Skip to main content
ADA + Section 508Higher Stakes, Larger PenaltiesDOJ Active Enforcement

Healthcare Website ADA Compliance Scan

Healthcare websites face both ADA and Section 508 requirements. The stakes are higher.

Patient portals, appointment booking, telehealth platforms, and medical content must be accessible to all users. Federal penalties for healthcare ADA violations reach $150,000 per offense. The DOJ actively enforces against healthcare providers.

Free Instant Healthcare Website Scan

Enter your healthcare website URL. Get a WCAG compliance score and violation list in under 30 seconds. No signup required.

Healthcare Faces Dual Compliance Requirements

ADA Title III
All healthcare providers as places of public accommodation. $75,000 first violation, $150,000 subsequent violations in DOJ enforcement.
Section 508
Applies to any healthcare organization receiving federal funding (Medicare, Medicaid, grants). Requires WCAG 2.0 AA conformance.
Section 504
Rehabilitation Act prohibits disability discrimination in federally funded programs. HHS OCR actively enforces against healthcare providers.

Sources: ADA Title III (42 U.S.C. 12181-12189); Section 508 (29 U.S.C. 794d); Section 504 (29 U.S.C. 794); DOJ 2024 Title II Final Rule

Why Healthcare Websites Face Higher Accessibility Risk

Inaccessible patient portal login

CAPTCHAs, multi-factor authentication flows, and session timeouts that cannot be extended create barriers for users who need assistive technology. If a patient cannot log into the portal, they cannot access their health information.

Untagged PDF documents

Patient intake forms, billing statements, lab results, and consent forms published as scanned or untagged PDFs are completely inaccessible to screen readers. This is one of the most frequently cited violations in healthcare ADA complaints.

Appointment scheduling widgets

Third-party calendar and scheduling tools often lack keyboard support and proper ARIA labels. Date pickers, time slot selectors, and provider selection controls block independent appointment booking for users with disabilities.

Complex medical forms

Multi-step intake forms with conditional logic, medication lists, date pickers, and insurance information fields frequently fail to communicate state changes to assistive technology. Errors in medical forms can have health consequences.

Telehealth interfaces

Video call controls, screen sharing, chat functions, and virtual waiting rooms in telehealth platforms often lack keyboard navigation and screen reader support. The DOJ has specifically addressed telehealth accessibility in enforcement actions.

What Happens If Your Healthcare Website Isn't ADA Compliant

DOJ civil penalties: $75,000 first violation, $150,000 subsequent

The Department of Justice can seek civil penalties of up to $75,000 for a first ADA violation and $150,000 for each subsequent violation. DOJ consent decrees with healthcare providers have required full WCAG 2.1 AA conformance, ongoing monitoring, and regular compliance reporting.

Loss of federal funding (Section 508 / Section 504)

Healthcare organizations receiving federal funding (Medicare, Medicaid, NIH grants) risk losing that funding for Section 508 or Section 504 violations. For most hospitals and health systems, federal funding is a significant portion of revenue. HHS OCR can also impose corrective action plans.

Private lawsuits and demand letters

Patients and advocacy organizations can file private ADA lawsuits seeking injunctive relief and attorney fees. Healthcare ADA lawsuits carry reputational risk beyond financial cost. Settlements range from $20,000 to $100,000+ depending on organization size.

California Unruh Act: $4,000 per violation per visit

California healthcare providers face Unruh Civil Rights Act exposure of $4,000 minimum per violation per visit, in addition to ADA claims. Healthcare sites that require frequent patient access multiply the exposure with each visit.

Patient harm from inaccessible health information

Beyond legal penalties, inaccessible healthcare websites cause real harm. Patients who cannot access appointment scheduling, medication information, lab results, or telehealth services face health risks. This creates additional liability exposure and regulatory scrutiny.

Sources: 28 CFR 36.504(a) (ADA civil penalties, adjusted for inflation); Section 504 (29 U.S.C. 794); HHS OCR enforcement actions; California Civil Code Section 52(a)

Check Your Healthcare Website Now

Identify WCAG violations on your patient-facing pages before they become a complaint or enforcement action.

Key WCAG Requirements for Healthcare Websites

2.2.1 Timing Adjustable (Level A)

Patient portal sessions and form timeouts must allow users to extend, adjust, or disable time limits. Patients using assistive technology often need more time to complete medical forms.

