RatedWithAI

RatedWithAI

Accessibility scanner

Section 508 vs ADA 2026: Which Accessibility Law Applies to Your Organization?

Updated June 2026·11 min read·Compliance Guide

Two major U.S. laws govern digital accessibility — Section 508 of the Rehabilitation Act and the Americans with Disabilities Act. They're frequently confused, but they cover different organizations with different compliance requirements. Getting this wrong is expensive: the wrong compliance strategy can leave you exposed to enforcement actions or procurement disqualification.

Quick Answer

  • 508Federal agencies and companies that sell technology to the federal government must comply with Section 508.
  • ADAState and local governments (Title II) and private businesses (Title III) must comply with the ADA's accessibility requirements.
  • BothMany organizations — state universities, public hospitals, contractors to federal agencies — may be subject to both laws simultaneously.

Section 508: The Federal Technology Accessibility Law

Section 508 of the Rehabilitation Act of 1973 (as amended in 1998) requires federal agencies to make their electronic and information technology accessible to people with disabilities. It covers technology that federal agencies develop, procure, maintain, or use.

Who Section 508 Covers

Federal AgenciesAll executive branch agencies — including every cabinet department, independent agencies, and the legislative and judicial branches
Federal ContractorsCompanies selling or licensing information technology to the federal government must deliver Section 508-compliant products
Grant Recipients (partial)Entities receiving federal grants may have Section 508 obligations depending on grant terms — varies by program
SubcontractorsVendors supplying technology components within a federal prime contract typically carry flow-down 508 compliance obligations

Section 508 Technical Standard: WCAG 2.0 Level AA

The 2018 Section 508 refresh updated the technical standard to incorporate WCAG 2.0 Level AA by reference. This means the specific accessibility criteria federal agencies and their vendors must meet are WCAG 2.0 AA success criteria — a key distinction from the ADA's typical reference to WCAG 2.1.

Practical Implication

WCAG 2.0 AA and WCAG 2.1 AA are not identical. WCAG 2.1 adds 17 additional success criteria (particularly for mobile and cognitive accessibility). If you're a federal contractor meeting Section 508, you're not automatically WCAG 2.1 AA compliant — additional criteria apply under the ADA for your non-federal-facing products and services.

Section 508 Enforcement

Section 508 is enforced primarily through:

  • Employee complaints filed with the agency or the Equal Employment Opportunity Commission (EEOC)
  • Formal complaints filed with the Access Board or General Services Administration
  • Procurement challenges — federal contractors can be disqualified for 508 non-compliance
  • Civil suits under the Rehabilitation Act in federal court

Unlike ADA litigation, Section 508 does not generate the mass litigation industry that Title III has spawned. However, federal procurement consequences — losing or failing to win federal contracts — are a significant and under-discussed risk for technology vendors.

The ADA: Broader Coverage, Different Mechanism

The Americans with Disabilities Act covers far more organizations than Section 508, but through different titles with different requirements:

Title II — State and Local Government

Covers all programs and services offered by state and local government entities — counties, cities, public transit, state universities, public hospitals, courts, and every government website. The 2024 DOJ final rule now mandates WCAG 2.1 Level AA compliance with deadlines in 2026–2027.

Enforcement: DOJ investigations, complaint-driven, private lawsuits, consent decrees.

Title III — Private Businesses

Covers private businesses that are "places of public accommodation" — retailers, hotels, restaurants, healthcare providers, insurance companies, entertainment venues, and their websites and apps. Courts in most federal circuits interpret this to include websites.

Enforcement: Primarily private litigation by individuals and serial plaintiff firms. DOJ can also file suit on behalf of the public interest.

Side-by-Side Comparison

CategorySection 508ADA (Title II/III)
CoversFederal agencies + federal contractorsState/local gov (II) + private businesses (III)
Legal basisRehabilitation Act of 1973Americans with Disabilities Act 1990
Technical standardWCAG 2.0 Level AAWCAG 2.1 Level AA (courts, DOJ guidance)
Primary enforcementProcurement, EEOC, federal courtPrivate litigation, DOJ investigations
Mass litigation risk?LowHigh (Title III especially)
Consent decrees?RareCommon in DOJ enforcement
Applies to websites?Yes (federal/contractor sites)Yes (courts nationwide)
Applies to mobile apps?YesYes
Vendor/contractor impact?Direct (procurement requirement)Indirect (client's compliance)
Updated recently?2018 refreshDOJ Title II final rule 2024

Organizations Subject to Both Laws

Several categories of organizations face simultaneous compliance obligations under both Section 508 and the ADA. This is one of the most common sources of compliance confusion:

State Universities

Public universities are ADA Title II entities. They also often receive federal grants or operate federally-funded programs, triggering Section 508 requirements for technology used in those programs.

Defense Contractors with Public-Facing Products

A company that sells software to the Pentagon (Section 508) and also sells to the general public (ADA Title III) must satisfy both standards simultaneously — which may require separate conformance testing.

Medicaid/Medicare Healthcare Providers

Hospitals and health systems that receive federal reimbursements and serve the public face both Rehabilitation Act (Section 504, which parallels 508) and ADA Title III obligations for patient portals and telehealth.

Public Transit Agencies Receiving Federal Funds

Transit authorities are ADA Title II entities and often federal grant recipients, placing them under both DOJ ADA enforcement and federal transportation accessibility requirements.

Practical Compliance Strategy

Given that WCAG 2.1 Level AA is a superset of WCAG 2.0 Level AA, the most defensible compliance strategy for organizations subject to either or both laws is:

Recommended Baseline: WCAG 2.1 Level AA

Conforming to WCAG 2.1 Level AA satisfies both Section 508 (which references WCAG 2.0 AA) and ADA requirements as interpreted by the DOJ and most courts. You get full coverage for both regulatory frameworks with a single technical target.

  • ✓ Meets Section 508 (surpasses its 2.0 AA requirement)
  • ✓ Meets DOJ Title II final rule (mandates 2.1 AA)
  • ✓ Meets the standard most courts apply in private ADA litigation
  • ✓ VPAT documentation against WCAG 2.1 satisfies federal procurement requests

VPATs: The Section 508 Procurement Requirement

Federal contractors selling technology products are typically required to provide a Voluntary Product Accessibility Template (VPAT) — a document that specifies how a product conforms to Section 508 requirements. VPATs are now standard in federal IT procurement.

If you sell to federal agencies, expect to be asked for a VPAT at procurement or renewal time. The current template format is VPAT 2.5, which covers WCAG 2.1, Section 508, and EN 301 549 (European standard) in a single document. Providing an accurate VPAT requires completed accessibility testing — not just a claim of compliance.

Know Your Accessibility Gaps Before Procurement Does

Whether you're preparing a VPAT for federal procurement or remediating before a DOJ inquiry, you need an accurate picture of your WCAG compliance status. RatedWithAI runs automated WCAG 2.1 AA scans and surfaces violations with clear remediation guidance.

Run a Free Accessibility Scan →