WCAG 2.2 AA and EN 301 549: which one applies to an online shop
WCAG and EN 301 549 are not alternatives: for web pages, the European standard EN 301 549 uses the success criteria of WCAG. Its version 3.2.1 uses WCAG 2.1 Level AA and is cited in the EU’s Official Journal under the Web Accessibility Directive; version 4.1.1 is aligned with WCAG 2.2.
- Written by
- William Quaade Rasmussen
- Published
- Last updated
- Answers
- 10 questions
- Sources
- 13 sources
On this page: 10 answers
WCAG or EN 301 549: which one applies?
WCAG and EN 301 549 are not two competing standards: for web pages, the European standard EN 301 549 uses the success criteria of WCAG. Which law applies to a particular shop, and with which standard, is a legal assessment that this guide does not make.
| Document | Published by | Date | Web requirements | Status |
|---|---|---|---|---|
| WCAG 2.1 | W3C | W3C Recommendation of 5 June 2018; latest edition 6 May 2025 | 30 success criteria at Level A and 20 at Level AA | W3C Recommendation; EN 301 549 V3.2.1 uses it at Level AA |
| WCAG 2.2 | W3C | W3C Recommendation of 5 October 2023; republished 12 December 2024 | 31 success criteria at Level A and 24 at Level AA | W3C Recommendation; EN 301 549 V4.1.1 refers to its edition of 12 December 2024 |
| EN 301 549 V3.2.1 | ETSI | March 2021 | WCAG 2.1 Level AA, through clauses 9.1 to 9.4 and the conformance requirements of clause 9.6 | Cited in the Official Journal of the EU under the Web Accessibility Directive (EU) 2016/2102 |
| EN 301 549 V4.1.1 | ETSI | September 2026 | Clauses 9, 10 and 11 (web, non-web documents, software) aligned with WCAG 2.2 | Published by ETSI; Validiscan found no reference to it in the Official Journal |
Sources: WCAG 2.1 and WCAG 2.2 (W3C) · EN 301 549 V3.2.1 and V4.1.1 (ETSI) · Commission Implementing Decision (EU) 2021/1339
Details: what the table compares, and what this guide does not assess
WCAG and EN 301 549 are not two competing standards. EN 301 549 is the European standard for the accessibility of ICT products and services, and for web pages it uses the success criteria of WCAG, the W3C’s Web Content Accessibility Guidelines. So the practical questions are which WCAG version a requirement names, and which version of EN 301 549 EU law cites.
The table compares the four documents this guide covers. The sections below explain each one, with links to the W3C, ETSI and EUR-Lex. Which law applies to a particular shop, and with which standard, is a legal assessment that this guide does not make.
What is WCAG, and who publishes it?
WCAG, the Web Content Accessibility Guidelines, is the W3C’s standard for accessible web content, and WCAG 2.2 is a W3C Recommendation. “WCAG 2.2 AA” is short for conformance to WCAG 2.2 at Level AA: at its core, a page satisfies every success criterion at Levels A and AA.
Source: WCAG 2.2, layers of guidance (W3C)
Details: who develops WCAG, and how it is built in layers
WCAG, the Web Content Accessibility Guidelines, is the standard for accessible web content published by the World Wide Web Consortium (W3C). The W3C’s Accessibility Guidelines Working Group develops it, and WCAG 2.2, the version this guide is about, is a W3C Recommendation.
WCAG 2.2 is built in layers (WCAG 2.2, layers of guidance): four principles at the top, 13 guidelines under them, and testable success criteria under the guidelines. Each success criterion has one of three levels: A (the lowest), AA and AAA (the highest). “WCAG 2.2 AA” is short for conformance to WCAG 2.2 at Level AA. At its core, that means a page satisfies every success criterion at Levels A and AA; the section on Level AA below sets out the full conformance requirements.
What changed from WCAG 2.1 to WCAG 2.2?
