The rules differ by region, but almost all of them rest on the same technical standard: WCAG. I test your site once, by hand, and the report speaks to whichever rules apply to you.
| Rule | Where | Who it covers | Technical standard | How it is enforced |
|---|---|---|---|---|
| ADA Title III | United States | Businesses open to the public, including their websites | No named standard. WCAG is what settlements and courts usually use. | Private lawsuits and demand letters |
| ADA Title II | United States | State and local governments | WCAG 2.1 AA | Federal rule with deadlines in April 2027 and April 2028 |
| Section 508 | United States | Federal agencies and their suppliers | WCAG 2.0 AA | Procurement: buyers ask for a VPAT/ACR |
| European Accessibility Act | European Union | Consumer services such as e-commerce, banking, e-books and booking, including sellers outside the EU | EN 301 549 | National authorities, with penalties set by each country |
| Web Accessibility Directive | European Union | Public sector websites and apps | EN 301 549 | Monitoring by each Member State |
This is a general overview, not legal advice. Details change, so confirm what applies to you with a qualified lawyer.
Every rule in the table relies on WCAG in some form. I test against WCAG 2.2 AA, the newest version, by hand, and then map each finding to the rules you care about: the ADA and Section 508, EN 301 549 and the EAA, or both.
If you sell in the US and the EU, you don't need two audits. You need one thorough audit and a report that shows how it relates to each market.