
One of our clients received an email with this subject line:
Renewal notifications for: www.[client-domain].co.uk
The message said “Action required”, gave a “renewal date”, quoted an “amount due” of £193 and presented a large View Invoice button.
It looked like a domain-renewal demand.
It was not.
The sender, describing itself as Domain Notifications | DNRS UK, was not the client’s domain registrar. It was not offering to renew the domain. It was offering to renew a domain renewal notification service — in other words, to charge £193 for sending reminders about a renewal handled by somebody else.
Yes, really.
At the very bottom of the email, in small text, are the words:
“This is an offer to receive notifications regarding your domain. We are not your registrar.”
That sentence changes the meaning of everything above it.
The prominent wording says:
It also says that if the recipient does not want to renew, they should reply at least five days before the stated date; otherwise, “we’ll assume you would like to continue”.
Continue what, exactly? Our client had no recognised relationship with this sender.
As far as I am concerned, the overall presentation is designed to make a busy business owner or accounts employee think they are looking at a genuine domain-renewal invoice. Only someone who reads to the bottom discovers that the company is not the registrar and the domain itself is not being renewed.
That is why I regard this as a misleading solicitation and a domain renewal scam in the ordinary, everyday sense of the word. Whether it amounts to a breach of advertising, consumer-protection or criminal law is a matter for the relevant authorities. I will be asking them to look at it.
Putting the truth in a footer does not necessarily cure a misleading headline.
The Committee of Advertising Practice says marketing communications must not materially mislead. Its guidance also says qualifications should clarify a claim, not contradict it, and should be sufficiently prominent. It specifically warns that qualifications placed at the end of an email, visible only after scrolling, may be insufficient.
That matters here. “We are not your registrar” is not a minor technical detail. It is the central fact a recipient needs in order to understand what is and is not, being sold.
Do not click the invoice button and do not pay it simply because it mentions your domain.
Instead:
If we manage your website or domain and you receive an unexpected renewal demand, send it to us before paying it.
We would much rather spend two minutes checking an email than see a client hand over £193 for a reminder service they neither asked for nor need.
Your genuine registrar renews your domain. A company that says, in the small print, “We are not your registrar” does not.
That should be the first thing the email tells you — not the last.
We build and manage accessible websites for businesses, and we also help our clients make sense of suspicious emails involving their websites and domains.
On Friday, I was invited into a meeting with a design agency that was considering bidding for a substantial website project.
The tender required the completed website to undergo an independent audit before launch.
The intention behind that requirement was entirely understandable.
The organisation wanted proof that a good job had been done. It wanted independent assurance that the finished website met WCAG 2.2 AA and could be used by disabled people.
That sounds responsible.
Unfortunately, the process described in the tender made it much less likely that a good job would actually be done.
The proposed approach was broadly:
The audit was intended to prove the website had been developed properly.
The problem is that, without an accessibility expert involved during the project, there was no strong reason to believe it would have been developed properly in the first place.
The audit would not simply confirm a successful outcome. It would probably uncover problems that had already been designed, developed and repeated throughout the website.
Someone would then have to pay to correct them.
A good accessibility audit is extremely valuable.
It identifies the barriers disabled people encounter when using a website. It should include manual technical testing and testing by disabled people using the assistive technologies they rely upon.
An audit can establish:
That is essential for an existing website where the organisation needs to understand its current position.
It is also useful as an additional layer of independent assurance for a new website, provided the project has sufficient budget.
However, an audit cannot influence decisions that have already been made.
It cannot stop an inaccessible navigation system from being selected several months earlier.
It cannot prevent an unsuitable third-party component from being incorporated into the design.
It cannot change the information architecture before hundreds of pages have been migrated into it.
It cannot advise the design team before colour combinations, form patterns, menus, maps, filters and interactive components have been approved.
It can only assess the finished result.
If that result is inaccessible, the audit has still done its job perfectly.
The website has not.
The distinction matters.
The organisation commissioning the website may believe that requiring an independent audit guarantees that the website will be accessible.
It does not.
It guarantees that somebody independent will assess the website.
Those are not the same thing.
The auditor might confirm that the website has been built to an excellent standard.
