Back to Frameworks

Section 508 - ICT Accessibility (Revised)

Self-Assess
United States (Federal agencies)
vRevised 508 Standards, 36 CFR Part 1194 (final rule 18 January 2017, corrected 22 January 2018; eCFR current to 2026-09-23); WCAG 2.0 Level A and AA by reference
5 domains
89 controls

The Revised Section 508 Standards (36 CFR Part 1194): accessibility requirements for information and communication technology that Federal agencies procure, develop, maintain or use, covering scoping and exceptions, functional performance criteria, hardware, software (with WCAG 2.0 Level A and AA incorporated), and support documentation and services. 89 leaves read against the eCFR text current to 2026-09-23.

Verified

Section 508 - ICT Accessibility (Revised) is a compliance framework from United States (Federal agencies) with 5 domains and 89 controls that map to 69 other frameworks. The largest domains are Chapter 4: Hardware – Section 508 - ICT Accessibility (Revised) (30 controls), Chapter 5: Software – Section 508 - ICT Accessibility (Revised) (27 controls), 508 Chapter 2: Scoping requirements (Appendix A) – Section 508 - ICT Accessibility (Revised) (18 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (5)

508 Chapter 2: Scoping requirements (Appendix A) – Section 508 - ICT Accessibility (Revised)

18 controls
Controls in the 508 Chapter 2: Scoping requirements (Appendix A) – Section 508 - ICT Accessibility (Revised) domain of Section 508 - ICT Accessibility (Revised): 18 controls
CodeTitle
section-508-ict-accessibility-revised::E201.1E201.1 ICT procured, developed, maintained or used conforms
section-508-ict-accessibility-revised::E202.2E202.2 Legacy ICT safe harbour
section-508-ict-accessibility-revised::E202.3E202.3 National security systems exception
section-508-ict-accessibility-revised::E202.4E202.4 ICT incidental to a contract
section-508-ict-accessibility-revised::E202.5E202.5 Maintenance or monitoring spaces
section-508-ict-accessibility-revised::E202.6E202.6 Undue burden or fundamental alteration: determination, documentation and alternative means
section-508-ict-accessibility-revised::E202.7E202.7 Best meets: documentation and alternative means
section-508-ict-accessibility-revised::E203.1E203.1 Access to all functionality, comparable access
section-508-ict-accessibility-revised::E203.2E203.2 Identify the needs of users with disabilities
section-508-ict-accessibility-revised::E204.1E204.1 Functional performance criteria where technical requirements are silent
section-508-ict-accessibility-revised::E205.2E205.2 Public facing electronic content conforms
section-508-ict-accessibility-revised::E205.3E205.3 Agency official communications conform
section-508-ict-accessibility-revised::E205.4E205.4 WCAG 2.0 Level A and AA for electronic content
section-508-ict-accessibility-revised::E206.1E206.1 Hardware conforms to Chapter 4
section-508-ict-accessibility-revised::E207.1E207.1 Software conforms to E207 and Chapter 5
section-508-ict-accessibility-revised::E207.2E207.2 WCAG 2.0 A and AA for software user interfaces and content
section-508-ict-accessibility-revised::E207.3E207.3 Complete processes for non-web software
section-508-ict-accessibility-revised::E208.1E208.1 Support documentation and services conform to Chapter 6

Chapter 3: Functional performance criteria – Section 508 - ICT Accessibility (Revised)

9 controls
Controls in the Chapter 3: Functional performance criteria – Section 508 - ICT Accessibility (Revised) domain of Section 508 - ICT Accessibility (Revised): 9 controls
CodeTitle
section-508-ict-accessibility-revised::302.1302.1 Without vision
section-508-ict-accessibility-revised::302.2302.2 With limited vision
section-508-ict-accessibility-revised::302.3302.3 Without perception of colour
section-508-ict-accessibility-revised::302.4302.4 Without hearing
section-508-ict-accessibility-revised::302.5302.5 With limited hearing
section-508-ict-accessibility-revised::302.6302.6 Without speech
section-508-ict-accessibility-revised::302.7302.7 With limited manipulation
section-508-ict-accessibility-revised::302.8302.8 With limited reach and strength
section-508-ict-accessibility-revised::302.9302.9 With limited language, cognitive and learning abilities

Chapter 4: Hardware – Section 508 - ICT Accessibility (Revised)

