This article answers the question most small business owners ask the first time they hear about ADA website compliance. Am I actually on the hook for this?
Short answer. Probably, if you operate a commercial website in the United States. The longer answer has three variables that determine how exposed you are.
The three variables that determine liability
One: Does Title III apply to your business?
Title III of the Americans with Disabilities Act covers places of public accommodation. Restaurants, retail stores, hotels, professional services offices, and so on. Twelve categories, broadly defined.
If you have a physical storefront, Title III applies. Full stop. Your website is tied to that storefront in most court readings.
If you are a purely online business with no physical location, it depends on your federal circuit. The Ninth Circuit, which covers California, has held that purely online businesses can be covered under Title III. The Eleventh Circuit, which covers Florida, has been more restrictive. The split has been unresolved for years.
Two: Which state do you operate in, and which state are your customers in?
State accessibility law matters as much as federal law now. California has the Unruh Civil Rights Act, which ties to Title III but adds state damages of four thousand dollars per violation. New York has a specific state human rights law that applies to websites. Florida is a frequent filing venue under federal law. Colorado passed a state accessibility law in 2024 that kicks in for public entities in 2025 and has follow-on effects for their vendors.
If your customers are anywhere in California or New York, you have exposure to state claims regardless of where you are headquartered. This is why most plaintiff's firms file from those states. We break down how federal Title III and state accessibility laws interact in more detail.
Three: What does your website actually do?
A brochure site for a local law practice is lower risk than an eCommerce site with a checkout flow. An eCommerce site with a checkout flow is lower risk than a booking or reservation platform. A booking platform is lower risk than a service that accepts protected information, such as health, financial, or education data.
The rule of thumb. The more actions a user must take on your site to do business with you, the more surface area exists for accessibility failures, and the more likely a lawsuit is to target you.
The revenue threshold myth
A common question. "My business is under one million in revenue, so the ADA does not apply, right?"
Wrong. Title III has no revenue threshold. Title I, which covers employment, has a fifteen-employee threshold. Title II covers public entities. Title III, which is the part that covers your website and storefront, has no size floor.
A mom-and-pop restaurant with four tables is in scope. A freelance consultant with a WordPress site is in scope. A food truck with an online ordering page is in scope.
The size of your business affects the size of a realistic settlement, not whether you are liable.
How lawsuits actually get filed against small businesses
Understanding the mechanics helps understand the risk.
Plaintiff's firms running volume operations use automated scanners. The scanners flag sites that fail specific WCAG 2.1 success criteria. Common ones include images without alt text, links without discernible names, and forms without associated labels — all WCAG 2.1 Level A failures.
The scanner builds a list of candidate sites. A paralegal reviews the list. The firm matches a named plaintiff from a pool of named plaintiffs the firm has established standing for. The plaintiff's declaration describes the attempted use of the site. A demand letter goes out.
If the target responds with money, the matter closes. If the target ignores the letter, the firm files in federal court. Most filings happen in the Ninth or Eleventh Circuit because those are the friendliest jurisdictions for Title III web cases.
The volume operation matters to you because it means you are not being targeted personally. You were on a list. The best way to get off the list for the next round is to actually comply. The second-best way is to respond to the letter in a way that makes the case look expensive.
The actual exposure for a typical small business
Rough order of magnitude. These are not guarantees.
A demand letter that receives no response or a cash settlement. Usually resolves for five to fifteen thousand dollars plus any plaintiff attorney fees claimed in the demand.
A demand letter that receives a specificity-requesting response. A percentage go quiet. A percentage resolve for a smaller figure in the two to five thousand dollar range. A smaller percentage escalate.
A federal court filing, reached settlement. Twenty-five to seventy-five thousand dollars plus your own counsel fees.
A federal court filing, litigated to summary judgment. Hundred thousand plus on either side, whether you win or lose.
A federal court filing, lost at trial. The damages figures stay similar to a settled case in many Title III matters because Title III itself does not authorize monetary damages for private plaintiffs. The money comes from state law claims tacked on. But your attorney fees and potentially the plaintiff's fees are still owed, and your remediation work still has to happen.
What reduces exposure
Three things reduce exposure, in order of impact.
Actually make your site more accessible. This is not a trick. A site that passes WCAG 2.1 AA in the pages most likely to be tested is a site that does not land on the scanner list. Use our free WCAG 2.1 AA checklist to run the audit yourself. You do not need perfect conformance. You need enough to pass a quick automated scan.
Publish an accessibility statement that is specific and honest. A specific statement describes your conformance target, your known exceptions, the feedback channel you monitor, and the date of your last audit. A statement that says "we comply with the ADA" and nothing else is, in the court of law, slightly worse than having no statement. It is an overclaim.
Document the effort. If a demand letter arrives despite your remediation, the quality of your documentation is what buys you a good faith effort defense. A dated audit. A remediation log. A training record. A published accessibility statement. The paper trail.
What does not reduce exposure
Accessibility overlays. The widgets that promise to make your site ADA compliant by adding a JavaScript file. They do not. The Federal Trade Commission settled with accessiBe in 2025 over exactly this kind of misleading claim. Plaintiff's firms know how to defeat overlays and actually cite their presence as evidence of bad faith.
Paying the settlement without changing anything. Removes this specific letter. Puts you on the "will pay" list at the firm that sent it. Invites the next letter.
A "we are working on it" accessibility statement with no specifics. Rarely works as a good faith shield. It reads as performative.
The bottom line
Small businesses with a website that transacts with consumers are liable. The question is not whether Title III applies. The question is how exposed you are based on your website's functionality, your customers' states, and the quality of your documentation.
This is the first and worst surprise most SMB owners experience with the ADA. The fix is not complicated. Run an audit. Remediate. Document. Respond to letters with a template rather than a check.
This article is general information, not legal advice. For specific legal advice about your business, consult a licensed attorney in your jurisdiction.