ADA Compliance for Healthcare Websites

Q: Does my patient portal need to be ADA compliant?

Yes. Patient portals are considered part of your healthcare services, and the ADA requires that those services be accessible to people with disabilities. If a patient who uses a screen reader can't access their test results, schedule an appointment, or message their provider through the portal, that's an accessibility barrier that exposes you to an ADA complaint. If your organization receives federal funding, Section 508 adds additional requirements on top of the ADA.

Q: Does HIPAA affect ADA compliance for healthcare websites?

HIPAA and ADA are separate laws, but they intersect in important ways. HIPAA requires effective communication with patients, which includes ensuring that patients with disabilities can access their health information. If your patient portal is inaccessible, you could face complaints under both ADA (discrimination based on disability) and HIPAA (failure to provide effective communication). The Office for Civil Rights enforces both, and a complaint about accessibility could trigger scrutiny of your HIPAA compliance as well.

Q: Does Section 508 apply to my healthcare organization?

Section 508 applies if your organization receives federal funding, which includes Medicare and Medicaid reimbursements. Since most healthcare providers accept Medicare or Medicaid, Section 508 applies to the vast majority of hospitals, clinics, and medical practices. Section 508 requires that electronic and information technology (including websites and patient portals) be accessible to people with disabilities. The standard is WCAG 2.0 Level AA, though courts increasingly reference WCAG 2.1 AA.

Q: Can a patient sue my healthcare practice for an inaccessible website?

Yes. Health and beauty sites together accounted for about 7.17% of the 3,948 ADA web accessibility lawsuits filed in federal court in 2025, and the healthcare slice specifically keeps growing. Patients have filed complaints with the Department of Health and Human Services Office for Civil Rights and sued directly under ADA Title III. Notable cases include complaints against major hospital systems, dental practices, and mental health providers. The consequences can include monetary damages, mandatory remediation, and negative publicity that undermines patient trust.

Q: Are appointment booking forms a common source of ADA violations?

Yes. Appointment booking is one of the most frequently cited accessibility issues on healthcare websites. Common violations include date picker widgets that can't be operated with a keyboard, form fields without labels (screen readers announce 'edit text' instead of 'Date of Birth'), dropdown menus for selecting providers or services that aren't keyboard accessible, time slot selectors built as custom widgets without ARIA roles, and multi-step forms where progress indicators and error messages aren't announced to screen readers.

Healthcare sites face dual requirements under ADA and Section 508. Patient portals, appointment booking, and telehealth platforms must be accessible to all patients.

How it works

Enter your site URL

We check patient-facing pages against WCAG 2.1 Level AA, the standard referenced in ADA and Section 508.

Review accessibility gaps

See issues in appointment forms, portal navigation, and content with specific fix instructions.

Stay compliant

Portal updates and content changes can break accessibility. Weekly monitoring catches regressions.

Healthcare websites face unique accessibility obligations

Healthcare is one of the few industries where web accessibility isn't just about ADA Title III. If your organization accepts Medicare, Medicaid, or any other federal funding, Section 508 of the Rehabilitation Act also applies. That means your website, patient portal, and any digital tools you offer patients must meet WCAG accessibility standards. And because healthcare involves access to essential services, courts and regulators take these requirements particularly seriously.

The Department of Health and Human Services Office for Civil Rights (OCR) has made healthcare web accessibility an enforcement priority. In 2022, OCR reached settlement agreements with multiple healthcare providers over inaccessible websites, including cases involving patient portals that couldn't be used by screen reader users. These weren't private lawsuits from plaintiff attorneys. These were federal enforcement actions with mandatory corrective action plans and monitoring periods.

Health and beauty together accounted for roughly 7.17% of the 3,948 ADA web accessibility lawsuits filed in federal court in 2025. Restaurants (34.65%) and fashion (25.96%) dominate the top of the list, followed by beauty, furniture, and then health. And these percentages only count lawsuits. OCR complaints and state-level actions add substantially to the total enforcement activity, especially for healthcare where federal funding triggers Section 508 obligations on top of the ADA.

The dual burden: ADA and Section 508

Most healthcare providers are subject to both ADA Title III and Section 508, which creates overlapping but slightly different obligations. ADA Title III applies to any private entity that operates a place of public accommodation, which includes hospitals, clinics, dental offices, pharmacies, mental health practices, and physical therapy centers. The ADA doesn't specify a technical standard for websites, but courts overwhelmingly reference WCAG 2.1 Level AA.

Section 508 applies to any organization that receives federal financial assistance. For healthcare, this includes Medicare and Medicaid payments, federal research grants, and participation in the Federal Employees Health Benefits program. Section 508 explicitly requires conformance with WCAG 2.0 Level AA for web content, though courts and enforcement agencies increasingly reference WCAG 2.1. The practical effect is that if you meet WCAG 2.1 AA, you're covered under both laws.

The enforcement mechanisms differ. ADA violations can result in private lawsuits with monetary damages, particularly in states like California (Unruh Civil Rights Act, $4,000 minimum per violation) and New York. Section 508 violations are enforced by OCR, which can impose corrective action plans, require monitoring, and in extreme cases threaten federal funding. Getting your Medicare payments threatened is a far more existential risk than a $10,000 demand letter.

