The EAA compliance timeline: what already happened, and what's next

If you've been putting off EAA compliance because it still feels like a future deadline, it's worth being precise about where things actually stand — because the deadline itself isn't in the future anymore.

What already happened

• 28 June 2025 — the EAA's compliance obligation took effect across the EU. All 27 member states had transposed the directive into national law by this point, each with its own enforcement mechanism and penalty structure.
• November 2025 — the first EAA lawsuits were filed, in France.
• Within weeks of the deadline, in Germany — private actors reportedly began sending warning letters to non-compliant sites, a faster-moving and less formal risk than waiting for a government enforcement action.
• Through 2026 — the Netherlands and other member states have signaled active enforcement plans, building on the legal and administrative machinery that was already in place at the June 2025 deadline.

As of mid-2026, no confirmed government fines specifically issued under national EAA-implementing laws had been publicly verified — but that's a very different statement from "there's no real risk yet." Legal notices have been filed, warning letters are circulating, and every mechanism needed for enforcement (fines up to and above €1 million in some member states, mandatory audits, product/service withdrawal, and in some countries public naming of non-compliant organizations) is already active law, not pending legislation.

What's coming next

• EN 301 549 V4.1.1 — the version expected to incorporate WCAG 2.2 — hasn't been formally adopted as the operative EAA standard yet. When it is, the technical bar shifts from WCAG 2.1 AA to WCAG 2.2 AA, adding 9 new success criteria around focus visibility, target size, and authentication.
• More member-state enforcement activity. France has already moved from law to litigation; other member states building out their own enforcement capacity through 2026 means the "nobody's actually enforcing this yet" argument gets weaker with each passing month, not stronger.
• Continued private-actor pressure, independent of formal government enforcement — Germany's early warning-letter pattern suggests this dynamic can appear in other member states too, ahead of any specific regulator action.

What this means if you haven't addressed it yet

The deadline that mattered has already passed. The honest current state isn't "urgent crisis, act today or face immediate fines" — no confirmed fines existed as of mid-2026 — but it's also not "there's plenty of time," because the entire enforcement apparatus (national laws, penalty structures, and in France's case, actual filed lawsuits) is already live and active, not hypothetical.

If you don't currently know whether your site meets WCAG 2.1 AA or has a compliant accessibility statement, that's the actual gap to close, and it's independent of whether a specific enforcement action against your business has happened yet. Check your website for free to see where you stand today, or see pricing for a full audit and statement.

Enforcement figures and dates above are sourced from published national transposition summaries and public reporting as of mid-2026 — treat this as a snapshot of the current landscape, not a permanently fixed timeline, and confirm current enforcement status for your specific member state before making a compliance decision based on it.