The law also extends to third-party technology, so businesses that sell digital products to the federal government need to prove those products meet Section 508 standards. Without that proof, new deals and existing contracts are at risk. The standard way to demonstrate conformance is by completing a Voluntary Product Accessibility Template (VPAT®), which can be shared with current and prospective clients.
Section 508 compliance isn’t just about avoiding regulatory risk or competing for federal business. Following the law helps ensure that all people, including those with disabilities, have equal access to federal information and services.
Key insights
Section 508 requirements for digital accessibility
The U.S. Access Board develops and maintains the Section 508 standards, working with the General Services Administration (GSA) to help agencies apply them. A 2017 refresh of Section 508, effective in 2018, adopted the Web Content Accessibility Guidelines (WCAG) 2.0 Level AA as the technical standard for federal ICT. WCAG is a set of technical specifications that, when followed, make digital content accessible for people with disabilities.
WCAG is built around four principles, known as the “POUR” principles: Content must be perceivable, operable, understandable, and robust. That means a page needs to work for someone navigating with a keyboard and screen reader as reliably as it does for someone using a mouse.
Risks of non-compliance with Section 508
Federal agencies can be sued for falling short of Section 508 requirements. In fact, the Department of Homeland Security, the Social Security Administration, and the U.S. Department of Education have all faced lawsuits over inaccessible technology. Behind each case is someone who couldn't get the information, benefits, or service they needed.
That's why the requirements don't stop at the agency itself. Agencies must validate that every piece of ICT they purchase is Section 508 compliant, which extends the pressure to vendors and outside organizations. For businesses selling digital products to federal agencies, neglecting to meet Section 508 standards puts current and future contracts at risk.
To learn more about the Section 508 requirements, and how to meet them, download our Complete Guide to Section 508 Compliance.
Section 508 conformance for vendors and contractors
The standard way for vendors to demonstrate Section 508 conformance is with a Voluntary Product Accessibility Template (VPAT®). Once completed, a VPAT becomes an Accessibility Conformance Report (ACR)—the document federal buyers review before they purchase. Vendors selling into the U.S. federal government use the VPAT 2.5 508 edition, which maps a product against the Section 508 standards, including the WCAG 2.0 Level AA success criteria.
If your organization is a federal government vendor, maintaining an up-to-date ACR protects the contracts you already hold and can help you win new ones. Private-sector buyers increasingly request ACRs as well, often when existing contracts come up for renewal. In fact, according to our latest State of Digital Accessibility Report, 75% of professionals say their organization requires documented proof of accessibility when purchasing digital products.
Importantly, an ACR reflects a single point in time, so it needs to be refreshed as your product changes. Level Access helps vendors produce credible ACRs and keep documentation current as products and standards evolve.
How to achieve Section 508 compliance
The most effective way to meet Section 508 requirements is to engage a third-party expert. The right partner will assess your current state of ICT accessibility, help you prioritize and resolve accessibility gaps, and implement tools and processes that support long-term, sustainable compliance.
Level Access brings deep knowledge of Section 508 and WCAG standards, and equips federal agencies and government vendors with a comprehensive solution for conformance—combining technology, manual evaluation, training, and legal expertise.
We offer a product authorized by the federal government’s Federal Risk and Authorization Management Program (FedRAMP), streamlining procurement and onboarding for federal agencies. And if you sell to government buyers, we’ll work with you to deliver a credible ACR that holds up to scrutiny.
Frequently asked questions
What is Section 508 compliance?
Section 508 of the Rehabilitation Act of 1973 is a U.S. law requiring federal agencies to make their Information and Communication Technology (ICT)—software, websites, electronic documents, multimedia, and more—accessible to people with disabilities. The technical standard for this federal accessibility law is WCAG 2.0 AA. Vendors that sell digital products to the U.S. federal government must also ensure their ICT meets Section 508 requirements as a condition of procurement.
How do you comply with Section 508?
Section 508 compliance means ensuring that ICT conforms to WCAG 2.0 Level AA, at minimum. Organizations typically accomplish this through automated and manual testing, issue remediation, and ongoing governance to ensure gaps don’t resurface.
Does Section 508 apply to state agencies?
Section 508 applies specifically to U.S. federal agencies. State and local governments fall under Title II of the Americans with Disabilities Act (ADA), which carries its own digital accessibility requirements. Some states, including California, Texas, and Minnesota, have also enacted their own ICT accessibility laws.
Does Section 508 apply to the private sector?
Private-sector organizations are not directly covered by Section 508; however, businesses that contract with federal agencies must meet Section 508 requirements to sell digital products to government agencies.
Do vendors have to comply with Section 508?
Vendors selling ICT to a federal agency must show their products meet Section 508 standards as a condition of procurement. Most do this with a completed VPAT (an ACR) that federal buyers review during procurement. Without one, vendors risk losing current contracts and missing new opportunities.
What is Section 508 compliance testing?
This is the process of checking ICT to confirm it meets accessibility requirements, covering a full digital footprint—website, internal communications, purchased apps, and documents. Section 508 defines web accessibility as conformance with WCAG 2.0 AA success criteria, so testing ultimately measures ICT against those criteria.
What is the difference between the ADA and Section 508?
Section 508 is a federal law requiring agencies, and the vendors that sell to them, to build accessible ICT for people with disabilities. The ADA is broader—an anti-discrimination law that, in physical spaces, prohibits discrimination against people with disabilities, with Title III covering private businesses. Courts have repeatedly interpreted Title III of the ADA as applying to digital experiences like websites and apps.