Patient portal accessibility

Patient portals are ground zero for healthcare accessibility issues. These platforms handle some of the most important interactions a patient has with your organization: viewing test results, scheduling appointments, messaging providers, requesting prescription refills, and paying bills. When these functions aren't accessible, you're not just violating a technical standard. You're preventing patients with disabilities from accessing their own health information.

Common patient portal accessibility failures include login forms without proper labels (screen readers can't tell users which field is for username vs. password), CAPTCHA challenges that don't provide audio alternatives, test result displays that use color alone to indicate normal vs. abnormal values (invisible to colorblind users), medication lists that are structured as visual tables but not coded as data tables (screen readers can't parse them), and secure messaging interfaces where the compose window isn't keyboard accessible.

If you use a third-party portal platform (Epic MyChart, Cerner HealtheLife, Athenahealth, etc.), the vendor may provide a VPAT documenting their accessibility conformance. But that VPAT covers the platform itself, not your specific implementation. Custom configurations, branded themes, embedded content, and linked forms can all introduce accessibility issues that aren't in the vendor's VPAT.

Appointment booking and intake forms

Online appointment booking has become standard for healthcare providers, and it's one of the most commonly cited sources of accessibility complaints. The typical booking flow involves selecting a provider, choosing a service type, picking a date and time, and filling out intake information. Each of these steps commonly has accessibility problems.

Date pickers are the single most problematic element. Most JavaScript date picker widgets are built for mouse users and fail completely with keyboard navigation. A blind user trying to select an appointment date encounters a calendar grid they can't navigate, with no way to move between days, weeks, or months using the keyboard. Some date pickers trap focus, meaning once a keyboard user tabs into the calendar, they can't tab out without selecting a date or refreshing the page.

Provider selection dropdowns, insurance information fields, and intake questionnaires frequently lack proper form labels and error handling. When a required field is left blank, the error message might appear visually as red text next to the field, but if it isn't announced to screen readers via ARIA live regions, assistive technology users won't know their form submission failed or why.

Telehealth platform accessibility

The shift to telehealth during and after COVID created a new category of healthcare accessibility obligations. Telehealth platforms must be usable by patients with various disabilities, including visual, auditory, motor, and cognitive impairments. This extends beyond just making the interface keyboard-navigable.

For deaf and hard-of-hearing patients, telehealth platforms need to support real-time captioning or integration with sign language interpreters. For blind patients, the entire interface needs to work with screen readers, including joining a session, managing audio/video controls, viewing shared screens or documents, and using the chat feature. For patients with motor impairments, all controls need to be operable without precise mouse movements.

The HHS OCR issued guidance in 2020 and 2021 specifically addressing telehealth accessibility, making clear that the ADA's requirements extend to telehealth services. Providers can't claim that telehealth is an "accommodation" that satisfies their accessibility obligations if the telehealth platform itself isn't accessible.

Where HIPAA and ADA intersect

HIPAA and ADA are separate laws enforced through different mechanisms, but they share a common theme: ensuring patients can access healthcare services and their own health information. Where they intersect creates compounding risk for healthcare providers who haven't addressed web accessibility.

HIPAA's "effective communication" requirement under the Privacy Rule means that covered entities must provide individuals with access to their protected health information in a form and format they can use. If your patient portal is the primary method for accessing health records and it's inaccessible to screen reader users, you could face a HIPAA complaint arguing that you've failed to provide effective access to PHI.

OCR handles complaints under both HIPAA and Section 504/508. A single complaint from a patient who can't access their portal could trigger investigation under multiple statutes. While OCR has historically resolved most accessibility complaints through voluntary compliance agreements, the agency has been increasing its enforcement posture. Several recent settlement agreements included multi-year monitoring periods and required organizations to hire accessibility consultants.

There's also a reputational dimension specific to healthcare. A retail website that gets an ADA lawsuit faces some negative publicity. A healthcare provider that gets publicly cited for preventing disabled patients from accessing their health information faces a much more damaging narrative. Patient trust is foundational to healthcare, and accessibility failures undermine it directly.

Healthcare ADA cases and enforcement actions

Several notable cases illustrate the legal landscape for healthcare web accessibility.

HHS OCR settlement with a large healthcare system (2022): A patient who was blind filed a complaint with OCR after being unable to use the healthcare system's patient portal with a screen reader. OCR investigated and found widespread accessibility failures, including unlabeled form fields, inaccessible navigation, and PDF documents that weren't tagged for accessibility. The settlement required a comprehensive remediation plan, third-party accessibility audit, and two years of monitoring.

Dental practice chains have been targeted repeatedly by plaintiff firms. Multiple national dental chains received ADA lawsuits over their online appointment booking systems. The complaints consistently cited inaccessible date pickers, form fields without labels, and missing alt text on provider photos. These cases typically settled in the $15,000 to $50,000 range.

