Healthcare ADA Compliance: Patient Portals, Telehealth & Digital Access

Healthcare's Unique Accessibility Exposure

Healthcare organizations face a uniquely layered legal accessibility obligation that most industries do not. ADA Title III requires private healthcare providers — hospitals, clinics, pharmacies, telehealth platforms, and health insurance companies — to provide equal access to their digital services. Section 1557 of the Affordable Care Act prohibits discrimination on the basis of disability by health programs receiving federal financial assistance, which covers virtually every hospital and most insurers. The Office for Civil Rights (OCR) at HHS enforces Section 1557 and has entered into numerous resolution agreements specifically related to digital accessibility failures.

Patient Portal Accessibility Requirements

Patient portals have become the primary digital touchpoint between healthcare organizations and their patients, yet accessibility audit data consistently shows they are among the least accessible category of healthcare digital products. A portal that a blind or motor-impaired user cannot navigate may prevent them from viewing test results, refilling prescriptions, scheduling appointments, or reading after-visit summaries — all of which have direct health implications. WCAG 2.1 Level AA is the recognized standard for patient portal accessibility.

• Appointment scheduling: date pickers and time selectors must be keyboard-operable and screen-reader-friendly
• Test results and clinical documents: PDFs of lab results must be tagged and accessible, or results provided in accessible HTML
• Secure messaging: message composition, inbox navigation, and attachment handling must be fully keyboard accessible
• Billing and EOB statements: PDF-only delivery is a common failure; accessible HTML alternatives required
• Medication management: prescription refill workflows must be navigable without mouse use
• Two-factor authentication: must not rely on inaccessible image CAPTCHAs

Telehealth Platform Accessibility Barriers

The rapid expansion of telehealth accelerated the deployment of video consultation platforms often designed without accessibility in mind. Deaf and hard-of-hearing patients require real-time captions; blind patients need screen-reader-accessible controls; patients with motor disabilities need keyboard-only navigation. HHS has explicitly stated that telehealth platforms must be accessible to people with disabilities.

Section 1557 and Its Digital Implications

The 2024 Section 1557 final rule strengthened digital accessibility requirements, explicitly requiring covered entities to ensure that their patient care websites, patient portals, and telehealth services are accessible to individuals with disabilities. The rule mandates effective communication, which in the digital context means WCAG 2.1 AA compliance for websites and apps, accessible document formats, and the provision of auxiliary aids and services upon request.

Most Common Digital Accessibility Failures in Healthcare

In our audits of healthcare organizations, we consistently find the same categories of failures. Knowing the most common failure patterns allows organizations to prioritize remediation investments for maximum patient impact.

• Inaccessible PDF documents: EOB statements, after-visit summaries, discharge instructions delivered as untagged scanned PDFs
• Inaccessible appointment scheduling: JavaScript-heavy date pickers and calendar widgets that are keyboard-inaccessible
• CAPTCHA on login: image-based CAPTCHA on patient portal login that blocks blind users
• Missing form labels: prescription refill and appointment request forms with unlabeled or placeholder-only fields
• Poor color contrast: health status indicators (red/green) that rely on color alone without text labels
• Video content without captions: health education videos and explainer content without synchronized captions

Building an Accessible Patient Experience

Moving toward accessible healthcare digital products requires embedding accessibility into the organization's technology governance. This means including WCAG conformance requirements in vendor RFPs for EHR systems and telehealth platforms, including disabled patients in usability testing, training patient-facing staff to handle requests for accessible formats, and establishing a feedback mechanism that routes accessibility complaints to the right team.

The HIPAA-Accessibility Intersection

HIPAA and accessibility are sometimes treated as conflicting frameworks — organizations claim that security requirements such as mandatory MFA create accessibility barriers. In practice, this tension is manageable. Accessible MFA options such as hardware security keys (FIDO2), authenticator apps with VoiceOver/TalkBack support, and SMS codes are all HIPAA-compatible. The two frameworks are best understood as complementary goals in service of the same patients.