WCAG 2.2 adds 6 success criteria at Levels A and AA to those of WCAG 2.1 and removes 4.1.1 Parsing; every other success criterion at those levels keeps its number and level. WCAG 2.1 has 50 success criteria at Levels A and AA, and WCAG 2.2 has 55.
| Success criterion | Level | What it asks, in short |
|---|---|---|
| 2.4.11 Focus Not Obscured (Minimum) | AA | When a component receives keyboard focus, it is not entirely hidden by content the author created. |
| 2.5.7 Dragging Movements | AA | Anything done by dragging can also be done with a single pointer without dragging, with exceptions, for example where dragging is essential. |
| 2.5.8 Target Size (Minimum) | AA | Targets for pointer input are at least 24 by 24 CSS pixels, with exceptions, for example for targets with enough spacing, targets with an equivalent control on the same page, and targets inside a sentence. |
| 3.2.6 Consistent Help | A | Help that is repeated on several pages (human contact details, a human contact mechanism, a self-help option or a fully automated contact mechanism) appears in the same order relative to other page content, unless the user changes it. |
| 3.3.7 Redundant Entry | A | Information the user already entered or was given in the same process is filled in automatically or offered for selection, with exceptions, for example where entering it again is essential or needed for security. |
| 3.3.8 Accessible Authentication (Minimum) | AA | No step of a log-in requires a cognitive function test, such as remembering a password or solving a puzzle, unless an alternative or a mechanism that helps is available, or the test is to recognise objects or content the user provided. |
Sources: WCAG 2.2, new features · WCAG 2.1 and WCAG 2.2 publication histories (W3C)
Details: the publication dates, the counts, the new criteria that concern a shop, and 4.1.1 Parsing
WCAG 2.2 adds six success criteria at Levels A and AA to those of WCAG 2.1 and removes one, 4.1.1 Parsing. Every other success criterion at those levels keeps its number and level.
WCAG 2.1 became a W3C Recommendation on 5 June 2018, and the W3C published updated editions on 21 September 2023, 12 December 2024 and 6 May 2025 (WCAG 2.1 publication history). WCAG 2.2 became a W3C Recommendation on 5 October 2023. On 12 December 2024 the W3C republished it with editorial corrections and changes to four definitions; no success criterion was added or removed (WCAG 2.2 publication history).
WCAG 2.1 has 50 success criteria at Levels A and AA: 30 at Level A and 20 at Level AA. WCAG 2.2 has 55 success criteria at Levels A and AA: 31 at Level A and 24 at Level AA. Take the 50 of WCAG 2.1, remove 4.1.1 and add the six new criteria, and the result is the 55 of WCAG 2.2. Validiscan counted these numbers in each Recommendation.
The six new success criteria at Levels A and AA are listed in WCAG 2.2’s section on new features. WCAG 2.2 adds three more at Level AAA.
Three of the six concern parts of an online shop directly. Redundant Entry applies within one process, and WCAG’s own example of a process is an online store’s pages through to checkout (see below). Accessible Authentication (Minimum) applies to every step of a log-in, such as the log-in to a customer account; the W3C names support for password managers and copy and paste as examples of a mechanism that helps. Target Size (Minimum) applies to the targets a visitor operates with a pointer, such as buttons and links.
WCAG 2.2 marks 4.1.1 Parsing as obsolete and removed. The W3C’s note says that the criterion was adopted for problems assistive technology had when parsing HTML directly, that assistive technology no longer needs to do that, and that the criterion “no longer has utility” (WCAG 2.2, 4.1.1 Parsing).
If a page conforms to WCAG 2.2 AA, does it also conform to WCAG 2.1 AA?
Yes, according to the W3C: WCAG 2.2 states that content that conforms to it also conforms to WCAG 2.0 and WCAG 2.1. One note concerns 4.1.1 Parsing, which authors required by policy to conform with WCAG 2.0 or 2.1 “may need to continue to test and report”.
