{ "name": "Endpointo Form Accessibility Obligations", "title": "Form Accessibility Obligations", "url": "https://endpointo.com/datasets/form-accessibility-obligations/", "csv": "https://endpointo.com/datasets/form-accessibility-obligations.csv", "markdown": "https://endpointo.com/datasets/form-accessibility-obligations/index.md", "computed_at": "2026-10-18", "license": "https://endpointo.com/terms", "headline": "The Form Accessibility Obligations carries 2 published figures read from 3 sources' own pages, from 30 to 60 day, read 16 October 2026.", "quotes": [ "The Form Accessibility Obligations carries 2 published figures read from 3 sources' own pages, from 30 to 60 day, read 16 October 2026.", "3 of the 14 named sources read in full publish a figure; 11 publish none, read 16 October 2026.", "Form Accessibility Obligations, criterion CAN-SPAM maximum penalty per email: median 53,088 USD across 1 source, read 16 October 2026.", "Form Accessibility Obligations, criterion CAN-SPAM opt-out processing window: median 30 day across 1 source, read 16 October 2026.", "Form Accessibility Obligations, criterion GDPR administrative fine, lower tier: median 10,000,000 EUR across 1 source, read 16 October 2026.", "Form Accessibility Obligations, criterion GDPR administrative fine, upper tier: median 20,000,000 EUR across 1 source, read 16 October 2026.", "Form Accessibility Obligations, criterion Revised Section 508 effective date after publication: median 60 day across 1 source, read 16 October 2026." ], "citation": "\"Endpointo Form Accessibility Obligations\", updated 2026-10-18, https://endpointo.com/datasets/form-accessibility-obligations/.", "changed_since": null, "national": { "unit": "day", "n": 2, "median": 45, "min": 30, "max": 60, "p25": null, "p75": null, "mean": 45, "units": { "EUR": 2, "USD": 1, "day": 2 }, "published_sources": 3, "named_sources": 15, "read_sources": 14, "not_published": 11, "published_share": 0.214 }, "by_axis": { "criterion": { "CAN-SPAM maximum penalty per email": { "USD": { "n": 1, "median": 53088, "min": 53088, "max": 53088, "p25": 53088, "p75": 53088, "mean": 53088 } }, "CAN-SPAM opt-out processing window": { "day": { "n": 1, "median": 30, "min": 30, "max": 30, "p25": 30, "p75": 30, "mean": 30 } }, "GDPR administrative fine, lower tier": { "EUR": { "n": 1, "median": 10000000, "min": 10000000, "max": 10000000, "p25": 10000000, "p75": 10000000, "mean": 10000000 } }, "GDPR administrative fine, upper tier": { "EUR": { "n": 1, "median": 20000000, "min": 20000000, "max": 20000000, "p25": 20000000, "p75": 20000000, "mean": 20000000 } }, "Revised Section 508 effective date after publication": { "day": { "n": 1, "median": 60, "min": 60, "max": 60, "p25": 60, "p75": 60, "mean": 60 } } } }, "rows": [ { "source": "FTC: CAN-SPAM Act compliance guide", "url": "https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business", "figure": "$53,088, ", "value": 53088, "unit": "USD", "vat": null, "axis": { "criterion": "CAN-SPAM maximum penalty per email" }, "retrieved_at": "2026-10-16", "quote": "Each separate email in violation of the CAN-SPAM Act is subject to penalties of up to $53,088, so non-compliance can be costly.", "source_class": "primary-government", "text_sha256": "de6a7d8c7735979c1dc2a321279cad2a94fef041ce8c147106183903c0c678b5" }, { "source": "FTC: CAN-SPAM Act compliance guide", "url": "https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business", "figure": "30 days", "value": 30, "unit": "day", "vat": null, "axis": { "criterion": "CAN-SPAM opt-out processing window" }, "retrieved_at": "2026-10-16", "quote": "Any opt-out mechanism you offer must be able to process opt-out requests for at least 30 days after you send your message.", "source_class": "primary-government", "text_sha256": "de6a7d8c7735979c1dc2a321279cad2a94fef041ce8c147106183903c0c678b5" }, { "source": "Regulation (EU) 2016/679 (GDPR)", "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "figure": "10 000 000 EUR", "value": 10000000, "unit": "EUR", "vat": null, "axis": { "criterion": "GDPR administrative fine, lower tier" }, "retrieved_at": "2026-10-16", "quote": "Infringements of the following provisions shall, in accordance with paragraph 2, be subject to administrative fines up to 10 000 000 EUR, or in the case of an undertaking, up to 2 % of the total worldwide annual turnover of the preceding financial year, whichever is higher:", "source_class": "primary-government", "text_sha256": "fa473b93c2522022a96584655dee7da55f56ad042925828981dca30bd5af49cc" }, { "source": "Regulation (EU) 2016/679 (GDPR)", "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "figure": "20 000 000 EUR", "value": 20000000, "unit": "EUR", "vat": null, "axis": { "criterion": "GDPR administrative fine, upper tier" }, "retrieved_at": "2026-10-16", "quote": "Infringements of the following provisions shall, in accordance with paragraph 2, be subject to administrative fines up to 20 000 000 EUR, or in the case of an undertaking, up to 4 % of the total worldwide annual turnover of the preceding financial year, whichever is higher:", "source_class": "primary-government", "text_sha256": "fa473b93c2522022a96584655dee7da55f56ad042925828981dca30bd5af49cc" }, { "source": "US Access Board: ICT final standards and guidelines", "url": "https://www.access-board.gov/ict/", "figure": "60 days", "value": 60, "unit": "day", "vat": null, "axis": { "criterion": "Revised Section 508 effective date after publication" }, "retrieved_at": "2026-09-12", "quote": "While the compliance date for the Revised 508 Standards is one year from the date of publication in the Federal Register, the overall effective date of the rule remains 60 days from publication.", "source_class": "primary-government", "text_sha256": "a7a96dbacda2925869b8bfd1e2ce2438c4eace8580cdbc88dfcaf91042411943" } ], "not_published": [ { "source": "W3C WCAG 2.2 (the recommendation)", "url": "https://www.w3.org/TR/WCAG22/", "retrieved_at": "2026-09-12", "reason": "every candidate on the page was refused" }, { "source": "W3C: Understanding SC 3.3.2 Labels or Instructions", "url": "https://www.w3.org/WAI/WCAG22/Understanding/labels-or-instructions.html", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "W3C: Understanding SC 3.3.1 Error Identification", "url": "https://www.w3.org/WAI/WCAG22/Understanding/error-identification.html", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "W3C WAI: forms tutorial", "url": "https://www.w3.org/WAI/tutorials/forms/", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "Section508.gov: IT accessibility laws and policies", "url": "https://www.section508.gov/manage/laws-and-policies/", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "ADA.gov: guidance on web accessibility and the ADA", "url": "https://www.ada.gov/resources/web-guidance/", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "The Public Sector Bodies (Websites and Mobile Applications) (No. 2) Accessibility Regulations 2018", "url": "https://www.legislation.gov.uk/uksi/2018/952/contents", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "GOV.UK: understanding accessibility requirements for public sector bodies", "url": "https://www.gov.uk/guidance/accessibility-requirements-for-public-sector-websites-and-apps", "retrieved_at": "2026-10-12", "reason": "read in full and no accepted figure on the page" }, { "source": "GOV.UK Design System: text input", "url": "https://design-system.service.gov.uk/components/text-input/", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "GOV.UK Design System: recover from validation errors", "url": "https://design-system.service.gov.uk/patterns/validation/", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "ICO: lawful basis for processing", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" } ], "sources": [ { "url": "https://www.w3.org/TR/WCAG22/", "label": "W3C WCAG 2.2 (the recommendation)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.w3.org/WAI/WCAG22/Understanding/labels-or-instructions.html", "label": "W3C: Understanding SC 3.3.2 Labels or Instructions", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.w3.org/WAI/WCAG22/Understanding/error-identification.html", "label": "W3C: Understanding SC 3.3.1 Error Identification", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.w3.org/WAI/tutorials/forms/", "label": "W3C WAI: forms tutorial", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.section508.gov/manage/laws-and-policies/", "label": "Section508.gov: IT accessibility laws and policies", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.access-board.gov/ict/", "label": "US Access Board: ICT final standards and guidelines", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ada.gov/resources/web-guidance/", "label": "ADA.gov: guidance on web accessibility and the ADA", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.legislation.gov.uk/uksi/2018/952/contents", "label": "The Public Sector Bodies (Websites and Mobile Applications) (No. 2) Accessibility Regulations 2018", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.gov.uk/guidance/accessibility-requirements-for-public-sector-websites-and-apps", "label": "GOV.UK: understanding accessibility requirements for public sector bodies", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://design-system.service.gov.uk/components/text-input/", "label": "GOV.UK Design System: text input", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://design-system.service.gov.uk/patterns/validation/", "label": "GOV.UK Design System: recover from validation errors", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://eur-lex.europa.eu/eli/dir/2019/882/oj/eng", "label": "Directive (EU) 2019/882 (European Accessibility Act)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "label": "Regulation (EU) 2016/679 (GDPR)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/", "label": "ICO: lawful basis for processing", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business", "label": "FTC: CAN-SPAM Act compliance guide", "license": "the publisher's own terms; quoted for reporting and comment" } ], "methodology": "Every row is a verbatim sentence read from the named source's own page through our fetch service on the date shown, hash-pinned to the stored read (the sha of the page's visible text; the raw page is mirrored to R2). 3 of the 14 named sources that could be read published a usable figure; 11 published none and are recorded as not published, never filled in; 1 could not be read (blocked, dead or unreachable) and count nowhere. The headline figures (median, minimum, maximum, quartiles) are over ONE figure per source in day (a source's median where its page yielded several accepted sentences), so N counts sources, never sentences; 23 candidate sentence(s) were refused by a reviewer with the reason recorded. The fuller derivation this dataset is chartered to grow into (not yet what the figures above are; they are each source's own published figure as read): one row per (obligation, regime): the WCAG success criterion or statutory requirement that binds a form field, the instrument that makes it binding in the US, the UK and the EU, the conformance level and the date it bit, and the markup the regime's own publisher shows as conformant - beside the data-protection rule that governs what the form may collect and where the submission may sit. The criteria, the statutes and the government design systems are published separately; the per-field table that says 'this label is required here, by this instrument, from this date' is not.", "embed": "

30 to 60 day

2 published figures, Form Accessibility Obligations, across 3 sources, read 16 October 2026

Source: Endpointo Form Accessibility Obligations
" }