Built-in a11yAccessibility features in every product
Clear policiesPlain-language privacy labels
User controlApp tracking transparency
Key insight: Apple treats accessibility and privacy as competitive advantages, not just compliance checkboxes.
WCAG AAA
Exceeds requirements
Principles Identified:
Plain languageContent at 9-year-old reading level
Universal designWorks for everyone by default
Open standardsPublic accessibility statement
Key insight: UK government sets the standard for accessible, user-friendly public services.
Clear Privacy
Human-readable policies
Principles Identified:
Plain languagePrivacy policy anyone can understand
Visual summariesKey points highlighted
Compliance built-inHelps merchants comply too
Key insight: Stripe's legal pages are readable and actually help users understand their rights.
Part E
Common Failures
12
Compliance Failures
Costly mistakes in legal compliance.
Failure: Inaccessible Website
Images without alt text
No keyboard navigation
ADA lawsuit risk
Fix: Implement WCAG 2.1 AA
Descriptive alt text
Full keyboard support
WCAG AA compliant
Rule: Every image needs alt text. Every interactive element must be keyboard accessible. Test with screen readers.
Failure: Tracking Without Consent
Analytics loads immediately
No cookie banner
GDPR violation
Fix: Implement consent management
Consent before tracking
Clear cookie choices
GDPR compliant
Rule: Don't load analytics or marketing scripts until user consents. Provide clear reject option.
Failure: Unlicensed Images
Google Image search
No license check
Copyright infringement
Fix: Use properly licensed assets
Stock with license
Attribution where required
Properly licensed
Rule: Document licenses for all images and fonts. Use stock sites with commercial licenses. Keep records.
Failure: Dark Pattern Cookie Banner
or manage settings
Fix: Equal prominence for all options
Rule: Accept and Reject must be equally prominent. No tricks to get consent. Regulators are fining for dark patterns.
Risk Check
Run Lighthouse accessibility audit. Check cookie consent UX. Verify all image licenses documented.
Part F
Visual Tests
13
Compliance Testing
Verify your site meets legal requirements.
01
Accessibility Audit
Tests: WCAG compliance
Run Lighthouse accessibility audit (Chrome DevTools). Use axe DevTools extension. Test with screen reader (VoiceOver/NVDA). Navigate entire site with keyboard only.
☑ Lighthouse: 90+
☑ axe: 0 violations
☑ Keyboard nav works
02
Cookie Consent Audit
Tests: GDPR/ePrivacy
Clear cookies and revisit site. Are tracking scripts blocked until consent? Is reject as easy as accept? Can you change preference later?
☑ No tracking before consent
☑ Equal accept/reject buttons
☑ Can change choice later
03
Privacy Policy Review
Tests: Content accuracy
Does policy match actual data collection? Is it written in plain language? Is it dated? Does it cover all data types collected?
☑ Matches actual practices
☑ Plain language
☑ Recently updated
04
License Documentation
Tests: Copyright compliance
Is every image/font license documented? Are attributions displayed where required? Do you have commercial rights for all assets?
Tip: Some users experience nausea or seizures from motion. Respect their preferences.
A11y Checklist
Focus indicators visible, skip links present, reduced motion respected, screen reader text for icons.
Part H
Self-Assessment
15
Self-Assessment
Test your understanding of web legal requirements.
Q1
What WCAG level should most websites target?
Click to reveal
Answer: WCAG 2.1 Level AA. This is the standard referenced by most laws (ADA, EU directives). Level A is minimum, AAA is enhanced. AA provides good coverage of accessibility needs while being achievable for most sites.
Q2
What does GDPR require before setting tracking cookies?
Click to reveal
Answer: Explicit, informed consent. Users must actively opt-in (pre-checked boxes don't count). They must understand what they're agreeing to. They must be able to reject as easily as accept. They can withdraw consent anytime.
Q3
Why are cookie banner dark patterns illegal?
Click to reveal
Answer: GDPR requires consent to be freely given. Making 'Accept' prominent while hiding 'Reject' manipulates users into consent they might not give otherwise. This violates the 'freely given' requirement. Regulators are actively fining for this.
Q4
What legal pages should most websites have?
Click to reveal
Answer: Privacy Policy (legally required), Terms of Service (protects you), Cookie Policy (required in EU). E-commerce adds Return Policy. Accessibility Statement is increasingly expected. Link all from footer.
Q5
How do you verify image license compliance?
Click to reveal
Answer: Document the source and license for every image. Verify commercial use is allowed. Display attribution where required. Keep records of purchases/downloads. Stock site downloads include license proof.