Physical Therapy & Rehab Clinic Website Accessibility Guide 2026 | ADA, EAA, HIPAA, Online Intake, Exercise Videos, Insurance Verification

Last updated: 2026-05-20

Physical therapy clinics, occupational therapy practices, outpatient rehabilitation centers, sports-medicine and orthopedic-rehabilitation clinics, neurological-rehabilitation clinics serving stroke and traumatic-brain-injury survivors, pediatric-physical-therapy and developmental-therapy clinics serving children with cerebral palsy and developmental delays, geriatric-rehabilitation clinics serving Medicare beneficiaries, hand-therapy clinics, pelvic-floor-physical-therapy clinics, vestibular-rehabilitation clinics serving vertigo and dizziness patients, cardiac-rehabilitation clinics, pulmonary-rehabilitation clinics, multi-specialty rehabilitation hospitals, hospital-affiliated outpatient PT departments, independently-owned single-clinic practices, regional PT chains (Athletico, ATI Physical Therapy, Select Physical Therapy, BenchMark Physical Therapy, Drayer Physical Therapy, Ivy Rehab, FYZICAL, Empower Physical Therapy), and direct-access-state practices where state law allows patients to see a PT without a physician referral—run the bulk of their patient acquisition through a website with online appointment booking, insurance-verification and benefits-eligibility lookup, new-patient intake forms (often 8–20 pages of medical history, current medications, surgical history, functional-limitation assessments, pain-scale ratings, and consent-to-treat), home-exercise-program (HEP) video libraries with hundreds of exercise demonstration videos, patient-portal account access for appointment management and progress notes, telehealth-PT video consultations (rapidly expanded since 2020 under CMS telehealth flexibilities), and direct-access scheduling. That flow is, for the substantial majority of new and returning patients, the only practical way to engage the clinic. The patient population is itself extraordinarily disability-heavy: post-stroke patients with hemianopsia or aphasia, post-amputation patients learning to use prostheses, post-concussion patients with photophobia and screen-sensitivity, low-back-pain patients who cannot sit for long form-completion sessions, frozen-shoulder patients who cannot reach an upper-screen control, Parkinson's patients with tremor affecting fine motor tasks, multiple-sclerosis patients with fatigue limiting session length, and post-surgical patients with limited mobility recovering from total knee or hip replacement. Under controlling ADA Title III case law in every U.S. circuit (the Domino's, Winn-Dixie, and Robles lines of authority) the website is itself a place of public accommodation, and PT/OT clinics are explicitly health-care providers under ADA Title III. The customers who most need accessible PT clinic websites are, by definition, the entire patient population—every patient is at the clinic because of a functional limitation that affects how they interact with technology. The clinic that fails to provide an accessible website is failing its own demographic. Off-the-shelf templates used by WebPT marketing-suite websites, Practice Promotions templates, Clinicient EMR-integrated websites, TheraOffice-integrated websites, and generic WordPress and Wix PT-clinic templates rarely address these failures. PT and OT clinics operating in the European Union face EAA exposure as of June 28, 2025, with explicit health-services scrutiny. This guide covers the legal framework, the PT-and-OT-specific failure patterns, and a concrete compliance checklist.

