ADA website audit: Website Legal Compliance Rules
The Website Legal Compliance Rules carries 2 published figures read from 1 source's own page, under different breakdowns, so no one range is stated, read 30 October 2026.
Stagenix sells its own paid plan in this category (our pricing). It is not counted here: every figure in this index is another provider's own published price, read from its own page.
2 of the 23 named sources read in full publish a figure; 21 publish none, read 30 October 2026.
By obligation and who it binds
| Breakdown | Median | Range | Sources |
|---|---|---|---|
| obligationpersonal data breach notification | 72hour | 72 to 72hour | 1 |
| obligationchild consent age | 16year | 16 to 16year | 1 |
| obligationchild consent age (member-state floor) | 13year | 13 to 13year | 1 |
| who it bindscorporation | 100,000CAD | 100,000 to 100,000CAD | 1 |
Every figure, with its source
One row per published figure: the figure as the source's own page publishes it, the page, and the day it was read. A figure that is not on a page we read is not on this one.
| Source | Figure | Breakdown | Read |
|---|---|---|---|
| Regulation (EU) 2016/679 (GDPR) | 20,000,000EUR | 2026-10-30 | |
| Ontario Regulation 191/11 Integrated Accessibility Standards (AODA) | 100,000CAD | corporation | 2026-10-24 |
| Ontario Regulation 191/11 Integrated Accessibility Standards (AODA) | 50,000CAD | 2026-10-24 | |
| Regulation (EU) 2016/679 (GDPR) | 72hour | personal data breach notification | 2026-10-30 |
| Regulation (EU) 2016/679 (GDPR) | 16year | child consent age | 2026-10-30 |
| Regulation (EU) 2016/679 (GDPR) | 13year | child consent age (member-state floor) | 2026-10-30 |
The sentence each figure was read from (6)
- Regulation (EU) 2016/679 (GDPR), read 2026-10-30:
Infringements of the following provisions shall, in accordance with paragraph 2, be subject to administrative fines up to 20 000 000 EUR, or in the case of an undertaking, up to 4 % of the total worldwide annual turnover of the preceding financial year, whichever is higher:
- Ontario Regulation 191/11 Integrated Accessibility Standards (AODA), read 2026-10-24:
In cases where the impact of the contravention is determined to be major and the contravention history of the person or organization is determined to be major, the director may treat the penalty determined in accordance with Schedule 2 or 3 as a daily penalty to a maximum of, $100,000, in the case of a corporation, and $50,000, in the case of an individual or unincorporated organization.
- Ontario Regulation 191/11 Integrated Accessibility Standards (AODA), read 2026-10-24:
$50,000, in the case of an individual or unincorporated organization.
- Regulation (EU) 2016/679 (GDPR), read 2026-10-30:
breach has occurred, the controller should notify the personal data breach to the supervisory authority without undue delay and, where feasible, not later than 72 hours after having become aware of it, unless the controller is able to demonstrate, in accordance with the accountability principle, that the personal data breach i
- Regulation (EU) 2016/679 (GDPR), read 2026-10-30:
Where point (a) of Article 6(1) applies, in relation to the offer of information society services directly to a child, the processing of the personal data of a child shall be lawful where the child is at least 16 years old.
- Regulation (EU) 2016/679 (GDPR), read 2026-10-30:
Member States may provide by law for a lower age for those purposes provided that such lower age is not below 13 years.
Read in full, publishes no figure
21 named sources were read in full on the dates shown and print no usable figure. They are counted, never filled in.
- US DOJ ADA Title II web accessibility rule (fact sheet), read 2026-09-12: read in full and no accepted figure on the page
- Federal Register: Title II web and mobile accessibility final rule, read 2026-09-12: every candidate on the page was refused
- US Access Board Revised 508 Standards, read 2026-09-12: every candidate on the page was refused
- Section508.gov laws and policies, read 2026-09-12: read in full and no accepted figure on the page
- FTC rule on consumer reviews and testimonials (16 CFR 465), read 2026-09-12: every candidate on the page was refused
- FTC Endorsement Guides Q&A, read 2026-10-03: read in full and no accepted figure on the page
- California Attorney General: CCPA, read 2026-09-11: read in full and no accepted figure on the page
- California Privacy Protection Agency regulations, read 2026-10-10: read in full and no accepted figure on the page
- European Commission: European Accessibility Act, read 2026-10-10: read in full and no accepted figure on the page
- ICO guide to PECR: cookies and similar technologies, read 2026-10-19: read in full and no accepted figure on the page
- GOV.UK: accessibility requirements for public sector websites and apps, read 2026-10-12: read in full and no accepted figure on the page
- Public Sector Bodies (Websites and Mobile Applications) Accessibility Regulations 2018, read 2026-09-19: read in full and no accepted figure on the page
- Equality Act 2010, read 2026-09-12: read in full and no accepted figure on the page
- Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013, read 2026-09-12: read in full and no accepted figure on the page
- GOV.UK: company details on signs, stationery and websites, read 2026-09-12: read in full and no accepted figure on the page
- Australian Human Rights Commission web access advisory notes, read 2026-09-19: read in full and no accepted figure on the page
- OAIC: Australian Privacy Principles, read 2026-09-12: read in full and no accepted figure on the page
- Government of Canada: Accessible Canada, read 2026-10-24: every candidate on the page was refused
- Directive (EU) 2019/882 (European Accessibility Act), read 2026-09-26: every candidate on the page was refused
- W3C: Web Content Accessibility Guidelines 2.1, read 2026-09-12: every candidate on the page was refused
- W3C WAI: WCAG 2 overview, read 2026-09-19: read in full and no accepted figure on the page
Methodology
Every row is a verbatim sentence read from the named source's own page through our fetch service on the date shown, hash-pinned to the stored read (the sha of the page's visible text; the raw page is mirrored to R2).
