Penalties · France
France
Article 47 administrative fines up to €25,000 per breach; DDADUE 2023 fines up to €50,000 per non-conforming product or service plus daily penalties; Article 225-2 Code pénal criminal exposure of €225,000 and dissolution for legal entities.
France runs the most architecturally orderly accessibility regime in the European Union: a 2005 foundational disability-rights act, a 2016 Digital Republic update, a 2019 decree transposing the Web Accessibility Directive, a national technical reference (the RGAA) that maps WCAG 2.1 AA into French-language test criteria, and a 2023 act (DDADUE) transposing the European Accessibility Act for products and services. Each layer plugs into the one beneath it. The 2023 transposition adds private-sector product and service obligations enforced by the DGCCRF; the public-sector path remains under DINUM.
The constitutional and treaty floor
France's accessibility regime sits on a constitutional bedrock that is older and more textually compressed than most of its European peers. The 1958 Constitution does not contain a stand-alone disability clause; instead, the Constitutional Council (Conseil constitutionnel) reads disability protection out of three load-bearing provisions: Article 1 of the 1958 text ("la France assure l'égalité devant la loi de tous les citoyens sans distinction d'origine, de race ou de religion"), the 1946 Preamble's solidarity and equal-access guarantees (incorporated by reference into the 1958 Preamble), and the 1789 Declaration of the Rights of Man and the Citizen's prohibition on arbitrary distinction. The Council's jurisprudence — including its Decision n° 2016-553 QPC and the line of cases on the compensation du handicap — has treated these provisions as binding norms with positive-obligation content, not merely interpretive guidance.
France signed the UN Convention on the Rights of Persons with Disabilities on 30 March 2007 and deposited its instrument of ratification on 18 February 2010. The convention entered into force for France on 20 March 2010, and the Optional Protocol was ratified together with the convention. Article 9 (accessibility) and Article 33 (national implementation and monitoring) are the international-law clauses most regularly cited by French courts and the Defender of Rights. The Conseil national consultatif des personnes handicapées (CNCPH) serves as the designated CRPD Article 33 focal point and convenes the independent monitoring mechanism; France's most recent periodic report to the CRPD Committee, examined in 2021, drew Concluding Observations that explicitly flagged web accessibility and the rollout of Article 47 enforcement as priority follow-up areas — themes that the 2023 DDADUE transposition and the 2024 RGAA 4.1.2 update were designed to answer.
The public-sector path: Article 47 and Décret 2019-768
The substantive engine of France's public-sector accessibility regime is Article 47 of Loi n° 2005-102 — the foundational disability act of 11 February 2005. As originally drafted, Article 47 imposed digital accessibility obligations on online communication services of the State, local authorities (collectivités territoriales), and public-sector establishments. It was the first national web-accessibility statute in a major EU member state, predating the Web Accessibility Directive by more than a decade.
Article 47 was substantially rewritten by Article 106 of the Digital Republic Act of 7 October 2016 (Loi n° 2016-1321 pour une République numérique, Loi Lemaire). The 2016 rewrite did three structurally important things. It extended the in-scope perimeter to mobile applications, intranets, and extranets (not just public websites). It expanded the personal scope from the State and local authorities to large private companies, with the turnover threshold to be set by decree. And it added the obligation to publish an accessibility statement, a multi-year accessibility scheme (schéma pluriannuel de mise en accessibilité) covering at least three years, and an annual action plan.
The turnover threshold for private-sector application of Article 47 was fixed by Décret n° 2019-1082 du 24 octobre 2019 at an annual French turnover of €250 million. That figure pulls France's largest retailers, banks, telecoms, transport operators, and platform operators inside the public-sector accessibility framework even though they are private companies — a distinctive feature of the French model that has no clean analogue in most EU member states.
