Penalties · United Kingdom
United Kingdom
PSBAR carries no fixed fine — Cabinet Office enforces by compliance notice and public reporting. Equality Act tribunal damages are uncapped; Vento injury-to-feelings bands top out at £60,700 (2024). Procurement Act 2023 exclusion adds the largest economic exposure.
The United Kingdom's post-Brexit accessibility regime is case-law-driven and tribunal-enforced rather than administratively-fined. Two domestic pillars do the heavy lifting: the Equality Act 2010 sits across private-sector services, employers and public authorities through an anticipatory reasonable-adjustment duty; the Public Sector Bodies (Websites and Mobile Applications) Accessibility Regulations 2018 (PSBAR) — retained as assimilated EU law after Brexit — fixes the public-sector technical bar at WCAG 2.1 AA. The European Accessibility Act does not apply in Great Britain. Northern Ireland runs a separate equality framework and a distinct goods-market trajectory under the Windsor Framework. The fines table is small; the tribunal-damages and procurement-exclusion tables are not.
The constitutional and treaty floor
The United Kingdom has no codified constitution. The principal anti-discrimination statute is the Equality Act 2010, which consolidated nine earlier discrimination instruments — including the Disability Discrimination Act 1995 — into a single act covering nine protected characteristics. Sitting underneath it, the Human Rights Act 1998 incorporates the European Convention on Human Rights into domestic law; Article 14 ECHR (prohibition of discrimination read together with the other Convention rights) operates as a backstop in cases that engage public-authority duties.
At the treaty level, the UK signed the UN Convention on the Rights of Persons with Disabilities on 30 March 2007 and ratified it on 8 June 2009. The UK entered interpretive declarations on Articles 12 (legal capacity), 24 (education) and 27 (work and employment) and reservations on aspects of Articles 24 and 27. The Convention is monitored domestically by the Equality and Human Rights Commission, which is the designated Article 33 independent monitoring mechanism for Great Britain, alongside the Equality Commission for Northern Ireland and the Scottish Human Rights Commission. The UN CRPD Committee's most recent Concluding Observations on the UK (issued under the Article 35 reporting cycle) flagged inclusive education, social-security reforms, and access to public services as areas of sustained concern.
The constitutional point that matters for compliance budgeting is this: there is no central administrative agency in the UK with day-to-day power to fine private operators for an inaccessible website in the way the German or Spanish market-surveillance authorities now can under the European Accessibility Act. Exposure runs through litigation, regulatory investigation and procurement consequences instead.
Public-sector accessibility: PSBAR 2018
The Public Sector Bodies (Websites and Mobile Applications) (No. 2) Accessibility Regulations 2018 — universally referred to as PSBAR — were laid before Parliament in August 2018 and came into force on 23 September 2018, the EU deadline for transposition of Directive (EU) 2016/2102 (the Web Accessibility Directive). They survived Brexit as assimilated EU law under the European Union (Withdrawal) Act 2018 and the Retained EU Law (Revocation and Reform) Act 2023, and remain in force unamended in substance.
PSBAR runs to twelve regulations and a schedule. The four obligations that drive day-to-day compliance work are:
- Conformance (Regulation 4). In-scope bodies must make their websites and mobile applications "perceivable, operable, understandable and robust" — i.e. compliant with the technical standard fixed by the regulator. The current UK practice, set out in the Cabinet Office's PSBAR guidance, is conformance with WCAG 2.1 Level AA via EN 301 549 v3.2.1. WCAG 2.2 is not yet mandated, although GDS guidance recommends teams design against it where possible.
- Accessibility statement (Regulation 6). Each in-scope body must publish a statement covering conformance status, non-accessible content claimed under the disproportionate-burden derogation, the content excluded from scope (third-party widgets, pre-2018 office documents, archive video), and a feedback mechanism. The Cabinet Office publishes a model statement that most departments adopt verbatim.
- Phased application. 23 September 2018 for websites published on or after that date; 23 September 2020 for pre-existing websites; 23 June 2021 for mobile applications.
- Enforcement (Regulation 8). The Minister for the Cabinet Office is the enforcement body for England, Wales and Northern Ireland; Scottish Ministers exercise the equivalent function in Scotland. The Minister monitors compliance and can issue a published notice setting out non-compliance findings; ultimate remedy in court is via the Equality and Human Rights Commission.