They might also produce a long report containing serious failures that must be corrected before launch.
The existence of the audit does not determine which outcome occurs.
The quality of the decisions made throughout discovery, design, development, content creation and testing determines that.
An independent audit may verify good work.
It does not create good work.
The most reliable way to produce an accessible website is to involve an accessibility expert from the beginning.
That involvement can start during discovery, before the first wireframe has been produced.
At that stage, we can consider:
Potential problems can then be addressed before they become embedded in the project.
Wireframes can be reviewed before designs are approved.
Designs can be reviewed before developers begin building them.
Individual components can be tested while they are being developed.
Forms, menus, modal windows, search tools, maps and filters can be assessed separately before they are repeated across the website.
The purpose is not to demand perfection at every stage.
Website development does not work like that.
The purpose is to identify issues while they are still relatively small, contained and affordable to correct.
One of the most important points is that involving me throughout a project does not necessarily cost substantially more than commissioning me to audit the finished website.
In my experience, the cost is often broadly comparable.
The difference is how that time and expertise are used.
During a retrospective audit, I spend my time identifying and documenting problems that have already been created.
When I am involved throughout the project, I spend that time helping the team avoid those problems, reviewing work as it develops and testing components before they become established across the platform.
The organisation is still paying for accessibility expertise.
However, instead of paying to discover that the work has gone wrong, it is paying to help ensure the work is done properly.
That can save an enormous amount of money.
A component corrected during development may take an hour or 2 to adjust.
The same component discovered during a final audit might already appear across dozens of templates and hundreds of pages. Correcting it can then require redevelopment, content changes, regression testing and further accessibility testing.
The accessibility specialist may cost roughly the same.
The remedial work certainly does not.
This is the approach I used when working on the website for British Wireless for the Blind.
The agency recognised that it needed specialist accessibility expertise as part of the development process.
I did not simply arrive at the end, inspect the completed website and hand over a list of everything that was wrong.
I was involved while the website was being developed.
That allowed me to review the work, explain potential barriers and help the team make better decisions while changes were still relatively easy to make.
There were still issues to resolve.
There will almost always be issues during a website project.
The important difference was that they were addressed as part of the development process. They did not remain hidden until immediately before launch.
The finished website reached a much higher standard because accessibility was treated as part of the work, rather than as an examination waiting at the end.
A final independent audit proves that an independent specialist has assessed the finished website and recorded their findings.
It does not automatically prove that the website is compliant.
The findings might demonstrate excellent conformance.
They might demonstrate partial conformance.
They might demonstrate serious and widespread accessibility failures.
The audit report is evidence.
What that evidence says depends upon the quality of the website being tested.
This is why an organisation should not begin with the assumption that the independent audit will provide a reassuring certificate at the end.
Website audits are not certificates.
They are investigations.
They report what is actually there.
When accessibility has been embedded throughout the project, an independent audit should largely confirm that the approach has worked, while perhaps identifying a smaller number of remaining issues.
When accessibility has not been embedded, the audit can become the beginning of an expensive remedial project.
The public document that records the website’s accessibility position is its accessibility statement.
A properly prepared accessibility statement should explain:
The statement must be accurate and supported by evidence.
It should not claim compliance merely because an automated testing tool has produced a high score.
It should not claim compliance because the website has an accessibility toolbar or overlay.
It should not claim compliance because an audit has taken place.
It should state the position established through proper testing and professional assessment.
When I have been involved throughout the project, I can test the finished website, evaluate any remaining limitations and prepare an accessibility statement that attests to the genuine conformance position.
The statement does not make the website accessible.
It publicly records what has been achieved through the work completed during the project.
Where a project has sufficient funding, the ideal arrangement can include:
That gives the organisation accessible delivery and an additional layer of independent assurance.
There is nothing wrong with that model.
The difficulty arises when the budget is too small to fund all of it.
The tender discussed on Friday had a total budget of £30,000 including VAT. It covered the consolidation of several websites, research, design, development, migration, multilingual functionality, an interactive map and directory, testing, training, penetration testing, an independent website audit and remediation.
The agency correctly concluded that the numbers did not work.
