The letter arrived in August 2025 — not from a regulator, not from a disability rights organisation. It came from a law firm representing a competitor, citing accessibility failures under Germany's BFSG, and demanding remediation, cost reimbursement, and a cease-and-desist undertaking. This is Abmahnung enforcement, and it started within weeks of Germany's accessibility law taking effect.
See our EAA compliance guide for the underlying WCAG requirements BFSG enforces.
Germany's Barrierefreiheitsstärkungsgesetz (BFSG) — the Accessibility Strengthening Act, Germany's national transposition of the European Accessibility Act — came into force on June 28, 2025. What makes Germany's implementation uniquely aggressive is a legal mechanism that exists nowhere else in EU accessibility enforcement: private competitor warnings under the UWG (Gesetz gegen den unlauteren Wettbewerb — Unfair Competition Act).
How Abmahnungen Work — and Why They Are a Distinct Threat
In most EU countries, EAA enforcement flows from regulatory agencies: a government body audits compliance and issues penalties. In Germany, a parallel track exists through competition law.
Under § 3a of the UWG, violations of market conduct regulations can be enforced by competitors — not just regulators. Law firms and competitors have taken the position that BFSG accessibility requirements qualify as market conduct regulations. If that position is upheld by German courts, any competitor can send you a formal warning letter (Abmahnung) claiming your inaccessible site constitutes unfair competition, and demand:
- Immediate remediation
- A cease-and-desist undertaking (Unterlassungserklärung) with penalty clause
- Reimbursement of legal costs (typically €600–€2,500 per letter)
- Potentially damages
This mechanism is well-established in German competition law — it was used extensively after GDPR took effect in 2018 — and it creates enforcement pressure that doesn't depend on government agency capacity or prioritisation.
What Happened in August 2025
Within weeks of the BFSG taking effect, e-commerce operators in Germany began receiving Abmahnungen citing accessibility violations. Legal assessments from specialist firms including Heuking, IT-Recht-Kanzlei, and Mueller.legal characterised many early warning letters as legally weak — the legal basis for UWG enforcement of BFSG violations is contested, and no German court has yet issued a definitive ruling.
As of May 2026, these cases remain pending. That legal uncertainty cuts both ways:
- Businesses receiving Abmahnungen cannot dismiss them outright — they require legal response
- The legal costs of responding exceed the cost of proactive remediation in most cases
- If courts ultimately uphold the UWG enforcement mechanism, the volume of Abmahnungen could increase dramatically
The pattern mirrors the early months after GDPR — a period of legal uncertainty where enforcement mechanisms were being tested, followed by escalating formal action as the legal framework clarified.
The Regulatory Track Runs Separately
The Abmahnungen story is only half the picture. Germany's BFSG also operates through the regulatory track — the Bundesnetzagentur (Federal Network Agency) and BFIT (Federal Competence Center for Accessible IT) oversee compliance and can impose fines of up to €100,000 per violation.
| Enforcement Mechanism | Who Initiates | Timing | Max Penalty |
|---|
| Abmahnung (UWG) | Competitor + law firm | Immediate — began August 2025 | Legal costs + damages |
| Regulatory fine (BFSG) | Bundesnetzagentur / BFIT | Formal process — 2026+ expected | €100,000 per violation |
| EAA fine (EU level) | National agencies | As enforcement matures | Up to €100,000 per violation |
| Market removal | Regulatory authority | For systematic non-compliance | Loss of right to operate in German market |
For businesses with significant German revenue, the regulatory fine route represents the larger financial exposure. €100,000 per violation, applied across multiple failed WCAG criteria on multiple pages, produces a liability figure that makes proactive accessibility investment look inexpensive by comparison.
What the BFSG Requires Technically
The BFSG adopts the same technical standard as the broader EAA: EN 301 549 v3.2.1, which incorporates WCAG 2.1 Level AA as the web content accessibility standard. An updated version incorporating WCAG 2.2 is expected in late 2026.
