HHS Pushes Section 504 Web Accessibility Deadline to 2027 and 2028

A blind patient trying to refill a prescription through a health system portal now has about eighteen more months to wait. The Department of Health and Human Services announced a one-year extension of compliance dates for web content and mobile app accessibility under Section 504 of the Rehabilitation Act.

The new deadlines: May 11, 2027 for recipients with 15 or more employees. May 10, 2028 for smaller organizations. The substantive rule itself did not move.

That extra year is not an abstraction. It may mean another twelve months of patient portals that screen readers cannot parse, appointment systems that block keyboard navigation, intake forms with no labels, and PDFs that cannot be read aloud.

What does the extension change?

The substantive rule did not move. Covered recipients of HHS federal financial assistance still must bring web content and mobile apps up to WCAG 2.1 Level AA. Only the calendar changed. The same pattern followed an almost identical extension for ADA Title II last year.

Advocates have reason to be impatient. WCAG 1.0 predates anyone under thirty. WCAG 2.0 shipped in 2008. WCAG 2.1, the standard HHS adopted, landed in 2018. Every redesign since then has been a fresh chance to do it right, and many have not.

Is the web getting more accessible?

No, by one widely cited measure it is going backward. The 2026 WebAIM Million report found that the average number of WAVE-detected accessibility errors across the top one million home pages rose about 10% from 2025 to 2026. As the report put it, the web became less accessible than it was a year ago.

Why did HHS extend the deadline?

The agency points to real operational friction: PDF remediation costs, ambiguity about how compliance gets measured, and the difficulty of holding third-party vendors accountable. Many organizations inherited thousands of inaccessible PDFs. Some run their entire web presence with one person who also handles IT and copier repairs.

What did HHS push back against?

A virtual mental health care provider told HHS that the 2024 rule would impose substantial financial burdens "without providing any material benefits." HHS disagreed.

In its response, the agency wrote that when a disabled person cannot access the web content or app of a federally funded telehealth provider, the result amounts to "a denial of health care by a recipient of federal dollars." That phrase should stop any compliance team cold.

What should organizations do with the extra year?

The extension is a reprieve from panic, not from the work. Panic produces rushed audits and overlay shopping sprees. A measured year can yield real progress if the hours go to the right things.

• Prioritize the services that block care. Appointment scheduling, intake forms, benefit applications, payment, contact forms, complaint processes, and emergency information go first. A barrier that prevents someone from receiving care should not sit at the bottom of the backlog.
• Stop publishing new inaccessible content. Templates, authoring practices, document workflows, and publishing permissions matter more than the remediation queue.
• Pressure vendors. Scheduling systems, form builders, payment processors, and embedded media players often introduce barriers. Ask for a VPAT, test the workflow, and put accessibility in the contract.
• Train the content authors. The marketer who writes headings, the communications staffer who uploads PDFs, and the social media producer who builds graphics each decide, dozens of times a day, whether to add or remove a barrier.
• Measure honestly. By this time next year, an organization should be able to list what it tested, what it fixed, what remains, and who owns the maintenance.

A blind patient does not become less blind because the compliance date changed. A Deaf patient does not receive better service because the portal team has another twelve months. The deadline moved; the civil rights obligation did not. The serious question for every covered organization is no longer how little it can do before 2027, but how much.