It could not fund the development, the specialist work, the independent testing and any significant remediation without somebody absorbing a considerable amount of unpaid work.
In that situation, the organisation must make an informed choice.
It can spend the accessibility budget commissioning an expert after the website has been completed, then use whatever remains to correct the problems discovered.
Alternatively, it can involve the expert from the outset, allowing accessibility to be built into the website and reducing the need for extensive remedial work.
If it requires both embedded expertise and separate independent verification, it must allocate enough money for both.
What it cannot reasonably do is specify both within an inadequate budget and assume that the supplier will somehow absorb the difference.
Wanting evidence that a website has been built properly is entirely reasonable.
Public bodies, charities and commercial organisations should expect suppliers to demonstrate the accessibility of the work they deliver.
However, the evidence needs to follow a process designed to produce a good result.
It should not be used as a substitute for that process.
An audit commissioned at the end may show that a good job has been done.
It may also prove that the website was not built accessibly and now requires substantial remedial work.
The best way to make the first outcome more likely is to involve accessibility expertise before the website is designed and to retain that involvement throughout development and testing.
That is how we approach accessible web design.
Accessibility is considered during planning, design, development, component testing, content creation and launch.
The completed website is then tested properly, with disabled people involved in the process.
The accessibility statement records the genuine conformance position.
An independent website audit can provide additional verification when the budget supports it.
However, it should verify that accessibility has been delivered properly.
It should not be the first point at which anybody discovers whether it has.
Dynamic filtering can feel like a smart improvement. A visitor chooses a course subject, an age range or another option, and the results update straight away. No extra button. No obvious delay. No need to think. On paper, that sounds like a cleaner experience.
In practice, it can create problems that are not obvious in a design meeting. A recent project on a college course search showed how a well-meant feature could cause confusion for disabled people, keyboard users and people using assistive technology. The same feature also created a serious resilience concern, as the huge number of possible filter combinations made the search area easier to overload during a sustained attack.
This is not about blaming designers or developers. Dynamic content is used everywhere. It is often built with good intentions. The issue is the law of unintended consequences. A feature that appears helpful for one group of users can quietly make the experience worse for others, while also placing unexpected pressure on the underlying system.
Course searches often need filters. Colleges may offer many different options across subject areas, age groups, qualification levels, study modes and locations. Without filters, people would have to scroll through too many choices. Good filtering should help people narrow the list and find the right course with less effort.
Dynamic filtering tries to make this faster. Instead of selecting several options and pressing a button, the results update every time one option changes. That can feel slick for a mouse user on a fast connection who can see the whole page clearly.
The difficulty starts when the page changes before the person is ready. Some people need more time to review the available options. Some use a keyboard and move through controls one step at a time. Some rely on software that reads the page out loud. Some need a clear confirmation that a change has happened. Automatic updates can remove that control.
A page should not only look efficient. It should behave predictably. Predictable behaviour is what lets people build a mental map of the page, understand where they are, and know what action has just taken place.
The course search had several filters. A visitor could choose a subject area, an age related option and other parameters. Each selection caused the results to update automatically.
The problem was what happened next. After a filter was selected, the page reloaded and focus moved back to the top. That meant a keyboard user had to navigate down through the page again to reach the filters. Someone using assistive technology could lose their place. A person who had just selected an option could be taken away from the control they were using.
The results also changed without a clear announcement. That meant the person might not know whether the selection had worked, how many results were now available, or where the updated list began. The page had changed, yet the user had not been given enough information to understand that change.
The result was a frustrating loop. Choose a filter. Get moved away. Navigate back. Try another filter. Lose position again. Search for the updated results. Repeat.
That is tiring for anyone. It is especially difficult for people who depend on clear structure, stable focus and meaningful feedback.
There are three main access problems with this kind of pattern.
First, focus movement matters. When focus jumps to the top of the page, the user is forced to start again. That adds unnecessary effort and can make the page feel broken.
Second, silent updates matter. When results change, people need to be told. A visible change may be obvious to some users, yet it may not be obvious to someone using a screen reader, magnification, voice control or a keyboard.
