Before we wrote a single rule for Audit-Pro, our WCAG scanning tool for pharma, we ran audits on 80 real disease awareness platforms. Oncology. Rare disease. Cardiovascular. Neurology. Venous disease. Meningitis. Osteoporosis. Each site crawled end to end. Each finding tagged by root cause, not by page.
One pattern kept surfacing: the sites built for the most vulnerable patients were often the least accessible. Older audiences with reduced vision met 12-pixel body copy on grey backgrounds. Patients on complex therapies met PDF prescribing information no screen reader could parse.
The failures cluster. Across our 80-site sample, the same six categories accounted for the majority of issues we logged, which mirrors what independent research has reported: 96% of detected accessibility errors on the wider web fall into six categories, led by low contrast text on 79.1% of pages, missing alt text on 55.5%, missing form input labels on 48.2%, empty links, empty buttons, and missing document language declarations.
Pharma sites are not exempt from this pattern. If anything, the branded, visually-driven design of disease awareness campaigns makes contrast failures worse. Corporate colour palettes get applied to body text without checking the ratio against WCAG 2.1 Level AA thresholds. Hero images carry patient-facing claims that never make it into alt attributes. Cookie banners, the first interaction any visitor has, block content behind untabbable overlays.
The wider trend is not improving. Research from 2026 found that 95.9% of the top one million homepages had automatically detectable WCAG failures, with an average of 56.1 errors per homepage, reversing six consecutive years of gradual improvement. Low contrast text alone now affects 83.9% of home pages, up 4.8 percentage points in a single year.
Our 80-site sample surfaced four failure zones that a generic scanner tends to under-weight or skip entirely.
None of these are exotic edge cases. They are the load-bearing failures that determine whether a patient can actually use the site.
Root-cause grouping matters more than raw issue counts. One broken button component reused on 80 pages is one fix, not 80 separate line items on a remediation report. A tool that hands medical and regulatory teams an 800-row spreadsheet has failed them before the work starts.
A useful audit does three things. It groups findings by the component or template that caused them, so engineering can fix once and resolve many. It weights findings by patient impact rather than by severity label alone, because a contrast failure on the dosing page outranks a missing landmark role on a legal footer. And it flags what automated tools cannot see. Automated checkers detect only 30 to 40% of potential WCAG failures, so sites that pass a scan may still have significant keyboard navigation, screen reader, or cognitive accessibility gaps.
This is why Promedia's Audit-Pro was built the way it was: AI assists the review, designers decide what to fix. A recent audit against one of our own design systems scanned 1,098 nodes across representative pages at WCAG 2.1 Level AA, then handed the design team a grouped, prioritised remediation plan rather than a raw dump. That is the workflow pharma brand and regulatory teams actually need.
The honest answer: because accessibility gets treated as a compliance checkbox at the end of a build, not as a design input at the start. Brand guidelines lock in colour palettes before contrast is checked. Video production wraps before caption budgets are approved. PDFs get uploaded as-is because retagging them properly costs hours no one scoped.
There is also a governance gap. Patient engagement work spans agencies, medical affairs review, legal sign-off, and IT deployment. Accessibility falls between those functions unless someone owns it explicitly. In our patient engagement practice, we treat accessibility the same way we treat regulatory compliance on email and SMS journeys: it is part of the build, not a gate at the end.
The EAA changes the risk calculation. Non-compliance is now enforceable across the EU regardless of where a pharmaceutical company is headquartered. Waiting until 2030 is only an option for services that already existed before June 2025. Everything new ships compliant or it should not ship.
The European Accessibility Act requires websites and digital services targeting EU consumers to meet WCAG 2.1 Level AA. This applies regardless of where the business is headquartered. Healthcare and pharmaceutical information services are explicitly in scope.
Low contrast text is the single most pervasive failure, now affecting roughly 84% of home pages. Missing alt text, missing form labels, empty links, empty buttons, and missing document language declarations round out the top six categories, which together account for 96% of detected errors. On pharma sites specifically, PDFs and embedded video add another layer of risk.
Yes. Healthcare websites and apps, including those tied to hospitals, clinics, and pharmaceutical information services, are explicitly named in EAA scope. Enforcement began on 28 June 2025. New digital products placed on the EU market after that date must comply immediately; existing services have until June 2030.
A checklist gives you a checklist back. A real audit groups findings by root cause, weights them by patient impact, and covers PDFs, embedded video, and cookie banners that generic scanners often skip. It also acknowledges that automated tools catch only 30 to 40% of potential failures, so manual review of keyboard navigation and screen reader flows is part of the work.
If you own a disease awareness site in the EU, the practical first step is a benchmarked audit against sites in similar therapeutic areas, not against a generic checklist. Group the findings by component. Fix the templates that drive the most patient-facing failures first. Build accessibility into the next campaign brief rather than the next remediation sprint.
Promedia has already screened 80 pharma sites through Audit-Pro, and every new site we audit sharpens the next version. If you want yours benchmarked against what we have already seen, that is the conversation to have.
One short email when we publish. No spam, no sales pitch. Unsubscribe whenever.
