Website Accessibility Standard
Council websites must meet the WCAG 2.2 AA standard to ensure information is accessible to all users. This includes clear navigation, readable content, keyboard accessibility, alt text for images, and compliance with the latest accessibility success criteria. Accessibility is a legal requirement under the Public Sector Bodies (Websites and Mobile Applications) Accessibility Regulations 2018.
Resources
Accessibility Statement
Every council website must publish an up-to-date Accessibility Statement explaining how the site meets WCAG standards, any known issues, and how users can request information in alternative formats. The statement must be reviewed annually or when significant website changes occur.
Resources
Domains and Emails
Councils must use a council-owned domain, and best practice advises using a .gov.uk domain and role-based council email addresses (e.g. clerk@, chair@) to improve security, professionalism and data compliance. Using a .gov.uk domain greatly reduces cyber risk, improves public trust and is an Assertion 10 requirement.
Resources
What to Publish on your Website
Councils must publish statutory information on their website, including agendas (3 clear days), minutes, policies, councillor information, contact details, financial documents, and AGAR materials. Keeping the website up to date is essential for transparency and meeting the Accounts & Audit Regulations.
Resources
Expenditure & Financial Transparency
Councils with income/expenditure under £25,000 must publish all spending over £100. Larger councils should follow best practice and publish spending over £500, including VAT and grant payments. Transparent reporting of expenditure is essential for audit, strengthens accountability, reduces the risk of challenge or complaint, and demonstrates good stewardship of public money.
Resources
IT Policy
Councils should adopt an IT & Cyber Security Policy covering password management, device security, backups, cloud services, data retention, and incident reporting. This is increasingly important for audit and risk management. Cyber resilience protects public data and supports WCAG, data protection, and business continuity duties.
Resources