Third, timing matters. When every selection causes an immediate update, users lose the chance to choose several options first. They are forced into a chain of separate changes, each with its own page movement and uncertainty.
The W3C guidance on status messages explains why updates need to be communicated in a way that can be picked up by assistive technology without forcing a change of focus. This is especially relevant when search results change after a user action.
The issue is not that filtering exists. The issue is that the page changed without giving enough control, context or confirmation.
The same project also revealed a much bigger technical concern.
During testing, the site was going offline repeatedly. It was under a sustained attack, and the course search was part of the problem. The dynamic filtering created around 140000 possible combinations. That gave attackers a large surface to exploit and made the service harder to protect.
This matters because the public experience and the technical risk were linked. The same feature that made the page harder to use also made the search area more fragile during pressure.
A search tool with many live combinations can generate repeated requests. Each request may need the server to process data, return results and update the page. When that behaviour is multiplied many times, it can become expensive for the system. During an attack, that expense can be exploited.
The NCSC guidance on denial of service risk encourages organisations to understand their services, understand their defences, create a response plan and test the response. Course search tools, forms and filters should be part of that thinking, especially when they are central to public access.
This is where design, development, content and infrastructure overlap. A pattern is not only a visual choice. It can affect usability, access, load, caching, monitoring and security.
The solution was not complicated. The college moved away from live dynamic filtering and replaced it with a more traditional pattern.
Users can now select checkboxes freely. They can choose the subject, age option and other filters they need. Nothing changes until they press an Apply Filters button.
That one change solves several problems at once.
It gives users control. They decide when the results should change.
It keeps the interaction predictable. The user can make several choices before asking the page to update.
It reduces unnecessary requests. The system does not need to process a new search after every single selection.
It makes feedback easier. After the button is pressed, the page can announce that results have been updated, move focus to a useful position if needed, and provide a clear result count.
It also makes the experience easier to understand. A button says what will happen. A silent automatic update asks the user to guess.
There is nothing old-fashioned about a clear button. In many cases, it is the more mature design choice.
The lesson is not that dynamic filtering should never be used. The lesson is that it must be tested properly before it is trusted.
A design can look clean and still cause problems. A feature can feel modern and still create barriers. A search tool can pass a quick visual review and still fail when used with a keyboard, assistive technology or under real-world pressure.
Teams should ask practical questions before using automatic filtering.
These are not abstract questions. They affect whether people can find courses, make decisions and complete tasks. They also affect whether the service stays online when it is under pressure.
This is why manual review still matters. Automated tools can catch some issues, yet they do not experience frustration, confusion or lost focus. They do not know when a user has been pushed back to the top of a page and forced to repeat the same journey. They do not always reveal how a design pattern behaves under messy, real world conditions.
A good accessibility audit looks at the page as people actually use it. It tests the journey, the controls, the feedback and the places where the interface makes assumptions.
The most useful findings are often the ones that sit between disciplines. In this case, one recommendation improved access for disabled people, reduced friction for all users and helped address a resilience concern. That is a good outcome.
Dynamic filtering can be useful. It can also be risky when it removes control from the user and puts unnecessary pressure on the system. Simple checkboxes and a clear Apply Filters button may not look as flashy, yet they can be easier to use, easier to protect and easier to trust.
When a digital service matters, predictable beats clever.
If your organisation uses complex search tools, filters or forms, an accessibility audit can help reveal where the real barriers are before they become bigger problems.
One of the most rewarding parts of accessibility work is seeing developers grow in confidence.
We have been working on some e-learning modules, and this message came in today from the developer leading the build:
“Going through this process has been really informative and has massively boosted my accessibility knowledge, which will definitely help me in future builds. I really appreciate both your and Sonia’s help.”
Accessibility is not about catching people out.
It is about collaboration.
When developers understand the reasoning behind accessibility requirements, future builds improve before testing even begins.
That is when real change happens.
Sustainable accessibility is built through shared knowledge, practical feedback, and respectful challenge.
I am proud of the work we are doing and grateful to work with teams who genuinely want to improve.
By 2026, accessibility is no longer an abstract legal concept. It is a practical operational issue that affects how organisations design, maintain, and govern their digital services.