30 controls
Controls in the Chapter 4: Hardware – Section 508 - ICT Accessibility (Revised) domain of Section 508 - ICT Accessibility (Revised): 30 controls
CodeTitle
section-508-ict-accessibility-revised::402.1402.1 Closed functionality operable without attaching assistive technology
section-508-ict-accessibility-revised::402.2402.2 Speech output for closed ICT with display screens
section-508-ict-accessibility-revised::402.3402.3 Volume control and amplification
section-508-ict-accessibility-revised::402.4402.4 Characters on display screens
section-508-ict-accessibility-revised::402.5402.5 Characters on variable message signs
section-508-ict-accessibility-revised::403.1403.1 Biometrics not the only means
section-508-ict-accessibility-revised::404.1404.1 Preservation of accessibility information
section-508-ict-accessibility-revised::405.1405.1 Privacy
section-508-ict-accessibility-revised::406.1406.1 Standard connections
section-508-ict-accessibility-revised::407.2407.2 Contrast of keys and controls
section-508-ict-accessibility-revised::407.3407.3 Tactilely discernible input controls with standard layouts
section-508-ict-accessibility-revised::407.4407.4 Key repeat delay
section-508-ict-accessibility-revised::407.5407.5 Timed response
section-508-ict-accessibility-revised::407.6407.6 One-hand operation and activation force
section-508-ict-accessibility-revised::407.7407.7 Tickets, fare cards and keycards
section-508-ict-accessibility-revised::407.8407.8 Reach height and depth of stationary ICT
section-508-ict-accessibility-revised::408.2408.2 Display screen visibility
section-508-ict-accessibility-revised::408.3408.3 Flashing
section-508-ict-accessibility-revised::409.1409.1 Status indicators discernible visually and by touch or sound
section-508-ict-accessibility-revised::410.1410.1 Colour coding not the only means
section-508-ict-accessibility-revised::411.1411.1 Audible signals not the only means
section-508-ict-accessibility-revised::412.2412.2 Volume gain
section-508-ict-accessibility-revised::412.3412.3 Interference reduction and magnetic coupling
section-508-ict-accessibility-revised::412.4412.4 Digital encoding of speech
section-508-ict-accessibility-revised::412.6412.6 Caller ID visible and audible
section-508-ict-accessibility-revised::412.7412.7 Video communication quality for sign language
section-508-ict-accessibility-revised::412.8412.8 Legacy TTY support
section-508-ict-accessibility-revised::413.1413.1 Closed caption processing
section-508-ict-accessibility-revised::414.1414.1 Audio description processing
section-508-ict-accessibility-revised::415.1415.1 User controls for captions and audio descriptions

Chapter 5: Software – Section 508 - ICT Accessibility (Revised)

27 controls
Controls in the Chapter 5: Software – Section 508 - ICT Accessibility (Revised) domain of Section 508 - ICT Accessibility (Revised): 27 controls
CodeTitle
section-508-ict-accessibility-revised::501.1501.1 Web applications without platform access conform through WCAG
section-508-ict-accessibility-revised::502.2.1502.2.1 User control of platform accessibility features
section-508-ict-accessibility-revised::502.2.2502.2.2 No disruption of platform accessibility features
section-508-ict-accessibility-revised::502.3502.3 Accessibility services of platforms and platform tools
section-508-ict-accessibility-revised::502.3.1502.3.1 Object information programmatically determinable
section-508-ict-accessibility-revised::502.3.10502.3.10 List of actions
section-508-ict-accessibility-revised::502.3.11502.3.11 Actions on objects
section-508-ict-accessibility-revised::502.3.12502.3.12 Focus cursor
section-508-ict-accessibility-revised::502.3.13502.3.13 Modification of focus cursor
section-508-ict-accessibility-revised::502.3.14502.3.14 Event notification
section-508-ict-accessibility-revised::502.3.2502.3.2 Modification of object information
section-508-ict-accessibility-revised::502.3.3502.3.3 Rows, columns and headers
section-508-ict-accessibility-revised::502.3.4502.3.4 Values
section-508-ict-accessibility-revised::502.3.5502.3.5 Modification of values
section-508-ict-accessibility-revised::502.3.6502.3.6 Label relationships
section-508-ict-accessibility-revised::502.3.7502.3.7 Hierarchical relationships
section-508-ict-accessibility-revised::502.3.8502.3.8 Text
section-508-ict-accessibility-revised::502.3.9502.3.9 Modification of text
section-508-ict-accessibility-revised::502.4502.4 Platform accessibility features per ANSI/HFES 200.2
section-508-ict-accessibility-revised::503.2503.2 User preferences from platform settings
section-508-ict-accessibility-revised::503.3503.3 Alternative user interfaces use accessibility services
section-508-ict-accessibility-revised::503.4503.4 Caption and audio description controls in software
section-508-ict-accessibility-revised::504.2504.2 Content creation or editing that conforms to WCAG 2.0
section-508-ict-accessibility-revised::504.2.1504.2.1 Preserve accessibility information in format conversion
section-508-ict-accessibility-revised::504.2.2504.2.2 PDF/UA export
section-508-ict-accessibility-revised::504.3504.3 Prompts for accessible content
section-508-ict-accessibility-revised::504.4504.4 Accessible templates