2 of the 23 named sources that could be read published a usable figure; 21 published none and are recorded as not published, never filled in; 0 could not be read (blocked, dead or unreachable) and count nowhere.
The headline figures (median, minimum, maximum, quartiles) are over ONE figure per source for each breakdown it prices, in CAD (a source's median where its page yielded several accepted sentences for one breakdown), so a page that gives figures for several breakdowns gives one for each and N counts 2 figures, never sentences; 118 candidate sentence(s) were refused by a reviewer with the reason recorded.
The fuller derivation this dataset is chartered to grow into (not yet what the figures above are; they are each source's own published figure as read): one row per jurisdiction per obligation - the standard named (WCAG level and version), who it binds, the threshold that brings a business inside it, the date it starts and the penalty - each quoted verbatim from the authority with its effective date; the cross-jurisdiction comparison (which markets bind a private website and which only the public sector, and where the earliest deadline falls for a business serving all of them) is the figure, and changed-since is the news every time a rule or a deadline moves
118 candidate sentences on these pages were refused by a reviewer; each refusal and its reason is recorded in the review ledger.
Sources (23)
- US DOJ ADA Title II web accessibility rule (fact sheet)(the publisher's own terms; quoted for reporting and comment)
- Federal Register: Title II web and mobile accessibility final rule(the publisher's own terms; quoted for reporting and comment)
- US Access Board Revised 508 Standards(the publisher's own terms; quoted for reporting and comment)
- Section508.gov laws and policies(the publisher's own terms; quoted for reporting and comment)
- FTC rule on consumer reviews and testimonials (16 CFR 465)(the publisher's own terms; quoted for reporting and comment)
- FTC Endorsement Guides Q&A(the publisher's own terms; quoted for reporting and comment)
- California Attorney General: CCPA(the publisher's own terms; quoted for reporting and comment)
- California Privacy Protection Agency regulations(the publisher's own terms; quoted for reporting and comment)
- European Commission: European Accessibility Act(the publisher's own terms; quoted for reporting and comment)
- ICO guide to PECR: cookies and similar technologies(the publisher's own terms; quoted for reporting and comment)
- GOV.UK: accessibility requirements for public sector websites and apps(the publisher's own terms; quoted for reporting and comment)
- Public Sector Bodies (Websites and Mobile Applications) Accessibility Regulations 2018(the publisher's own terms; quoted for reporting and comment)
- Equality Act 2010(the publisher's own terms; quoted for reporting and comment)
- Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013(the publisher's own terms; quoted for reporting and comment)
- GOV.UK: company details on signs, stationery and websites(the publisher's own terms; quoted for reporting and comment)
- Australian Human Rights Commission web access advisory notes(the publisher's own terms; quoted for reporting and comment)
- OAIC: Australian Privacy Principles(the publisher's own terms; quoted for reporting and comment)
- Government of Canada: Accessible Canada(the publisher's own terms; quoted for reporting and comment)
- Ontario Regulation 191/11 Integrated Accessibility Standards (AODA)(the publisher's own terms; quoted for reporting and comment)
- Directive (EU) 2019/882 (European Accessibility Act)(the publisher's own terms; quoted for reporting and comment)
- Regulation (EU) 2016/679 (GDPR)(the publisher's own terms; quoted for reporting and comment)
- W3C: Web Content Accessibility Guidelines 2.1(the publisher's own terms; quoted for reporting and comment)
- W3C WAI: WCAG 2 overview(the publisher's own terms; quoted for reporting and comment)
Cite or embed this figure
Cite or embed this figure
The Website Legal Compliance Rules carries 2 published figures read from 1 source's own page, under different breakdowns, so no one range is stated, read 30 October 2026.
2 of the 23 named sources read in full publish a figure; 21 publish none, read 30 October 2026.
Website Legal Compliance Rules, obligation personal data breach notification: median 72 hour across 1 source, read 30 October 2026.
Website Legal Compliance Rules, obligation child consent age: median 16 year across 1 source, read 30 October 2026.
Website Legal Compliance Rules, obligation child consent age (member-state floor): median 13 year across 1 source, read 30 October 2026.
Website Legal Compliance Rules, who it binds corporation: median 100,000 CAD across 1 source, read 30 October 2026.
Cite as: "Stagenix Website Legal Compliance Rules", updated 2026-10-31, https://stagenix.com/datasets/website-legal-compliance-rules/.
Download the CSV (6 rows, computed 2026-10-31)