Many organisations feel unsure where to start, particularly if little has been done so far. Others assume that fixing everything at once is the only acceptable response, which can lead to paralysis.
In reality, managing accessibility risk is about structure, evidence, and intent rather than instant perfection.
This article outlines what organisations should be doing now to move from uncertainty to control.
The first and most important step is understanding where barriers exist today.
This means assessing real user journeys rather than relying solely on automated tools. Keyboard access, screen reader use, form completion, and navigation flow all need to be considered.
Without this baseline, organisations are unable to prioritise effectively or explain their position when questions are raised.
Once issues are identified, they need to be documented clearly.
This documentation should explain what has been reviewed, what barriers exist, and where further investigation is required. It is not about creating a perfect record. It is about showing awareness and responsibility.
Clear documentation reduces risk by demonstrating that accessibility has been actively considered rather than ignored.
Accessibility information plays a central role in managing exposure.
A compliant accessibility statement explains the current state of digital services, outlines known limitations, and sets expectations around improvement. It provides transparency for users and a reference point for regulators or partners.
For many organisations, this is the most effective immediate step they can take to reduce uncertainty.
Understanding how this fits within the expectations of the european accessibility act 2025 helps organisations align their documentation with how responsibility is assessed.
Accessibility improvement should be planned, not reactive.
A roadmap allows organisations to prioritise high impact issues, align work with development cycles, and demonstrate forward movement. It also prevents accessibility from becoming an endless emergency response.
Even where remediation will take time, having a clear plan significantly strengthens an organisations position.
Accessibility does not maintain itself.
Responsibility needs to be clearly owned, and accessibility checks need to be integrated into existing workflows. Content updates, design changes, and third party tools should all be considered through an accessibility lens.
Organisations that embed accessibility into everyday processes are far more resilient than those that treat it as a standalone project.
Although enforcement has already begun, this remains a sensible time to act.
Organisations that take steps now retain control over pace, scope, and communication. Those that delay further often find decisions made for them under pressure.
Accessibility risk does not disappear on its own. It grows quietly until addressed.
Managing accessibility today is about preparedness, transparency, and long term responsibility rather than last minute compliance.
When major accessibility requirements came into force in 2025, many organisations focused heavily on the deadline itself. Once that date passed, a new assumption quietly took hold. Some believed the risk had passed, others assumed enforcement would be immediate and dramatic, and many simply stopped paying attention.
In reality, what happens after a legal deadline is often more important than the deadline itself. Accessibility obligations do not expire. They settle into normal expectations, and scrutiny increases gradually over time.
This article explains what typically happens after accessibility deadlines pass and why the period following enforcement is often where risk quietly grows.
A legal deadline marks the point at which requirements become enforceable. It does not mark the end of responsibility.
After enforcement begins, accessibility moves from future planning into day to day accountability. Organisations are no longer asked whether they intend to act. They are asked what they have done and what they are doing now.
This shift often catches organisations off guard, particularly those that delayed action while waiting to see how enforcement would unfold.
Accessibility enforcement rarely starts with visible penalties. Early activity tends to focus on complaints, engagement, and clarification.
This can create the impression that requirements are not being actively enforced. In practice, this period is when expectations are set, guidance is tested, and patterns begin to form. Organisations that act during this phase are usually treated more favourably than those that remain inactive.
Silence during this stage is not neutral. It increases exposure later when tolerance reduces.
As accessibility requirements become normalised, the context changes.
Partners, procurement teams, and users become more confident in raising concerns. Regulators become less patient with organisations that claim uncertainty. What was once seen as confusion is increasingly viewed as neglect.
Organisations that have taken no steps since enforcement began may find themselves questioned more harshly than those that acted early, even if issues still exist.
After a deadline has passed, evidence matters more than promises.
Organisations are often asked to show what has been assessed, what barriers are known, and what plans exist to address them. Being able to demonstrate progress, even if incomplete, is far more valuable than claiming compliance without proof.
This is where testing, documentation, and transparency become critical safeguards.
Understanding the expectations set by the european accessibility act 2025 helps organisations frame their actions and explain their position once deadlines have passed.
Even after enforcement begins, acting is still worthwhile.