Décret n° 2019-768 du 24 juillet 2019 is the operational decree that transposed the Web Accessibility Directive (Directive (EU) 2016/2102) and that filled in the procedural mechanics of Article 47. The decree pins the conformance bar to the RGAA as the binding national technical reference; sets the structure and minimum content of the accessibility statement; defines the form and publication cadence of the multi-year scheme and annual action plan; and establishes the national monitoring methodology aligned to Commission Implementing Decision (EU) 2018/1523. The decree also designates DINUM as the coordinating administrative authority and gives it the power to assess administrative fines for non-compliance.
The day-to-day work — running the periodic monitoring rounds, publishing simplified and in-depth scan results, maintaining the national registry of accessibility statements, and curating the RGAA — sits inside DINUM's specialist unit, the Bureau de l'accessibilité numérique (BACS). BACS publishes quarterly observatory data on the public-sector accessibility-statement compliance rate, and its 2024 observatory reported that roughly 60% of in-scope public-sector sites had a published accessibility statement, with substantive RGAA conformance averaging in the 55–65% range across the audited cohort — figures that France's own regulator describes as below target and that have driven a hardening of enforcement posture for the 2025–2026 cycle.
The private-sector path: DDADUE 2023
France transposed the European Accessibility Act (Directive (EU) 2019/882) through Loi n° 2023-171 du 9 mars 2023 — the loi portant diverses dispositions d'adaptation au droit de l'Union européenne, universally known as the DDADUE 2023. The transposition act amended the Code de la consommation and inserted a new dedicated title (Livre IV, Titre VIII) covering accessibility requirements for products and services. The substantive obligations on economic operators took effect on the EU-wide application date of 28 June 2025. The implementing decrees — including the principal application decree on conformity assessment, the decree designating market-surveillance powers to the DGCCRF, and the decrees on the form of the EU Declaration of Conformity and the technical-file requirements — were published in 2024 and the first half of 2025.
The DDADUE-amended framework covers the directive's full product and service scope:
- Products: general-purpose computer hardware and operating systems; self-service terminals (ATMs, ticket machines, check-in kiosks, payment terminals); consumer terminal equipment with interactive computing capability used to access audiovisual media or electronic communications services; and e-readers.
- Services: electronic communications services; services providing access to audiovisual media services; passenger-transport services (air, bus, rail, waterborne) for elements within the directive's defined scope; consumer banking services; e-books and dedicated software; and e-commerce services.
The directive's micro-enterprise carve-out is transposed faithfully: undertakings with fewer than 10 employees and an annual turnover or balance-sheet total not exceeding €2 million are exempt from the service-side obligations. The product-side obligations apply through the supply chain (manufacturer, importer, distributor) regardless of operator size, on the directive's standard placing-on-the-market test. The long transitional period for terminals already in use on 28 June 2025 — up to 28 June 2045 or the terminal's economic end of life — is also transposed in line with the directive.
The market-surveillance authority is the DGCCRF, operating inside the Ministry of the Economy. DGCCRF brigades conduct conformity inspections, issue injunctions (mises en demeure), and assess administrative penalties under the new Code de la consommation provisions. Cross-border market surveillance follows EU Regulation (EU) 2019/1020 and is coordinated through the EU's Information and Communication System on Market Surveillance (ICSMS). Sectoral regulators continue to operate alongside DGCCRF on their respective verticals: ARCEP for electronic communications, the Autorité de contrôle prudentiel et de résolution (ACPR) for consumer banking, and the Autorité de régulation de la communication audiovisuelle et numérique (ARCOM) for audiovisual media services.
The cross-cutting backstop: Défenseur des droits and Article 225-2 Code pénal
Independent of both the Article 47 administrative track and the DDADUE market-surveillance track, two cross-cutting mechanisms create the bulk of France's individual-complaint enforcement traffic. The first is the Défenseur des droits, the independent constitutional authority that absorbed the former HALDE (the High Authority for the Fight Against Discrimination and for Equality) in 2011. The Defender of Rights receives individual complaints alleging disability discrimination, conducts inquiries, issues recommendations, refers cases to the public prosecutor where criminal sanctions are warranted, and intervenes as an amicus curiae before the courts. The Defender's 2024 annual report showed disability as the most-cited ground of discrimination across all complaints received — accounting for over one in five discrimination complaints, with a growing subset framed explicitly as digital inaccessibility.
