Section 508 of the Rehabilitation Act
Section 508 requires federal agencies to make their electronic and information technology (EIT) accessible to people with disabilities, both federal employees and members of the public. The 2018 refresh aligned requirements with WCAG 2.0 Level AA and introduced the Voluntary Product Accessibility Template (VPAT) as a standard procurement tool.
What the law requires
Section 508, added to the Rehabilitation Act in 1998, requires federal agencies to develop, procure, maintain, and use electronic and information technology (EIT) that is accessible to people with disabilities — including both federal employees with disabilities and members of the public seeking government services.
The law applies to all federal agencies and has significant downstream effects: any company selling technology products or services to the federal government must demonstrate their products meet Section 508 standards. This makes Section 508 one of the most powerful market drivers for accessible technology in the United States.
The 2018 Standards Refresh was a landmark update. The US Access Board issued revised standards that:
- Adopted WCAG 2.0 Level AA as the baseline for web content
- Introduced new standards for software, hardware, and support documentation
- Added the concept of ICT (Information and Communications Technology), a broader term than EIT
- Referenced EN 301 549, the European accessibility standard, encouraging harmonization
VPATs (Voluntary Product Accessibility Templates) are standardized documents that technology vendors use to document how their products conform to Section 508 standards. They are now a routine part of federal procurement. The current version (VPAT 2.x) covers Section 508, WCAG 2.x, and EN 301 549. When shopping for assistive technology or software, looking for a completed VPAT is a useful starting point for assessing accessibility claims.
Who it protects
Federal employees with disabilities using government IT systems, and members of the public accessing federal websites, apps, and digital services. Section 508 covers a wide range of content: websites, software, hardware (computers, printers, kiosks), telecommunications, multimedia, and self-contained closed products.
Who must comply
All federal executive agencies. Section 508 does not directly apply to private sector companies, state governments, or federally funded (but non-federal) entities — though those entities may be covered by the ADA or Section 504.
What it does NOT cover (common misunderstandings)
Section 508 does not apply to private companies unless they are selling to the federal government. A retail website has no direct Section 508 obligation (though it may have ADA obligations).
Section 508 does not apply to national security systems or systems used by intelligence agencies (with some exceptions).
Having a VPAT does not mean a product is accessible — it only means the vendor has documented their conformance claims. Always review the VPAT carefully; a VPAT that shows "Does Not Support" for key criteria is a red flag.
How to enforce your rights
Federal employees can file a complaint with their agency's Section 508 coordinator or with the Equal Employment Opportunity Commission. Members of the public can file a complaint with the relevant federal agency or with the Department of Justice. Courts have allowed private lawsuits in some cases.
The US Access Board and General Services Administration (GSA) maintain guidance and training resources at section508.gov.
Recent updates
GSA's Section508.gov continues to evolve its guidance to align with WCAG 2.1 and 2.2, even though the formal legal standard is still WCAG 2.0 AA. Many agencies voluntarily target WCAG 2.1 AA. The Biden administration's emphasis on digital equity led to renewed focus on Section 508 compliance across agencies. WCAG 3.0 is under development and may eventually prompt another standards refresh.