Section 508 Compliance: The Complete Guide for 2026

What Is Section 508 Compliance?

Section 508 is part of the Rehabilitation Act of 1973, a landmark civil rights law that prohibits discrimination based on disability in programs conducted by federal agencies. Specifically, Section 508 addresses information and communications technology (ICT) — requiring that all technology the federal government develops, procures, maintains, or uses must be accessible to people with disabilities.

The law was first added as an amendment in 1986, but it wasn't until the Workforce Investment Act of 1998 that Section 508 gained real enforcement teeth. That amendment created a mandatory standard — not just a guideline — that federal agencies must follow.

The 2017 Section 508 Refresh

In January 2017, the U.S. Access Board published the most significant update to Section 508 in nearly 20 years — commonly called the "508 Refresh." Effective January 18, 2018, it fundamentally changed how compliance is measured:

• WCAG 2.0 Level AA incorporation — The refresh directly references WCAG 2.0 Level A and AA success criteria (38 total criteria) as the standard for web content, electronic documents, and software
• Technology-neutral approach — Instead of prescribing specific technologies, the updated standards focus on functional performance criteria that apply regardless of the technology used
• Harmonization with international standards — The refresh aligns Section 508 with the European standard EN 301 549, reducing compliance burden for multinational organizations
• Expanded scope to ICT — The terminology shifted from "electronic and information technology" to "information and communications technology" (ICT), broadening the categories of covered technology
• Authoring tool requirements — Tools used to create web content must also support the creation of accessible content

The refresh also updated the Federal Acquisition Regulation (FAR) — meaning every federal contract involving ICT must include Section 508 compliance requirements. This is codified in FAR 39.2.

FY24 Federal Assessment: Conformance Is Declining

In January 2025, GSA published the second annual governmentwide Section 508 assessment — mandated by the Consolidated Appropriations Act of 2023. The results are alarming: federal conformance fell from 1.79 to 1.74 on a 5-point scale, the lowest ever recorded.

Why conformance is declining while maturity improves: GSA identified a critical gap — agencies are building better programs (hiring 508 coordinators, creating policies, conducting training) but haven't deployed the testing resources needed to actually find and fix violations. Many rely solely on automated scanning, which catches only 30-40% of issues. Without manual testing and assistive technology evaluation, the other 60-70% goes undetected.

The assessment also noted that many agencies don't have staff trained in comprehensive manual testing. Training maturity saw the highest year-over-year increase (+31%), but it's starting from a low base of 1.57 and has reached only 2.06 — still barely "moderate."

Who Must Comply with Section 508?

Section 508 applies to a much broader range of organizations than most people realize. The "federal nexus" — any connection to federal government funding, contracts, or programs — can bring your organization under its umbrella.

Section 508 vs WCAG: Key Differences

Section 508 and WCAG are frequently confused — and for good reason. Since the 2017 refresh, Section 508 directly incorporates WCAG. But they're fundamentally different things, and understanding the distinction matters for compliance planning.

For a deeper comparison of WCAG versions, see our WCAG 2.1 vs 2.2 comparison guide and the DOJ's recent position that WCAG is not the ADA standard.

Section 508 Compliance Checklist

A comprehensive Section 508 compliance checklist covers four categories of ICT. Use this as your baseline audit framework — each item maps to specific WCAG 2.0 AA criteria or Section 508 functional performance criteria.

For a printable checklist focused on web content, see our ADA Compliance Checklist 2026 and WCAG 2.2 Checklist.

Section 508 Compliance Testing

Effective Section 508 testing combines three approaches. No single method catches everything — the FY24 assessment specifically called out over-reliance on automated scanning as a driver of declining conformance.

1. Automated Scanning (Catches ~30-40% of Issues)

Automated tools are the fastest starting point — they can scan hundreds of pages in minutes and identify common violations like missing alt text, contrast failures, and missing form labels. However, they cannot evaluate content quality, keyboard behavior, or screen reader experience.

See our full comparison of accessibility testing tools for detailed reviews of 12 tools.

2. Manual Evaluation (Catches ~40-50% More)

Manual testing is where most violations are actually found. Focus on these key areas:

• Keyboard navigation — Tab through the entire page. Can you reach and operate every interactive element? Is the focus order logical? Is the focus indicator clearly visible?
• Content structure — Are headings used correctly and hierarchically? Do data tables make sense without visual formatting? Is the reading order logical?
• Dynamic content — Are modal dialogs, accordions, and menus keyboard accessible? Does focus move appropriately when content changes?
• Cognitive accessibility — Are error messages clear and specific? Can users undo or correct actions? Is language plain and understandable?

3. Assistive Technology Testing

The DHS Trusted Tester process requires testing with actual assistive technologies:

Section 508 PDF Compliance

PDF documents are one of the most common Section 508 failure points. An estimated 95% of government PDFs are not fully accessible — making this the single largest category of non-compliance in federal ICT. The FY24 assessment found that document testing coverage declined significantly from the prior year.

PDF Accessibility Requirements

Section 508 requires electronic documents — including PDFs — to meet WCAG 2.0 Level AA. This means:

Section 508 Compliance Certification

There is no official government certification for Section 508 compliance. Unlike ISO standards, there is no certifying body that can stamp your product or website as "508 Certified." However, several related certifications and documentation approaches exist:

For a deep dive into VPATs and ACRs, see our complete VPAT guide and downloadable VPAT templates.

Section 508 and the April 24, 2026 ADA Deadline

While Section 508 has been in effect since 2001 (with the 2017 refresh effective January 2018), the upcoming April 24, 2026 ADA Title II deadline creates unprecedented urgency for organizations that overlap both laws.

Bottom line: If your organization is subject to Section 508, you should already be targeting WCAG 2.1 Level AA — not just WCAG 2.0 — to future-proof compliance. Read our ADA Title II deadline countdown guide for the full timeline.

Section 508 Enforcement and Penalties

Section 508 enforcement has historically been weaker than ADA Title III enforcement, but that's changing — especially since the Consolidated Appropriations Act of 2023 mandated annual assessments.

For the financial implications, see our government compliance cost comparison and IRS tax credit guide for accessibility costs.

How to Achieve Section 508 Compliance: Step-by-Step

Whether you're a federal agency, a vendor selling to the government, or an organization receiving federal funding, here's a practical roadmap to achieve and maintain Section 508 compliance:

Frequently Asked Questions

Key Resources