Organisations that start late retain the ability to control how accessibility is approached, prioritised, and communicated. Those that wait longer often find decisions imposed externally through complaints or contractual pressure.
Taking action now reduces uncertainty and demonstrates responsibility, even where remediation will take time.
Accessibility is not tied to a single date. Digital services evolve continuously, and so do the barriers users encounter.
Organisations that treat accessibility as a one off requirement often fall behind again quickly. Those that embed accessibility into ongoing processes are better placed to respond to scrutiny and meet user needs over time.
The period after enforcement is where long term accessibility maturity is established.
For many website owners, accessibility still feels abstract. It is often seen as a technical issue, a future upgrade, or something handled by automated tools. In reality, accessibility requirements are now an active part of the digital landscape, and expectations around them have changed significantly.
By 2026, accessibility is no longer a niche concern. It is increasingly treated as a basic requirement for public facing websites and digital services. Website owners who understand this shift are far better placed than those who continue to treat accessibility as optional.
This article explains what accessibility requirements mean in practical terms for website owners and why misunderstanding them can create unnecessary risk.
Websites are usually the most visible part of an organisation’s digital presence. They are easy to access, easy to test, and often form the basis of how users interact with a service.
Because of this, websites are frequently where accessibility concerns surface first. Barriers such as poor keyboard navigation, inaccessible forms, missing text alternatives, or confusing page structure can quickly prevent disabled users from completing basic tasks.
When issues are raised, website owners are often expected to explain whether accessibility has been considered at all.
Many website owners rely on automated checkers or overlays to assess accessibility. While these tools can identify certain technical issues, they do not reflect real user experience.
Automated tools cannot reliably assess whether content makes sense to screen reader users, whether focus order is logical, or whether interactive elements behave predictably. They also cannot test real journeys such as booking, checkout, or form completion.
Relying solely on automated tools often gives a false sense of confidence. When accessibility is challenged, this confidence rarely holds up under scrutiny.
Accessibility requirements do not expect instant perfection. They do expect awareness and responsibility.
Website owners are increasingly expected to demonstrate that accessibility has been considered, assessed, and documented. This includes understanding where barriers exist and having a realistic plan to address them over time.
Being able to explain what has been tested and what is being improved matters far more than claiming that a website has no issues.
An accessibility statement is often the first document reviewed when concerns are raised.
Compliant accessibility information explains the current state of the website, identifies known barriers, and outlines planned improvements. It provides transparency for users and evidence of intent for regulators or partners.
Without this documentation, website owners are left trying to explain their position under pressure. With it, they are able to show that accessibility has been taken seriously even where work is ongoing.
Understanding how these expectations align with the european accessibility act helps website owners clarify what is required and how their responsibilities are assessed.
Websites change constantly. Content is added, features are updated, and third party tools are introduced. Each change has the potential to introduce new accessibility barriers.
This is why accessibility is increasingly viewed as an ongoing responsibility rather than a single remediation exercise. Website owners who build accessibility into their processes are far more resilient than those who treat it as a one off fix.
Regular testing, clear ownership, and ongoing review are key to maintaining accessibility over time.
Even though enforcement has already begun, this period remains one of the most sensible times to act.
Expectations are clearer, guidance is more widely available, and early action is viewed far more favourably than last minute responses. Website owners who act now retain control over timing, scope, and messaging.
Those who wait often find that decisions are forced on them under less forgiving circumstances.
Accessibility requirements for digital services are no longer theoretical. They are active, enforceable, and increasingly part of how organisations are assessed by regulators, partners, and users.
Many organisations still misunderstand how enforcement works. There is often an expectation of immediate fines or public action. In practice, accessibility regulation follows a quieter and more methodical path.
This article explains what these requirements mean in practical terms and how enforcement typically unfolds after legislation comes into force.
One of the most persistent myths is that organisations must achieve full technical compliance immediately.
In reality, accessibility law focuses on outcomes. The core concern is whether disabled users can reasonably access and use digital services. Regulators are far more interested in whether barriers exist, whether they are understood, and whether action is being taken.
Organisations that can demonstrate awareness and progress are generally treated very differently from those that appear unaware or dismissive.