Sources: WCAG 2.2 and its comparison with WCAG 2.1 · WCAG 2.1, 4.1.1 Parsing (W3C)
Details: what WCAG 2.2 says about the earlier versions, and the note on 4.1.1
Yes, according to the W3C, with one note on 4.1.1 Parsing (below). WCAG 2.2 states: “Content that conforms to WCAG 2.2 also conforms to WCAG 2.0 and WCAG 2.1.”
WCAG 2.2 does not replace the earlier versions. WCAG 2.2 states that its publication “does not deprecate or supersede WCAG 2.0 or WCAG 2.1”, which remain W3C Recommendations. The Accessibility Guidelines Working Group recommends that sites adopt WCAG 2.2 as their new conformance target, “even if formal obligations mention previous versions” (WCAG 2.2, new features).
One note concerns 4.1.1 Parsing. Authors who are required by policy to conform with WCAG 2.0 or 2.1 “may need to continue to test and report 4.1.1”, WCAG 2.2 says (comparison with WCAG 2.1). WCAG 2.1 itself, in its editions since 21 September 2023, carries a note on that criterion: it “should be considered as always satisfied for any content using HTML or XML” (WCAG 2.1, 4.1.1 Parsing).
What does Level AA mean for a shop’s pages and checkout?
Level AA conformance to WCAG 2.2 needs all five conformance requirements, the first being that a page satisfies every Level A and AA success criterion or has a conforming alternate version. For a shop, two are worth knowing: full pages, phone layout included, and complete processes through to checkout.
- Conformance level
- Full pages
- Complete processes
- Only accessibility-supported ways of using technologies
- Non-interference
Source: WCAG 2.2, conformance requirements (W3C)
Details: the five requirements, full pages, complete processes and Level AAA
A web page conforms to WCAG 2.2 at Level AA when it satisfies every Level A and Level AA success criterion, or when a conforming alternate version at Level AA is provided. That is the first of five conformance requirements, and a page has to meet all five: the conformance level, full pages, complete processes, only accessibility-supported ways of using technologies, and non-interference (WCAG 2.2, conformance requirements).
Two of the requirements are worth knowing for a shop:
- Full pages. Conformance is for full web pages only, and “cannot be achieved if part of a web page is excluded”. A full page includes each variation that the page presents automatically for different screen sizes, so the phone layout of a responsive shop page has to conform as well, or have a conforming alternate version (WCAG 2.2, full pages).
- Complete processes. When a page is one step in a process, every page in the process has to conform. WCAG’s own example is a shop: “An online store has a series of pages that are used to select and purchase products. All pages in the series from start to finish (checkout) conform in order for any page that is part of the process to conform.” (WCAG 2.2, complete processes)
Level AAA is the highest level. WCAG does not recommend requiring it as a general policy for entire sites, “because it is not possible to satisfy all Level AAA success criteria for some content” (WCAG 2.2, conformance level). A formal conformance claim is optional under WCAG (WCAG 2.2, conformance claims).
What is EN 301 549, and how does it relate to WCAG?
EN 301 549 is a Harmonised European Standard for the accessibility of ICT products and services, with the web requirements in clause 9. Version 3.2.1 states each web requirement as a WCAG 2.1 success criterion; the European Commission notes that it also includes requirements that are not part of WCAG 2.1.
Sources: EN 301 549 V3.2.1 (ETSI) · European Commission, web accessibility standards
Details: who produced version 3.2.1, how it relates to WCAG 2.1, and what it adds
EN 301 549 is a Harmonised European Standard titled “Accessibility requirements for ICT products and services”. It covers ICT in general, not only websites; its clause 9 holds the requirements for the web. Version 3.2.1, dated March 2021, was produced by ETSI’s Technical Committee Human Factors and the eAccessibility Joint Working Group of CEN, CENELEC and ETSI, in response to the European Commission’s standardisation request M/554 (EN 301 549 V3.2.1).
