Html registration form: Form Accessibility Obligations
The Form Accessibility Obligations carries 2 published figures read from 3 sources' own pages, from 30 to 60 day, read 16 October 2026.
Endpointo sells its own paid plan in this category (our pricing). It is not counted here: every figure in this index is another provider's own published price, read from its own page.
3 of the 14 named sources read in full publish a figure; 11 publish none, read 16 October 2026.
By criterion
| Breakdown | Median | Range | Sources |
|---|---|---|---|
| criterionCAN-SPAM maximum penalty per email | 53,088USD | 53,088 to 53,088USD | 1 |
| criterionCAN-SPAM opt-out processing window | 30day | 30 to 30day | 1 |
| criterionGDPR administrative fine, lower tier | 10,000,000EUR | 10,000,000 to 10,000,000EUR | 1 |
| criterionGDPR administrative fine, upper tier | 20,000,000EUR | 20,000,000 to 20,000,000EUR | 1 |
| criterionRevised Section 508 effective date after publication | 60day | 60 to 60day | 1 |
Every figure, with its source
One row per source: the figure the source's own page publishes, the page, and the day it was read. A figure that is not on a page we read is not on this one.
| Source | Figure | Breakdown | Read |
|---|---|---|---|
| Regulation (EU) 2016/679 (GDPR) | 20,000,000EUR | GDPR administrative fine, upper tier | 2026-10-16 |
| Regulation (EU) 2016/679 (GDPR) | 10,000,000EUR | GDPR administrative fine, lower tier | 2026-10-16 |
| FTC: CAN-SPAM Act compliance guide | 53,088USD | CAN-SPAM maximum penalty per email | 2026-10-16 |
| US Access Board: ICT final standards and guidelines | 60day | Revised Section 508 effective date after publication | 2026-09-12 |
| FTC: CAN-SPAM Act compliance guide | 30day | CAN-SPAM opt-out processing window | 2026-10-16 |
The sentence each figure was read from (5)
- Regulation (EU) 2016/679 (GDPR), read 2026-10-16:
Infringements of the following provisions shall, in accordance with paragraph 2, be subject to administrative fines up to 20 000 000 EUR, or in the case of an undertaking, up to 4 % of the total worldwide annual turnover of the preceding financial year, whichever is higher:
- Regulation (EU) 2016/679 (GDPR), read 2026-10-16:
Infringements of the following provisions shall, in accordance with paragraph 2, be subject to administrative fines up to 10 000 000 EUR, or in the case of an undertaking, up to 2 % of the total worldwide annual turnover of the preceding financial year, whichever is higher:
- FTC: CAN-SPAM Act compliance guide, read 2026-10-16:
Each separate email in violation of the CAN-SPAM Act is subject to penalties of up to $53,088, so non-compliance can be costly.
- US Access Board: ICT final standards and guidelines, read 2026-09-12:
While the compliance date for the Revised 508 Standards is one year from the date of publication in the Federal Register, the overall effective date of the rule remains 60 days from publication.
- FTC: CAN-SPAM Act compliance guide, read 2026-10-16:
Any opt-out mechanism you offer must be able to process opt-out requests for at least 30 days after you send your message.
Read in full, publishes no figure
11 named sources were read in full on the dates shown and print no usable figure. They are counted, never filled in.
- W3C WCAG 2.2 (the recommendation), read 2026-09-12: every candidate on the page was refused
- W3C: Understanding SC 3.3.2 Labels or Instructions, read 2026-09-12: read in full and no accepted figure on the page
- W3C: Understanding SC 3.3.1 Error Identification, read 2026-09-12: read in full and no accepted figure on the page
- W3C WAI: forms tutorial, read 2026-09-12: read in full and no accepted figure on the page
- Section508.gov: IT accessibility laws and policies, read 2026-09-12: read in full and no accepted figure on the page
- ADA.gov: guidance on web accessibility and the ADA, read 2026-09-12: read in full and no accepted figure on the page
- The Public Sector Bodies (Websites and Mobile Applications) (No. 2) Accessibility Regulations 2018, read 2026-09-12: read in full and no accepted figure on the page
- GOV.UK: understanding accessibility requirements for public sector bodies, read 2026-10-12: read in full and no accepted figure on the page
- GOV.UK Design System: text input, read 2026-09-12: read in full and no accepted figure on the page
- GOV.UK Design System: recover from validation errors, read 2026-09-12: read in full and no accepted figure on the page
- ICO: lawful basis for processing, read 2026-09-12: read in full and no accepted figure on the page
Methodology
Every row is a verbatim sentence read from the named source's own page through our fetch service on the date shown, hash-pinned to the stored read (the sha of the page's visible text; the raw page is mirrored to R2).
