Thursday, 15 May, is Global Accessibility Awareness Day (GAAD) and serves as a timely reminder that if your website, app, or platform isn’t usable by everyone, you are not just falling short on inclusion. You might be falling short on data protection compliance, too. It is easy to think of digital accessibility requirements as a design thing. Fonts. Colours. Screen readers.
But in my work as a Global Data Protection Officer, I have seen just how often digital inclusion gets overlooked, even in places where it is the law.
Digital Accessibility Requirements Aren’t Just About ‘Good Practice’
Globally, over one billion people live with a disability. Many still face real barriers when interacting online, from inaccessible cookie banners to privacy notices they literally can’t read.
Under laws like the UK GDPR, EU GDPR, and the UAE’s Personal Data Protection Law (PDPL), organisations must uphold principles like fairness, transparency, and accessibility. And that includes making sure people can actually access their privacy rights.
You could have the most watertight data policy in the world, but if a user with a vision impairment can’t even submit a Subject Access Request because your form isn’t screen reader compatible? That’s a compliance risk.
Why is building Inclusive Digital Experiences important for businesses?
In the UK alone, the spending power of disabled people and their households – known as the purple pound – is worth £274 billion a year.
Yet too many companies offering digital products and services still treat accessibility as an afterthought.
A UK survey found that:
68% of disabled people feel excluded by everyday online services.
80% believe businesses are missing out financially by not being inclusive.
And the numbers don’t stop there.
A recent report found that 72% of people with access requirements experienced barriers on more than a quarter of the websites they visited for the first time.
The most common issues included
- poor keyboard navigation
- missing alt text
- low colour contrast
- hard-to-read content.
All respondents with access needs used some form of assistive technology – including
- screen readers (52%)
- screen magnifiers (27%)
- speech recognition software (23%)
From a data privacy angle, we also need to consider consent. If your consent banner can’t be used with a keyboard or screen reader, is it truly valid? Not according to GDPR or PDPL standards.
Products and services should be inclusive by design. Not only will this ensure that people with disabilities can access the same products and services as everyone else, but it will also benefit businesses that currently risk missing out on the spending power of disabled households – which, again, is estimated to be worth £274 billion per year.
It is a Global Divide – and it is Growing
In parts of Africa, Asia, and Latin America, the picture is even starker. A major study of 100,000 websites across the Global South found that fewer than 40% met basic accessibility standards.
( Source: arXiv )
When access is limited, so is understanding and control. That’s a huge issue for global companies operating under cross-border data laws. If individuals can’t read or act on your privacy notices, how can you claim to be compliant?
What Can Organisations Actually Do?
All organisations have a responsibility in making digital rights accessible.
Whether you’re operating under the UK’s Equality Act, GDPR, or the UAE’s Federal Decree Law No. 34 on Digital Transactions, accessibility is no longer optional—it’s an expectation.
Here’s how different professionals can lead the change:
Web Developers and Designers must integrate inclusive design practices into your build process. Ensure proper heading structures, alt text, keyboard navigation, and colour contrast. Tools like WAVE, Axe, and Accessibility Insights can highlight areas needing improvement. Use semantic HTML so screen readers can accurately communicate content.
Compliance Officers and DPOs must ensure that digital touchpoints (e.g. cookie banners, privacy policies, contact forms) are accessible to users with disabilities. If your privacy notice isn’t screen reader-friendly, your organisation may be breaching accessibility provisions under GDPR or PDPL. Check your cookie banner and SAR form on assistive tech – not just your own device.
Digital Marketers and SEO Specialists must adopt the following:
- proper use of headings, and descriptive metadata.
- add ALT text, subtitles in videos and readable typography
- make forms keyboard-friendly and mobile-responsive
- use clear language, good colour contrast, and readable fonts.
Business Leaders and Decision-Makers must recognise that digital inclusion is not just about compliance—it’s a market opportunity. The UK’s “Purple Pound” is valued at £274 billion annually. In the UAE, accessible services align with national strategies to promote inclusive smart cities and innovation. Investing in accessibility opens your organisation to wider audiences, loyal customers, and brand trust.
Under GDPR and PDPL, there’s a clear push for privacy by design and default. That overlaps directly with inclusivity. Accessibility shouldn’t come later – it should be there from the start.
TenIntelligence Thoughts
This year’s GAAD is a nudge to ask ourselves some uncomfortable questions.
If someone landed on your site today – blind, neurodivergent, or physically limited – could they read your privacy notice? Could they understand it? Could they act on their rights?
If not, it is time to fix that. Not just because it is the law, not just because it makes business sense. But because everyone deserves access to their information, their rights.
Written by
Lynsey Hanson | Global Data Protection Officer