ADA lawsuits don’t target the biggest sites. They target the easiest.

We build to WCAG 2.1 Level AA: the standard the DOJ's 2024 web rule sets for state and local government sites, and the bar we hold private-sector work to, where no technical standard is set. In practice: you can get through the whole site with a keyboard, a screen reader reads it correctly, the colours have enough contrast, the code is properly structured, and the forms work. We test as we build instead of patching it on later.

The California Consumer Privacy Act, as amended by the CPRA, gives California residents rights over their personal data. It generally applies to for-profit businesses that meet revenue or data-volume thresholds and handle Californians' data. We build what it asks for straight into your site: a "Do Not Sell or Share" opt-out, a way to handle people's requests about their own data, and clear privacy notices.

The US mostly works the other way round from the EU: for advertising and data sharing the default is opt-out rather than opt-in, though most of the newer state laws require an opt-in for sensitive data. For CCPA/CPRA we build a clear "Do Not Sell or Share My Personal Information" option and honour universal opt-out signals like Global Privacy Control (GPC), which more states recognise every year. Our consent tools respect those signals automatically.

More states pass a privacy law every year: California, Virginia, Colorado, Texas and Connecticut among them. Rather than rebuild for each one, we build to the strictest rules across all of them: a CCPA-grade opt-out, a process for handling people's data requests, and GPC support. That gives you one baseline to maintain instead of a separate build per state.

Yes, and the two run on different tracks. Federal agency sites, and what contractors deliver to them, are built to Section 508 of the Rehabilitation Act, which points to WCAG 2.0 Level AA through the US Access Board's Revised 508 Standards. State and local government sites fall under the DOJ's 2024 ADA Title II web rule instead, which sets WCAG 2.1 Level AA for websites and mobile apps. We build to whichever one applies to you.

It depends on the job: a few pages about your business is not the same as an app that handles customer data. We quote in US dollars, as a fixed price or in phases, and accessibility and privacy work is part of the build rather than an expensive fix sold to you later. Get in touch for a quote.