Level AA · WCAG 2.0
3.3.4 Error Prevention (Legal, Financial, Data)
A submission with legal or financial consequences, or one that changes or deletes stored data, can be reversed, is checked, or can be reviewed first.
Manual only No automated check says anything useful.
How it fails in practice
A checkout that places the order on the first click, with no summary to catch a wrong address. An account deletion with no confirmation and no way back. A mistyped quantity becomes a contract.
How to fix it
Put a review step before anything is committed, with every detail and a way to change it. Where that does not fit, let the action be undone for a while afterwards. One of the three — reversible, checked, confirmed — is enough.
At a glance
- Level
- Level AA — the level EN 301 549 requires, and therefore the level the BFSG and the EAA are measured against.
- Principle
- Understandable
- Guideline
- 3.3 Input Assistance
- Added in
- WCAG 2.0
- EN 301 549
- 9.3.3.4
- Automated check
- Manual only
How to test it by hand
- List every form that commits something: an order, a booking, a contract, a payment, a change to an account, a deletion.
- Walk each one to its last step without submitting. There is a summary to check and correct before the final confirm — or, failing that, a clear way to undo afterwards.
- Enter a mistake on purpose — a wrong quantity, a mistyped address — and continue, on a test account where one exists. It is caught, or visible on the review step, before anything is committed.
In code
<form action="/order" method="post">
<!-- address, payment details… -->
<button>Place order</button> <!-- charges the card on this click -->
</form><form action="/order/review" method="post">
<!-- address, payment details… -->
<button>Review order</button>
</form>
<!-- /order/review -->
<h2>Check your order</h2>
<dl>
<dt>Delivery address</dt>
<dd>12 Market Street, Leeds <a href="/checkout/address/">Change</a></dd>
</dl>
<form action="/order" method="post"><button>Place order</button></form>Manual only
How far an automated check gets
Nothing automatic decides this. A scanner that reports it as passing is reporting that it did not look. It stays untested until a person tests it and records what they did — which is exactly how we treat it: as untested, not as passed.
Related criteria
Other criteria under the same guideline.
Find out which criteria your site fails
We scan up to 100 pages against WCAG 2.2 AA, send the keyboard agent through the page you name and email you the report — free, once, no strings.