Is Your Patient Portal or Telehealth Platform Accessible?
Healthcare organizations face three overlapping accessibility mandates: ADA Title III, HHS Section 504, and ACA Section 1557. Scan your healthcare site free — find every WCAG violation in 30 seconds.
Try it now:
3 free scans per day • No account required • Results in ~30s
Launching browser...
The Three-Layer Compliance Obligation
Why Healthcare Sites Must Be Accessible
Most industries face one primary accessibility law. Healthcare organizations face three overlapping mandates — each with independent enforcement mechanisms and real penalty exposure.
ADA Title III
Healthcare providers open to the public are "places of public accommodation." Courts require WCAG 2.1 AA compliance for all digital services, including patient portals, appointment scheduling, and telehealth platforms.
HHS Section 504
Any organization receiving Medicare or Medicaid reimbursement is a federal funding recipient and must provide equal access to all programs and communications — including digital. The HHS Office for Civil Rights (OCR) investigates complaints.
ACA Section 1557 (2024)
The 2024 final rule explicitly requires covered entities to ensure that electronic patient communications — patient portals, appointment systems, telehealth — meet WCAG 2.1 AA. No grace period for existing systems.
$13M
CVS DOJ settlement — the benchmark for healthcare digital accessibility enforcement
96%
of hospital patient portals have at least one WCAG failure per independent audits
26%
of US adults live with a disability — every one of them is a potential patient
3 laws
overlapping accessibility mandates apply simultaneously to most healthcare organizations
Real Enforcement
DOJ Settlements in Healthcare Accessibility
Healthcare accessibility enforcement is not theoretical. Federal agencies have secured significant settlements — and each one creates precedent that plaintiffs cite in private litigation.
CVS Health — $13M Settlement
DOJ agreement requiring CVS to remediate inaccessible pharmacy kiosks and digital services to WCAG 2.1 AA. Multi-year compliance monitoring included. Established the enforcement benchmark for pharmacy and retail healthcare digital accessibility.
Rite Aid — Consent Decree
Following CVS, Rite Aid entered a consent decree requiring accessible prescription services and digital systems. Serial plaintiffs cite both settlements when filing new cases against pharmacy chains and healthcare retailers.
HHS OCR Patient Portal Investigations
The HHS Office for Civil Rights has resolved multiple complaints about inaccessible patient portals under Section 504. OCR investigations require no lawsuit — a single patient complaint triggers a federal review that can result in corrective action plans and monitoring.
The HIPAA Intersection
When Inaccessibility Becomes a HIPAA Violation
The Double Exposure Most Compliance Teams Miss
HIPAA's Right of Access provision (45 CFR § 164.524) requires covered entities to provide patients access to their health information in the "form and format requested by the individual" when readily producible.
When a blind patient requests their lab results through a patient portal and that portal is inaccessible to their screen reader, the organization may simultaneously violate both Section 504 (disability discrimination) and HIPAA (failure to provide effective access to health records). The HHS OCR enforces both frameworks.
Your HIPAA compliance team and your accessibility team need to be coordinating — because the next Right of Access complaint from a patient who uses assistive technology is also a potential Section 504 complaint.
What We Actually Find
The Most Common WCAG Violations on Patient Portals
96% of patient portals have at least one WCAG failure. These are the violations that appear most frequently — and trigger the most complaints.
Unlabeled appointment scheduling fields
Form fields with placeholder-only labels disappear when a user types. Screen readers cannot identify the field purpose. WCAG 1.3.1, 4.1.2.
Inaccessible lab results tables
Data tables without proper <th scope> attributes are unnavigable by screen readers. Patients cannot identify which result belongs to which test. WCAG 1.3.1.
Low-contrast alert messages
"Critical result" and "action required" notifications that fail the 4.5:1 contrast ratio are invisible to users with low vision. WCAG 1.4.3.
Telehealth controls not keyboard accessible
Video call controls (mute, camera, end call) built from <div> elements are unreachable by keyboard-only users. WCAG 2.1.1.
Untagged PDF care documents
Discharge instructions, consent forms, and care plans distributed as untagged PDFs are completely inaccessible to screen readers. WCAG 1.1.1, 1.3.1.
Session timeout traps
Portals that time out without warning — or whose timeout dialogs don't receive keyboard focus — lock out keyboard-only users without recourse. WCAG 2.2.1, 2.1.2.