Legal Requirements

Law / Standard Effective Date Summary Penalty
ADA Title III In effect Physical therapy clinics, occupational therapy practices, and outpatient rehabilitation centers are places of public accommodation under ADA Title III in every U.S. circuit, with explicit health-care-provider categorization. The website is the primary appointment-booking, insurance-verification, intake-form, home-exercise-program, patient-portal, and telehealth-PT channel, putting it within Title III scope. WCAG 2.1 AA is the de-facto conformance standard. DOJ has signaled in the 2024 Title II Final Rule preamble and follow-on consent decrees that WCAG 2.2 AA will replace 2.1 AA in the next regulatory cycle. Hospital-affiliated PT departments are also subject to Section 504 of the Rehabilitation Act (federal funding) and HHS OCR enforcement. Injunctive relief plus attorneys' fees. California Unruh statutory damages of $4,000 per visit. New York State Human Rights Law damages of $1,000–$25,000 plus attorneys' fees. Florida, Pennsylvania, and Texas plaintiff-firm settlements typically range $5,000–$30,000 plus remediation costs. Hospital-affiliated departments face additional HHS OCR voluntary-resolution agreements and Section 504 penalties.
European Accessibility Act (EAA) 2025-06-28 Physical therapy clinics, occupational therapy practices, and outpatient rehabilitation centers located in the European Union, U.S. multi-state PT chains with EU operations, international sports-medicine and orthopedic-rehabilitation clinics serving EU patients, and cross-border telehealth-PT platforms must conform their digital services to EN 301 549 / WCAG 2.1 AA. Online appointment booking, telehealth-PT, and patient-portal access are independently in scope under the EAA's consumer-services and health-services provisions. Member-state fines up to €1,000,000 per non-conforming service. Regulator-ordered withdrawal of non-conforming digital services from the EU market.
HIPAA Security Rule & 21st Century Cures Act Information-Blocking In effect PT and OT clinics are covered entities under HIPAA when they bill insurance (including Medicare, Medicaid, and commercial payers). The HIPAA Security Rule requires that patient-portal access and electronic-health-information access be available to patients, and the 21st Century Cures Act information-blocking provisions (effective October 2022, ONC final rule) prohibit unreasonable interference with patient access to electronic health information. If the patient-portal login flow is inaccessible to a patient with a disability, the clinic is simultaneously failing ADA Title III (denial of equal access) and information-blocking (interference with EHI access). HHS OCR has issued guidance that information-blocking penalties can be imposed for inaccessible patient-portal implementations. Information-blocking penalties: up to $1,000,000 per violation for IT vendors and health-information networks. HIPAA Security Rule penalties: $137–$2,067,813 per violation tier. State attorney-general parallel HIPAA enforcement. Loss of Medicare and Medicaid participation eligibility for serial violations.
California Unruh Civil Rights Act In effect California Unruh provides a private right of action for any denial of full and equal access to a business establishment, with statutory damages of $4,000 per visit. California PT and OT clinics in Los Angeles, San Francisco, San Diego, Sacramento, and the Bay Area have been a sustained plaintiff-firm target since 2022, with serial-filer firms targeting clinics whose new-patient intake forms have inaccessible date pickers, unlabeled medical-history checkboxes, and pain-scale visual-analog sliders that cannot be operated with assistive technology. $4,000 per visit in statutory damages plus attorneys' fees and costs. Treble damages available in some circumstances. Injunctive relief mandating WCAG conformance.

Key Accessibility Issues in Physical Therapy, Occupational Therapy & Outpatient Rehabilitation Clinics

New-Patient Intake Forms With Inaccessible Pain-Scale Sliders and Body-Diagram Inputs

PT and OT new-patient intake forms are typically 8–20 pages collecting medical history, current medications (including blood thinners, NSAIDs, opioids, and muscle relaxants relevant to PT contraindications), surgical history, functional-limitation self-assessments (Oswestry Disability Index for low-back pain, Neck Disability Index, DASH for upper extremity, LEFS for lower extremity), pain-scale ratings using visual-analog 0–10 sliders, and body-diagram inputs where the patient marks the location of pain by clicking or tapping on a human-body illustration. The form universally fails on three patterns: the visual-analog pain slider is a custom JavaScript widget with no role='slider', no aria-valuenow, and no keyboard operability; the body-diagram input requires the patient to click on a rendered SVG human figure with no accessible alternative; and the standardized functional-limitation questionnaires (Oswestry, NDI, DASH) are rendered as multi-column radio-button matrices with poor screen-reader navigation. A blind low-back-pain patient cannot complete an Oswestry index, which is the standard intake assessment.

How to fix:

Replace visual-analog pain sliders with a properly-coded ARIA slider (role='slider', aria-valuemin='0', aria-valuemax='10', aria-valuenow updated on keypress) and provide a parallel numeric-input fallback ('Enter a number from 0 to 10 representing your current pain level'). Replace body-diagram click-to-mark inputs with a structured set of checkboxes grouped by body region (head/face, neck, upper back, lower back, left shoulder, right shoulder, left arm, right arm, left hip, right hip, left knee, right knee, etc.) with side and front/back specification. Convert standardized questionnaires (Oswestry, NDI, DASH, LEFS) to single-column accessible forms with fieldset/legend grouping each question, proper radio-button labels, and aria-describedby for scoring guidance. Provide a 'request a clinician to complete intake with me by phone' option as a fallback.

