Does the ADA apply to a practice website?
Yes, in the Department of Justice’s reading. Title III of the ADA covers businesses open to the public, and the DOJ lists hospitals and medical offices among them. Its 2022 guidance says the Department has consistently held that the ADA applies to everything a public accommodation offers, including what it offers on the web.1
The same guidance is careful about one thing: for private businesses there is no single mandated technical standard. Businesses can currently choose how they make their online services accessible, and the DOJ points to WCAG as helpful guidance rather than a legal requirement.1 In practice WCAG 2.1 AA is the yardstick everyone measures against, because it is the only detailed, testable standard there is.
This is how someone who builds these sites reads the rules. It is not legal advice.
What does the HHS Section 504 rule require, and by when?
In May 2024 HHS finalized a rule under Section 504 of the Rehabilitation Act, effective July 8, 2024. It added a web and mobile app section to 45 CFR part 84. It requires recipients of HHS federal financial assistance to make their web content and mobile apps meet the Level A and Level AA success criteria of WCAG 2.1.2 That includes content provided through contractual, licensing or other arrangements, so a booking tool or patient portal supplied by a vendor is still the practice’s responsibility.
The original deadlines were May 11, 2026 for recipients with 15 or more employees and May 10, 2027 for smaller ones.2 On May 11, 2026 HHS published an interim final rule pushing both back by one year.3 The dates as they stand today:
| Practice size | Original date | Current date |
|---|---|---|
| 15 or more employees | May 11, 2026 | May 11, 2027 |
| Fewer than 15 employees | May 10, 2027 | May 10, 2028 |
The standard itself did not change. Only the dates moved.
Who the 504 rule covers, and who it does not
The rule applies to "recipients": any person or organization to which federal financial assistance is extended, directly or through another recipient.2 Whether your practice counts depends on how it is paid and funded. Ask counsel, and do not assume you are out.
A practice outside the 504 rule still sits under the ADA if it is open to the public. The difference is that the ADA route has no fixed date and no named standard, not that it has no obligation.
What is WCAG 2.1 AA, in plain terms?
WCAG is the Web Content Accessibility Guidelines, published by the W3C. Version 2.1 came out on June 5, 2018, and 2.2 followed on October 5, 2023. Content that meets 2.2 also meets 2.1, so building to 2.2 AA covers the legal target.4 The success criteria sit at three levels, A, AA and AAA, and "AA" means meeting every A and AA criterion.4
The guidelines hang on four principles: perceivable, operable, understandable and robust.4 For a practice site, a handful of criteria do most of the work:
- Text contrast of at least 4.5:1 against its background, or 3:1 for large text (criterion 1.4.3, Level AA).5
- A text alternative for every meaningful image (1.1.1, Level A).5
- Everything usable with a keyboard alone, including menus, booking widgets and pop-ups (2.1.1, Level A).5
- Labels or instructions on every form field (3.3.2, Level A).5
- Captions on prerecorded video with sound (1.2.2, Level A).5
- The page language declared in the code, so screen readers pronounce it correctly (3.1.1, Level A).5
Where do most sites fail?
WebAIM, a project at Utah State University, runs an automated scan of the home pages of the top one million websites every year. The February 2026 run found detectable WCAG failures on 95.9 percent of home pages, with an average of 56.1 errors per page.6 Automated scans miss plenty, so the real picture is worse.
| Failure | What a patient experiences | Fix |
|---|---|---|
| Low-contrast text (83.9%) | Hours and prices hard to read, worse on a phone in daylight | Darken text or the background until it passes 4.5:1 |
| Missing alt text (53.1%) | A screen reader says "image" and nothing else | Describe what each meaningful image shows |
| Missing form labels (51%) | The booking form reads as blank boxes | A visible label tied to every field |
| Empty links (46.3%) | Icon links announced as "link" with no destination | Add text that names where the link goes |
| Empty buttons (30.6%) | A button with no name, often the menu | Give each button an accessible name |
| No page language (13.5%) | The screen reader guesses pronunciation | Declare the language in the page code |
What about accessibility overlay widgets?
Overlays are scripts that add a toolbar or promise automatic fixes. They try to patch problems in the browser after the page loads, and they cannot repair what they cannot understand: a script cannot know what your treatment-room photo shows, or what a vague form field was meant to ask. The DOJ’s guidance describes accessibility in terms of how the content itself is built: contrast, text alternatives, captions, forms and keyboard access.1 Spend the budget on fixing those.
The order to do the work in
- Run a free automated checker on the home, booking and contact pages.
- Fix contrast, alt text and form labels first. They affect the most people and are the cheapest to fix.
- Put the mouse away and book an appointment using only the Tab and Enter keys. Anything you cannot reach is a failure.
- Ask every vendor whose tool appears on your site (booking, chat, forms, video) for its WCAG 2.1 AA conformance statement. Under the 504 rule their content is your content.2
- Publish an accessibility statement with a phone number and email for anyone who hits a barrier, and answer it.
Accessibility is part of the technical and compliance rebuild, alongside claim language, privacy and speed. Clean, well-labelled pages are also easier for AI assistants to read, as the pillar guide on AI recommendations explains.