2026-06-02
The Dutch Authority for the Financial Markets (AFM) has launched a compliance investigation into digital accessibility and issued its third EAA update to clarify reporting obligations for financial firms. The regulator mandates adherence to WCAG Level AA standards, prioritizing critical Level A criteria, and requires organizations to embed accessibility into their design processes and audit routines. Additionally, the AFM provides detailed instructions for submitting non-conformity reports, insisting on specific, concrete data regarding affected services, user impact, and corrective measures rather than vague descriptions.
In Brief – In this third EAA update, we address accessibility requirements, specifically the following points:
Additionally, we provide supplementary instructions and examples for reporting non-conformity in the AFM Portal. We request that companies follow these instructions when submitting an EAA report.
APRIL | 2026
© AFM 2026 | EAA-update 3 2
The AFM expects financial enterprises to structurally ensure digital accessibility and comply with WCAG criteria. To assess the sector's current status, we will conduct a compliance investigation into accessibility in the coming quarter.
The WCAG criteria are important guidelines for meeting accessibility requirements. We expect enterprises to prioritize Level A criteria. Among these, 4 are particularly important: the non-interference criteria:
If any of these criteria are not properly applied, the entire website may become unusable for certain groups of visitors. Or, in some cases, it may cause risky physical reactions. Therefore, these criteria always qualify as 'critical'.
We also expect enterprises to be able to comply with Level AA of the WCAG criteria. Furthermore, with the arrival of WCAG 2.2, new criteria become mandatory. Therefore, work towards these requirements now so that you are well prepared for future obligations.
The AFM emphasizes that accessibility is broader than just WCAG criteria. We expect enterprises to have insight into the greatest accessibility risks in their services and to have processes in place to make their websites, apps, and digital services accessible and keep them accessible. Pay attention to the following points:
In the coming quarter, the AFM will conduct a compliance investigation into the digital accessibility of financial enterprises. In doing so, we will test the extent to which enterprise websites comply with WCAG criteria, with specific attention to Level A criteria. We focus on sectors and services that are most used by consumers. We will use the results to determine targeted interventions and, where necessary, address enterprises on shortcomings.
© AFM 2026 | EAA-update 3 3
Financial enterprises are required to report when they do not comply with the EAA (reporting of non-conformity). It is good to see that many parties have reported to the AFM and show that they are taking steps to become more accessible. However, we notice that the reports are not always filled out concretely. We can then not properly assess what the accessibility problems are exactly and where they are located.
To clarify the EAA reports, we have included supplementary instructions below for some questions from the reporting form. We request enterprises to follow these instructions when submitting a report. The instructions can also be found on the AFM website.
Indicate which parts of the service do not meet the requirements. Do this, for example, as follows:
Note: If the same problem applies to multiple trade names or parts of the service, this can be submitted in one report. It is important that the parts of the service affected are specified, as described above.
Example – Question 1 This report applies to the trade name 'Company B.V.' and concerns the online customer portal on the web page 'Submit Request'. It specifically concerns the function 'Upload Document' during the application process.
Indicate concretely what accessibility problems exist and where they are located. Do this, for example, by indicating which WCAG criteria are involved, or in the case of an app, whether it applies to iOS or Android.
Example – Question 2 WCAG 2.1 – criterion 2.1.1 (Keyboard – A): the 'Upload Document' button is not reachable via keyboard navigation. WCAG 2.1 – criterion 1.4.3 (Contrast – AA): text labels in the upload screen have insufficient contrast. This applies to both the website, the iOS app, and the Android app.
Indicate the number of visitors or users of a website or app. Also consider the number of people who are not yet customers.
Example – Question 3
© AFM 2026 | EAA-update 3 4
As a guideline, the impact can be determined based on the level of the WCAG criteria. A Level A criterion has a serious or critical impact, and a Level AA criterion has a moderate or minor impact.
Example – Question 4 The impact is serious, because a Level A criterion is affected and keyboard users are hindered from completing the application independently.
Indicate concretely what steps are being taken to meet the requirements and which departments within the organization are involved. For example, indicate in which processes this is included so that it is permanently ensured.
Example – Question 5
We see that enterprises, for example, indicate that customers can come to a physical office as an alternative solution. This is not an equivalent alternative for people with disabilities, as not everyone has the opportunity to come to an office.
Example – Question 6