Home-Exercise-Program Video Libraries With No Captions, No Audio Description, and No Transcripts

PT and OT clinics universally publish home-exercise-program (HEP) video libraries: 100–500 videos demonstrating exercises that patients perform between sessions. The videos are typically 30–90 seconds, filmed in the clinic with a PT demonstrating each exercise, often with on-screen text overlays specifying sets, repetitions, hold times, and form cues ('keep your back straight', 'do not let your knee pass your toes'). The videos almost universally have no captions (excluding deaf and hard-of-hearing patients from understanding the verbal cues that explain form), no audio description (excluding blind and low-vision patients from understanding the demonstrated body position), and no transcripts. Patients are then expected to perform these exercises at home, with errors that can cause re-injury or treatment failure. The clinic that prescribes an inaccessible HEP is functionally prescribing a treatment that the patient cannot follow correctly.

How to fix:

Caption every HEP video with accurate captions (not auto-generated YouTube captions, which routinely mistranscribe anatomical terms). Provide audio description as a separate descriptive audio track (delivered through a 'with descriptions' version of the video) or as a written description placed adjacent to the video ('demonstration: PT stands facing the camera, raises right arm to shoulder height, holds 5 seconds, lowers slowly to side, repeat 10 times'). Provide a full text transcript of each video including all verbal cues and the description of the demonstrated movement. For exercises requiring equipment (resistance band, foam roller, yoga ball), include a text description of the equipment setup. Per A11yFix's video-accessibility-captions-guide, every exercise video must meet WCAG 1.2.1, 1.2.2, 1.2.3, and 1.2.5 (Levels A and AA captions, audio description, and transcripts).

Insurance-Verification and Benefits-Eligibility Lookup With Inaccessible Plan Selection

PT and OT clinics typically offer real-time insurance-verification on the website—the patient enters their insurance information (carrier, member ID, group number, date of birth) and receives a benefits summary showing covered visits per year, copay or coinsurance per visit, deductible status, and prior-authorization requirements. The insurance-verification widget is universally embedded as a third-party iframe from a clearinghouse vendor (Availity, Change Healthcare, Waystar, pVerify) and is rarely tested for accessibility. Common failures: the insurance-carrier dropdown contains 500+ payers in a non-searchable select that cannot be navigated with assistive technology; the member-ID input has no autocomplete and no input-format guidance; the date-of-birth input is split into three separate dropdowns (month, day, year) without fieldset grouping; the benefits-summary result is rendered as a low-contrast table with no headers; and the prior-authorization requirement is announced only visually. A blind patient cannot verify their PT benefits.

How to fix:

Require the insurance-verification partner to provide a WCAG 2.2 AA conformance statement before embedding their iframe. If the partner cannot provide one, replace the partner or provide a parallel accessible verification channel (phone-based verification with an accessibility-trained representative who reads back benefits in a structured format). The insurance-carrier dropdown must be a properly-coded ARIA combobox with searchable autocomplete. The member-ID input must use <label for=> and aria-describedby for format guidance. The date-of-birth input should be a single <input type='date'> or three properly-labeled inputs grouped in a <fieldset>. The benefits-summary result must be an accessible <table> with <th scope='col'> and <th scope='row'> headers, or a structured definition list (<dl> with <dt>/<dd>) for each benefit. Prior-authorization requirements must be announced through aria-live='assertive' and stated prominently as accessible text.

Telehealth-PT Video Consultations Without Accessible Controls or Captions

Since 2020, telehealth-PT has expanded under CMS telehealth flexibilities and many state direct-access laws now permit PT initial evaluations via telehealth. The telehealth-PT platform (Zoom for Healthcare, doxy.me, SimplePractice, Therapy Notes, WebPT Reach) is typically embedded in the patient portal or accessed via a unique meeting link. Common failures: the join-meeting flow has unlabeled inputs and unlabeled buttons; the in-meeting controls (mute, camera, chat, raise hand) are icon-only without text labels or aria-labels; auto-generated captions are absent or low-quality; the screen-share view (used by the PT to show exercise demonstrations) has no audio description; and the post-session note delivery is sent as an inaccessible PDF. A deaf patient cannot follow a telehealth-PT session without captions, and a blind patient cannot follow a screen-share exercise demonstration without audio description.

How to fix:

Use a telehealth platform with documented WCAG 2.2 AA conformance and live-captioning capability (Zoom for Healthcare with live transcription enabled, doxy.me with closed captioning, Microsoft Teams with live captions). The PT must be trained to enable captions at the start of every session and to provide audio description of any screen-share content ('I am showing you a video of a quadriceps strengthening exercise: I am seated on a chair, lifting my right leg slowly to extend the knee, holding 3 seconds, lowering'). The post-session note delivery must be an accessible HTML email or tagged PDF, not an image-based PDF. For deaf patients, the clinic must offer a sign-language-interpreter option (VRI via a contracted vendor) at no additional cost to the patient, per ADA effective-communication requirements.