For web pages, EN 301 549 V3.2.1 states each requirement as a WCAG 2.1 success criterion, and it sums up the relation in one sentence: “Conformance with W3C Web Content Accessibility Guidelines (WCAG 2.1) Level AA is equivalent to conforming with all of clauses 9.1 to 9.4 and the conformance requirements of clause 9.6 of the present document.” The WCAG 2.1 Level AAA criteria are in clause 9.5, which is informative (EN 301 549 V3.2.1).
EN 301 549 is more than WCAG. The European Commission notes that V3.2.1 “includes requirements that are not part of WCAG 2.1”, and that in V3.2.1 WCAG 2.1 also applies to documents downloaded from the web (European Commission, web accessibility standards).
What changes with EN 301 549 V4.1.1?
EN 301 549 V4.1.1, which ETSI published in September 2026, moves the standard from WCAG 2.1 to WCAG 2.2, and ETSI states that it has a new Annex ZB for the European Accessibility Act. Publication by ETSI is one step; a reference in the Official Journal is another.
Sources: EN 301 549 V4.1.1 (ETSI) · Rolling Plan for ICT Standardisation 2026
Details: the WCAG reference of V4.1.1, the request M/587 and the two annexes
EN 301 549 V4.1.1, which ETSI published in September 2026, moves the standard from WCAG 2.1 to WCAG 2.2. Its normative reference for WCAG is the W3C Recommendation of 12 December 2024, listed together with ISO/IEC 40500:2025, and ETSI states that the requirements in clauses 9, 10 and 11 (web, non-web documents and software) “have all been updated to align with the WCAG 2.2 recommendation” (EN 301 549 V4.1.1).
ETSI states that V4.1.1 was developed in response to the Commission’s standardisation request M/587, and that it has two annexes relating the standard to EU law: Annex ZA for the Web Accessibility Directive (EU) 2016/2102, an update of Annex A of the previous version, and a new Annex ZB for the European Accessibility Act, Directive (EU) 2019/882 (EN 301 549 V4.1.1). The request M/587 concerns the accessibility requirements of products and services under the European Accessibility Act (Rolling Plan for ICT Standardisation 2026).
Publication by ETSI is one step. A reference in the Official Journal is another, and the next section covers it.
Which version of EN 301 549 does EU law cite?
The EU’s Official Journal cites EN 301 549 V3.2.1 under the Web Accessibility Directive, which concerns the websites and mobile applications of public sector bodies. As of 6 October 2026, Validiscan found no Official Journal reference to V4.1.1, and none to a harmonised standard under the European Accessibility Act.
- Cited in the Official Journal
- EN 301 549 V3.2.1, under the Web Accessibility Directive (EU) 2016/2102
- Cited by
- Commission Implementing Decision (EU) 2021/1339 of 11 August 2021, Official Journal L 289 of 12 August 2021
- EN 301 549 V4.1.1
- Validiscan found no Official Journal reference as of 6 October 2026
- Under the European Accessibility Act
- Validiscan found no reference in the Official Journal to a harmonised standard as of 6 October 2026
- Standardisation request for the EAA
- M/587, published on 14 September 2022
Sources: Commission Implementing Decisions (EU) 2021/1339 and 2018/2048 · Directive (EU) 2019/882, Article 15 · Rolling Plan for ICT Standardisation 2026
Details: the citation of V3.2.1, the presumption of conformity, and the rule of the European Accessibility Act
The Official Journal of the European Union cites EN 301 549 V3.2.1, and it does so under the Web Accessibility Directive (EU) 2016/2102, which concerns the websites and mobile applications of public sector bodies. As of 6 October 2026, Validiscan found no reference in the Official Journal to EN 301 549 V4.1.1, and none to a harmonised standard under the European Accessibility Act.