The second backstop is the criminal-law route. Article 225-1 of the Code pénal defines discrimination — including on grounds of disability and on grounds of perte d'autonomie — and Article 225-2 sets the criminal sanctions for discriminatory conduct in the supply of goods or services, the exercise of an economic activity, hiring, or refusal of access to a service. The sanction for a natural person is up to three years' imprisonment and a €45,000 fine; under Article 131-38, the maximum applicable to a legal entity is quintupled — that is, up to €225,000 — with the additional sanctions available under Article 131-39 including dissolution, prohibition from a regulated activity, closure of establishments, and exclusion from public procurement. Criminal sanctions remain rare in pure web-accessibility cases, but the line of cases brought against transport operators and consumer-services providers for refusing to accommodate guide-dog users — including the Cour de cassation's Chambre criminelle jurisprudence — confirms that the criminal route is live and used.
On the civil side, the Defender of Rights or affected individuals routinely refer cases to the ordinary civil courts (tribunaux judiciaires) or to the administrative courts (tribunaux administratifs) depending on the defendant's status. Damages are assessed under the general civil-liability framework (Articles 1240 and following of the Code civil); there is no statutory cap on moral damages. Adjudicated awards in disability-discrimination cases have typically fallen in the €2,000–€20,000 range per claimant, with higher awards reserved for cases of repeated refusal or severe consequences.
Technical standards and conformance: RGAA 4
The Référentiel général d'amélioration de l'accessibilité — RGAA — is the binding French technical reference for web accessibility. The current version is RGAA 4.1, updated to 4.1.2 in 2023. The RGAA does not invent its own accessibility ruleset; it operationalises WCAG 2.1 Level AA and the relevant clauses of EN 301 549 into 106 testable criteria grouped into 13 thematic chapters (images, frames, colours, multimedia, tables, links, scripts, mandatory elements, structuring information, presentation of information, forms, navigation, consultation). Each criterion is paired with one or more tests that specify the verification method, the assistive technologies and browsers to be used, and the documentation required to support the conformance claim.
The RGAA defines three conformance states for an in-scope service: conforme (full conformance), partiellement conforme (partially conforming — the standard intermediate outcome, reportable as a percentage compliance score with documented derogations), and non conforme (not conforming). The accessibility statement required under Décret 2019-768 must publish the global RGAA conformance percentage, the methodology, the in-scope perimeter, and the list of non-conforming content. The methodology is a structured combination of automated scanning, manual audit against the 106 criteria, and user testing with assistive technologies.
An update to RGAA 5 is in development inside DINUM's BACS unit, aligned to the upcoming integration of WCAG 2.2 into EN 301 549 at the ETSI and CEN-CENELEC level. Public consultation on the draft RGAA 5 ran through 2025, and the working schedule points to a formal publication in 2026 with a transitional period for in-scope bodies to migrate their conformance audits.
Penalties — the full exposure stack
French accessibility penalties form a five-layer exposure stack. Reading any one layer in isolation gives a misleading picture: the administrative-fine columns are the floor, not the ceiling. All figures below are in euros; France is in the eurozone and the underlying statutes are denominated directly in euros, so no conversion is required.