Accessibility enforcement rarely starts with sweeping inspections. It usually begins with specific triggers.
Common triggers include user complaints, issues raised by disability advocacy groups, accessibility checks during procurement processes, or concerns identified during partnership reviews. These triggers prompt questions rather than instant penalties.
At this stage, organisations are often asked to explain what they know about their accessibility position and what steps they are taking to improve it.
Some organisations assume that saying nothing is safer than acknowledging problems. This assumption often backfires.
When accessibility concerns are raised, organisations that cannot show evidence of assessment or planning are seen as higher risk. A lack of documentation suggests a lack of responsibility, even where issues may be similar to those of other organisations.
Being able to demonstrate that accessibility has been considered is often more important than being able to claim that no issues exist.
Evidence plays a central role in how accessibility obligations are assessed.
This includes testing results, internal reviews, and public facing documentation that explains known barriers and planned improvements. Together, these elements show intent and accountability.
Understanding the scope and expectations of the european accessibility act is often the starting point for organisations seeking to clarify their responsibilities and put appropriate documentation in place.
Accessibility enforcement tends to increase gradually. Early stages focus on awareness and engagement. Over time, expectations harden as guidance becomes clearer and examples accumulate.
Organisations that delay action often find themselves under greater pressure later, not because the rules have changed, but because tolerance has reduced. What was once seen as uncertainty is later seen as neglect.
Taking steps early allows organisations to act while expectations are still forming.
Accessibility is not a one time task. Digital services evolve constantly through new content, features, and integrations.
Without ongoing consideration, new barriers are introduced quietly and repeatedly. This is why accessibility is increasingly viewed as a continuous responsibility rather than a single project.
Organisations that embed accessibility into their processes are better placed to respond to scrutiny and to meet user needs over time.
Since accessibility requirements for digital services became enforceable in mid 2025, many UK organisations have assumed they are unaffected. This belief is widespread, understandable, and often incorrect.
The confusion largely stems from Brexit. Many organisations assume that leaving the EU also removed their obligations under European accessibility rules. In practice, this is not how digital regulation works.
This article explains why many UK organisations are still affected after June 2025, how exposure is assessed, and why assuming exemption can create unnecessary risk.
One of the most common misunderstandings is the idea that accessibility obligations depend on where an organisation is registered.
For digital services, what matters is who can access the service and where those users are based. Websites, apps, and online platforms do not respect national borders. If a service is accessible to users in the EU, it may still fall within scope regardless of where the organisation operates.
This applies to ecommerce platforms, booking systems, subscription services, and public facing websites. If EU users can reasonably use the service, accessibility requirements may apply.
Brexit removed the automatic application of EU law within the UK. It did not remove the impact of EU law on cross border digital services.
Many UK organisations continue to trade with EU customers, promote services internationally, or offer content without geographic restriction. In these cases, accessibility obligations can still be relevant.
Assuming that Brexit provides blanket exemption often leads organisations to overlook genuine exposure. This can become problematic if accessibility concerns are later raised through complaints or regulatory channels.
Accessibility enforcement rarely begins with broad inspections. It usually starts with specific triggers.
Common triggers include complaints from users, issues raised by advocacy groups, procurement checks, or accessibility concerns identified during partnership reviews. In these situations, organisations are often asked to demonstrate awareness and reasonable steps rather than instant perfection.
Organisations that have never assessed their accessibility position may struggle to respond. Those that can show testing, documentation, and intent are generally in a stronger position.
Since mid 2025, accessibility has shifted from future requirement to existing obligation. Organisations that continue to delay action are not maintaining the status quo. They are increasing exposure over time.
Digital services evolve continuously. Content changes, features are added, and user journeys grow more complex. Without accessibility oversight, new barriers are introduced quietly and consistently.
When concerns are eventually raised, organisations that cannot demonstrate ongoing consideration of accessibility are more vulnerable to scrutiny and reputational harm.
This is why understanding the scope of the european accessibility act 2025 uk is important when assessing whether action is required.
One of the most effective ways for organisations to reduce uncertainty is through a clear and accurate accessibility statement.
