What Is the BFSG?
The BFSG — Barrierefreiheitsstärkungsgesetz, or Accessibility Strengthening Act — is the German law implementing the European Accessibility Act in national legislation. In force for consumer products and services since 28 June 2025, it requires a wide range of offerings on the German market to be accessible to people with disabilities. For digital businesses the headline consequence is direct: e-commerce services, banking, passenger transport booking, and related consumer-facing digital offerings must be usable by everyone — and German market surveillance authorities can enforce it.
Scope and Requirements
The BFSG binds manufacturers, importers, retailers, and service providers offering in-scope products or services to consumers in Germany, regardless of where the company itself is established — serving the German market is what triggers the duty. Service-providing microenterprises (fewer than ten employees and at most two million euros in annual turnover or balance-sheet total) are exempt, though the exemption does not extend to the products they sell. The technical requirements arrive through the accompanying legal ordinance (BFSGV), which aligns with the European harmonized standard EN 301 549 — meaning that for websites and apps, conformity in practice runs through WCAG at Level AA. Violations can bring orders to remedy, withdrawal of the service from the market, and fines; customers and accessibility organizations can also report barriers to the authorities.
What It Means for Websites and Online Shops
Because the law covers a service end to end, its reach includes every step a customer must pass to complete a transaction: navigation, product pages, forms, identification, payment — and the security checks in between. This is where verification becomes a legal topic rather than a UX preference. A checkout or registration protected by a visual puzzle that a blind customer cannot solve is, under the BFSG's logic, a barrier at the most critical point of the service, and the operator answers for it even though the widget comes from a third party. German-market operators therefore need their bot protection to satisfy the same accessibility bar as the rest of the service.
Meeting the BFSG at the Verification Step
The robust pattern mirrors the EAA guidance: verification that runs invisibly for most visitors, and an accessible challenge — keyboard-operable, screen-reader-compatible, independent of any visual puzzle — for the cases that need one. As a German provider, CaptchaFox designs its verification to meet WCAG requirements precisely so that operators subject to the BFSG do not import a barrier at their most sensitive step. Two practical moves follow for any German-market operator: include the full transaction path, security gates included, in the accessibility audit, and require accessibility conformance evidence from every embedded third-party component. Our article on CAPTCHAs and accessibility explores the underlying tension between security and inclusion in depth.
About CaptchaFox
CaptchaFox is a GDPR-compliant solution based in Germany that protects websites and applications from automated abuse, such as bots and spam. Its distinctive, multi-layered approach utilises risk signals and cryptographic challenges to facilitate a robust verification process. CaptchaFox enables customers to be onboarded in a matter of minutes, requires no ongoing management and provides enterprises with long-lasting protection.
To learn more about CaptchaFox, talk to us or start integrating our solution with a free trial.