| Layer | Statute / instrument | Violation type | Ceiling (legal entities) | Aggravators |
|---|---|---|---|---|
| 1 — Administrative (public sector + Article 47 large companies) | Article 47 Loi 2005-102 + Décret 2019-768 | Failure to publish the accessibility statement, multi-year scheme, or annual action plan; failure to achieve declared RGAA conformance | €25,000 per breach | Renewable per reporting period; published on a public defaulters list curated by DINUM |
| 2 — Administrative (private sector EAA) | DDADUE 2023 + Code de la consommation, Livre IV Titre VIII | Non-conforming product or service placed on the French market; failure to issue or maintain the EU Declaration of Conformity; refusal to cooperate with DGCCRF | €50,000 per non-conforming product or service | Daily penalty payments for ongoing non-compliance; market-access bans; mandatory recall |
| 3 — Civil damages | Code civil Articles 1240 et seq. + Défenseur des droits referral | Civil liability for disability discrimination, including digital inaccessibility framed as discrimination | Uncapped; typical awards €2,000 – €20,000 per claimant | Joinder of multiple claimants; aggravated damages for repeated conduct |
| 4 — Criminal | Code pénal, Articles 225-1, 225-2, 131-38, 131-39 | Discrimination in the supply of goods, services, or economic activity on grounds of disability or loss of autonomy | €225,000 + dissolution / activity ban / procurement exclusion | Up to 3 years' imprisonment for individuals (€45,000 fine); higher for refusal of access to a public-facing service |
| 5 — Procurement disqualification + EU infringement | Code de la commande publique, Article L2141-1 + Article 260(2) TFEU | Adjudicated discrimination or significant administrative-penalty findings; state-level failure to transpose or enforce EU directives | Bid exclusion (typical contract loss multi-million €); CJEU lump-sum and daily penalty payments against France | Persistence triggers EU-level escalation; cross-border ICSMS notification |
The €25,000 ceiling for Article 47 administrative fines and the €50,000 ceiling for DDADUE administrative fines sit toward the middle of the EU-wide spread. By way of comparison: Germany's BFSG §37 caps single-incident fines at €100,000; Spain's Ley 11/2023 sets a graduated framework reaching €1,000,000 for "very serious" infringements; Italy's transposition (D.Lgs. 82/2022) caps at €40,000; Bulgaria's "very serious / repeated" tier under the EAA-amended Persons with Disabilities Act sits at €25,000–€100,000+; and the Netherlands has signalled exposure of up to 5% of annual turnover for systemic violations. The French figures published so far reflect the regulator's stated preference for repeated administrative penalties (renewable per reporting period) and per-day penalty payments over a single eye-catching ceiling.
Layer 4 — the criminal route under Article 225-2 — is the layer that disproportionately shapes corporate behaviour in France even though it is rarely used in pure web-accessibility cases. The quintupling rule in Article 131-38 of the Code pénal — under which the maximum fine applicable to a legal person is five times the maximum applicable to a natural person — converts the €45,000 individual ceiling into a €225,000 corporate ceiling, with additional sanctions under Article 131-39 that include dissolution of the legal entity, prohibition from one or more regulated activities for up to five years, judicial monitoring, closure of establishments, and exclusion from public procurement for up to five years. Procurement exclusion under Article L2141-1 of the Code de la commande publique is the layer-5 backstop that most large French operators internalise: a single adjudicated discrimination finding can convert a multi-year procurement pipeline into a competitor's pipeline overnight.
Enforcement record and outlook
Public-sector enforcement under Article 47 and Décret 2019-768 has accelerated steadily since 2022. DINUM's BACS unit publishes monitoring observatory data quarterly, with the 2022, 2023, and 2024 annual observatories showing a slow but consistent increase in published-statement coverage and a slower convergence in measured RGAA conformance scores. Administrative penalty decisions under Article 47 were rare in the first three years of the post-2019 enforcement cycle — the BACS posture during that period favoured corrective-action orders and the public defaulters list — but the 2024 and 2025 enforcement waves have included a growing number of €25,000-per-breach decisions, particularly against operators caught by the €250 million turnover threshold who had failed to publish any of the three required documents (statement, multi-year scheme, annual action plan).