A compliant statement explains what has been assessed, what barriers exist, and what steps are planned. It provides transparency and demonstrates responsibility, even where remediation will take time.
For organisations unsure about their exposure, this documentation can act as an important safeguard. It shows that accessibility has been considered rather than ignored.
The post enforcement period is often the most forgiving time to act. Expectations are forming, but pressure has not yet peaked.
Organisations that take time now to understand their position, assess their services, and document their approach are better placed than those who wait for an external prompt. When accessibility questions arise, having answers ready matters.
UK organisations should not assume exemption by default. Clarifying whether accessibility obligations apply is a far safer approach than discovering exposure under pressure.
Since June 2025, accessibility requirements affecting digital services across Europe have been legally enforceable. For many organisations based in the United Kingdom, this has created uncertainty rather than clarity. The rules are live, scrutiny has begun quietly, and yet confusion remains about who is affected and what action is expected.
What has changed since enforcement began is not the legislation itself, but the expectations surrounding it and the level of accountability organisations now face. Accessibility is no longer an upcoming consideration. It is part of the current regulatory environment.
This article explains what has shifted since the requirements came into force and why UK organisations should reassess their position now rather than later.
A common misconception is that enforcement only begins when high profile penalties appear in the news. In reality, accessibility regulation rarely works that way.
Once requirements become law, regulators gain the authority to act immediately. Early enforcement typically focuses on complaints, clear failures, and sectors where accessibility barriers have the greatest impact. This stage is often low visibility but highly consequential for affected organisations.
For UK organisations, the absence of public cases does not indicate safety. It simply reflects an early phase of enforcement that prioritises investigation over publicity.
Many UK organisations assume that European accessibility requirements no longer apply following Brexit. This assumption is incorrect in many real world scenarios.
Where a digital service is accessible to users in the EU, the location of the organisation operating it becomes less relevant. Online services cross borders by default. Ecommerce platforms, booking systems, subscription services, and public facing websites are all commonly accessed internationally.
Organisations that serve EU users should not assume that being UK based removes their exposure.
The most significant change since enforcement began is a shift in accountability.
Accessibility is no longer treated as an aspirational goal or a future improvement. It is increasingly seen as a baseline requirement. Questions that were once framed around preparation are now framed around responsibility, evidence, and progress.
Procurement teams, partners, and advocacy groups are also becoming more confident in raising accessibility concerns. This creates pressure from multiple directions, not just from regulators.
Organisations that have not assessed their digital accessibility position may struggle to respond clearly when questions are raised.
A wait and see approach may appear sensible, but it places organisations in a weak position.
When accessibility concerns are raised through complaints or formal channels, the response matters as much as the issue itself. Organisations that cannot demonstrate awareness, assessment, and intent are more exposed to regulatory action and reputational harm.
Evidence of proactive effort can significantly reduce risk. This includes testing, documentation, and a clear understanding of existing barriers even where remediation is ongoing.
This is why having a clear reference point for the european accessibility act 2025 uk is important when explaining obligations and next steps.
Since enforcement began, accessibility statements have taken on greater importance.
A compliant statement demonstrates that an organisation understands its responsibilities, has assessed its digital services, and is transparent about existing limitations. It also provides a structured way to explain how and when improvements will be made.
Without this documentation, organisations struggle to show good faith or due diligence. With it, they are better positioned to respond to scrutiny even when issues still exist.
An Accessibility statement is no longer background content. They form part of an organisations compliance posture.
Accessibility enforcement rarely arrives all at once. It develops over time. Early adopters quietly reduce risk while others remain unaware. Eventually, expectations normalise and pressure increases across sectors.
January 2026 sits firmly within this early momentum phase. Organisations that act now are not late. They are responding at a point where action is still manageable.
The shift introduced in mid 2025 marks a move from preparation to accountability. Organisations that recognise this early are far better placed than those who continue to wait for an unmistakable warning sign.
You seem to have requested a page that is no longer available...
To go back to the homepage please follow this link
Whether you are planning a new website, reviewing an existing platform or trying to understand your accessibility obligations, we would love to help.
Please get in touch to discuss your project, accessibility goals or digital challenges.