Chapter 6: Support documentation and services – Section 508 - ICT Accessibility (Revised)

5 controls
Controls in the Chapter 6: Support documentation and services – Section 508 - ICT Accessibility (Revised) domain of Section 508 - ICT Accessibility (Revised): 5 controls
CodeTitle
section-508-ict-accessibility-revised::602.2602.2 Documentation of accessibility and compatibility features
section-508-ict-accessibility-revised::602.3602.3 Electronic support documentation conforms to WCAG 2.0
section-508-ict-accessibility-revised::602.4602.4 Alternate formats for non-electronic documentation
section-508-ict-accessibility-revised::603.2603.2 Support services give accessibility information
section-508-ict-accessibility-revised::603.3603.3 Accommodation of communication needs

Your Compliance Coverage

If you comply with Section 508 - ICT Accessibility (Revised), you already cover:

US ADA Title II - Web and Mobile App Accessibility Rule (28 CFR Part 35 Subpart H)

4%

5 controls mapped

Compare →

EN 301 549 - Accessibility requirements for ICT products and services

3%

3 controls mapped

Compare →

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)

2%

2 controls mapped

Compare →

+ 66 more: Virginia CDPA (2%), Vietnam PDPD (2%)

See all 69 mapped frameworks ↓

Maps to 69 other frameworks

119 total controls
US ADA Title II - Web and Mobile App Accessibility Rule (28 CFR Part 35 Subpart H)
5 source controls mapped|5 target controls covered
4%
EN 301 549 - Accessibility requirements for ICT products and services
3 source controls mapped|6 target controls covered
3%
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)
2 source controls mapped|1 target controls covered
2%
Virginia CDPA
2 source controls mapped|1 target controls covered
2%
Vietnam PDPD
2 source controls mapped|1 target controls covered
2%
Vermont Data Privacy and Online Surveillance Act
2 source controls mapped|1 target controls covered
2%
Uruguay DPL
2 source controls mapped|1 target controls covered
2%
UK GDPR (UK General Data Protection Regulation)
2 source controls mapped|1 target controls covered
2%
Turkey KVKK
2 source controls mapped|1 target controls covered
2%
Texas Data Privacy and Security Act (TDPSA)
2 source controls mapped|1 target controls covered
2%
Taiwan PDPA
2 source controls mapped|1 target controls covered
2%
Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)
2 source controls mapped|1 target controls covered
2%
Qatar DPL
2 source controls mapped|1 target controls covered
2%
Privacy Act 2020
2 source controls mapped|1 target controls covered
2%
Privacy Act 1988 (Australia)
2 source controls mapped|1 target controls covered
2%
POPIA
2 source controls mapped|1 target controls covered
2%
Peru DPL
2 source controls mapped|1 target controls covered
2%
Personal Data Act (personopplysningsloven)
2 source controls mapped|1 target controls covered
2%
PDPA Thailand
2 source controls mapped|1 target controls covered
2%
PDPA Singapore
2 source controls mapped|1 target controls covered
2%
Pakistan Personal Data Protection Bill 2023
2 source controls mapped|1 target controls covered
2%
Oregon Consumer Privacy Act
2 source controls mapped|1 target controls covered
2%
NRF Cybersecurity and Data Privacy Framework (National Retail Federation)
2 source controls mapped|1 target controls covered
2%
NIST SP 800-122
2 source controls mapped|1 target controls covered
2%
NIST Privacy Framework
2 source controls mapped|1 target controls covered
2%
Nigeria Data Protection Regulation (NDPR)
2 source controls mapped|1 target controls covered
2%
Nigeria Data Protection Act 2023 (NDPA)
2 source controls mapped|2 target controls covered
2%
Nebraska Data Privacy Act
2 source controls mapped|2 target controls covered
2%
New Jersey Data Privacy Act
2 source controls mapped|1 target controls covered
2%
New Hampshire Data Privacy Act
2 source controls mapped|1 target controls covered
2%
Montana Consumer Data Privacy Act
2 source controls mapped|1 target controls covered
2%
Minnesota Consumer Data Privacy Act
2 source controls mapped|1 target controls covered
2%
Mexico LFPDPPP
2 source controls mapped|1 target controls covered
2%
Mauritius DPA
2 source controls mapped|1 target controls covered
2%
Maryland Online Data Privacy Act of 2024
2 source controls mapped|1 target controls covered
2%
Malaysia PDPA 2010
2 source controls mapped|1 target controls covered
2%
Liechtenstein DPA
2 source controls mapped|1 target controls covered
2%
LGPD
2 source controls mapped|1 target controls covered
2%
Ecuador Ley Orgánica de Protección de Datos Personales (LOPDP)
2 source controls mapped|1 target controls covered
2%
Law No. 172-13 on the Protection of Personal Data
2 source controls mapped|1 target controls covered
2%
Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018)
2 source controls mapped|1 target controls covered
2%
South Korea PIPA
2 source controls mapped|1 target controls covered
2%
Kenya Data Protection Act
2 source controls mapped|1 target controls covered
2%
Kentucky Consumer Data Protection Act
2 source controls mapped|1 target controls covered
2%
Jamaica Data Protection Act 2020
2 source controls mapped|1 target controls covered
2%
Iowa Consumer Data Protection Act
2 source controls mapped|1 target controls covered
2%
Indonesia PDP Law
2 source controls mapped|1 target controls covered
2%
Indiana Consumer Data Protection Act
2 source controls mapped|1 target controls covered
2%
India DPDP Act
2 source controls mapped|1 target controls covered
2%
India Account Aggregator Framework (RBI)
2 source controls mapped|1 target controls covered
2%
Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018)
2 source controls mapped|1 target controls covered
2%
HITECH Act
2 source controls mapped|2 target controls covered
2%
Family Educational Rights and Privacy Act (FERPA)
2 source controls mapped|1 target controls covered
2%
Saudi Arabia PDPL
2 source controls mapped|1 target controls covered
2%
Bahrain PDPL
2 source controls mapped|1 target controls covered
2%
UK Age Appropriate Design Code (Children's Code)
2 source controls mapped|1 target controls covered
2%
ISO 8000 - Data Quality
2 source controls mapped|1 target controls covered
2%
Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023)
2 source controls mapped|2 target controls covered
2%
COSO Internal Control - Integrated Framework (2013)
2 source controls mapped|2 target controls covered
2%
DAMA-DMBOK2 - Data Management Body of Knowledge (2nd Edition)
2 source controls mapped|1 target controls covered
2%
APPI
2 source controls mapped|1 target controls covered
2%
WHO Global Strategy on Digital Health 2020-2025
2 source controls mapped|2 target controls covered
2%
Barbados Data Protection Act 2019
2 source controls mapped|1 target controls covered
2%
UK Open Banking Standard
2 source controls mapped|1 target controls covered
2%
Singapore Government Instruction Manual on ICT&SS Management (IM8)
2 source controls mapped|1 target controls covered
2%
GDPR
2 source controls mapped|1 target controls covered
2%
Authorised Economic Operator (AEO) Programmes - Global Standards
2 source controls mapped|1 target controls covered
2%
US Consumer Product Safety Act (CPSC) Manufacturer and Importer Duties
2 source controls mapped|1 target controls covered
2%
Azure Security Benchmark
2 source controls mapped|1 target controls covered
2%
Compare Section 508 - ICT Accessibility (Revised) with US ADA Title II - Web and Mobile App Accessibility Rule (28 CFR Part 35 Subpart H)

