Legal Compliance Quick Reference
1. WCAG 2.2 AA Success Criteria
| Criterion | Level | Requirement | Quick Check |
|---|---|---|---|
| 1.1.1 Non-text Content | A | All images, icons, and non-text content have text alternatives | Every <img> has alt attribute; decorative images have alt="" |
| 1.2.1 Audio-only/Video-only | A | Prerecorded audio has transcript; prerecorded video has audio description or transcript | Provide transcript link for audio; description or transcript for video |
| 1.2.2 Captions (Prerecorded) | A | Captions provided for all prerecorded audio in video | Video has <track kind="captions"> or embedded captions |
| 1.2.4 Captions (Live) | AA | Captions provided for all live audio in video | Live video includes real-time captions |
| 1.2.5 Audio Description | AA | Audio description for all prerecorded video | Video has audio track describing visual information |
| 1.3.1 Info and Relationships | A | Structure can be programmatically determined | Use semantic HTML; proper heading hierarchy; table headers; form labels |
| 1.3.2 Meaningful Sequence | A | Correct reading order can be programmatically determined | DOM order matches visual order; test with screen reader |
| 1.3.4 Orientation | AA | Content not restricted to single orientation unless essential | Works in both portrait and landscape modes |
| 1.3.5 Identify Input Purpose | AA | Input purpose can be programmatically determined | Use autocomplete attributes for common fields (name, email, etc.) |
| 1.4.3 Contrast (Minimum) | AA | 4.5:1 for normal text; 3:1 for large text (18pt+ or 14pt+ bold) | Use contrast checker tool; test all text against backgrounds |
| 1.4.4 Resize Text | AA | Text can be resized up to 200% without loss of content or functionality | Zoom to 200%; verify no horizontal scroll; all content readable |
| 1.4.10 Reflow | AA | Content reflows to 320px width without horizontal scrolling | Resize browser to 320px; no horizontal scroll except tables/diagrams |
| 1.4.11 Non-text Contrast | AA | 3:1 contrast for UI components and graphical objects | Buttons, inputs, focus indicators have 3:1 contrast |
| 1.4.12 Text Spacing | AA | No loss of content with increased spacing (1.5 line height, 2x paragraph spacing, etc.) | Apply text spacing CSS; verify all content visible |
| 1.4.13 Content on Hover/Focus | AA | Additional content from hover/focus is dismissible, hoverable, and persistent | Tooltips can be dismissed (Esc), hovered, and don't disappear unexpectedly |
| 2.1.1 Keyboard | A | All functionality available via keyboard | Navigate entire page with Tab, Enter, Space, arrows only |
| 2.1.2 No Keyboard Trap | A | Keyboard focus can move away from any component | Can Tab out of all widgets; Esc closes modals |
| 2.1.4 Character Key Shortcuts NEW | A | Single-key shortcuts can be turned off, remapped, or only active on focus | Single-letter shortcuts don't interfere with typing; provide disable option |
| 2.2.1 Timing Adjustable | A | User can turn off, adjust, or extend time limits | Provide settings to disable timeouts or extend them |
| 2.2.2 Pause, Stop, Hide | A | Moving, blinking, or auto-updating content can be paused, stopped, or hidden | Carousels have pause button; videos don't autoplay |
| 2.4.1 Bypass Blocks | A | Mechanism to skip repeated content | Skip to main content link; proper landmark usage |
| 2.4.2 Page Titled | A | Pages have descriptive and informative titles | <title> uniquely describes page purpose |
| 2.4.3 Focus Order | A | Focusable elements receive focus in meaningful sequence | Tab order follows visual/logical order |
| 2.4.4 Link Purpose | A | Purpose of each link determined from link text or context | No "click here" links; descriptive link text |
| 2.4.5 Multiple Ways | AA | More than one way to find pages (sitemap, search, navigation) | Provide navigation menu, search, and/or sitemap |
| 2.4.6 Headings and Labels | AA | Headings and labels describe topic or purpose | Clear, descriptive headings; form labels explain purpose |
| 2.4.7 Focus Visible | AA | Keyboard focus indicator is visible | Clear focus outline on all interactive elements |
| 2.4.11 Focus Not Obscured (Minimum) NEW 2.2 | AA | Focused element is at least partially visible | Sticky headers don't completely hide focused elements |
| 2.5.1 Pointer Gestures | A | Multi-point or path-based gestures have single-pointer alternative | Pinch zoom has +/- buttons; swipe has arrow buttons |
| 2.5.2 Pointer Cancellation | A | Single-pointer activation can be aborted or undone | Click activates on up event, not down; can cancel by moving away |
