HHS Section 504 and ADA Title II Deadline Extensions: What Healthcare Organizations Need to Know

If you have been tracking federal web accessibility requirements for your healthcare organization, you have probably heard the news: both the HHS Section 504 and ADA Title II compliance deadlines have been extended. For many organizations, this feels like a relief. For the ones paying close attention, it is something else: a window.

The deadlines moved. The legal obligations did not. WCAG 2.1 AA remains the required standard under both rules. The federal expectation that your patients can access your website, your portal, your forms, and your digital communications without barriers — that has not changed.

What changed is the timeline. And for behavioral health centers, FQHCs, and safety-net healthcare providers, that timeline is now an opportunity to do this correctly.

This article covers exactly what was extended, what was not, and what your organization should be doing between now and the new deadlines.

What Is the HHS Section 504 Deadline Extension?

The U.S. Department of Health and Human Services issued a final rule requiring covered healthcare organizations to bring their web content and mobile applications into conformance with WCAG 2.1 Level AA. The rule applies to any organization receiving federal financial assistance — including Medicaid, Medicare, HRSA grants, and similar funding.

The original deadlines were:

• May 11, 2026 for organizations with 15 or more employees
• May 10, 2027 for organizations with fewer than 15 employees

HHS extended those deadlines to:

• May 11, 2027 for organizations with 15 or more employees
• May 10, 2028 for organizations with fewer than 15 employees

The extension was granted in part because HHS acknowledged that many covered recipients would not be able to meet the original deadlines. That is worth noting: the agency that wrote the rule said the original timeline was not achievable for most organizations. If your website is not yet compliant, you are not alone — but you are also not without obligation.

Importantly, the eCFR still requires covered recipients to ensure their web content and mobile apps conform to WCAG 2.1 Level A and AA, including content made available through contractual, licensing, or other arrangements. This means your third-party patient portal, your telehealth platform, your online scheduling tool — all of it is in scope. Vendors do not absorb your compliance responsibility.

What Is the ADA Title II Deadline Extension?

The U.S. Department of Justice issued a final rule under Title II of the Americans with Disabilities Act requiring state and local government entities to make their web content and mobile apps accessible under WCAG 2.1 AA. This rule applies to public entities — including public hospitals, county health departments, public behavioral health authorities, and public university health centers.

The original deadlines were:

• April 24, 2026 for public entities serving populations of 50,000 or more
• April 26, 2027 for public entities serving populations under 50,000

The DOJ extended those deadlines to:

• April 26, 2027 for public entities serving populations of 50,000 or more
• April 26, 2028 for public entities serving smaller populations and special district governments

The WCAG 2.1 AA standard remains the technical requirement. DOJ guidance also notes that web content and mobile apps provided through arrangements with third parties are covered under Title II — the same vendor-scope principle that applies under HHS Section 504.

If your organization is both a recipient of federal healthcare funding and a public entity — a county behavioral health authority, for example — both rules may apply to you simultaneously.

What Did Not Change

This is the part that gets lost in the headlines.

The deadlines moved. These things did not:

The WCAG 2.1 AA Standard

Both rules still require full conformance with Web Content Accessibility Guidelines 2.1, Level A and AA. This covers perceivability, operability, understandability, and robustness — across your website, mobile app, PDFs, forms, and digital communications.

The Obligation to Make Programs Accessible

HHS has consistently emphasized that covered recipients have an ongoing obligation to ensure their programs and activities are accessible to people with disabilities. A deadline extension is not permission to pause.

Vendor Scope

Content your organization makes available through third-party contractors, licensing agreements, or platform arrangements is still in scope under both rules. Your EHR patient portal, your online bill pay system, your telehealth intake flow — all covered.

The Risk of Complaints and OCR Referrals

The Office for Civil Rights continues to investigate accessibility complaints regardless of compliance deadlines. A patient who cannot access your appointment scheduling page can file a complaint today. The deadline extension does not create a safe harbor.

The Business Case

One in four Americans lives with a disability. For behavioral health organizations, that number is even more significant — the populations you serve are disproportionately affected by disabilities that make digital access harder, not easier. An inaccessible website is not just a compliance problem. It is a patient access problem.

Why the Extra Time Is an Advantage, If You Use It

The organizations most at risk in 2027 and 2028 are not the ones that ignored the deadlines. They are the ones that waited until the last six months and then competed for the same remediation vendors, the same developer capacity, the same legal review, and the same internal web resources as every other organization that also waited.

HHS noted that a key reason for the extension was that many recipients lacked the internal capacity to meet the original timeline. That capacity constraint does not disappear in 2027. It gets worse as the deadline approaches.

The organizations that use the next 12 months well will:

• Inventory their highest-risk patient workflows
• Identify which third-party tools and platforms are creating exposure
• Begin remediating the digital front door — appointment requests, intake forms, crisis services, portal access
• Create an accessibility statement and a formal patient feedback process
• Build internal documentation that demonstrates good-faith progress

That last point matters more than most organizations realize. Regulators and courts look at whether an organization made genuine, documented efforts toward compliance. A remediation roadmap, an accessibility statement, and a record of ongoing work are meaningful. Doing nothing and hoping the next extension comes is not a strategy.

What Healthcare Organizations Should Do Right Now

If your organization is a behavioral health center, FQHC, community mental health provider, or safety-net healthcare organization, here is a practical starting point:

1. Identify your highest-risk workflows.
   Start with the pages and tools patients use most: appointment scheduling, referral forms, new patient intake PDFs, patient portal entry, crisis services, and bill pay. These are the workflows most likely to generate complaints and the ones most likely to block access for patients with disabilities.
2. Do not rely solely on automated scanning.
   Automated tools catch roughly 30% of accessibility issues. The barriers that stop real patients — forms that cannot be submitted with a keyboard, portal flows that break under a screen reader, PDFs that are completely inaccessible — require manual testing to find.
3. Assess your vendor exposure.
   Review your contracts with your EHR, telehealth, scheduling, and portal vendors. Understand what WCAG conformance they claim, how they support accessibility remediation, and what your agreement says about accessibility obligations.
4. Create or update your accessibility statement.
   An accessibility statement signals good faith to regulators and gives patients a documented way to report barriers. It should include your conformance target, your current status, and a contact mechanism for feedback.
5. Start building your remediation record.
   Document what you have tested, what you have found, and what you have fixed. This record is your defense if a complaint is filed before your deadline arrives.

The Bottom Line

The HHS Section 504 deadline extension and the ADA Title II deadline extension give healthcare organizations more time to get this right. That is genuinely useful. But the organizations that treat the extension as a reason to wait are misreading the moment.

WCAG 2.1 AA is still the standard. Your patients still need access. The compliance window is open — the question is whether your organization uses it strategically or runs out of it.

AccessiTREE works with behavioral health centers, FQHCs, and safety-net healthcare organizations across Colorado to remove digital barriers from the patient workflows that matter most. If you are not sure where your organization stands, the right time to find out is now.