Patient-Portal Login and Appointment-Management With Inaccessible Authentication and Scheduling

PT clinics that participate in Medicare and Medicaid are required to provide patient-portal access under the 21st Century Cures Act information-blocking rules. The patient portal (typically WebPT Patient Portal, Clinicient Patient Portal, TheraOffice Portal, or a custom EMR-integrated portal) handles appointment management, secure messaging, document upload (prescription, imaging reports), and progress-note review. Common accessibility failures: the login form has unlabeled inputs; the two-factor-authentication flow uses an SMS code displayed visually with no announcement; the appointment-scheduling calendar is a custom JavaScript widget with no keyboard operability; the rescheduling flow requires the patient to drag-and-drop appointments, which excludes patients with motor disabilities; the progress-note display is rendered as a PDF embedded in an iframe with no accessible text alternative. The patient-portal accessibility failure simultaneously creates ADA Title III, HIPAA Security Rule, and Cures Act information-blocking exposure.

How to fix:

The patient-portal vendor must provide a WCAG 2.2 AA conformance statement. The login form must use <label for=> on username and password fields with autocomplete='username' and 'current-password'. Two-factor-authentication codes must be deliverable via SMS, email, and authenticator app, with the SMS code announced through aria-live. The appointment-scheduling calendar must be a properly-coded accessible widget (or a list-based alternative for keyboard users). Rescheduling must be possible via a 'cancel and rebook' flow that does not require drag-and-drop. Progress notes must be available as accessible HTML, not as embedded PDFs. The Cures Act information-blocking risk must be explicitly addressed in the clinic's compliance program: an inaccessible patient portal is a recognized form of information blocking.

Compliance Checklist

  • New-patient intake form uses an ARIA slider (role='slider', aria-valuemin, aria-valuemax, aria-valuenow) with a numeric-input fallback for pain ratings
  • Body-diagram input is replaced with structured body-region checkboxes
  • Standardized questionnaires (Oswestry, NDI, DASH, LEFS) are accessible single-column forms with fieldset/legend grouping
  • Phone-completion fallback is offered for patients who cannot complete the intake form online
  • Every home-exercise-program video has accurate captions (not auto-generated)
  • Every HEP video has audio description or a written description of the demonstrated movement
  • Every HEP video has a full text transcript including verbal cues and movement description
  • Equipment setup is described in text for any HEP video requiring resistance bands, foam rollers, or yoga balls
  • Insurance-verification partner provides a WCAG 2.2 AA conformance statement, or a parallel accessible verification channel is offered
  • Insurance-carrier dropdown is a properly-coded ARIA combobox with searchable autocomplete
  • Member-ID input has <label for=> and aria-describedby for format guidance
  • Date-of-birth input is a single <input type='date'> or fieldset-grouped inputs with proper labels
  • Benefits-summary result is an accessible <table> or structured <dl>, not a low-contrast image
  • Prior-authorization requirements are announced through aria-live and stated as accessible text
  • Telehealth-PT platform supports live captioning, and PTs are trained to enable captions and provide audio description
  • Post-telehealth session notes are delivered as accessible HTML or tagged PDF, not as images
  • Sign-language-interpreter option (VRI) is offered at no additional cost for deaf patients
  • Patient-portal vendor provides a WCAG 2.2 AA conformance statement
  • Patient-portal login uses <label for=> with autocomplete='username' and 'current-password'
  • Two-factor-authentication codes are deliverable via SMS, email, or authenticator app with aria-live announcement
  • Appointment-scheduling calendar is keyboard accessible with a list-based alternative
  • Rescheduling does not require drag-and-drop; 'cancel and rebook' flow is available
  • Progress notes are available as accessible HTML, not as embedded PDFs
  • Color-contrast ratios meet WCAG 2.2 AA on all text, including pain-scale labels and benefits-summary tables
  • Keyboard focus indicators are visible on all interactive elements
  • Accessibility statement is published with a working contact channel, per A11yFix's accessibility-statement-guide
  • Annual WCAG 2.2 AA audit is performed, with results documented and remediation tracked

Further Reading

Other Industry Guides