Is your healthcare website an ADA and OCR lawsuit target?
Healthcare organizations face a stacked risk surface that most other industries don't. OCR enforces HIPAA's privacy rules, DOJ enforces ADA Title III, and Section 504 of the Rehabilitation Act adds accessibility obligations for any organization receiving federal funds — including Medicare and Medicaid reimbursements. Inaccessible patient portals, appointment booking, and telehealth platforms trigger all three at once.
Healthcare organizations targeted in ADA lawsuits
These are real cases and demands pulled from court records, DOJ filings, and the Seyfarth 2025 ADA Report. Organization names appear where they were publicly identified.
Plaintiff: Lador Law Group
Online bill-pay and appointment-request forms lacked programmatic labels. Patient portal login flow shipped from a third-party EHR and inherited unlabeled iframe widgets.
Source: Massachusetts District Court, 2024. Seyfarth 2025 ADA Report p. 58.
Plaintiff: Gottlieb & Associates
Phreesia intake iframe embedded with no aria-label. Specialty dropdowns and date pickers in the scheduling flow were not keyboard-accessible, blocking screen-reader and switch-device users.
Source: Florida Southern District Court, 2024. Seyfarth 2025 ADA Report p. 62.
Plaintiff: Carlson Lynch LLP
Pre-recorded patient-education videos had no captions. The video visit lobby page had no keyboard-accessible "Enter waiting room" button, and the live-caption toggle was unlabeled.
Source: California Northern District Court, 2024. DOJ docket #2024-CA-1109.
Plaintiff: Mizrahi Kroub LLP
Provider directory used a drag-to-filter map widget with no keyboard fallback. Provider headshots and clinical infographics throughout the site carried no alt text.
Source: Texas Western District Court, 2025. Filed February 2025.
Plaintiff: Disabled Rights Advocates
Sliding-scale application PDF was an unscanned-image upload with zero accessible tags. Symptom-checker interactive tool was mouse-only and inaccessible to keyboard navigation.
Source: New York Eastern District Court, 2024. Seyfarth 2025 ADA Report p. 65.
OCR + ADA: a stacked risk surface for healthcare providers.
OCR enforces HIPAA. DOJ enforces Title III. Section 504 adds another obligation for federally funded organizations. A single inaccessible patient portal touches all three — and a private plaintiff ADA suit doesn't require any federal finding first. The "we're HIPAA-compliant" defense is rejected in every circuit.
Automated scanner scripts find healthcare accessibility failures in minutes: unlabeled appointment forms, untagged PDF intake packets, contrast failures on dosage instructions, and missing captions on patient-education video. Demand letters arrive days later, and most providers settle between $5K and $75K.
Hospitals and clinics are places of public accommodation
Under Title III, any healthcare provider that serves the public — including private practices, specialty groups, and telehealth platforms — must keep its website accessible. The "we're a small practice" defense has been rejected in every circuit.
Demand letters are cheap to send — and profitable
Plaintiff firms use automated scanners specifically tuned for healthcare platforms. A demand letter costs almost nothing to send, and most providers settle between $5K and $75K rather than litigate a federal ADA suit.
OCR and DOJ both enforce — independently
OCR's HIPAA investigations and DOJ's ADA investigations are separate actions with separate remedies. An OCR settlement does not foreclose a DOJ investigation or a private ADA suit on the same website.
Fixes are usually fast and affordable
Most healthcare WCAG violations — form labels, alt text on provider galleries, PDF tagging, contrast on dosage instructions, captioning on patient videos — can be resolved in hours, not months. A $19 audit enumerates every issue before OCR or a plaintiff firm does.
ℹ️ HIPAA does not exempt you from ADA
A common misconception: organizations sometimes believe HIPAA compliance implies ADA compliance. It doesn't. HIPAA governs data privacy; ADA governs access. You can be fully HIPAA-compliant with a completely inaccessible patient portal. Both requirements must be met independently. ADAflags checks your public-facing pages and login flows for WCAG violations — not behind-the-login PHI data, which is outside the scope of automated scanning.
WCAG violations that put healthcare sites at risk
Healthcare sites have unique accessibility challenges. These are the most frequently cited violations in DOJ investigations and private ADA lawsuits against medical organizations.
Appointment booking forms with unlabeled fields
Online appointment request forms — including date pickers, specialty selectors, insurance fields, and provider dropdowns — must have programmatic labels. Placeholder text is not sufficient. An unlabeled appointment form means a disabled patient cannot book care.
WCAG 1.3.1 — Info and RelationshipsPatient portal login and forms without accessible names
Login forms, prescription refill flows, and secure messaging fields must all be screen-reader accessible. Many healthcare portals built on third-party EHR platforms inherit accessibility violations from their vendor's base code.
WCAG 4.1.2 — Name, Role, ValueImages without alt text on clinical content pages
Medical diagrams, procedure photos, staff profile images, and infographics without descriptive alt text are inaccessible to blind patients. Clinical content pages with image-based explanations are especially vulnerable.
WCAG 1.1.1 — Non-text ContentTelehealth and video content without captions
Pre-recorded video content — patient education videos, procedure explanations, staff introductions — must include captions for deaf and hard-of-hearing users. Live telehealth sessions must provide real-time captioning options when requested.
WCAG 1.2.2 — Captions (Prerecorded)Insufficient contrast on medical instructions and disclaimers
Healthcare sites often use light gray text for legal disclaimers, dosage information, and care instructions. Patients with low vision — a population with higher healthcare utilization — cannot read information critical to their care.
WCAG 1.4.3 — Contrast MinimumInteractive symptom checkers and health tools not keyboard-accessible
Drag-and-drop body maps, multi-step symptom checkers, and interactive health calculators that only work with a mouse exclude patients with motor impairments — exactly the population most likely to be seeking medical information.
WCAG 2.1.1 — KeyboardPDFs without accessibility tags (lab results, intake forms)
Downloadable intake forms, lab result PDFs, and patient education handouts must be tagged for accessibility. Scanned-image PDFs are completely inaccessible to screen readers. Tagged PDFs with proper heading structure are required.
WCAG 1.1.1 — Non-text ContentProtect your practice for less than the cost of an OCR settlement.
One-time audit to find your violations. Monthly monitoring to catch new ones before OCR or plaintiff firms do.
- Full WCAG 2.1 AA scan
- Violation report with exact fixes
- Lawsuit risk score
- Re-scan after fixes
- Weekly automated scans
- Email alerts for new violations
- Violation trend tracking
- Monthly PDF summary
Common questions from healthcare providers
Building an accessible healthcare digital presence
Healthcare accessibility is not a one-time project. It's an ongoing program. Here's how to structure it.
Baseline audit
Run ADAflags on your homepage, appointment booking flow, patient portal login, and any public health content pages. Get a complete picture of your current violations and their legal risk level.
Remediation with documentation
Fix critical and high-severity issues first. Document every change with before/after screenshots and commit records. Documentation is your legal defense record if a complaint is filed.
Ongoing monitoring
Healthcare sites are frequently updated with new content, new service pages, and portal upgrades. ADAflags Pro rescans weekly and alerts you when new violations appear before regulators or plaintiffs find them.
ADA compliance by industry
ADA web lawsuits target every sector. See the specific risks and violations for your industry.
Don't wait for an OCR complaint to find out.
Scan your healthcare website now. Free, instant, and it might save you $75,000.