Accessibility meets cyber security: companies need to think about both
Stricter accessibility laws have been in force in the EU since this year. Germany has transposed this into national law in the form of the Barrierefreiheitsstärkungsgesetz (BFSG). This means that companies from Switzerland that operate in Germany (or the EU) must also comply with these legal requirements. In addition, the new regulations must also be made compatible with cyber security.

From June 28, 2025, digital products and services in Germany must also be accessible to people with disabilities. With the entry into force of the Barrierefreiheitsstärkungsgesetz (BFSG) marks the beginning of a new era of digital responsibility. The BFSG obliges providers to design digital applications in such a way that they are also accessible to people with disabilities. The supposed extra effort for compliance is actually an investment in digital resilience and trust: Because only systems that are both secure and accessible are truly future-proof. Security software provider FTAPI explains what this means for the industry in concrete terms.
Accessibility becomes mandatory - this is what the BFSG specifically regulates
The Accessibility Reinforcement Act implements the EU Directive of the European Accessibility Act (EAA) into German law. It obliges companies to make a range of digital products and services accessible. (This also applies to Swiss companies operating in the EU, editor's note).
The German BFSG generally applies to companies that offer certain digital products or services to consumers - for example in the areas of e-commerce, banking, telecommunications or software. Micro-enterprises with fewer than ten employees and an annual turnover of less than two million euros are exempt, provided they only provide services. However, companies in the B2B sector may also be indirectly affected, for example due to customer requirements or public sector tenders.
The requirements are based on the international WCAG guidelines (Web Content Accessibility Guidelines). The aim is to design digital offerings in such a way that they are perceptible, operable, comprehensible and robust for all people, regardless of disabilities. Violations of the BFSG can be challenged by the responsible market surveillance authorities. If a company fails to comply with a corresponding request, fines of up to 100,000 euros may be imposed. Competitive disadvantages are also a real possibility, for example through exclusion from tenders or damage to image.
Accessibility is a safety issue
Accessibility also plays a significant role with regard to the growing demands on cyber security. Anyone who thinks about security holistically must include accessibility - otherwise digital exclusion will result. "Technology must not exclude anyone - not even when it comes to security," says Ari Albertini, CEO of FTAPI. "Anyone who develops digital solutions has a responsibility: for protection and for participation. Accessibility is not a contradiction to cybersecurity, but a logical extension of it."
For providers of security solutions, digital accessibility means far more than just adjusting the contrast or font size. Interfaces with security-critical functions - such as authentication, password management, user guidance for error messages or navigation through security settings - are particularly affected. Providers are faced with the task of securing access without making it more difficult, for example with alternatives such as barrier-free token solutions, biometric procedures or individually configurable authentication methods.
What companies should do now
Between regulatory pressure and a growing degree of digitalization, many companies are faced with the challenge of thinking about accessibility and security at the same time. This is not a contradiction in terms - on the contrary. FTAPI names five concrete measures to master the alliance:
- Combining accessibility and security-by-design
Both topics must be part of the development process from the outset - not an appendage. - Integrate standards
The WCAG 2.1 for accessibility and the BSI basic protection catalogs for IT security can be perfectly coordinated. - Carry out tests with those affected
Not only penetration tests, but also usability checks with users with restrictions reveal critical vulnerabilities. - Use barrier-free security mechanisms
For example, through alternative authentication methods, clear error messages or accessible security dialogs. - Promoting awareness in the team
Accessibility is not just a matter for IT - product management, UX, support and legal should also be trained.
Why accessible software is also economically worthwhile
In addition to the legal necessity, accessibility is also economically smart: it opens up new target groups, reduces support costs through better usability and increases the chances of winning public tenders. Enabling digital participation also strengthens customer satisfaction, brand perception and employer attractiveness - and therefore your own competitiveness.
Accessibility and cybersecurity are not separate worlds - they are two sides of the same coin. Inclusion also means that all people can participate safely in digital life. Those who take both seriously not only fulfill legal requirements, but also create digital solutions that strengthen trust, assume social responsibility and are sustainable in the long term.
Source and further information: FTAPI
This article originally appeared on m-q.ch - https://www.m-q.ch/de/barrierefreiheit-trifft-cybersicherheit-unternehmen-muessen-an-beides-denken/