| 2.5.3 Label in Name | A | Accessible name contains visible label text | aria-label includes visible button/link text |
| 2.5.4 Motion Actuation | A | Functionality triggered by motion has UI component alternative | Shake to undo has undo button; tilt has alternative control |
| 2.5.7 Dragging Movements NEW 2.2 | AA | Drag-and-drop has single-pointer alternative | File upload has browse button; sortable list has move up/down buttons |
| 2.5.8 Target Size (Minimum) NEW 2.2 | AA | Target size at least 24×24 CSS pixels (with exceptions) | Buttons, links, inputs minimum 24px; ideally 44px for touch |
| 3.1.1 Language of Page | A | Default language programmatically determined | <html lang="en"> attribute present |
| 3.1.2 Language of Parts | AA | Language of passages in different language programmatically determined | lang attribute on elements with different language |
| 3.2.1 On Focus | A | Receiving focus doesn't initiate change of context | Focus doesn't trigger navigation, form submission, or popups |
| 3.2.2 On Input | A | Changing settings doesn't automatically cause change of context | Form inputs don't auto-submit; changes require explicit action |
| 3.2.3 Consistent Navigation | AA | Navigation mechanisms repeated in same order | Menu order consistent across pages |
| 3.2.4 Consistent Identification | AA | Components with same functionality identified consistently | Icons, buttons with same function labeled consistently |
| 3.2.6 Consistent Help NEW 2.2 | A | Help mechanism in same relative order across pages | Help link/button appears in consistent location |
| 3.3.1 Error Identification | A | Input errors automatically detected and described | Form validation errors clearly identified and explained |
| 3.3.2 Labels or Instructions | A | Labels or instructions provided for user input | All form fields have visible labels or instructions |
| 3.3.3 Error Suggestion | AA | Suggestions provided when input error detected | Error messages include how to fix (e.g., "Enter date as MM/DD/YYYY") |
| 3.3.4 Error Prevention | AA | Submissions are reversible, checked, or confirmed for legal/financial data | Confirm before submitting important forms; allow review/edit |
| 3.3.7 Redundant Entry NEW 2.2 | A | Don't ask for same information twice unless necessary | Auto-populate previously entered data; use autocomplete |
| 3.3.8 Accessible Authentication (Minimum) NEW 2.2 | AA | Cognitive function test not required unless alternative provided | Provide password managers, email links, biometrics instead of CAPTCHA/recall |
| 4.1.2 Name, Role, Value | A | All UI components have programmatically determined name, role, states | Use semantic HTML or proper ARIA; verify in accessibility tree |
| 4.1.3 Status Messages | AA | Status messages can be programmatically determined without focus | Use role="status", role="alert", or aria-live for dynamic updates |
WCAG 2.2 New Success Criteria:
- 2.4.11 Focus Not Obscured (Minimum): Sticky headers and footers must not completely hide focused elements
- 2.5.7 Dragging Movements: All drag-and-drop must have keyboard/single-pointer alternative
- 2.5.8 Target Size (Minimum): 24×24px minimum (down from 44×44px in 2.1 AAA)
- 3.2.6 Consistent Help: Help mechanisms in same location across pages
- 3.3.7 Redundant Entry: Don't ask users to re-enter information already provided
- 3.3.8 Accessible Authentication (Minimum): No memory tests or puzzles for login
2. Section 508 Requirements
| Section | Requirement | Alignment with WCAG | Quick Check |
|---|---|---|---|
| § 1194.21(a) | Text equivalents for non-text elements | WCAG 1.1.1 Non-text Content | All images have alt text; form inputs have labels |
| § 1194.21(b) | Multimedia alternatives | WCAG 1.2.x (Captions, Audio Description) | Videos have captions and transcripts; audio has transcripts |
| § 1194.21(c) | Color is not sole method of conveying information | WCAG 1.4.1 Use of Color | Required fields use * plus "required"; errors use icon plus color |
| § 1194.21(d) | Documents organized to be readable without stylesheet | WCAG 1.3.1 Info and Relationships | Turn off CSS; content still logical and readable |
| § 1194.21(e) | Redundant text links for server-side image maps | Best practice (image maps rarely used now) | Use CSS/HTML instead of image maps; provide text alternatives |
| § 1194.21(f) | Client-side image maps with redundant text links | Best practice | Each clickable area has corresponding text link |