Day-to-day monitoring sits with the Government Digital Service (GDS) inside the Cabinet Office. GDS operates the simplified and in-depth scan programme prescribed by Commission Implementing Decision (EU) 2018/1524 — retained in UK practice notwithstanding Brexit — and publishes the findings into a quarterly monitoring report. The first full monitoring cycle covered the 12 months to September 2021; by the 2024–25 cycle the programme was scanning roughly 1,000 simplified-scan and ~100 in-depth-scan sites annually, with central-government departments scanned to a tighter cadence than the wider arms-length and local-authority population.
The crucial structural point about PSBAR is what it does not contain. There is no administrative-fine schedule. The regulations do not authorise the Minister to impose a monetary penalty for non-compliance. Instead, the enforcement architecture relies on (i) the public reputational pressure of published monitoring findings, (ii) ministerial follow-up letters and remediation deadlines, and (iii) escalation to the EHRC for an unlawful-act investigation under the Equality Act if non-compliance persists.
Private-sector accessibility: Equality Act 2010
For the private sector, the operative statute is the Equality Act 2010. The act treats disability as a protected characteristic (Section 6) and imposes a duty to make reasonable adjustments on service providers, employers, education providers, associations, and public authorities. The duty is set out in Sections 20 to 22 and given concrete content by Schedule 21; in services and public functions the duty is "anticipatory", meaning a service provider must consider how to make services accessible to disabled people in general, not simply react when a disabled customer asks.
The reasonable-adjustment duty has three limbs: (i) where a provision, criterion or practice puts disabled people at a substantial disadvantage, take reasonable steps to avoid the disadvantage; (ii) where a physical feature puts disabled people at a substantial disadvantage, take reasonable steps to remove, alter or provide a means of avoiding it; (iii) where the absence of an auxiliary aid puts disabled people at a substantial disadvantage, take reasonable steps to provide the auxiliary aid. The third limb is the one most commonly engaged by digital-accessibility claims: an inaccessible website, app or kiosk is treated as a "provision, criterion or practice" that creates a substantial disadvantage, and the failure to provide accessible alternatives or to fix the underlying barrier is the basis for the discrimination finding.
Section 29 applies the act's anti-discrimination obligations to the provision of services and the exercise of public functions. The reach is intentionally broad: it captures any "person concerned with the provision of a service to the public or a section of the public", and the EHRC's services code of practice confirms that online services, mobile applications and self-service terminals are squarely within scope. There is no SME or micro-enterprise carve-out; the duty applies in proportion to what is reasonable for the operator, which scales naturally to the size and resources of the provider.
Two consequences flow from this design. First, every private-sector website used to provide a service in the UK is subject to the reasonable-adjustment duty regardless of where the operator is established, provided the service is offered to UK users. Second, because the duty is anticipatory, the question in litigation is rarely whether a particular adjustment was reasonable in the abstract — it is whether the provider thought about disabled users in advance and built accessibility in.
The European Accessibility Act (Directive (EU) 2019/882) does not apply in Great Britain. The UK had left the EU before the EAA's transposition deadline, and the Government has not introduced equivalent domestic legislation. Northern Ireland is in a different position: under the Windsor Framework, certain EU goods rules continue to apply to products placed on the NI market, and the EAA's product-side obligations (self-service terminals, e-readers, consumer terminal equipment) flow through to NI-market sales via that route. The service-side obligations of the EAA do not apply in Northern Ireland.
The cross-cutting backstop: EHRC enforcement
The Equality and Human Rights Commission, established by the Equality Act 2006 and operational from October 2007, is the statutory regulator for the Equality Act 2010 across England, Wales and Scotland. Its enforcement toolkit, set out in Sections 20 to 32 of the 2006 Act, includes powers that no other regulator in the UK accessibility ecosystem holds.