Mental health platforms have faced increased scrutiny. As mental health services moved online, the accessibility of therapy platforms, self-scheduling tools, and intake questionnaires became a growing area of concern. The irony of a mental health provider whose website creates barriers for people with disabilities is not lost on regulators or the public.

Pharmacy websites have been sued over inaccessible prescription refill interfaces, including cases where screen reader users couldn't navigate the medication list or select refill options. These cases are particularly strong for plaintiffs because they involve access to essential healthcare services (medication) through a digital interface that's often the primary way patients interact with the pharmacy.

How to fix healthcare website accessibility issues

Audit your patient portal

Start with the patient-facing functionality that matters most: logging in, viewing test results, scheduling appointments, messaging providers, and paying bills. Can each of these flows be completed using only a keyboard? Does a screen reader announce all form fields, error messages, and status updates? If you use a third-party portal platform, request their VPAT and compare it to the actual experience on your implementation.

Fix appointment booking

Replace inaccessible date pickers with accessible alternatives. The simplest fix is providing a text input field where patients can type a date, in addition to the calendar widget. Ensure all form fields have programmatic labels, not just visual labels. Add ARIA live regions to announce form errors and confirmation messages. Test the entire booking flow with keyboard-only navigation.

Make PDFs accessible

Healthcare websites are full of PDF documents: patient forms, insurance information, practice policies, educational materials. PDFs need to be tagged with a proper reading structure (headings, paragraphs, lists, tables) so screen readers can navigate them. Scanned documents need OCR text layers. Form PDFs need tagged form fields with labels. If you have hundreds of PDFs, prioritize the ones patients need most: intake forms, consent documents, and insurance paperwork.

Evaluate your telehealth platform

Request the VPAT from your telehealth platform vendor. Test the patient experience with keyboard navigation and screen reader software. Verify that joining a session, managing controls, and using chat are all accessible. If your platform doesn't meet WCAG 2.1 AA, document the gaps and work with your vendor on a remediation timeline, or evaluate alternative platforms.

Implement ongoing monitoring

Healthcare websites change frequently: new provider pages, updated intake forms, seasonal content, portal updates. Each change can introduce accessibility regressions. Continuous monitoring catches these issues before patients encounter them and before regulators or plaintiff attorneys discover them.

Run a free accessibility scan on your healthcare website right now. No account needed. Results in 30 seconds.

Scan Your Healthcare Site

Frequently asked questions

Does my patient portal need to be ADA compliant?

Yes. Patient portals are part of your healthcare services, and the ADA requires those services to be accessible to people with disabilities. If a patient who uses a screen reader can't access test results, schedule an appointment, or message their provider through the portal, that's an accessibility barrier that exposes you to an ADA complaint. If your organization receives federal funding (including Medicare and Medicaid), Section 508 adds further requirements on top of the ADA.

Does HIPAA affect ADA compliance for healthcare websites?

HIPAA and ADA are separate laws, but they intersect in ways that compound your risk. HIPAA requires effective communication with patients, which includes ensuring patients with disabilities can access their health information. If your patient portal is the primary way patients view records and it's inaccessible, you could face complaints under both ADA (discrimination) and HIPAA (failure to provide effective access to PHI). The Office for Civil Rights enforces both, so a single complaint could trigger investigation under multiple statutes.

Is my telehealth platform ADA compliant?

Most telehealth platforms have significant accessibility gaps. Common issues include video interfaces that aren't keyboard-navigable, missing captions for audio content, screen-sharing features inaccessible to screen readers, and appointment scheduling with inaccessible date pickers. If you use a third-party platform like Doxy.me or Zoom Health, check their VPAT for documented accessibility status. You're still responsible for the experience your patients encounter, regardless of what platform you chose.

Does Section 508 apply to my healthcare organization?

If your organization receives any federal funding, yes. This includes Medicare and Medicaid reimbursements, federal research grants, and Federal Employees Health Benefits participation. Since most healthcare providers accept Medicare or Medicaid, Section 508 applies to the vast majority of hospitals, clinics, and practices. It requires that your electronic and information technology, including your website and patient portal, be accessible per WCAG standards.

Can a patient sue my healthcare practice for an inaccessible website?

Yes. Health and beauty together accounted for about 7.17% of the 3,948 ADA web accessibility lawsuits filed in federal court in 2025, and the healthcare slice keeps growing. Patients have filed complaints with OCR and sued directly under ADA Title III. Notable cases include complaints against major hospital systems, dental practice chains, and mental health providers. Beyond lawsuits, OCR enforcement actions can mandate corrective action plans with multi-year monitoring periods. In the worst case, federal funding can be threatened.

Are appointment booking forms a common source of ADA violations?

Appointment booking is one of the most frequently cited accessibility issues on healthcare websites. The biggest offender is date picker widgets that can't be operated with a keyboard. Other common issues include form fields without labels, dropdown menus for providers or services that aren't keyboard accessible, time slot selectors without ARIA roles, and multi-step forms where error messages aren't announced to screen readers. Test your booking flow using only your keyboard to find out.

Check your healthcare website for accessibility issues right now. It's free and takes 30 seconds.

Run a free scan