| § 1194.21(g) | Row and column headers for data tables | WCAG 1.3.1 Info and Relationships | Tables use <th> and scope or headers/id attributes |
| § 1194.21(h) | Markup for data table associations | WCAG 1.3.1 Info and Relationships | Complex tables use headers and id associations |
| § 1194.21(i) | Frames titled with text | WCAG 2.4.1 Bypass Blocks, 4.1.2 Name, Role, Value | Each <iframe> has unique title attribute |
| § 1194.21(j) | Pages with flicker-free design (2-55 Hz) | WCAG 2.3.1 Three Flashes | No content flashes more than 3 times per second |
| § 1194.21(k) | Text-only alternative if compliance cannot be met | Last resort (prefer fixing main content) | Provide accessible alternative version if absolutely necessary |
| § 1194.21(l) | Forms allow AT to access information and submit | WCAG 1.3.1, 3.3.2, 4.1.2 | All inputs labeled; keyboard accessible; screen reader compatible |
| § 1194.22(a) | Skip navigation links | WCAG 2.4.1 Bypass Blocks | "Skip to main content" link or proper landmarks |
| § 1194.22(b) | Color not sole indicator | WCAG 1.4.1 Use of Color | Use patterns, text, icons in addition to color |
| § 1194.22(c) | Style sheets used properly | WCAG 1.3.1 Info and Relationships | Content readable and functional without CSS |
| § 1194.22(n) | Forms completed and submitted via keyboard | WCAG 2.1.1 Keyboard | Tab through all fields; submit with Enter |
Section 508 Refresh (2017): Section 508 was updated in 2017 to incorporate WCAG 2.0 Level AA by
reference. This means federal agencies must comply with WCAG 2.0 AA (and by extension, WCAG 2.1/2.2 AA is
recommended). The specific technical requirements (§1194.21-22) above are from the original standards but are
still useful for understanding specific compliance aspects.
3. ADA Compliance Essentials
| ADA Title | Application to Web | Legal Standard | Practical Implementation |
|---|---|---|---|
| Title I | Employment | Employer websites, application portals, HR systems must be accessible | Job application forms accessible; employee portals keyboard-navigable |
| Title II | State & Local Government | All government websites and online services must be accessible | Public sector sites must meet WCAG 2.1 AA minimum |
| Title III | Public Accommodations | Places of public accommodation websites must be accessible (e.g., retail, entertainment) | E-commerce, restaurants, hotels, theaters, banks must be accessible |
| Title IV | Telecommunications | Telecommunications relay services | Video calling apps should support relay services; captions for communications |
| Title V | Miscellaneous | Retaliation and coercion prohibited | Cannot discriminate against users requesting accessibility accommodations |
Example: ADA Compliance Checklist
// ADA Web Accessibility Checklist
1. **Legal Basis:**
- ADA doesn't explicitly mention websites
- Courts have interpreted Title III to include websites
- DOJ references WCAG 2.1 Level AA as standard
- Follow WCAG 2.2 AA for best protection
2. **Who Must Comply:**
✓ Federal government (required by Section 508)
✓ State and local government (Title II)
✓ Public accommodations (Title III):
- Retail stores and online shops
- Hotels and booking sites
- Restaurants and food delivery
- Banks and financial services
- Healthcare providers
- Educational institutions
- Entertainment venues
✓ Employers with 15+ employees (Title I)
3. **Compliance Requirements:**
□ Meet WCAG 2.1 AA minimum (2.2 AA recommended)
□ Provide alternative means of access if needed
□ Respond to accommodation requests
□ Document accessibility efforts
□ Regular testing and monitoring
□ Staff training on accessibility
4. **Risk Mitigation:**
✓ Accessibility statement on website
✓ Feedback mechanism for reporting issues
✓ Remediation plan for identified issues
✓ Regular audits (annual minimum)
✓ Third-party testing
✓ User testing with people with disabilities
✓ Documentation of compliance efforts
5. **Common Lawsuit Triggers:**
- Missing alt text on images
- Keyboard navigation failures
- Poor color contrast
- Unlabeled form fields
- Inaccessible PDF documents
- Videos without captions
- CAPTCHA without alternative
- Inaccessible checkout process
6. **Safe Harbor Provisions:**
- Section 508: Agencies have 6 months to remediate
- No federal "safe harbor" for private sector
- Proactive compliance is best defense
- Document good-faith efforts
Legal Disclaimer: This is not legal advice. ADA web accessibility law is evolving. Courts have
issued varying rulings. DOJ has not published final web accessibility regulations for Title III (as of 2024).