On the Défenseur des droits side, high-profile decisions have repeatedly addressed digital-accessibility complaints against transport and banking operators. The Defender's intervention in cases against SNCF Connect over the relaunched ticketing platform in 2022–2023, against RATP over journey-planner accessibility, and against several major retail-banking apps has driven both formal recommendations and substantial remediation programmes. The Cour de cassation's accessibility-as-discrimination jurisprudence — including its consistent line on refusal of service to guide-dog users — confirms that the highest French courts treat disability discrimination as a fully justiciable ground with the full range of criminal and civil consequences attached.
Private-sector enforcement under DDADUE 2023 started only on 28 June 2025 and is still in its first surveillance cycle. The DGCCRF's published 2025–2026 enforcement plan flags four priority verticals: consumer-banking app accessibility, e-commerce checkout accessibility, self-service ticketing kiosks at major transport hubs, and audiovisual streaming services. The first round of administrative-penalty decisions under the DDADUE-amended Code de la consommation is expected through the second half of 2026; current expectation in the regulatory community is that the DGCCRF will run a short formal grace period (typically a 60-day corrective-action window) before assessing the €50,000-per-product penalty, except in cases of egregious or repeated non-compliance.
What's coming in 2026–27
Four developments to watch. First, RGAA 5 is on a 2026 publication track inside BACS, aligned to the upcoming integration of WCAG 2.2 into EN 301 549 at the ETSI / CEN-CENELEC level; the post-publication transitional period for in-scope bodies to migrate their conformance audits is likely to run 12–18 months. Second, DDADUE's first full enforcement cycle (28 June 2025 – 28 June 2026) closes mid-year, and the DGCCRF's first wave of administrative-penalty decisions will set the operational price of EAA non-compliance for the rest of the decade. Third, the European Commission's biennial WAD implementation review (next iteration due 2026) will pull together comparable monitoring data across all 27 member states and is expected to put pressure on the laggards. And fourth, the French government has flagged — in the CNCPH's 2025 consultations and in DINUM's roadmap — the possible extension of Article 47's private-sector application threshold below €250 million, which would pull a second tier of large mid-cap French companies inside the public-sector accessibility framework. The intersection with the EU AI Act, particularly around automated accessibility-testing tools and AI-generated alternative content, is the policy frontier that the CNCPH has explicitly placed on its 2026–27 agenda.
The practical compliance checklist for 2026
If you operate a French state, local-authority, or public-establishment website or mobile application: publish or refresh your accessibility statement against DINUM's current template; publish the multi-year scheme (3-year horizon) and annual action plan; conduct or commission an RGAA 4.1 audit of the in-scope perimeter; cooperate with the BACS monitoring cycle when called; budget for the migration to RGAA 5 once published.
If you are a private company with French turnover at or above €250 million and you operate online communication services: Article 47 applies to you in the same way as to the public sector. The same three documents (statement, multi-year scheme, annual action plan), the same RGAA conformance bar, and the same €25,000-per-breach administrative-fine exposure under Décret 2019-768.
If you place an EAA-regulated product or service on the French market: assemble the technical file required under the DDADUE 2023 implementing decrees; issue the EU Declaration of Conformity; affix the CE mark where applicable; align your product or service to EN 301 549 v3.2.1; designate an accessibility contact for the DGCCRF and for consumer complaints; document conformance and retain records for the regulatory five-year window.
The through line
France's accessibility regime is, by EU standards, the most structurally complete and the most prescriptive in its technical reference. The 2023 DDADUE transposition closed the last open gap on the private-sector product and service side; the 2024 RGAA 4.1.2 update sharpened the technical bar; DINUM's BACS observatory has tightened the monitoring loop on the public-sector and Article 47 large-company perimeter. What remains to test through 2026–27 is whether the DGCCRF uses its €50,000-per-product DDADUE administrative-fine power at its upper end against egregious EAA non-compliance — and whether the long-flagged extension of Article 47 below the €250 million turnover threshold actually lands.
Read more from Disability World on the European Accessibility Act, the Web Accessibility Directive, WCAG 2.1, the RGAA, and the UN CRPD.