3.3.4 Error Prevention (Level AA)

Submissions involving medical or financial data must be reversible, checked, or confirmed before final submission. Errors in medical forms can have health consequences.

1.3.1 Info and Relationships (Level A)

Medical forms, lab result tables, appointment schedules, and document structures must convey relationships programmatically so assistive technology can interpret them.

1.4.3 Contrast Minimum (Level AA)

Medical content, instructions, medication names, and dosage information must meet minimum contrast ratios. Patients with low vision must be able to read critical health information.

Healthcare Accessibility Compliance Framework

RegulationApplies ToStandardPenalties
ADA Title IIIAll healthcare providers (places of public accommodation)WCAG 2.1 AA (de facto)$75K first / $150K subsequent + injunctive relief
Section 508Organizations receiving federal fundingWCAG 2.0 AALoss of federal funding
Section 504Federally funded programs and activitiesProgram accessibilityHHS OCR enforcement + funding loss
DOJ Title II Rule (2024)State/local government healthcareWCAG 2.1 AA (explicit)DOJ enforcement

Healthcare ADA Compliance FAQ

Does HIPAA compliance cover website accessibility?
No. HIPAA governs health information privacy and security, not website accessibility. ADA Title III, Section 508 (for federally funded entities), and Section 504 of the Rehabilitation Act are the laws that require healthcare websites to be accessible. Compliance with HIPAA does not satisfy ADA accessibility requirements, and vice versa. Healthcare organizations must comply with all applicable regulations independently.
Are telehealth platforms required to be accessible?
Yes. The DOJ and HHS have issued guidance stating that telehealth services must be accessible to people with disabilities under the ADA and Section 504 of the Rehabilitation Act. This includes video interfaces, chat functions, scheduling tools, and patient intake forms. The rapid adoption of telehealth since 2020 has increased scrutiny of these platforms.
What is Section 508 and does it apply to my healthcare organization?
Section 508 of the Rehabilitation Act requires federal agencies and any organization receiving federal funding to ensure their electronic and information technology is accessible. If your healthcare organization receives Medicare, Medicaid, or any other federal funding (which most hospitals and many practices do), Section 508 applies to your website and patient-facing technology. The standard is WCAG 2.0 AA, with movement toward WCAG 2.1 AA.
What are the penalties for healthcare website ADA violations?
Healthcare organizations face higher exposure than most industries. ADA Title III civil penalties are up to $75,000 for a first violation and $150,000 for subsequent violations. Section 508 violations can result in loss of federal funding. DOJ settlements with healthcare providers have included six-figure payments plus mandatory remediation timelines. Private lawsuits can seek injunctive relief plus attorney fees.
What are the most common accessibility violations on healthcare websites?
The top violations include: (1) patient portal login pages with inaccessible CAPTCHAs and MFA flows, (2) appointment scheduling widgets without keyboard navigation, (3) medical forms (intake, consent, insurance) without proper labels, (4) PDF documents (intake forms, billing statements, lab results) that are scanned images without text tags, (5) telehealth video interfaces that screen readers cannot operate, and (6) session timeouts that cannot be extended for users who need more time.
Can patients file ADA complaints about our website?
Yes. Patients can file complaints with the DOJ (ADA Title III), the HHS Office for Civil Rights (Section 504), or file private lawsuits in federal or state court. Healthcare ADA complaints are prioritized by enforcement agencies because they involve access to essential services. The HHS OCR has resolved multiple cases involving inaccessible healthcare websites and patient portals.
What does this scan check on my healthcare website?
OnePageAudit scans your page for critical WCAG violations commonly found on healthcare sites: missing language attributes, images without alt text, empty links, unlabeled form inputs, missing page titles, skip navigation, heading structure, viewport settings, and autoplaying media. These are the foundational issues that trigger complaints and lawsuits.
Do the DOJ's 2024 Title II rules affect private healthcare providers?
The DOJ's 2024 Title II rule directly applies to state and local government entities, including public hospitals and government-run healthcare facilities, requiring WCAG 2.1 AA compliance. While Title II does not directly cover private healthcare providers, the rule signals the DOJ's enforcement direction. Private providers under Title III face the same practical expectation, and courts increasingly reference WCAG 2.1 AA as the standard.

More Industry ADA Scans

Healthcare faces the highest penalties for ADA web violations. Find out if your site is exposed.