Consult with legal counsel for specific compliance requirements. Follow WCAG 2.2 AA as best practice and strong
legal defense.
4. European EN 301 549 Standards
| EN 301 549 Clause | Requirement | WCAG Alignment | Application |
|---|---|---|---|
| 9.x Web Content | Web content must meet WCAG 2.1 Level AA | Direct reference to WCAG 2.1 AA | All public sector websites and apps (EU Directive 2016/2102) |
| 10.x Non-web Documents | Documents (PDFs, Word, etc.) must be accessible | Adapted WCAG criteria for documents | Use tagged PDFs; proper heading structure; alt text in documents |
| 11.x Software | Native applications must be accessible | Platform-specific guidelines based on WCAG principles | Desktop and mobile apps must be keyboard-accessible, screen-reader compatible |
| 12.x Documentation and Support | Product documentation must be accessible | WCAG 2.1 AA for online docs | Help files, user guides, support portals must be accessible |
| 5.1.3 Biometrics | Biometric authentication has alternative | Extended beyond WCAG | Fingerprint login must have password alternative |
| 5.1.4 Visual Alternatives | Visual information has non-visual alternative | WCAG 1.1.1, 1.3.3 | Status LEDs announced; visual alerts have sound/text |
| 5.2 Activation of Features | Accessibility features operable without assistance | Extended requirement | Users can enable screen reader, magnification independently |
EU Web Accessibility Directive (2016/2102):
- Scope: Public sector bodies (government, educational institutions, public healthcare)
- Standard: EN 301 549 which incorporates WCAG 2.1 Level AA
- Deadline: September 2020 for existing websites; June 2021 for mobile apps
- Requirements: Accessibility statement on every site; feedback mechanism; monitoring and enforcement
- Exemptions: Some archives, third-party content (if not funded/developed by public sector), extranets/intranets (until 2024)
- Private Sector: European Accessibility Act (EAA) applies to private sector from June 2025
Example: EN 301 549 Compliance Statement Template
<!-- Accessibility Statement (Required by EU Directive) -->
<section>
<h1>Accessibility Statement</h1>
<p>
[Organization Name] is committed to ensuring digital accessibility
for people with disabilities. We are continually improving the user
experience for everyone and applying the relevant accessibility standards.
</p>
<h2>Conformance Status</h2>
<p>
The <a href="https://www.w3.org/WAI/WCAG21/quickref/">Web Content
Accessibility Guidelines (WCAG)</a> defines requirements for designers
and developers to improve accessibility for people with disabilities.
</p>
<p>
This website is <strong>[fully/partially] conformant</strong> with
WCAG 2.1 level AA. [Fully conformant means that the content fully
conforms to the accessibility standard without any exceptions.
Partially conformant means that some parts do not fully conform.]
</p>
<h2>Feedback</h2>
<p>
We welcome your feedback on the accessibility of this website.
