The HHS Section 504 website accessibility deadline, explained in plain English
If you run a healthcare practice's website and you've heard "Section 504" mentioned without a clear explanation of what it actually requires, this is that explanation — what the rule says, who it applies to, the real dates, and what to actually do before they arrive.
What the rule actually is
On 9 May 2024, the U.S. Department of Health and Human Services published a final rule updating its regulations under Section 504 of the Rehabilitation Act of 1973. Section 504 has applied to recipients of HHS federal financial assistance for decades — the 2024 update is the first time it explicitly names web content and mobile apps as things that must meet an accessibility standard, and names that standard directly: WCAG 2.1 Level AA, the same technical standard the W3C publishes and the standard most accessibility lawsuits already cite.
In practice, this closes an ambiguity that used to let a lot of healthcare organizations treat their website as out of scope. It no longer is. If your organization receives HHS federal financial assistance, your public-facing website is now explicitly covered, the same as a physical waiting room or an intake form.
Who "receives HHS federal financial assistance" actually means
This is broader than it sounds, and it is the detail that catches the most practices off guard. It is not limited to organizations with a federal grant. It includes:
- Any practice that accepts Medicare or Medicaid reimbursement
- Hospitals and health systems
- Community health centers and Federally Qualified Health Centers (FQHCs)
- Any provider participating in an HHS-funded program
If you bill Medicare or Medicaid at all, the rule almost certainly applies to you, regardless of how small your practice is.
The actual dates
Following an interim final rule published 7 May 2026, compliance is staged by organization size:
| Organization size | Compliance date |
|---|---|
| 15 or more employees | 11 May 2027 |
| Fewer than 15 employees | 10 May 2028 |
Source: 45 CFR 84.84(b), as amended (91 FR 25507, May 11, 2026). We check the official eCFR every week and update these dates if they change.
HHS's dataset does not include an employee-count field for most public grantee listings, so if you're estimating from delivery-site count or similar proxies, treat the earlier date as the safer planning assumption unless you know your actual headcount.
The Section 504 dates are not the only exposure
Separately from the Section 504 deadline, private lawsuits under Title III of the Americans with Disabilities Act over inaccessible websites are filed continuously, deadline or not. According to Seyfarth Shaw's ADA Title III tracker, plaintiffs filed 3,117 website accessibility suits in federal court in 2025, a 27% increase over 2024 (source). That exposure exists today, not only once a deadline arrives. The Section 504 deadline gives you a date to plan around; it does not give you a date before which nothing can go wrong.
What "WCAG 2.1 AA" means in practice
WCAG 2.1 Level AA is a set of 50 testable success criteria covering things like: does every image have alternative text, is text contrast high enough to read on a phone in daylight, does every form field have a label a screen reader can announce, can every interactive element be reached and operated by keyboard alone. Software can test more of these than simple rule checks suggest: a browser can use the page with the keyboard and at 200% zoom, and AI can judge whether alt text fits its image. Some things still need a person with real assistive technology, such as whether a screen reader user can actually complete a booking flow, or whether video captions are accurate.
That distinction matters for how you approach this: an automated scan is the fast, honest first read of where you stand, not the final word on whether you're done.
What to actually do about it
- Find out where you actually stand. A scan against WCAG 2.1 AA takes minutes and tells you, concretely, what's failing and where — not a guess.
- Prioritize by legal exposure, not by what's easiest. A missing alt text on a decorative background image is not the same risk as an unlabeled appointment-booking form. Fix the findings that show up in filed complaints first.
- Fix the code, not the symptom. Accessibility overlay scripts do not fix underlying markup and have themselves been named in lawsuits against the sites that installed them. There is no shortcut around actually fixing the HTML.
- Re-verify after you fix things, and periodically after that. Sites change. A clean scan today is a snapshot, not a guarantee six months from now.
- Keep a dated record. If remediation is in progress rather than finished, a documented, dated history of good-faith effort is materially better than nothing at all if your compliance is ever questioned.
See where your site actually stands
Free WCAG 2.1 AA scan of your homepage plus your four highest-risk pages. Report emailed as soon as the scan finishes — no account, no card, no obligation.
Scan my website freeNot ready to share your URL yet? Get the free checklist instead.
Questions
Does this apply to us if we are a small private practice?
If you bill Medicare or Medicaid, yes — with a compliance date of May 2028 if you have fewer than 15 employees. Separately, ADA Title III exposure applies to places of public accommodation regardless of federal funding or practice size.
We just had our site redesigned. Are we fine?
Usually not. Accessibility is rarely part of a standard web design brief, and most agency-built healthcare sites fail on image alt text, form labels, and colour contrast even when the design itself looks modern and polished.
Is a clean automated scan enough to prove compliance?
No. Rule checks alone reach only part of WCAG: on the clinic websites we measured, 12 to 15 of the 50 success criteria. ClinicGuard's monitoring scans add browser and AI testing and report on all 50, naming the ones software could not settle. Even so, a report with no failures is a strong signal, not a legal determination: some things, such as caption accuracy or completing a booking with a screen reader, need a person to confirm.
What happens if we do nothing before the deadline?
Section 504 enforcement can include loss of HHS federal financial assistance eligibility, on top of the ongoing, deadline-independent ADA Title III litigation exposure described above. Neither of those is a good position to be in; both are addressable well before either date if you start now.