What the rule actually says
Section 504 of the Rehabilitation Act of 1973 has always barred disability discrimination by recipients of federal financial assistance. What changed in May 2024 is specificity: HHS’s final rule, “Discrimination on the Basis of Disability in Health and Human Service Programs or Activities,” names an exact technical standard for digital accessibility — WCAG 2.1 Level AA— and attaches hard deadlines to it. For the first time, “is my website compliant?” has a yes/no answer a regulator can test.
Who is covered, and by when
| Practice size | Deadline | Status as of mid-2026 |
|---|---|---|
| 15 or more employees | May 11, 2026 | Passed — covered practices not yet conforming are out of compliance now |
| Fewer than 15 employees | May 11, 2027 | Months remaining — enough time to audit and remediate, tight if you wait |
The trigger is federal financial assistance from HHS. For a dental practice, the common paths are Medicaid (including state-administered programs), CHIP, and participation in Medicare programs constituting federal financial assistance. If any of those describe your practice, the rule reaches you — practice size only changes the date, not the obligation. Cash-only and purely private-insurance practices may fall outside Section 504, but remain fully exposed under ADA Title III, which has no funding trigger at all.
What "conform by the deadline" means in practice
The rule covers your web content and any mobile apps patients use — the marketing site, online booking, patient intake forms, the payment portal. Conformance means meeting all 50 Level A and AA success criteria of WCAG 2.1 on those surfaces. For a typical dental site the real-world work breaks down as:
- Find the violations — a multi-engine automated audit inventories the programmatically detectable failures (most of what regulators’ and plaintiffs’ tools check).
- Fix them at the code level — alt text, contrast, labels, keyboard access, focus indicators. Template-level fixes usually clear violations site-wide at once.
- Document everything — dated audit reports and remediation records are your good-faith evidence for OCR or a court.
- Keep it fixed — every content update can regress; periodic re-scans catch new violations before a complaint does.
Why this is different from the ADA risk you already had
ADA Title III exposure is lawsuit-driven: a plaintiff finds barriers, sends a demand letter or files suit, and the typical resolution is a $4,000–$15,000 settlement plus your legal fees. Section 504 adds a regulator to the picture. An OCR complaint costs a patient nothing to file, triggers an investigation you must respond to, and carries the ultimate lever of federal funding eligibility. The two regimes share one convenient fact: they measure the same standard. Work that gets you to WCAG 2.1 AA discharges both at once.