Please contact us if you encounter accessibility barriers:
</p>
<ul>
<li>Email: <a href="mailto:accessibility@example.com">
accessibility@example.com</a></li>
<li>Phone: +XX XXX XXX XXXX</li>
<li>Postal: [Address]</li>
</ul>
<p>We aim to respond within [X business days].</p>
<h2>Technical Specifications</h2>
<p>
Accessibility of this website relies on the following technologies:
</p>
<ul>
<li>HTML</li>
<li>CSS</li>
<li>JavaScript</li>
<li>WAI-ARIA</li>
</ul>
<h2>Assessment Approach</h2>
<p>
[Organization Name] assessed the accessibility of this website
by the following approaches:
</p>
<ul>
<li>Self-evaluation</li>
<li>External evaluation</li>
<li>Automated testing</li>
<li>User testing with people with disabilities</li>
</ul>
<h2>Date</h2>
<p>
This statement was created on <time>[Date]</time> using the
<a href="https://www.w3.org/WAI/planning/statements/">W3C Accessibility
Statement Generator</a>.
</p>
<p>Last reviewed on: <time>[Date]</time></p>
</section>
5. Documentation and Reporting
| Document Type | Purpose | Key Components | Update Frequency |
|---|---|---|---|
| Accessibility Statement | Public declaration of accessibility commitment and status | Conformance level, known issues, contact info, last review date | Annually or when significant changes made |
| VPAT (Voluntary Product Accessibility Template) | Detailed compliance report for procurement | WCAG 2.x criteria checklist, Section 508, EN 301 549, support levels | Per product version or major update |
| ACR (Accessibility Conformance Report) | Formal compliance documentation | VPAT-based report, testing methodology, known issues, remediation plan | Per product release |
| Accessibility Audit Report | Internal/external assessment of current state | Issues found, severity ratings, remediation recommendations, timeline | Quarterly or bi-annually |
| Remediation Plan | Action plan for fixing accessibility issues | Prioritized issues, owners, timelines, success criteria, resources needed | Updated as issues resolved |
| Test Results Documentation | Record of testing activities and outcomes | Test date, tools used, browsers/SRs tested, pass/fail results, screenshots | Per testing cycle (sprint, release) |
| User Feedback Log | Track accessibility issues reported by users | Issue description, reporter contact, date reported, resolution, date resolved | Continuous, reviewed monthly |
Example: VPAT/ACR Structure (Simplified)
// VPAT® (Voluntary Product Accessibility Template)
// Format: WCAG 2.x Edition
Product Information:
Name: [Product Name]
Version: [Version Number]
Date: [Report Date]
Contact: [Contact Information]
Evaluation Methods:
- Automated testing: axe DevTools, Lighthouse
- Manual testing: Keyboard navigation, screen readers
- Screen Readers: NVDA 2024.1, JAWS 2024, VoiceOver macOS 14
- Browsers: Chrome 120, Firefox 121, Safari 17, Edge 120
Conformance Level:
[X] Supports (fully meets the criterion)
[ ] Partially Supports (some functionality meets the criterion)
[ ] Does Not Support (does not meet the criterion)
[ ] Not Applicable
Table 1: WCAG 2.2 Level A Success Criteria
┌─────────────────────────────────────────────────────────┐
│ Criteria │ Conformance │ Remarks │
├─────────────────────────────────────────────────────────┤
│ 1.1.1 │ Supports │ All images have alt text │
│ 1.2.1 │ Supports │ Transcripts provided │
│ 1.2.2 │ Supports │ Captions on all videos │
│ 1.3.1 │ Supports │ Semantic HTML throughout │
│ 2.1.1 │ Partially │ Some custom widgets need work │
│ 2.1.2 │ Supports │ No keyboard traps detected │
│ ... │ ... │ ... │
└─────────────────────────────────────────────────────────┘
Table 2: WCAG 2.2 Level AA Success Criteria
[Similar structure]
Known Issues:
1. Custom dropdown keyboard navigation (2.1.1)
- Impact: High
- Remediation: Planned for v2.1
- Timeline: Q2 2024
2. Some charts lack text alternatives (1.1.1)
- Impact: Medium
- Remediation: In progress
- Timeline: Q1 2024
Legal Disclaimer:
This document is provided for informational purposes only.