Four powers in particular shape exposure. First, formal investigations under Section 20: the EHRC can open an investigation into whether a named person has committed an unlawful act under the Equality Act, with statutory information-gathering powers and a published terms-of-reference document. Second, unlawful-act notices under Section 21: where the EHRC is satisfied that an unlawful act has been committed, it can issue a formal notice requiring the recipient to prepare an action plan to prevent recurrence; the notice is appealable to the Employment Tribunal or county court. Third, Section 23 agreements: binding undertakings entered into with operators to secure specified action without a formal finding of unlawfulness; breach of a Section 23 agreement is itself enforceable in court. Fourth, judicial review and tribunal intervention: the EHRC can intervene in litigation between private parties and can apply for judicial review of public-authority decisions that engage the Equality Act.
The EHRC's published enforcement strategy has, in successive five-year periods, identified digital accessibility and public-sector reasonable-adjustment failures as priority workstreams. Recent activity has included investigations into adult-social-care information accessibility, transport-accessibility complaints handling, and the accessibility of remote-hearing arrangements in the courts and tribunals service. The Commission's annual enforcement report sets out its current open investigations and concluded interventions.
Technical standards and conformance
The conformance bar for the public sector is fixed by PSBAR and the Cabinet Office's published guidance. The current statement of the bar is WCAG 2.1 Level AA via EN 301 549 v3.2.1, with mobile-application requirements following the EN 301 549 mobile sections. GDS publishes detailed testing guidance — the "Making your service accessible: an introduction" and "Understanding accessibility requirements for public sector bodies" guides — that walks teams through the Cabinet Office's expectations on the form of the accessibility statement, the scope of internal audits, and the use of third-party testing.
WCAG 2.2 is not yet mandated under PSBAR. The Cabinet Office's stated position is that the WCAG 2.2 success criteria are good practice and that teams should aim to design against them, but the regulatory floor remains 2.1 AA until the regulations or accompanying guidance are updated. EN 301 549's evolution to track WCAG 2.2 (work ongoing at ETSI and CEN-CENELEC) is expected to feed into a UK guidance refresh once stable.
For the private sector, the Equality Act does not specify a technical standard, but tribunals and the EHRC routinely treat WCAG 2.1 AA as the de facto reference point for whether reasonable steps have been taken to make a website or app accessible. Service-provider compliance projects in the UK therefore tend to converge on the same standard as the public-sector regime, even though the legal route to the obligation is different.
The GDS Service Standard — point 5 ("make sure everyone can use the service") and the surrounding cross-cutting points — operationalises accessibility for digital services delivered by central government departments. Services seeking the Service Assessment sign-off must demonstrate accessibility testing with disabled users, not just automated scanning. This is the operational layer that turns the PSBAR conformance bar into a working compliance methodology inside the public sector.
Penalties — the full exposure stack
The instinct to read the UK accessibility regime as "no fines, low risk" is wrong. The administrative-fine column is thin by design, but it is one of five layers in the exposure stack. The other four are where the money actually sits. All figures are in GBP.
Layer 1 — administrative enforcement (no fixed fines)
PSBAR carries no monetary penalty. The Cabinet Office enforces through compliance notices, follow-up letters and quarterly public monitoring reports. The EHRC, under the Equality Act 2006, can issue unlawful-act notices and enter into Section 23 agreements; neither instrument is a fine, but both impose mandatory action plans and create a documented compliance record that procurement frameworks pick up.
Layer 2 — civil tribunal and court damages (uncapped)
Equality Act discrimination claims are heard in the Employment Tribunal (for employment-related claims) and the county court in England and Wales (the Sheriff Court in Scotland) for services and public-function claims. Damages under the Equality Act are uncapped. Two heads of loss are routinely awarded:
- Injury to feelings assessed against the Vento bands, originally set out by the Court of Appeal in Vento v Chief Constable of West Yorkshire Police [2002] EWCA Civ 1871 and updated annually by joint Presidential guidance from the Presidents of the Employment Tribunals (England & Wales and Scotland). For claims presented on or after 6 April 2024, the bands are: lower band £1,200–£12,000 (less serious cases), middle band £12,000–£36,400 (cases not meriting an upper-band award), upper band £36,400–£60,700 (the most serious cases), with awards able to exceed £60,700 in the most exceptional cases.
- Material loss — lost earnings, loss of opportunity, out-of-pocket expenses, future loss — assessed on the standard tort measure, with no cap.
