant service for the first offense, doubling for subsequent violations under the loi handicap framework.
Italy: Up to 5% of turnover for the previous fiscal year, with a cap that has reached €40,000 per finding in published cases.
Spain: Penalties under General Law 11/2023 range from €30,000 (minor) to €600,000 (very serious) per infringement, with serious findings starting at €60,001.
Ireland: Up to €60,000 per offense, plus possible imprisonment for company directors in cases of willful or repeated non-compliance under the EAA Statutory Instrument.
Netherlands: Fines up to €103,000 plus the possibility of suspension orders that prohibit further sales until compliance is verified.
The most-cited overall ceiling is €3 million for serious systemic non-compliance, plus removal from the EU market. But the more common scenario is a complaint-driven investigation triggered by a single user — typically a customer with a disability who couldn't complete a purchase — leading to a €30,000 to €100,000 fine and a public compliance order. These investigations are increasingly automated: regulators use the same headless browser audit tools that an internal team would use, and they batch-scan retailers operating in their jurisdiction.
Germany: Up to €100,000 per violation under the BFSG (Barrierefreiheitsstärkungsgesetz), enforced by market surveillance authorities. Repeat or systematic violations can compound across multiple inspection cycles.
France: Up to €50,000 per non-compliant service for the first offense, doubling for subsequent violations under the loi handicap framework.
Italy: Up to 5% of turnover for the previous fiscal year, with a cap that has reached €40,000 per finding in published cases.
Spain: Penalties under General Law 11/2023 range from €30,000 (minor) to €600,000 (very serious) per infringement, with serious findings starting at €60,001.
Ireland: Up to €60,000 per offense, plus possible imprisonment for company directors in cases of willful or repeated non-compliance under the EAA Statutory Instrument.
Netherlands: Fines up to €103,000 plus the possibility of suspension orders that prohibit further sales until compliance is verified.
The most-cited overall ceiling is €3 million for serious systemic non-compliance, plus removal from the EU market. But the more common scenario is a complaint-driven investigation triggered by a single user — typically a customer with a disability who couldn't complete a purchase — leading to a €30,000 to €100,000 fine and a public compliance order. These investigations are increasingly automated: regulators use the same headless browser audit tools that an internal team would use, and they batch-scan retailers operating in their jurisdiction.
Why Accessibility Widgets Don't Work (And Can Make You Liable)
If you've shopped for an EAA solution, you've probably seen accessibility overlay widgets advertised as one-click compliance: install a script, get a little floating icon in the corner that lets users adjust contrast, font size, and pause animations. They cost €30-100/month and promise full WCAG conformance.
They don't work. Multiple high-profile lawsuits in the US (where similar ADA enforcement has been active much longer) have established that accessibility overlays do not provide legal compliance. Worse, in 2023-2025 a series of European cases involving overlay vendors found that the overlays themselves introduce new accessibility barriers — they interfere with users' own assistive technology, mislabel form elements, and trap keyboard focus inside the overlay's controls.
The European Disability Forum issued a public statement in 2024 explicitly warning that overlays do not constitute compliance under the EAA. Several national disability advocacy groups have begun publishing lists of stores using overlays as targets for complaint campaigns. Installing an overlay is now an active liability risk, not a defense.
The only path to real compliance is fixing the underlying HTML, CSS, JavaScript, and content of your storefront so it works correctly with the assistive technology your customers already have. That means working in your Shopify theme code, your apps, and any custom checkout extensions — not bolting on a script that pretends the problems don't exist.
They don't work. Multiple high-profile lawsuits in the US (where similar ADA enforcement has been active much longer) have established that accessibility overlays do not provide legal compliance. Worse, in 2023-2025 a series of European cases involving overlay vendors found that the overlays themselves introduce new accessibility barriers — they interfere with users' own assistive technology, mislabel form elements, and trap keyboard focus inside the overlay's controls.
The European Disability Forum issued a public statement in 2024 explicitly warning that overlays do not constitute compliance under the EAA. Several national disability advocacy groups have begun publishing lists of stores using overlays as targets for complaint campaigns. Installing an overlay is now an active liability risk, not a defense.
The only path to real compliance is fixing the underlying HTML, CSS, JavaScript, and content of your storefront so it works correctly with the assistive technology your customers already have. That means working in your Shopify theme code, your apps, and any custom checkout extensions — not bolting on a script that pretends the problems don't exist.
A Practical EAA Compliance Checklist for 2026
If you're starting from zero, here's the order we recommend stores work through:
1. Run an automated baseline scan. Tools like axe DevTools, WAVE, and Lighthouse's accessibility audit are free, browser-based, and catch about 30-40% of issues. They'll flag your most obvious contrast, alt text, and ARIA failures in five minutes.
2. Test the critical user journey by keyboard. Unplug your mouse. Tab through your homepage, product page, cart, and checkout. If you can't reach an element with Tab, can't activate a button with Enter, or can't see where you are on the page — that's a violation.
