Estonia Doesn't Fine You for Being Inaccessible — Only for Ignoring the Order to Fix It
There is no punitive fine anywhere in Estonian accessibility law. The single monetary sanction is a coercive payment of up to €10,000, and it becomes available only after you've been given a written order and failed to comply with it. Estonia also publishes some of the most practically useful official guidance in the Union.
Quick answer
Estonia's EAA law — the Toodete ja teenuste ligipääsetavuse seadus (LPS) — contains no fine for non-compliance as such. Supervision sits with a single regulator, TTJA (the Consumer Protection and Technical Regulatory Authority), which under § 18 can require a provider to bring a service into compliance and can restrict or prohibit the service only if that order is ignored. The only money in the act is § 19: a sunniraha — coercive penalty payment — of up to €10,000, imposed after an unheeded order. The widely quoted "€20,000 Estonian fine" has no statutory basis.
A penalty that punishes disobedience, not inaccessibility
Almost every other member state answers "what happens if my service isn't accessible?" with a number attached to that fact. Estonia doesn't have one. Its enforcement chain runs:
- TTJA identifies non-compliance, on a consumer tip or through planned supervision.
- It notifies the business and, under § 18, requires the service to be brought into compliance — an ettekirjutus (order).
- Only if the order isn't followed can TTJA restrict or prohibit the service's availability in Estonia.
- And only at that point does money enter, via § 19.
TTJA's own official guidance states the rule plainly:
« Juhul kui teenuseosutaja jätab ettekirjutuse ligipääsetavusnõuetes puuduste kõrvaldamise kohta täitmata, on TTJA-l vajadusel õigus määrata teenuseosutajale sunniraha kuni 10 000 eurot (LPS § 19). »
("If a service provider fails to comply with an order to remedy deficiencies in accessibility requirements, TTJA has the right, where necessary, to impose on the service provider a coercive penalty payment of up to €10,000.")
— TTJA, Juhend: Teenuste ligipääsetavusnõuded, v1
The mechanism matters as much as the figure. A sunniraha is a compliance-forcing tool, not a punishment for a past act — the same family as Finland's uhkasakko, Sweden's vite and France's astreinte. You cannot incur it by being inaccessible. You can only incur it by being inaccessible and then not doing what the regulator told you.
That makes Estonia one of the softest first-instance postures in the Union — softer than Slovakia, whose § 10(3) waiver still starts from a chargeable offence, and structurally the opposite of Czechia, where inaccessibility itself sits in a €400,000 band.
On the €20,000: that figure appears in secondary reporting and in vendor comparison tables. It has no basis in LPS. The correct figure is €10,000, it is a sunniraha, and it is conditional.
| What people quote | What the law and TTJA say | |
|---|---|---|
| Amount | €20,000 | Up to €10,000 |
| Type | A fine | A coercive payment (sunniraha) |
| When it applies | On a finding of non-compliance | Only after an order to fix is ignored |
A single regulator with serious investigative powers
Estonia runs the whole regime through TTJA — no sectoral split at all. That puts it with Italy, Austria and Luxembourg in the single-regulator group, against Slovenia's eight authorities and Portugal's ten: one authority, one inbox, one interpretation.
The softness is in the sanction, not the powers. Under § 17, TTJA imports the standard toolkit of the Law Enforcement Act (Korrakaitseseadus): requesting documents and information (KorS § 30), summoning a provider to explain itself (§ 31), verifying identity (§ 32) and — without the possessor's consent — inspecting movables (§ 49), entering premises (§ 50), searching premises (§ 51) and seizing movables (§ 52).
A regulator that can search your premises but can only charge you €10,000, and only for ignoring it, is an unusual combination. The design intent is clear enough: find the problem, order the fix, and keep the money in reserve as leverage.
Estonia's guidance answers questions no other regulator has
This is the part worth reading even if you never sell into Estonia. TTJA's services guide includes a practitioner FAQ that resolves three questions every e-commerce operator in the EU is asking, and that no other national regulator we've reviewed has addressed in writing.
Your SaaS platform is not liable — you are. LPS puts responsibility on the service provider, meaning the merchant, not the owner or developer of the technical platform. A merchant on a rented or SaaS e-commerce platform remains responsible for the accessibility of the service as a whole, regardless of who built the underlying technology. "Our platform vendor handles that" is not a defence.
