In North America, digital accessibility compliance operates across multiple jurisdictional layers. At the top sit federal laws that establish a baseline. Below them sit provinces and states that define the actual rules of the game, each with its own standards, timelines and sanctions.
For a CIO whose operations span multiple jurisdictions, the reality is unambiguous: compliance with federal obligations alone does not provide sufficient protection. It is provincial and state regulations that impose, in practice, the most demanding constraints. Here is an overview of the frameworks that truly structure compliance, with focus on federal regimes, Ontario, Quebec, Massachusetts and New York State.
The federal baseline: useful, but incomplete
In Canada: the Canadian Accessibility Act
Adopted in 2019, the Canadian Accessibility Act aims for a barrier-free Canada by 2040. It applies to federally regulated organizations: banks, telecommunications, interprovincial transportation. Its technical reference standard is CAN/ASC–EN 301 549:2021, aligned with WCAG 2.1 level AA. Penalties can reach $250,000 CAD per violation.
The catch: most large enterprises operate under provincial jurisdiction. For them, the ACA does not apply. The focus shifts to provincial laws, often more stringent.
In the United States: three texts to know
The American federal framework rests on three pillars. The Americans with Disabilities Act (ADA), adopted in 1990, whose Title III covers places of public accommodation and, through case law, their websites. Section 508 of the Rehabilitation Act mandates accessibility of ICT used by federal agencies. The DOJ rule of April 2024 on Title II of the ADA requires state and local public entities to comply with WCAG 2.1 AA.
On timelines: in April 2026, the Department of Justice published an Interim Final Rule deferring by one year the Title II deadlines only—this measure does not affect Section 508 or Title III. Under this revised schedule, large public entities serving more than 50,000 residents have until April 26, 2027; smaller ones until April 26, 2028. Readers are encouraged to verify the consolidated version of this rule in the Federal Register, as implementation details may evolve.
On sanctions, one point is often misunderstood: private lawsuits under Title III do not provide monetary damages to the plaintiff.
Ontario: the North American pioneer
The Accessibility for Ontarians with Disabilities Act (AODA), adopted in 2005, stands as a model. It organizes around five standards: customer service, employment, information and communications, transportation, public spaces. It is the Information and Communications standard that governs digital accessibility.
The key threshold: while any organization operating in Ontario with at least one employee is in scope, it is mainly structures with 50 or more employees (private sector and nonprofits alike) that must make their websites conform to WCAG 2.0 level AA. Public bodies are subject to this requirement without threshold. Small organizations with fewer than 50 employees are encouraged but not required to act.
Sanctions are substantial: up to $50,000 CAD per day for an officer and $100,000 CAD per day for an organization. Added to this is official publication of the list of non-compliant companies, a reputational risk that carries significant weight in a B2B commerce context.
The goal of an “accessible Ontario by 2025” was not met. This was officially documented in the Donovan Report (2023), the fourth independent review of AODA commissioned by the Ontario government itself ( https://www.ontario.ca/page/2023-legislative-review-accessibility-ontarians-disabilities-act-2005 ), which identified structural gaps in implementation and enforcement. Obligations nonetheless remain in force and case law continues to strengthen. WCAG 2.0 AA remains the legal standard of reference, but voluntary adoption of WCAG 2.1 AA is widely recommended to anticipate future developments and align with North American standards.
Point of attention: enterprises established outside Ontario but serving Ontarians are also exposed, notably through contractual requirements from large clients.
Quebec: the SGQRI 008-01, stringent for the public sector
In Quebec, digital accessibility in the public sector is governed by the Standard on the Accessibility of Web Sites (SGQRI 008-01), which came into force on April 29, 2024. It was published by the Ministry of Cybersecurity and Digital Affairs within the framework of the Law on Governance and Management of Information Technology Resources. The acronym “RGQRI”, sometimes encountered, designates the same standard.
The scope covers public bodies broadly: ministries, state-owned enterprises, health and education networks, municipalities, as well as associated digital assets: public websites, intranets, extranets, online forms, downloadable documents, multimedia content, etc.
On the technical front, the standard relies on WCAG 2.1 level AA, with references to WCAG 2.2. Several Quebec-specific features: mandatory designation of a digital accessibility officer in each organization, mandatory internal training, application from the design phase for all new content or significant modifications, dedicated Accessibility page, and offer of assistance to persons with disabilities in cases of temporary non-compliance.
What about the private sector? It is not subject to SGQRI 008-01. Two signals nonetheless merit attention. First, the Law on Contracts of Public Bodies already embeds accessibility requirements in tender processes: any service provider responding to a public mandate must deliver conformant outputs. Second, the broader Canadian movement tends toward progressive strengthening of obligations, as evidenced by legislative developments in Ontario and Manitoba. Parliamentary discussions are underway at the National Assembly on extending certain obligations to the private sector, though no definitive text has been adopted to date.