3. Test with a real screen reader. macOS has VoiceOver built in (Cmd+F5), Windows has Narrator (Win+Ctrl+Enter), and NVDA is a free download. Listen to your store the way blind users do. You'll find issues no automated tool catches.
4. Fix theme-level issues first. Color contrast, heading structure, alt text, form labels, and focus indicators are usually theme-level fixes. A developer can typically fix the most common Shopify theme accessibility failures in 15-30 hours of work.
5. Audit every Shopify app you've installed. This is where most stores get stuck. Apps that inject UI — popups, cart drawers, currency switchers, review widgets, chat bots — frequently break accessibility, and you can't fix code you don't own. The pragmatic answer is to remove apps that fail and either find a compliant alternative or build the functionality natively.
6. Document your compliance. The EAA requires a public Accessibility Statement on your storefront listing the standard you conform to (WCAG 2.1 AA), known limitations, the date of your last audit, and a contact for accessibility complaints. Missing this statement is itself a violation in several countries.
7. Build a re-audit cadence. A theme update, a new app, a checkout customization — any of these can break accessibility overnight. Re-running automated scans monthly and a full manual audit annually is the minimum sustainable practice.
For stores with a complex app stack — especially in the DACH region where enforcement has been most active — the cleanest path is often to consolidate. A custom-built solution that you own outright doesn't have the accessibility regressions that come from third-party apps updating their code without your input, and you control exactly what HTML reaches the customer. Services like NoRentApps design European Shopify apps with WCAG 2.1 AA compliance built in from the start, removing the risk that a vendor's next release silently breaks your compliance — and your protection against the next round of EAA complaints.
1. Run an automated baseline scan. Tools like axe DevTools, WAVE, and Lighthouse's accessibility audit are free, browser-based, and catch about 30-40% of issues. They'll flag your most obvious contrast, alt text, and ARIA failures in five minutes.
2. Test the critical user journey by keyboard. Unplug your mouse. Tab through your homepage, product page, cart, and checkout. If you can't reach an element with Tab, can't activate a button with Enter, or can't see where you are on the page — that's a violation.
3. Test with a real screen reader. macOS has VoiceOver built in (Cmd+F5), Windows has Narrator (Win+Ctrl+Enter), and NVDA is a free download. Listen to your store the way blind users do. You'll find issues no automated tool catches.
4. Fix theme-level issues first. Color contrast, heading structure, alt text, form labels, and focus indicators are usually theme-level fixes. A developer can typically fix the most common Shopify theme accessibility failures in 15-30 hours of work.
5. Audit every Shopify app you've installed. This is where most stores get stuck. Apps that inject UI — popups, cart drawers, currency switchers, review widgets, chat bots — frequently break accessibility, and you can't fix code you don't own. The pragmatic answer is to remove apps that fail and either find a compliant alternative or build the functionality natively.
6. Document your compliance. The EAA requires a public Accessibility Statement on your storefront listing the standard you conform to (WCAG 2.1 AA), known limitations, the date of your last audit, and a contact for accessibility complaints. Missing this statement is itself a violation in several countries.
7. Build a re-audit cadence. A theme update, a new app, a checkout customization — any of these can break accessibility overnight. Re-running automated scans monthly and a full manual audit annually is the minimum sustainable practice.
For stores with a complex app stack — especially in the DACH region where enforcement has been most active — the cleanest path is often to consolidate. A custom-built solution that you own outright doesn't have the accessibility regressions that come from third-party apps updating their code without your input, and you control exactly what HTML reaches the customer. Services like NoRentApps design European Shopify apps with WCAG 2.1 AA compliance built in from the start, removing the risk that a vendor's next release silently breaks your compliance — and your protection against the next round of EAA complaints.
FAQ
+Does the EAA apply to my Shopify store if I'm not based in the EU?
Yes. The EAA applies based on where your customers are located, not where your business is registered. If you ship to or serve consumers in any of the 27 EU member states, your store must meet WCAG 2.1 Level AA standards. The only narrow exemption is microenterprises providing services, which almost no e-commerce store qualifies for since selling goods is classified as a product, not a service.
+Will an accessibility widget or overlay make my Shopify store EAA-compliant?
No. Accessibility overlays do not provide legal compliance under the EAA, and the European Disability Forum has explicitly warned against them. Multiple cases have established that overlays often introduce new accessibility barriers by interfering with users' assistive technology. Real compliance requires fixing the underlying HTML, CSS, and JavaScript of your storefront, theme, and apps.
+What's the maximum fine for EAA non-compliance on a Shopify store?
The most-cited overall ceiling is €3 million for serious systemic non-compliance, plus possible removal from the EU market. In practice, most enforcement actions result in €30,000 to €100,000 fines per violation, depending on the country and severity. Germany's BFSG allows up to €100,000 per violation, Spain's General Law 11/2023 reaches €600,000 for very serious infringements, and Ireland's framework includes possible imprisonment for company directors in cases of willful non-compliance.