Scan your healthcare website against HHS Section 504 and WCAG 2.1 Level AA standards. Get instant compliance report with violations and fixes for patient portals. Deadline: May 2026
If you run a hospital, clinic, health center, or any organization that takes HHS funding, you've probably heard the term "Section 504" thrown around a lot this year — usually followed by a deadline that keeps moving. Here's the short version: HHS Section 504 compliance is real, it's enforceable, and the deadline was just extended. But "extended" doesn't mean "off the hook." This guide walks through exactly what's required, who it applies to, and what to fix first.
HHS Section 504 is a federal law requiring healthcare organizations that receive HHS funding (Medicare, Medicaid, grants) to make their websites, patient portals, and digital content accessible. The technical standard is WCAG 2.1 Level AA, enforced by the HHS Office for Civil Rights (OCR). Deadlines: May 11, 2027 (15+ employees) and May 10, 2028 (fewer than 15 employees).
Free HHS Section 504 compliance checker — scan your patient portal and website against WCAG 2.1 Level AA.
Section 504 of the Rehabilitation Act of 1973 has prohibited disability-based discrimination in federally funded programs for over 50 years. What changed is that in May 2024, HHS published a Final Rule that, for the first time, attached a specific technical standard to that obligation for digital content: WCAG 2.1 Levels A and AA.
In plain terms: if your organization receives federal financial assistance from HHS — Medicare, Medicaid, grants, cooperative agreements, even some forms of property assistance — your website, mobile app, patient portal, and digital documents need to conform to WCAG 2.1 AA. This isn't a recommendation. It's a binding civil rights requirement enforced by the HHS Office for Civil Rights (HHS OCR).
The rule applies broadly. If your organization fits any of these categories, you're very likely covered:
One detail that trips people up: organization size doesn't determine whether you're covered — it only determines when your deadline lands. A small practice with eight employees that bills Medicaid is just as covered as a 500-bed hospital. It simply gets more time.
This is the part most people searching for "HHS 504 deadline 2026" actually want to know, so here it is clearly:
The original rule set May 11, 2026 as the compliance deadline for recipients with 15 or more employees, and May 10, 2027 for recipients with fewer than 15 employees. Just days before that first deadline hit, HHS OCR issued an Interim Final Rule, effective May 7, 2026, pushing both dates back by one year:
⚠️ Important: The extension changes the deadline, not the obligation. Section 504's underlying nondiscrimination requirement, including the duty to make reasonable modifications for people with disabilities, has never paused. OCR has said this explicitly. Treat the extra year as time to actually close the gap — not a reason to deprioritize the work.
Whether your deadline is 2027 or 2028, the technical bar is the same: WCAG 2.1 Level AA across every patient-facing digital touchpoint. Here's where to focus first.
Patient portals are consistently flagged as the highest-risk area, since they're where patients schedule appointments, message providers, view lab results, and pay bills.
Forms for scheduling, intake, and billing are fully keyboard-operable
Lab results and clinical summaries use proper heading structure for screen readers
Error messages are announced clearly, not just shown in red text
Session timeouts give users adequate time or an extension option
Sufficient color contrast on all text and interactive elements
Meaningful alt text on every image, including infographics and provider photos
Clear, programmatically linked form labels (especially on appointment and referral forms)
Logical heading hierarchy and a defined page language
No reliance on color alone to convey status (e.g., "available" vs. "booked")
Telehealth platforms fall squarely under Section 504 when they're part of an HHS-funded program.
Video consultation interfaces work with screen readers and keyboard navigation
Captioning is available for any pre-recorded patient education content
Sign-in and waiting-room flows don't trap keyboard or screen-reader users
Alternative contact methods are available and clearly advertised for patients who hit an accessibility barrier
PDF remediation backlog was specifically called out by HHS as a major compliance burden, so it deserves direct attention.
Consent forms, intake paperwork, and billing documents are tagged and properly structured
Pre-deadline PDFs that are still actively used for services are not exempt — only true legacy/archived documents qualify
New documents are created accessible from the start, rather than added to the backlog
Self-service check-in kiosks provide equivalent access, or a staffed alternative with no added wait or loss of privacy
There's no single mandated U.S. technical standard for kiosk hardware yet, but applying WCAG 2.1 at the software layer is the safest baseline
A lot of providers assume Medicare accessibility requirements are a separate set of rules. They're not — they're a trigger. Accepting Medicare or Medicaid funding is itself a form of federal financial assistance, which is exactly what brings an organization under Section 504 in the first place. If your practice bills Medicare, the WCAG 2.1 AA requirement applies to your digital properties regardless of your specialty or size.
HHS OCR enforces Section 504 through investigations, compliance reviews, and the potential loss of federal funding for organizations found in violation. Section 504 also gives individuals a private right of action, meaning a patient who can't access your portal or website has legal standing to bring a complaint directly — separate from anything OCR does.
Given that patient portals and telehealth are now core to how care gets delivered, an inaccessible website isn't just a regulatory exposure. It's a barrier that keeps patients with disabilities from booking appointments, understanding their bills, or communicating with their care team.
Free HHS Section 504 compliance checker — scan your patient portal and website now.
If you're starting from zero, don't try to fix everything at once. A reasonable order of operations looks like this:
This is exactly the kind of audit AccessiTool is built to support: scanning your website, patient portal, and key digital documents against WCAG 2.1 AA and HHS Section 504 requirements, then handing you a prioritized list of what to fix first instead of a 200-page technical report. For a healthcare organization juggling EHR vendors, PDF backlogs, and a moving federal deadline, having a clear starting point matters more than chasing perfection on day one.
Free HHS Section 504 checker — scan your healthcare website in 60 seconds.
No signup. 60 seconds. WCAG 2.1 Level AA.
This article is for general informational purposes and isn't legal advice. Section 504 obligations and enforcement can vary by organization type and funding source, so consult qualified legal counsel for guidance specific to your situation.
Section 504 compliance for hospitals, clinics, and patient portals
Download detailed compliance report with violations and fixes
May 2026 deadline for healthcare organizations with 15+ employees
Understand the legal framework behind healthcare accessibility
Testing tools available in 5 languages