3 of the 14 named sources that could be read published a usable figure; 11 published none and are recorded as not published, never filled in; 1 could not be read (blocked, dead or unreachable) and count nowhere.
The headline figures (median, minimum, maximum, quartiles) are over ONE figure per source in day (a source's median where its page yielded several accepted sentences), so N counts sources, never sentences; 23 candidate sentence(s) were refused by a reviewer with the reason recorded.
The fuller derivation this dataset is chartered to grow into (not yet what the figures above are; they are each source's own published figure as read): one row per (obligation, regime): the WCAG success criterion or statutory requirement that binds a form field, the instrument that makes it binding in the US, the UK and the EU, the conformance level and the date it bit, and the markup the regime's own publisher shows as conformant - beside the data-protection rule that governs what the form may collect and where the submission may sit.
The criteria, the statutes and the government design systems are published separately; the per-field table that says 'this label is required here, by this instrument, from this date' is not.
23 candidate sentences on these pages were refused by a reviewer; each refusal and its reason is recorded in the review ledger.
Sources (15)
- W3C WCAG 2.2 (the recommendation)(the publisher's own terms; quoted for reporting and comment)
- W3C: Understanding SC 3.3.2 Labels or Instructions(the publisher's own terms; quoted for reporting and comment)
- W3C: Understanding SC 3.3.1 Error Identification(the publisher's own terms; quoted for reporting and comment)
- W3C WAI: forms tutorial(the publisher's own terms; quoted for reporting and comment)
- Section508.gov: IT accessibility laws and policies(the publisher's own terms; quoted for reporting and comment)
- US Access Board: ICT final standards and guidelines(the publisher's own terms; quoted for reporting and comment)
- ADA.gov: guidance on web accessibility and the ADA(the publisher's own terms; quoted for reporting and comment)
- The Public Sector Bodies (Websites and Mobile Applications) (No. 2) Accessibility Regulations 2018(the publisher's own terms; quoted for reporting and comment)
- GOV.UK: understanding accessibility requirements for public sector bodies(the publisher's own terms; quoted for reporting and comment)
- GOV.UK Design System: text input(the publisher's own terms; quoted for reporting and comment)
- GOV.UK Design System: recover from validation errors(the publisher's own terms; quoted for reporting and comment)
- Directive (EU) 2019/882 (European Accessibility Act)(the publisher's own terms; quoted for reporting and comment)
- Regulation (EU) 2016/679 (GDPR)(the publisher's own terms; quoted for reporting and comment)
- ICO: lawful basis for processing(the publisher's own terms; quoted for reporting and comment)
- FTC: CAN-SPAM Act compliance guide(the publisher's own terms; quoted for reporting and comment)
Cite or embed this figure
Cite or embed this figure
The Form Accessibility Obligations carries 2 published figures read from 3 sources' own pages, from 30 to 60 day, read 16 October 2026.
3 of the 14 named sources read in full publish a figure; 11 publish none, read 16 October 2026.
Form Accessibility Obligations, criterion CAN-SPAM maximum penalty per email: median 53,088 USD across 1 source, read 16 October 2026.
Form Accessibility Obligations, criterion CAN-SPAM opt-out processing window: median 30 day across 1 source, read 16 October 2026.
Form Accessibility Obligations, criterion GDPR administrative fine, lower tier: median 10,000,000 EUR across 1 source, read 16 October 2026.
Form Accessibility Obligations, criterion GDPR administrative fine, upper tier: median 20,000,000 EUR across 1 source, read 16 October 2026.
Form Accessibility Obligations, criterion Revised Section 508 effective date after publication: median 60 day across 1 source, read 16 October 2026.
Cite as: "Endpointo Form Accessibility Obligations", updated 2026-10-18, https://endpointo.com/datasets/form-accessibility-obligations/.
Download the CSV (5 rows, computed 2026-10-18)