What Does 508 Compliant Mean? Standards, Scope, and ADA Differences

Being 508 compliant means a piece of technology meets the accessibility standards set by Section 508 of the Rehabilitation Act, so a person with a visual, hearing, or motor disability can use it on the same footing as anyone else.1Office of the Law Revision Counsel. 29 US Code 794d – Electronic and Information Technology Congress amended Section 508 in 1998 to require every federal agency to make its electronic and information technology accessible to employees and members of the public with disabilities, and the label “508 compliant” is the shorthand for a product that satisfies those requirements.2Section508.gov. IT Accessibility Laws and Policies

The Standards a Product Has to Meet

The rulebook is the Revised 508 Standards, published by the U.S. Access Board in 2017. Those standards formally adopt the Web Content Accessibility Guidelines (WCAG) version 2.0 at Level A and Level AA, an internationally recognized benchmark from the World Wide Web Consortium.2Section508.gov. IT Accessibility Laws and Policies WCAG 2.0 remains the version formally referenced in the regulation, even though the W3C has since released WCAG 2.1 and 2.2.

WCAG groups its requirements under four principles: content must be perceivable, operable, understandable, and robust. In practical terms, calling a product 508 compliant means it clears testable criteria like these:

These criteria are pass/fail, not matters of design preference. A product either meets them or it doesn’t.

Who the Rule Applies To

Section 508 reaches every federal department and agency, including the U.S. Postal Service, whenever it develops, buys, maintains, or uses information and communication technology.1Office of the Law Revision Counsel. 29 US Code 794d – Electronic and Information Technology That covers the executive branch, the judicial branch, and independent agencies.

Private companies get pulled in through federal contracts. A vendor selling technology to a federal agency must deliver products that conform to the Revised 508 Standards, and typical contract language also bars the vendor from reducing accessibility during installation, configuration, or maintenance.7Acquisition.GOV. Department of Labor Acquisition Regulation 2952.239-70 – Section 508 Requirements8Section508.gov. Define Accessibility Criteria in Contracts Accessibility is a contract deliverable.

Internal systems count too. Federal intranets, employee tools, and applications that live behind the firewall have to be accessible to workers with disabilities, not only public-facing sites.9US EPA. Learn About Section 508 and Digital Accessibility

What Counts as Covered Technology

The law uses a broad category called information and communication technology, or ICT. In practice that takes in:

  • Software and operating systems, including desktop applications, mobile apps, and the platforms they run on
  • Websites and web applications, both public and internal
  • Electronic documents such as PDFs, spreadsheets, and presentations
  • Telecommunications products, including phones, video conferencing tools, and messaging systems
  • Video and multimedia content distributed through federal channels
  • Hardware such as self-service kiosks, printers, desktop computers, and portable devices

The common thread is anything a federal employee or member of the public might need to interact with when dealing with the government digitally.9US EPA. Learn About Section 508 and Digital Accessibility

How Compliance Gets Documented

Vendors show a product is 508 compliant by producing a document called a Voluntary Product Accessibility Template, or VPAT. The Information Technology Industry Council publishes the template, and once a vendor fills it in with actual test results, the completed document is called an Accessibility Conformance Report (ACR).10Section508.gov. Accessibility Conformance Report VPAT Frequently Asked Questions

The current version is VPAT 2.5, released in April 2025. ITI offers four editions covering different jurisdictions; for federal procurement, vendors use the 508-specific edition or the international edition, which covers Section 508, EU standards, and WCAG together.11Information Technology Industry Council. VPAT

Filling out the report requires testing the product against every applicable WCAG Level A and AA criterion. For each one, the vendor assigns one of four ratings: Supports, Partially Supports, Does Not Support, or Not Applicable, and adds specific explanation.10Section508.gov. Accessibility Conformance Report VPAT Frequently Asked Questions A “Partially Supports” rating with no detail is not useful. The ACR also has to identify the exact product name and version tested; a report for version 3.1 doesn’t cover version 4.0.

When the Standard Doesn’t Fully Apply

508 compliance isn’t absolute. Federal acquisition rules recognize several situations where the standard is relaxed or doesn’t apply:

  • National security systems, meaning technology used for intelligence, cryptologic activities, military command and control, or weapons systems, are exempt. Routine administrative tools like payroll and logistics software inside defense agencies are not.12Section508.gov. Determine ICT Exceptions
  • An agency can claim undue burden if full compliance would impose significant difficulty or expense relative to the resources of the specific program. The claim doesn’t erase the obligation; the agency still has to provide alternative access.13Section508.gov. Update and Maintain Agency Policy
  • Compliance is required only up to the point that meeting the standard would fundamentally alter the technology.14Acquisition.GOV. Subpart 39.2 – Information and Communication Technology
  • When no commercially available product fully meets the standards, the agency must buy the one that comes closest.14Acquisition.GOV. Subpart 39.2 – Information and Communication Technology
  • Technology a contractor acquires only for its own internal use to perform a federal contract, rather than delivering to the agency, is excluded.14Acquisition.GOV. Subpart 39.2 – Information and Communication Technology
  • Hardware controls in maintenance-only spaces accessed by service technicians are excluded.

Safe Harbor for Older Technology

Technology that already complied with the original pre-2017 Section 508 standards doesn’t have to be retrofitted to the Revised 508 Standards, as long as it hasn’t been altered. The safe harbor applies component by component. Update one part and that part must meet the newer standards, while untouched components stay as they are. Technology that never met the original standards gets no safe harbor.15Section508.gov. Revised 508 Standards, Safe Harbor and FAR Update

What Happens When Something Isn’t Compliant

Any person with a disability can file a complaint alleging that a federal agency’s technology violates Section 508. The complaint goes to the agency accused of noncompliance, which handles it using the same procedures it uses for discrimination complaints under Section 504 of the Rehabilitation Act. If the administrative process doesn’t resolve the issue, the individual can file suit in federal court.16Office of the Law Revision Counsel. 29 USC 794d Electronic and Information Technology

Remedies against agencies are limited to injunctive and declaratory relief. A court can order the agency to fix the problem but cannot award monetary damages, because Congress did not waive federal sovereign immunity for damages under these provisions.

For vendors, enforcement runs through the contract. Contracting officers can withhold payments, issue stop-work orders, or terminate the contract for cause when a product doesn’t meet the accessibility requirements the vendor agreed to. In serious cases, agencies can pursue reprocurement costs and refer vendors for suspension or debarment. The most common practical consequence, though, is losing the deal: an incomplete or evasive ACR can disqualify a bid before price or technical merit even get evaluated.

How This Differs From ADA Compliance

Section 508 is a federal procurement law aimed at federal agencies and their contractors. The Americans with Disabilities Act is a separate civil rights law, and its Title II applies to state and local governments.17ADA.gov. Fact Sheet New Rule on the Accessibility of Web Content Meeting Section 508 does not by itself satisfy ADA obligations, and the reverse is also true.

Both frameworks now point to WCAG, but at different versions. Section 508 formally incorporates WCAG 2.0 Level A and AA. The Department of Justice’s April 2024 final rule under ADA Title II adopts WCAG 2.1 Level AA for state and local government websites.17ADA.gov. Fact Sheet New Rule on the Accessibility of Web Content Many federal agencies now treat WCAG 2.1 as the practical target even though the 508 regulation still references 2.0. If you sell to both federal and state or local governments, you need to track both standards.