Practically, BFSG compliance means your Germany-facing digital presence must meet these requirements:
| Category | What It Covers | Common Failure Mode |
|---|
| Perceivable | Alt text, captions, contrast ratios, adaptable content | Product images without alt text; low-contrast promotional banners |
| Operable | Keyboard navigation, timing, seizure prevention, focus indicators | Popups that can't be keyboard-dismissed; navigation without visible focus |
| Understandable | Language declaration, consistent navigation, error prevention | Forms with generic error messages; inconsistent menu structure |
| Robust | ARIA validity, compatibility with assistive technology | Broken ARIA roles on dynamic components; axe-core violations |
The violations most commonly cited in EAA notices and ADA demand letters — missing alt text, keyboard traps, unlabelled form fields, low contrast — are the same failures appearing in German Abmahnungen. They are detectable, fixable, and above all, findable with the right scanner.
Why Static Scanners Leave You Exposed
The BFSG-relevant violations most likely to trigger Abmahnungen are interactive failures: inaccessible modal dialogs, keyboard-trapping popups, unlabelled dynamic form fields, broken ARIA on cart drawers and checkout overlays. These elements only exist in the live DOM — after JavaScript has rendered the page — and are invisible to tools that evaluate static HTML.
A Lighthouse audit of your homepage will not find a keyboard trap inside your cookie consent banner. A WAVE scan will not identify that your product filter component has no accessible name. These failures show up in Abmahnungen precisely because they are visible to screen reader users but invisible to the scanner tools most development teams rely on.
ADAGuard evaluates your live DOM — JavaScript rendered, fully interactive. Across 22 custom accessibility checker modules plus axe-core, it delivers approximately 78% WCAG 2.2 AA automated coverage (43 of 55 criteria). Every failure maps to a specific WCAG criterion number — the format an opposing law firm or regulatory agency will reference when they evaluate your site.
ADAGuard's reports also cover authenticated pages: your logged-in checkout experience, account portal, and subscription management flows. These are in scope for BFSG compliance and often carry the highest concentration of accessibility failures.
The In 2025, 4,800+ ADA Lawsuits Were Filed in the US Alone
The United States filed 4,800+ ADA web accessibility lawsuits in 2025, a significant year-over-year increase according to UsableNet's 2025 mid-year report. Germany's Abmahnung mechanism creates a structurally similar private enforcement dynamic for the EU market — except Germany's legal culture around Abmahnungen means high volumes of warning letters can emerge quickly once a legal mechanism is established.
The US trajectory took roughly five years to go from occasional ADA web cases to 4,800+/year. Germany's Abmahnung mechanism is already operational in month one. Businesses with German market exposure cannot afford to wait for German courts to clarify the legal position before addressing known accessibility failures.
What to Do When You Find BFSG Violations
When your scan identifies WCAG 2.1 AA failures on your Germany-facing site, prioritise in this order:
Highest Abmahnung risk: Interactive failures that affect screen reader users — keyboard traps, missing form labels, inaccessible modal dialogs, broken ARIA roles. These are the violations most likely to be cited in competitor warnings because they are observable by screen reader testing.
Highest regulatory fine risk: Systematic failures across multiple pages — consistent image alt text gaps, site-wide contrast failures, navigation without keyboard access. These represent the "per violation" exposure that multiplies into significant liability under the €100,000/violation fine structure.
Hand the WCAG criterion numbers from your scan report to your development team. For third-party components (popups, chat widgets, payment overlays), open support tickets with vendors citing the specific criterion. Vendors serving the German market face the same BFSG exposure and are increasingly responsive to accessibility remediation requests.
The 30-Second Fix
Go to adaguard.io and paste your German-market URL for a free scan. No signup required. The report shows which WCAG 2.2 AA criteria your live site fails — with criterion numbers, affected elements, and severity levels.
German competitors began receiving Abmahnungen in August 2025. Regulators are building their enforcement infrastructure for fines of up to €100,000 per violation. The cheapest time to find and fix these violations was before June 28, 2025. The second-cheapest time is today.
