Exhibit C: Technical & Regulatory Standards Crosswalk

Mapping of Legal Regulations to Technical Standards and Requirements

Digital Accessibility & Civil Rights

ADA Title II (28 C.F.R. Part 35)

Scope: State & local government web/mobile content

Standard: WCAG 2.1 AA Effective: Mar. 2025 (Proposed)

ADA Title III (28 C.F.R. Part 36)

Scope: Public accommodations’ digital assets

Standard: WCAG 2.1 AA Effective: Mar. 2025 (Proposed)

Section 504 / Rehab Act § 508

Scope: Federally funded programs

Standard: W3C ARIA, WCAG 2.1 AA Effective: Ongoing

DOJ Title II Web & Mobile Rule

Scope: State & local government web/mobile apps

Standard: WCAG 2.1 AA Effective: Apr. 8 2024

Data Security & Privacy Safeguards

NIST SP 800-208

Scope: Federal information systems

Standard: Post-Quantum Cryptography (PQC) Effective: Draft 2025

HIPAA / GINA Privacy Safeguards

Scope: Health & genetic data

Requirement: PQC readiness & data encryption Recommended: 2025–2026