Third-party payment and delivery modules are not "third-party content." Bank-link payment options, Omniva or Itella shipping plugins and the like do not qualify for the third-party-content exemption, because they are integral, merchant-selected, merchant-funded functional components of the service — not independent content you merely display. This closes what many businesses assume is a large loophole: most checkout flows are assembled from exactly these modules.
Embedded video splits both ways. A marketing Instagram feed can qualify as independent third-party content. A product-instruction video embedded from YouTube does not, because it delivers information essential to the consumer contract — it is functionally part of the service regardless of who hosts it.
TTJA also closes the grandfathering loophole explicitly. Pre-28 June 2025 service contracts run to expiry, capped at 28 June 2030 (§ 22(2)) — but TTJA's FAQ clarifies this protects existing consumer contracts from retroactive alteration. It does not let an operator delay compliance because an unrelated technical or development contract predates the cutoff. If you provide e-commerce to consumers after 28 June 2025, the service must be compliant whenever your web-development contract was signed.
And on what counts as a "substantive update" that forfeits the archived-content exemption, the guide gives worked examples:
| Loses the archived-content exemption | Doesn't |
|---|---|
| Replacing an outdated instructional video | Automatic price and stock updates on an otherwise unchanged product page |
| Adding an interactive size-finder | Minor CSS or security patches |
| Reordering existing images without adding new ones |
Has it been enforced yet?
No orders or coercive payments have been reported. But Estonia is not passive, and it has said what it intends.
TTJA describes its approach as tip-driven with a planned component:
« Üldjuhul tugineb TTJA tarbijatelt laekunud vihjetele, aga teostatakse ka plaanilist järelevalvet, sel juhul koostab TTJA ise valimi teenustest, mille ligipääsetavusnõuete täitmist kontrollitakse »
("As a rule TTJA relies on tips from consumers, but planned supervision is also carried out, in which case TTJA itself selects a sample of services whose compliance with the accessibility requirements is checked.")
More concretely, TTJA's 2026 risk forecast, approved in January 2026, brings private-sector accessibility into its supervision planning and states the targeting principle: supervision will focus on « teenuste puhul, mille kasutajate hulk on suurim ja mille mõju erivajadustega isiku toimetulekule on suurim » — services with the largest user bases and the greatest impact on how people with disabilities manage. No specific number of planned checks is published.
Two useful implications. Estonia is running risk-based selection, so the largest consumer-facing services are the first ones exposed. And TTJA has supervised public-sector digital accessibility since 2021, which means it already has conformity-testing capability — it is not building the function from scratch.
What this means for your business
Estonia is one of the clearest examples in the EU of a regime where the letter matters more than the launch. Shipping an inaccessible service carries no fine. Receiving an order and not acting on it carries up to €10,000 and a possible ban on providing the service in Estonia.
- Make sure correspondence from TTJA reaches someone who will act on it. Whatever your compliance position, that's the operationally critical thing.
- If you're large and consumer-facing, expect to be checked first. TTJA's 2026 plan targets the services with the most users.
- Read TTJA's guidance even if Estonia is a minor market for you. Its rulings on platform liability, payment and shipping modules, and embedded video are among the most concrete official interpretations available anywhere in the Union, and the reasoning transfers directly to the same questions under other member states' laws.
Frequently asked questions
What is the EAA fine in Estonia?
There isn't one. The only monetary sanction is a sunniraha — a coercive penalty payment of up to €10,000 under LPS § 19 — imposed only after a provider fails to comply with a TTJA order.
Is the €20,000 figure I've seen correct?
No. It comes from secondary reporting and has no basis in LPS. The figure is €10,000, and it is conditional on ignoring an order.
Can I be penalised just for having an inaccessible website?
Not directly. TTJA must first order you to bring the service into compliance. The penalty and the power to restrict or prohibit the service arise only if you don't.
Who enforces it?
TTJA alone — one regulator for products and all service categories, unusually consolidated by EU standards.
Is my e-commerce platform responsible instead of me?
No. TTJA's guidance is explicit that responsibility sits with the merchant as service provider, not with the platform owner or developer.
Related
- ← Back to EAA Fines by Country — the full 27-state comparison
- Official text: Toodete ja teenuste ligipääsetavuse seadus (LPS) (Riigi Teataja)
- Finland's EAA penalty — the other "until you comply" regime, with no ceiling at all
- Czechia's EAA fine — the opposite approach, where inaccessibility itself sits in a €400,000 band
*Sourcing note: the Estonian quotations are verbatim from TTJA's official services