How Accessalyze Works
From Scan to Fix in One Afternoon
Healthcare IT teams don't need an external accessibility consultant for every audit cycle. Accessalyze runs the same axe-core engine used by enterprise compliance teams and layers AI on top to generate exact fix code for every violation.
1
Paste Your URL
Enter your patient portal URL, appointment booking page, or any healthcare site page. No setup or account required.
2
AI Scans in 30 Seconds
Our headless browser renders the page fully and axe-core identifies every WCAG 2.1 AA violation — including dynamic content.
3
Get Exact Fix Code
AI generates the precise HTML, ARIA, and CSS changes your development team needs — no interpretation or guesswork required.
4
Monitor Weekly
Portal updates and EHR upgrades introduce regressions. Pro plans re-scan weekly so new violations are caught before patients encounter them.
What You Get
Built for Healthcare CIOs and Web Teams
📋
Compliance Documentation
PDF and HTML reports documenting scan date, violations found, and remediation steps — useful for HHS OCR responses, board reporting, and good-faith compliance evidence.
🤖
AI Fix Code
Instead of a vague "add alt text" recommendation, Accessalyze generates the exact HTML, ARIA, and CSS your developer needs to fix each violation on the first try.
🕷
Full Portal Crawl
Pro plans crawl your entire patient portal — appointment pages, lab result views, secure messaging, prescription refill flows — not just the homepage.
📅
Weekly Monitoring
EHR upgrades, portal software patches, and content updates introduce new violations. Automated weekly scans catch regressions before OCR or a plaintiff does.
🛡️
Accessibility Statement
Pro plans include a generated accessibility statement documenting your WCAG conformance, known limitations, and remediation roadmap — a critical good-faith document in any investigation.
📊
WCAG 2.1 AA Coverage
All 50+ success criteria tested. Matches the standard required by ADA courts, Section 1557 regulations, and HHS OCR guidance — the same bar applied in federal investigations.
Common Questions
Frequently Asked Questions
Are patient portals legally required to be accessible?
Yes. Patient portals operated by healthcare organizations receiving federal financial assistance must comply with Section 504 of the Rehabilitation Act and Section 1557 of the ACA, both requiring WCAG 2.1 AA accessibility. ADA Title III applies independently to private healthcare entities. HHS OCR actively investigates patient portal complaints — no lawsuit required.
What was the CVS healthcare accessibility settlement?
The DOJ and CVS Health reached a $13 million settlement requiring CVS to remediate inaccessible pharmacy kiosks and digital services to WCAG 2.1 AA. The settlement required multi-year compliance monitoring and established the enforcement benchmark for pharmacy and retail healthcare digital accessibility. Rite Aid reached a similar consent decree shortly after.
Does HIPAA require accessible websites?
HIPAA does not directly mandate WCAG compliance, but HIPAA's Right of Access provision requires patients to receive their health information in the format they request when readily producible. When a patient portal is inaccessible to a screen reader user, the entity may simultaneously violate Section 504 and HIPAA. The HHS OCR enforces both frameworks and has investigated cases where inaccessibility prevented patients from accessing their health records.
What is Section 1557 and how does it apply to our website?
Section 1557 of the Affordable Care Act prohibits disability discrimination in health programs receiving federal financial assistance. The 2024 final rule explicitly requires covered entities — which includes virtually all hospitals, health systems, and health insurers — to ensure that electronic patient care communications, including patient portals, appointment systems, and telehealth platforms, meet WCAG 2.1 AA.
Are telehealth platforms required to be accessible?
Yes. Telehealth platforms operated by or contracted by covered healthcare entities must be accessible under ADA Title III, Section 504, and Section 1557. This includes the video call interface, waiting room, pre-visit intake forms, and any documents shared during the visit. Healthcare organizations bear ultimate compliance responsibility for the full patient experience, including contracted vendor technology.
What does the Pro plan cost for a healthcare organization?
Pro is $49/month and includes unlimited scans, full site crawl up to 50 pages, AI fix code, PDF compliance reports, weekly automated monitoring, and an accessibility statement template. Given that a single HHS OCR investigation can require substantial legal resources and remediation costs — and DOJ settlements have reached $13M — the ROI of proactive compliance is straightforward.
Protect Your Patients and Your Organization. Scan Now — Free.
Takes 30 seconds. No account required. Find every WCAG violation on your patient portal or healthcare website before a complaint is filed.