Vai al contenuto principale
Torna al wiki
Accessibility

What Is the BFSG?

Ultimo aggiornamento il 20 luglio 2026

The BFSG — Barrierefreiheitsstärkungsgesetz, or Accessibility Strengthening Act — is the German law implementing the European Accessibility Act in national legislation. In force for consumer products and services since 28 June 2025, it requires a wide range of offerings on the German market to be accessible to people with disabilities. For digital businesses the headline consequence is direct: e-commerce services, banking, passenger transport booking, and related consumer-facing digital offerings must be usable by everyone — and German market surveillance authorities can enforce it.

Scope and Requirements

The BFSG binds manufacturers, importers, retailers, and service providers offering in-scope products or services to consumers in Germany, regardless of where the company itself is established — serving the German market is what triggers the duty. Service-providing microenterprises (fewer than ten employees and at most two million euros in annual turnover or balance-sheet total) are exempt, though the exemption does not extend to the products they sell. The technical requirements arrive through the accompanying legal ordinance (BFSGV), which aligns with the European harmonized standard EN 301 549 — meaning that for websites and apps, conformity in practice runs through WCAG at Level AA. Violations can bring orders to remedy, withdrawal of the service from the market, and fines; customers and accessibility organizations can also report barriers to the authorities.

What It Means for Websites and Online Shops

Because the law covers a service end to end, its reach includes every step a customer must pass to complete a transaction: navigation, product pages, forms, identification, payment — and the security checks in between. This is where verification becomes a legal topic rather than a UX preference. A checkout or registration protected by a visual puzzle that a blind customer cannot solve is, under the BFSG's logic, a barrier at the most critical point of the service, and the operator answers for it even though the widget comes from a third party. German-market operators therefore need their bot protection to satisfy the same accessibility bar as the rest of the service.

Meeting the BFSG at the Verification Step

The robust pattern mirrors the EAA guidance: verification that runs invisibly for most visitors, and an accessible challenge — keyboard-operable, screen-reader-compatible, independent of any visual puzzle — for the cases that need one. As a German provider, CaptchaFox designs its verification to meet WCAG requirements precisely so that operators subject to the BFSG do not import a barrier at their most sensitive step. Two practical moves follow for any German-market operator: include the full transaction path, security gates included, in the accessibility audit, and require accessibility conformance evidence from every embedded third-party component. Our article on CAPTCHAs and accessibility explores the underlying tension between security and inclusion in depth.

Informazioni su CaptchaFox

CaptchaFox è una soluzione conforme al GDPR con sede in Germania che protegge siti web e applicazioni da abusi automatizzati, come bot e spam. Il suo approccio distintivo e multilivello utilizza segnali di rischio e sfide crittografiche per facilitare un processo di verifica robusto. CaptchaFox consente ai clienti di essere operativi in pochi minuti, non richiede gestione continua e offre alle aziende una protezione duratura.

Per saperne di più su CaptchaFox, contattaci o inizia a integrare la nostra soluzione con una prova gratuita.

Termini correlati

What Is the European Accessibility Act?

The European Accessibility Act (EAA) is the EU directive requiring key products and digital services — including e-commerce — to be accessible since June 2025.

Continua a leggere
What Is WCAG?

WCAG (Web Content Accessibility Guidelines) is the W3C standard defining how web content must be built so people with disabilities can perceive and use it.

Continua a leggere
What Is a Brute Force Attack?

A brute force attack systematically tries password combinations until one works — automation makes millions of guesses feasible.

Continua a leggere
What Is Account Takeover (ATO)?

Account takeover is a form of identity fraud in which an attacker gains control of a legitimate user account and exploits it for financial gain.

Continua a leggere

Combatti i bot e proteggi i dati dei tuoi utenti.

Non dare ai truffatori e agli spammer alcuna possibilità e proteggi il tuo sito web con CaptchaFox oggi.

CaptchaFox protegge i siti web su desktop e dispositivi mobili