The citation of V3.2.1 is Commission Implementing Decision (EU) 2021/1339 of 11 August 2021, published in the Official Journal L 289 of 12 August 2021, pages 53 to 55. It amends Implementing Decision (EU) 2018/2048 on the harmonised standard for websites and mobile applications, and provides for the withdrawal of the reference of the earlier version, V2.1.2 of August 2018.
Under the Web Accessibility Directive, such a citation gives a presumption of conformity. As Implementing Decision (EU) 2018/2048 sets out, Article 6(1) of that Directive provides that content of websites and mobile applications that conforms to a harmonised standard cited in the Official Journal is presumed to meet the accessibility requirements of Article 4 of that Directive that the standard covers.
The European Accessibility Act (EAA) has its own rule. Under Article 15 of Directive (EU) 2019/882, products and services that conform to harmonised standards whose references are published in the Official Journal “shall be presumed to be in conformity with the accessibility requirements of this Directive in so far as those standards or parts thereof cover those requirements”. Where no such reference is published, the Commission may, under conditions the article sets out, adopt technical specifications by implementing act. The Commission’s standardisation request for the EAA, M/587, was published on 14 September 2022, and the revision of EN 301 549 is one of the activities under it (Rolling Plan for ICT Standardisation 2026).
For the Web Accessibility Directive, the European Commission describes the order of events: “first, the standard has to be updated, and then it needs to be referenced in the Official Journal” (European Commission, web accessibility standards).
What do WCAG and EN 301 549 mean for an online shop?
As of 6 October 2026, Validiscan found no Official Journal reference to a harmonised standard under the European Accessibility Act. EN 301 549 V3.2.1, cited under the Web Accessibility Directive, uses WCAG 2.1 Level AA; V4.1.1 is aligned with WCAG 2.2. Which standard applies to a particular shop is a legal question.
Source: Directive (EU) 2019/882
Details: the facts of this guide put together, and the questions it leaves to a lawyer
The European Accessibility Act covers e-commerce services provided to consumers, and Member States apply its measures from 28 June 2025. Microenterprises that provide services (fewer than 10 persons employed, and an annual turnover or annual balance sheet total of no more than EUR 2 million) are exempt from its accessibility requirements for services. The guide to the European Accessibility Act for online shops sets out its scope, definitions and requirements, and the guide to the BFSG for online shops covers Germany’s law.
Put together, the facts in this guide are these:
- Under the EAA, conformity to a harmonised standard gives a presumption of conformity with the accessibility requirements the standard covers, once the standard’s reference is published in the Official Journal. As of 6 October 2026, Validiscan found no such reference under the EAA.
- The version of EN 301 549 that the Official Journal cites, V3.2.1, is cited under the Web Accessibility Directive and uses WCAG 2.1 Level AA.
- The newest version as of 6 October 2026, EN 301 549 V4.1.1, is aligned with WCAG 2.2.
- The W3C states that content that conforms to WCAG 2.2 also conforms to WCAG 2.1, and its working group recommends WCAG 2.2 as the conformance target even where formal obligations mention earlier versions.
Whether the EAA applies to a particular shop, whether the microenterprise exemption covers it, and which standard a court or an authority would apply to it are legal questions for a lawyer or the competent national authority. This guide does not answer them.
Where does Validiscan come in?
Validiscan works to WCAG 2.2 AA and reports against WCAG 2.1 AA and WCAG 2.2 AA: the Remediation Evidence Package gives each success criterion at Levels A and AA one result from one evaluation, shown in a table for each version. Validiscan does not assess whether a shop meets a law.
- Works to
- WCAG 2.2 AA
- Reports against
- WCAG 2.1 AA and WCAG 2.2 AA, one table each
- Delivers
- A pull request, an unpublished copy of a Shopify theme, or a patch bundle
- Does not assess
- Whether a shop meets a law
Details: how the package reports each criterion, and the criteria matrix
Validiscan works to WCAG 2.2 AA and reports against both WCAG 2.1 AA and WCAG 2.2 AA. Its scans check a shop’s pages with automated rules mapped to WCAG success criteria, and it delivers fixes as changes to the shop’s own code: a pull request, an unpublished copy of a Shopify theme, or a patch bundle.