Coverage is not the same as your position

This page shows what Section 508 - ICT Accessibility (Revised) overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.

The Compliance Position Diagnostic, $5,000 fixed, ten business days

What is Section 508 - ICT Accessibility (Revised) and who does it apply to?

Section 508 - ICT Accessibility (Revised) is a compliance framework from United States (Federal agencies) with 5 domains and 89 controls. The Revised Section 508 Standards (36 CFR Part 1194): accessibility requirements for information and communication technology that Federal agencies procure, develop, maintain or use, covering scoping and exceptions, functional performance criteria, hardware, software (with WCAG 2.0 Level A and AA incorporated), and support documentation and services. 89 leaves read against the eCFR text current to 2026-09-23. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does Section 508 - ICT Accessibility (Revised) actually require?

Section 508 - ICT Accessibility (Revised) has 89 controls organised across 5 domains. The largest domains are Chapter 4: Hardware – Section 508 - ICT Accessibility (Revised) (30 controls), Chapter 5: Software – Section 508 - ICT Accessibility (Revised) (27 controls), 508 Chapter 2: Scoping requirements (Appendix A) – Section 508 - ICT Accessibility (Revised) (18 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of Section 508 - ICT Accessibility (Revised) do I already cover?

Section 508 - ICT Accessibility (Revised) maps to 69 other compliance frameworks. The top mapping partners are US ADA Title II - Web and Mobile App Accessibility Rule (28 CFR Part 35 Subpart H) (4% coverage), EN 301 549 - Accessibility requirements for ICT products and services (3% coverage), Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) (2% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I implement Section 508 - ICT Accessibility (Revised)?

Start your Section 508 - ICT Accessibility (Revised) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Section 508 - ICT Accessibility (Revised) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 89 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,120 frameworks.

Get Started Free →

Free forever, no credit card required