Massachusetts: a structured state framework
Massachusetts has one of the most advanced digital accessibility policies in the United States. The Enterprise Information Technology Accessibility Policy, led by the Executive Office of Technology Services and Security, frames all state agencies. Since July 2023, the State has had a Chief IT Accessibility Officer and a Digital Accessibility and Equity Governance Board, institutions created by Executive Order No. 614—a rare institutionalization by U.S. standards.
Technical requirements are differentiated by component: WCAG 2.1 A and AA for web and desktop applications, multimedia content and electronic documents; ATAG 2.0 A and AA for authoring tools; and ISO 14289-1:2014 (PDF/UA-1) for PDFs.
The powerful lever for the private sector is the Massachusetts Equal Rights Act (M.G.L. c. 93, § 103). Where the federal ADA limits recourse to injunctive relief, Massachusetts’ Equal Rights Act allows plaintiffs to recover compensatory damages, punitive damages and attorney fees. It furthermore imposes no minimum employee threshold. Within this context, landmark cases such as NAD v. Netflix in 2012 (streaming services covered under the ADA) and NFB v. H&R Block in 2014 (consent decree mandating WCAG 2.0 AA) took shape.
And the public sector? The timelines aligned with the DOJ Title II rule apply: April 26, 2027 for entities serving 50,000 or more persons, April 26, 2028 for others.
New York: the epicenter of litigation
If one were to summarize the New York situation, the finding would be clear: in 2024, the State accounted for more than 50 percent of American federal digital accessibility lawsuits, roughly 1,600 actions. In the first half of 2025, 31.6 percent of digital ADA actions were filed there, and 41 percent targeted companies already sued once before.
Why this concentration? Four legal frameworks overlap: ADA Title III at the federal level; the DOJ Title II rule for public entities (deadline April 26, 2027); the New York State Human Rights Law and the New York State Civil Rights Law, which provide expanded recourse; and finally the New York City Human Rights Law, with broader definitions of disability and, crucially, financial damages accessible to plaintiffs.
The State has also adopted its own policy, NYS P08-005. It applies however exclusively to New York State agencies and their dependent public entities. It creates no direct obligation for the private sector, which remains governed by federal ADA, the NYSHRL and the NYCHRL. This policy targets WCAG 2.1 AA by June 25, 2026 and WCAG 2.2 AA by January 1, 2027, with mandatory manual testing at each major production release.
On the private litigation front, several factors explain the New York concentration. Courts there accept lawsuits against any entity whose website is used by a New York resident, regardless of where it is based. State and municipal laws offer financial damages that federal ADA does not permit. Six of the ten most active ADA litigation firms are based in New York. One technical point often underestimated: accessibility widgets and overlays are systematically rejected as proof of compliance by courts. Worse, they have become a signal of alert for firms specializing in this type of litigation.
Practical consequence: for any e-commerce site, SaaS portal or online service reaching New York residents, ADA compliance is no longer optional but becomes a documented operational risk.
How to ensure multi-jurisdictional compliance
Facing this complexity, five reflexes are essential.
Map your actual exposure. For each entity in your organization, this means identifying jurisdictions of establishment, jurisdictions of service (where users actually reside), nature of content distributed and SaaS vendors involved in the digital production chain. This mapping conditions any serious prioritization.
Adopt the highest standard as your single target. Rather than juggling six different frameworks, aiming for WCAG 2.2 AA as a minimum baseline simultaneously covers the AODA, SGQRI 008-01, DOJ Title II and most state policies, while anticipating future developments.
Industrialize your monitoring. One-off audits no longer suffice. New York litigation demonstrates this: automated tools detect only between 30 and 40 percent of non-conformities. A robust approach combines continuous automated scanning, manual audits by experts, testing with assistive technologies, and remediation plans driven by KPIs.
Embed accessibility into processes. Accessibility can no longer be a late-cycle concern. It must flow through IT and SaaS procurement criteria, development pipelines (design systems, CI/CD, definition of done) and governance of produced content.
Document to defend yourself. In the event of litigation, traceability of actions taken and published accessibility statements make a tangible difference. American courts, particularly in Massachusetts and New York, sanction less severely entities that demonstrate documented continuous improvement than those who have done nothing.
From constraint to competitive advantage
Digital accessibility compliance in North America has changed in nature. It is no longer one compliance obligation among many, but a marker of digital maturity becoming a differentiating factor in B2B and public tenders, and a documented operational risk factor in high-litigation jurisdictions.
For CIOs, challenges converge on three axes: reducing legal and reputational risk in markets where litigation intensifies; improving experience for all users, with measurable benefits on search ranking, mobile performance and customer satisfaction; and securing access to large clients who now embed accessibility commitments into their procurement processes.