The Remediation Evidence Package gives each success criterion at Levels A and AA one result from one evaluation and shows it in two tables: one for WCAG 2.1 AA, the version EN 301 549 V3.2.1 uses, and one for WCAG 2.2 AA, the version V4.1.1 is aligned with. A criterion with an item on the manual checklist and no manual result yet is shown as not evaluated, and so is a criterion that nothing tests; a criterion that rules test and that has no checklist item is shown as supported when the rules find no failure. In the WCAG 2.1 AA table, 4.1.1 Parsing is shown as supported without a test, following the note in WCAG 2.1 that it should be considered as always satisfied for content using HTML or XML. The package’s scope statement reads: “Conformance with WCAG 2.1 AA and WCAG 2.2 AA success criteria as evaluated on the listed pages and dates.” It also says: “This package is evidence of an evaluation and of remediation work. It is not a certificate and does not state legal compliance.” Validiscan does not assess whether a shop meets a law.
The criteria matrix lists every WCAG 2.2 success criterion at Levels A and AA with the rules that test it, where there are any, and shows what automated checks cover and what needs a person. The guide on what automated accessibility testing can and cannot prove explains why some criteria need a person.
Sources
13 sources, each listed with the date it was last checked.
WCAG (W3C) 4
- Web Content Accessibility Guidelines (WCAG) 2.2 · W3C · · checked
- Web Content Accessibility Guidelines (WCAG) 2.2 publication history · W3C · checked
- Web Content Accessibility Guidelines (WCAG) 2.1 · W3C · · checked
- Web Content Accessibility Guidelines (WCAG) 2.1 publication history · W3C · checked
EN 301 549 (ETSI) 2
- EN 301 549 V3.2.1 (2021-03), Accessibility requirements for ICT products and services · ETSI · checked
- EN 301 549 V4.1.1 (2026-09) · ETSI · checked
European Commission 4
- Web accessibility standards - latest changes · European Commission · checked
- Web Accessibility Directive - Standards and harmonisation · European Commission · checked
- Accessibility of ICT products and services (Rolling Plan for ICT Standardisation 2026) · European Commission · checked
- Harmonised standards · European Commission · checked
EU law (EUR-Lex) 3
- Commission Implementing Decision (EU) 2021/1339 amending Implementing Decision (EU) 2018/2048 as regards the harmonised standard for websites and mobile applications · EUR-Lex · · checked
- Commission Implementing Decision (EU) 2018/2048 on the harmonised standard for websites and mobile applications drafted in support of Directive (EU) 2016/2102 · EUR-Lex · · checked
- Directive (EU) 2019/882 on the accessibility requirements for products and services · EUR-Lex · · checked
Read next
All 6 guides-
What automated accessibility testing can and cannot prove
UpdatedAutomated accessibility testing can show that a page fails specific WCAG success criteria, but it cannot prove that a page conforms: a pass means only that a rule found no failure.
-
The European Accessibility Act (EAA) for online shops
UpdatedThe European Accessibility Act, Directive (EU) 2019/882, covers e-commerce services provided to consumers after 28 June 2025 and exempts microenterprises that provide services from its accessibility requirements.
-
The BFSG for online shops: who it covers and what it requires
UpdatedThe BFSG is the German law that transposes the European Accessibility Act; it has been in force since 28 June 2025 and covers e-commerce services offered to consumers through websites and apps.
Start with a free check of your shop.
Send your shop’s address. Validiscan scans it and replies with every failure the scan can prove, with the page and the code.
Request a free checkOr write to info@validiscan.com.
What the free check covers, and what it leaves out- You send
- your shop’s address
- Pages scanned
- up to 15
- You get
- every failure the scan can prove, with the page and the code
- On your shop
- public pages only; no login, nothing bought, no forms sent
- What it is not
- a full audit