Section 1557 website accessibility for dental practices

Start with the collision, because it costs dentists an afternoon. ADA is both the American Dental Association and the Americans with Disabilities Act, and the rule that actually carries a dental practice’s website deadline is neither of them. It is the HHS rule implementing section 504 of the Rehabilitation Act, codified at 45 CFR part 84. Searching “ADA website compliance dentist” returns the wrong statute more often than the right one.

Is your dental practice covered?

A dental practice is covered if it receives federal financial assistance from HHS. The American Dental Association’s own guidance states that Section 1557 applies to “covered entities such as dental practices that receive federal financial assistance, such as reimbursement under Medicare Advantage, Medicaid or CHIP.”

That is the practical test, and it is narrower than dentists expect in one direction and wider in another. Ordinary commercial dental insurance is not federal financial assistance; a practice seeing only privately insured and self-pay patients is generally not a recipient. But the obligation attaches to the health program or activity rather than to the individual encounter — so one Medicaid-enrolled provider, or a CHIP-covered paediatric caseload, brings the practice in. There is no de minimis carve-out for a small share of federally assisted patients.

The same association page is worth reading for what it does not contain. It confirms coverage and warns that a practice “may be subject to liability” if its patient-facing information and communication technology is inaccessible. It names no version of WCAG and no compliance date. A dentist who reads it knows they are covered and still does not know what to build or when it is due. That is the gap the rest of this page fills.

What is the deadline for a dental practice?

Two dates, and which one applies turns on headcount:

• 11 May 2027 — recipients with fifteen or more employees.
• 10 May 2028 — recipients with fewer than fifteen employees.

Both come from the HHS interim final rule effective 7 May 2026, which extended each by one year — the first from 11 May 2026, the second from 10 May 2027. Anything published before May 2026 that gives a dental practice a 2026 deadline is quoting the superseded date.

The threshold counts employees of the recipient practice. A single-location dental office is frequently under fifteen and lands on 10 May 2028; a group practice, a multi-site owner or a DSO-supported group frequently is not, and lands on 11 May 2027. This is worth settling before scoping anything, because it is the difference between having roughly nine months and having roughly twenty-one. It is also the single fact most often stated wrong for dental readers, because summaries written for hospitals quote the fifteen-plus date and stop.

One caution on the later date: the extension deferred the work, it did not shrink it. HHS scored the extension as giving up more annualised benefit than it saved in cost, which is not the shape of a department preparing to withdraw a requirement.

Which rule actually carries the obligation

Section 1557 is the reason a dental practice searches for this, but it is not where the dates live. Its own technology provision at 45 CFR 92.204 requires health programs provided through websites and mobile applications to comply with section 504 — and sets no compliance date and names no WCAG version. The operative text is 45 CFR 84.84(b)(1), which requires conformance to the Level A and Level AA success criteria of WCAG 2.1.

Two consequences for a practice buying this work. A proposal written against WCAG 2.0 Level AA is written against a superseded version of the guidelines and does not meet the rule. A proposal written against WCAG 2.2 is selling more than the rule asks for, which may be fine but should be a decision rather than a surprise. Where the dates sit in the regulations, and who counts as a recipient sets this out in full.

What in a dental practice is actually in scope

The surfaces that catch dental practices are rarely the homepage. In rough order of how often they fail:

• New-patient intake and health-history forms, almost always PDFs produced from a scan or a word processor, almost never tagged. Downloadable by anyone, so no exception reaches them.
• Online appointment booking — usually a third-party widget embedded in the site. Embedded under a contract, which is precisely the arrangement 84.84(b)(1) reaches: content the practice “provides or makes available, directly or through contractual, licensing, or other arrangements.”
• The patient portal, licensed from the practice management vendor. Also the practice’s obligation, and the one it has least direct control over — who is responsible for making a patient portal accessible covers the vendor conversation this requires.
• Financial policy, insurance and post-operative instruction PDFs — general documents, not individual records, so fully in scope.
• Treatment and procedure videos, where captions and audio description are the usual failures.

What sits outside is narrower than practices hope. 45 CFR 84.85(d) excepts conventional electronic documents that are both about a specific individual, their property or their account and password-protected or otherwise secured. An individual treatment plan, radiograph or statement behind a patient’s portal login meets both halves and is excepted. The blank intake form, the financial policy and the portal interface delivering those records meet neither.

Do you need a lawyer or a vendor?

Both questions are real and they are not the same question. The American Dental Association is explicit that this area of law is still developing and that a practice’s obligations may vary by jurisdiction, and it tells practices to consult a qualified attorney — that is sound advice for the coverage question. Law firms publishing in this area get the regulatory read right; Holland & Knight’s April 2026 alert states the WCAG 2.1 Level A and AA standard and both compliance dates accurately.

What a legal memo is not is evidence of conformance. Nobody’s counsel opens the intake PDF and checks whether it has a tag tree, tests the booking widget with a screen reader, or produces a dated record of what was examined. Those are different trades. A practice that has an opinion about its risk and no record of its surfaces has done the first half of the work twice.

Where CivicBinder Health fits

The binder tests a practice’s website, patient portal and patient-facing documents against WCAG 2.1 Levels A and AA, records what was tested and what was found, and gives remediation instructions written for the intake forms, policy PDFs and page templates the practice actually has — dated and attributable, so conformance is evidenced rather than asserted.

Flat fees: $299 for a single practice site, $499 covering website, portal and documents, and $19/month for ongoing monitoring. Request a free scan to see where you stand — public surfaces only, no patient data.

If you are still choosing who does the work, what five healthcare accessibility vendors publish as prices sets the per-page, per-month and flat-fee units side by side.

The American Dental Association’s Section 1557 information-and-technology guidance and Holland & Knight’s April 2026 alert were both read on 9 August 2026. The compliance dates and the 7 May 2026 effective date were verified the same day against the published text of the interim final rule (91 FR, doc. 2026-09266). The text of 45 CFR 84.84, 84.85 and 92.204 was verified against the 1 July 2026 codified edition through the eCFR versioner API. Nothing here is legal advice.