[Organization] makes no representations regarding accuracy or
compliance with any specific regulations.
Example: Accessibility Audit Report Template
// Accessibility Audit Report
Executive Summary:
- Audit Date: [Date]
- Pages Tested: [Number]
- Overall Status: [Pass/Fail/Partial]
- Critical Issues: [Number]
- WCAG Level: AA
- Conformance: [XX]%
Methodology:
1. Automated Testing:
- Tool: axe DevTools
- Pages scanned: 50
- Issues found: 127
2. Manual Testing:
- Keyboard navigation: All pages
- Screen reader: NVDA + Firefox
- Color contrast: All text elements
- Zoom testing: 200% and 400%
3. User Testing:
- 5 users with disabilities
- Tasks: Navigation, form completion, checkout
- Success rate: 80%
Issues Summary by Severity:
Critical (Must Fix - WCAG A Violations):
1. Missing form labels - 15 instances
Impact: Screen reader users cannot complete forms
WCAG: 1.3.1, 3.3.2, 4.1.2
Remediation: Add <label> elements with for attributes
Effort: 4 hours
Priority: 1
2. Keyboard traps in modal - 3 instances
Impact: Keyboard users cannot exit modals
WCAG: 2.1.2
Remediation: Implement focus trap with Esc key
Effort: 8 hours
Priority: 1
High (Should Fix - WCAG AA Violations):
3. Insufficient color contrast - 47 instances
Impact: Low vision users cannot read text
WCAG: 1.4.3
Remediation: Darken text or lighten backgrounds
Effort: 12 hours
Priority: 2
Medium (Recommended - Best Practices):
4. Non-descriptive link text - 23 instances
Impact: Reduced context for screen reader users
WCAG: 2.4.4
Remediation: Update link text to be descriptive
Effort: 6 hours
Priority: 3
Recommendations:
1. Immediate: Fix all Critical issues (estimated 2 weeks)
2. Short-term: Address High priority items (estimated 1 month)
3. Long-term: Implement accessibility testing in CI/CD
4. Ongoing: Train development team on accessibility
Next Steps:
- Create Jira tickets for all issues
- Assign owners and deadlines
- Schedule follow-up audit in 3 months
- Update accessibility statement
Documentation Best Practices:
- Accessibility Statement: Required by EU law; recommended globally; update annually; include feedback mechanism
- VPAT/ACR: Essential for government/enterprise sales; use official VPAT template; be honest about limitations
- Internal Documentation: Track all testing, issues, and fixes; maintain remediation timeline; document decisions
- Version Control: Keep historical records of accessibility improvements; tag releases with conformance status
- Transparency: Be open about known issues; provide workarounds; commit to timelines for fixes
- Continuous Improvement: Regular audits; user feedback; automated testing in CI/CD; team training
- Legal Protection: Documentation demonstrates good-faith effort; shows commitment to accessibility; useful in litigation
Legal Compliance Quick Reference Summary
- WCAG 2.2 AA: International standard; 50+ success criteria; new criteria for focus visibility, target size, authentication; test with automated tools + manual review
- Section 508: US federal requirement; now references WCAG 2.0 AA; applies to government websites and contractors; similar to WCAG compliance
- ADA: US civil rights law; Title II (government), Title III (public accommodations); no explicit web standard but courts reference WCAG 2.1 AA; active litigation area
- EN 301 549: European standard; incorporates WCAG 2.1 AA; required for EU public sector; European Accessibility Act extends to private sector June 2025
- Documentation: Accessibility statement (required EU, recommended globally); VPAT/ACR for procurement; audit reports; remediation plans; user feedback logs
- Risk Mitigation: Follow WCAG 2.2 AA minimum; document compliance efforts; regular testing; feedback mechanism; staff training; user testing
- Key Principles: Perceivable, Operable, Understandable, Robust (POUR); semantic HTML first; keyboard accessibility; screen reader compatibility
- Resources: W3C WAI, WCAG Quick Reference, ARIA APG, WebAIM, Deque University, accessibility testing tools