Tribunals can additionally award aggravated damages and, under Section 124(2)(c), make recommendations that require the respondent to take steps to obviate or reduce the adverse effect of the discrimination on the claimant and other persons. Recent county-court and tribunal awards in web-accessibility cases have typically landed in the £10,000–£60,000 band combining injury-to-feelings and material loss, with outlier awards higher where the discriminatory effect persisted for a long period or affected multiple claimants whose claims were joined.
| Layer | Instrument | Range / mechanism | Who triggers it | Note |
|---|---|---|---|---|
| 1 | PSBAR compliance notice | No fixed fine | Cabinet Office / GDS | Public monitoring report; ministerial follow-up |
| 1 | EHRC unlawful-act notice | Mandatory action plan | EHRC | Appealable; breach is enforceable in court |
| 2 | Vento lower band (injury to feelings) | £1,200 – £12,000 | Claimant in tribunal / county court | April 2024 bands; updated annually |
| 2 | Vento middle band | £12,000 – £36,400 | Claimant in tribunal / county court | Standard band for substantial cases |
| 2 | Vento upper band | £36,400 – £60,700 | Claimant in tribunal / county court | Most serious cases; can exceed £60,700 |
| 2 | Material loss (Equality Act) | Uncapped | Claimant | Lost earnings, opportunity, future loss |
| 3 | Procurement exclusion | Loss of bid eligibility | Contracting authority under Procurement Act 2023 | Discretionary exclusion for grave professional misconduct |
| 4 | CPR Part 19.6 group litigation order | Joined claims; per-claimant assessment | Court on application | Used rarely in accessibility but available |
| 5 | Public monitoring report | Reputational | Cabinet Office / GDS | Quarterly publication; ministerial pressure |
Layer 3 — procurement disqualification
The Procurement Act 2023, which came into force on 24 February 2025, replaced the Public Contracts Regulations 2015 as the principal framework for public procurement in England, Wales and Northern Ireland. Schedule 7 of the Act sets out mandatory and discretionary exclusion grounds; the discretionary grounds include "professional misconduct" of a serious nature, which the Cabinet Office's accompanying guidance confirms can capture findings of unlawful discrimination under the Equality Act and breach of binding EHRC undertakings. An EHRC unlawful-act notice or a county-court / tribunal finding of disability discrimination is therefore a procurement-risk event quite independently of the damages payable to the individual claimant.
For a supplier whose principal revenue comes from central-government, NHS or local-authority contracts, the procurement-exclusion exposure typically dwarfs the damages in any individual case. The Procurement Act introduces a central Debarment List, maintained by the Minister, on which excluded suppliers are publicly named; a debarment decision is judicially reviewable but is administratively self-executing across all in-scope contracting authorities.
Layer 4 — group claims and representative actions
The UK does not have a US-style class-action regime, but several mechanisms allow accessibility cases to scale. CPR Part 19.6 Group Litigation Orders permit claims that give rise to common or related issues of fact or law to be managed together; CPR Part 19.8 provides for representative claims by a single named representative on behalf of others with the same interest, and the Supreme Court's Lloyd v Google [2021] UKSC 50 decision clarified (and narrowed) the scope of CPR 19.8 in data-rights contexts. The EHRC can itself bring proceedings in its own name under the Equality Act 2006 powers, including representative actions, and has used those powers in selected high-impact cases.
Layer 5 — reputational and ministerial exposure
The PSBAR monitoring methodology produces public quarterly reports that name non-compliant public-sector bodies. For central-government departments and high-profile arm's-length bodies, the political and reputational cost of being named in a quarterly monitoring report is itself a material consequence, independent of any formal enforcement step that follows. Comparable reputational dynamics operate in the private sector where the EHRC opens a formal investigation under Section 20 of the Equality Act 2006: the terms of reference are published, and the investigation period itself often produces remediation commitments that pre-empt a formal finding.
The realistic budgeting view for 2026
For a UK public-sector body running an inaccessible website, the modal exposure in 2026 is a Cabinet Office compliance notice, inclusion in a quarterly monitoring report, and a remediation deadline measured in months rather than weeks; financial cost concentrates in remediation engineering, not penalties. For a UK-facing private-sector service provider, the modal exposure is a county-court (services) or Employment Tribunal (employment) Equality Act claim, with damages in the £10,000–£60,000 band combining Vento middle-or-upper-band injury-to-feelings and material loss, multiplied by the number of claimants if the case is joined. For any supplier dependent on public-sector revenue, layer 3 (Procurement Act 2023 discretionary exclusion) is typically the dominant economic exposure and is the strongest argument for treating accessibility as a board-level risk.
