I’ve spent the last several years working directly with business owners who got a demand letter and had no idea their website could even be a legal target. It surprises almost everyone the first time. You built a site, it looks fine, it works fine on your laptop — and then a law firm sends a letter claiming it violates the Americans with Disabilities Act. So let’s talk about what the DOJ actually does here, because most of what circulates online about this topic is either outdated or exaggerated.
How Does The DOJ Enforce ADA Compliance For Websites?
The Department of Justice enforces ADA website compliance mainly through Title II and Title III of the ADA. Title II covers state and local government websites, and the DOJ finalized a rule in April 2024 that sets a hard compliance deadline: large public entities had until April 2026, and smaller ones have until April 2027, to meet WCAG 2.1 Level AA standards. You can read the actual rule text on the DOJ’s web rule page. For Title III, which covers private businesses open to the public, there’s no formal regulation yet specifying a technical standard, but the DOJ has been consistent in its guidance and in settlement agreements for over a decade: websites must be accessible, and WCAG is the benchmark courts and investigators use to measure that. Enforcement happens through investigations triggered by complaints, through DOJ-initiated compliance reviews of government entities, and increasingly through private lawsuits that reference DOJ guidance as the standard of care. The DOJ itself doesn’t sue every noncompliant business — most of the pressure businesses feel comes from private litigation — but its guidance shapes almost every one of those cases.
Why Title II And Title III Get Treated Differently?
This distinction trips people up constantly. Title II applies to public entities — city websites, public transit portals, state agency forms. The 2024 rule gave those entities an actual technical requirement to meet, with real deadlines. Title III applies to private businesses, and that’s where things get murkier. There’s still no formal DOJ regulation naming WCAG as the legal standard for private business websites. Instead, the DOJ has issued guidance documents, like the one on the ADA’s web guidance page, stating that businesses must provide accessible websites under the general nondiscrimination requirements of Title III. Courts have filled in the gap by treating WCAG 2.1 Level AA as the practical measuring stick in settlements and rulings. So even without a hard rule for private businesses, judges are already using WCAG as the reference point, which means treating it as optional is a mistake I see too many business owners make.
What Actually Triggers An Investigation Or Lawsuit?
In my experience, it’s rarely a random audit. It’s almost always a complaint. Someone using a screen reader tries to book an appointment, browse a menu, or fill out a contact form, and it doesn’t work. They file a complaint with the DOJ, or more commonly, they contact a law firm that specializes in these cases. From there, a demand letter shows up, often citing specific WCAG success criteria the site fails — missing alt text, poor color contrast, forms without labels, a checkout flow that can’t be completed using keyboard navigation alone. I’ve reviewed dozens of these letters, and the technical complaints are almost always legitimate. The plaintiffs’ attorneys aren’t guessing. They’re running automated scans and manual tests, and they’re citing real WCAG 2.1 failures.
The Overlay Trap That Keeps Businesses Exposed
One pattern I run into constantly: a business gets a demand letter, panics, and installs one of those accessibility overlay widgets promising instant compliance. I understand the appeal. It’s cheap and it installs in an afternoon. But overlays don’t fix underlying code problems like broken ARIA labels, inaccessible dropdown menus, or missing form field associations. They paste a script on top of the existing site and hope it patches things dynamically. In several cases I’ve watched unfold, businesses using overlays got sued again within months, sometimes by the same firm, because the underlying barriers were still there. I wrote a longer breakdown of why this keeps happening on the overlay problem page, and it’s worth reading before you spend money on one of these tools.
What A Real Compliance Process Looks Like?
What we usually recommend starts with an actual audit — not a five-minute automated scan, but a combination of automated testing and manual review by someone who understands how screen readers, keyboard navigation, and color contrast requirements interact. Automated tools catch maybe 30 to 40 percent of real issues. The rest — logical tab order, meaningful ARIA labels, whether a screen reader user can actually complete a purchase — requires a human to test it. At Acute ADA Compliance, our process runs a full accessibility audit against WCAG 2.1 Level AA criteria, flags every barrier, and gives you a prioritized list to fix rather than a vague compliance score. You can see how the process works in detail on our how it works page, and if you want to check where your site currently stands, our free scanner tool gives you a starting snapshot in minutes.
I’ll also say this plainly: WCAG itself isn’t a static document. The W3C maintains it and updates guidance over time, and the current formal specification is WCAG 2.1, with broader guidance available through the W3C’s accessibility standards page. Businesses that treat compliance as a one-time project instead of ongoing maintenance tend to fall out of compliance within a year, especially after redesigns or new page launches.
If you’re a law firm managing this on behalf of clients, or handling your own multi-location business sites, the volume of pages needing review adds up fast — that’s a common situation for firms we work with, and it’s covered specifically on our page for law firms.
What This Means For Your Business Right Now?
I’d rather be direct than reassuring: if your site hasn’t been audited against WCAG 2.1 Level AA, you’re exposed, regardless of your industry or size. Small businesses get sued just as often as large ones, sometimes more, because plaintiffs’ firms know smaller companies are less likely to have already fixed known issues. Our team has handled this exact situation for clients across different industries, and you can read about our experience and background on our about page, or see what past clients have said in our client reviews.
Pricing for a full audit and remediation plan is laid out clearly on our pricing page, with no hidden overlay upsells. If you want more background reading before making a decision, our blog covers related topics like Section 508 requirements and WCAG conformance levels.
Don’t wait for a demand letter to find out where your site stands. Visit Acute ADA Compliance to get a real audit started, or contact us today to schedule a consultation and walk through your specific risk.
Written by Derrick Tulali — SEO Expert with 9+ Years Experience. Read more about the author.