Enforcement record and outlook
The PSBAR monitoring programme has been operating since 2020 and has matured visibly across successive cycles. GDS's quarterly monitoring reports show a clear pattern: the central-government departmental cohort is the most consistently compliant; the local-authority and NHS-trust population shows persistent variability; and the arm's-length bodies sit somewhere in between. The first sustained drop in major non-compliance findings appeared in the 2022–23 reporting cycle, which the Cabinet Office attributed to the maturation of internal accessibility teams across departments after the 2020 phase-in deadline.
On the Equality Act side, the leading reasonable-adjustment authorities continue to be the seam of tribunal and appellate decisions that built up around employment-related adjustment failures — including the Employment Appeal Tribunal's treatment of the anticipatory limb of the duty and the Court of Appeal's framing of the proportionality test for what counts as a "reasonable" adjustment. Web-accessibility cases brought through the county courts are now sufficiently common that they no longer attract sectoral surprise; settlement is the modal outcome, and the cases that reach a judgment tend to involve respondents that engaged late or refused remediation outright.
The EHRC's enforcement strategy for 2025–28 names access to public services, the social-security appeals system, and the accessibility of justice (including remote-hearing arrangements) as priority areas. Independent commentary from the disability-rights sector has called for the Commission to make more use of its formal-investigation powers; the Commission has answered that targeted intervention plus published guidance produces faster behaviour change than open-ended investigations.
What's coming in 2026–27
Three concrete developments to watch. First, the Procurement Act 2023 reaches the end of its first full operational cycle in 2026; the Cabinet Office's procurement-policy notes (PPNs) on accessibility-aware procurement are expected to be refreshed, and the first round of Debarment List decisions will set the practical bar for what counts as "professional misconduct" capable of supporting an exclusion on accessibility grounds. Second, a ministerial review of PSBAR has been signalled by the Cabinet Office, with options including extension to publicly-funded private-sector services, alignment of the conformance bar to WCAG 2.2 once EN 301 549 catches up, and a clearer escalation pathway between Cabinet Office monitoring and EHRC enforcement. Third, Northern Ireland's distinct EAA trajectory under the Windsor Framework continues to play out for products placed on the NI market — the practical consequence is that UK manufacturers selling self-service terminals, e-readers and consumer-electronics interface devices into the NI market should expect to track EAA conformance requirements even though their GB sales remain governed only by the Equality Act and consumer-protection law.
The practical compliance checklist for 2026
If you operate a UK public-sector website or mobile application: publish or refresh your PSBAR accessibility statement against the Cabinet Office model; verify WCAG 2.1 AA conformance via EN 301 549 v3.2.1, including the mobile sections for any in-scope apps; review the most recent GDS monitoring findings for your sector and pre-empt the next scan with internal testing.
If you provide a private-sector service to UK users (online or offline): treat the Equality Act reasonable-adjustment duty as anticipatory — design accessibility in rather than waiting for a complaint; document the reasonable steps you have taken; converge on WCAG 2.1 AA as the de facto bar; ensure complaints handling routes to a named accessibility owner.
If you sell EAA-regulated products into Northern Ireland or run a cross-border GB/NI service: map your product lines against the EAA's product scope; assemble the EU technical file for NI-market sales under the Windsor Framework; maintain the dual-track UK/EU conformance documentation for products with substantial NI-market exposure.
The through line
The United Kingdom's accessibility regime looks lean on paper — two statutes, no administrative-fine schedule on the public-sector side — but the working exposure runs through uncapped tribunal and county-court damages, EHRC unlawful-act notices that bite procurement, and a Procurement Act 2023 exclusion power that is now in its first live operating cycle. The question for 2026–27 is not whether the regime has teeth but whether the regulators choose to use the powers they already have, especially the EHRC's formal-investigation powers and the Cabinet Office's discretionary debarment route.
Read more from Disability World on the Equality Act 2010, the Web Accessibility Directive, WCAG 2.1, the US Americans with Disabilities Act for comparison, and the UN CRPD.