9 Lessons from Rebuilding NHS Trust Websites

Building a website for an NHS Trust is unlike building a digital platform for any other sector. As a digital lead or communications manager within a Trust, you operate at the intersection of clinical governance, stringent legal accessibility requirements, tight public sector budgets, and the immediate, often urgent needs of a highly diverse patient population.

At Platform81, we have spent years partnering with NHS organisations to rebuild their digital front doors. Through these projects, delivered seamlessly through NHS procurement governance and the Insight UK framework, we have learned that successful NHS websites require more than just clean code and responsive design. They require a fundamental understanding of how hospitals actually work.

Here are the critical lessons we have learned from building NHS Trust websites, and what communications teams need to know to future-proof their digital estates.

1. Accessibility is a Process, Not a Project

The single biggest trap NHS Trusts fall into is treating digital accessibility as a launch-day milestone. A Trust will secure the budget, commission a new website, achieve WCAG 2.2 AA compliance on the day of the go-live, and then consider the job done.

The reality is that NHS websites are living, breathing ecosystems. They are subject to a phenomenon known as “website decay.” In a typical Trust, content is not managed by a single webmaster. It is devolved across dozens of departments, from clinical leads updating outpatient service information to HR teams uploading new recruitment drives.

Within weeks of launch, well-meaning editors can inadvertently break compliance by uploading untagged PDFs, missing out alternative text on images, or misusing heading structures.

The Lesson: Maintaining compliance requires robust, ongoing digital governance. When we build a platform, we do not just hand over the keys and walk away. We build restrictive guardrails directly into the Content Management System (CMS). By forcing editors to include alt text before an image can be published, or restricting the use of custom colour palettes that might fail contrast ratios, you can systemise accessibility. Furthermore, ongoing staff training and continuous automated monitoring are essential to stop a compliant site from sliding backwards.

2. The WCAG 2.2 Shift is Structural, Not Cosmetic

In October 2023, the technical standard underpinning the Public Sector Bodies Accessibility Regulations (PSBAR 2018) shifted to WCAG 2.2. Since October 2024, the Government Digital Service (GDS) has been actively monitoring public sector websites against this stricter standard.

Many Trusts assume that upgrading from WCAG 2.1 to 2.2 is a simple matter of tweaking a few colours or adding a plugin. It is not. The new success criteria demand structural changes to how interactive elements are designed.

The Lesson: You must design for cognitive and motor disabilities from the ground up. WCAG 2.2 introduces critical criteria that legacy NHS sites routinely fail:

• Target Size (Minimum): Clickable elements must be at least 24 by 24 CSS pixels. Given that the vast majority of NHS website traffic is mobile, a tiny link is incredibly frustrating for an elderly patient or someone with a motor tremor.
• Accessible Authentication: Asking users to solve complex puzzles or remember obscure passwords to log into patient portals excludes those with cognitive or memory disabilities.
• Focus Not Obscured: When a keyboard-only user (perhaps someone who cannot use a mouse due to a physical disability) tabs through a page, the element they are on cannot be hidden behind a sticky header or a cookie banner.

These are not cosmetic fixes; they are structural requirements that necessitate modern, accessible-by-default templates.

Run your free WCAG 2.2 scan now →

3. The Third-Party Portal Trap

One of the most frequent frustrations we hear from NHS digital leads involves systems they do not actually control. A Trust’s core website might be perfectly compliant, but the moment a patient clicks to book an appointment, view their test results, or apply for a job via a third-party portal like Trac, they are thrown into an inaccessible, non-compliant environment.

Under PSBAR 2018, if a Trust procures and heavily integrates a third-party system, they still bear a degree of legal and reputational responsibility for its accessibility. Yet, comms teams have virtually no power to force massive software vendors to update their codebases.

The Lesson: While you may be locked into third-party booking or recruitment software that lags behind the law, your primary digital front door is entirely within your control. Our strategy is always to make the core platform absolutely bulletproof. By ensuring your main website, your accessibility statement, and your internal governance are unimpeachable, you limit your overall exposure and demonstrate to regulators like the GDS that your Trust takes its legal obligations seriously.

4. PDFs are the Silent Compliance Killer

If there is one universal truth about NHS websites, it is that they are buried under an avalanche of PDFs. Board papers, annual reports, service leaflets, clinical guidelines, and visitor maps are routinely uploaded as portable document formats.

From an accessibility standpoint, PDFs are a disaster. They do not reflow on mobile screens, requiring patients to pinch and zoom clumsily. More importantly, older or scanned PDFs are often completely illegible to screen readers used by visually impaired patients. Untagged PDFs are currently one of the leading causes of automated GDS audit failures.

The Lesson: Digital teams must adopt an “HTML-first” policy. If a patient needs to read a visitor guide or a clinical instruction sheet, that information should be a standard web page, not a downloadable file.

For legally required documents like legacy board papers, Trusts can rely on “disproportionate burden” clauses, provided they properly document this in their accessibility statement. But for forward-facing patient information, the PDF habit must be broken. As part of our remediation projects, we help Trusts identify their highest-traffic PDFs and systematically convert them into accessible, responsive digital content.

5. Content Design and Health Literacy Matter

Accessibility is frequently framed as a purely technical exercise. As long as the code passes a WCAG scanner, the site is deemed accessible. However, building NHS websites has taught us that technical accessibility is useless if the content itself is incomprehensible.

The NHS serves the entire population, which includes a vast spectrum of literacy levels, neurodiversities, and patients who speak English as a second language. According to NHS digital service manuals, health information should be written for a reading age of 9 to 11.

The Lesson: True accessibility includes cognitive accessibility. Digital teams must champion plain English. A page explaining a complex oncology procedure might pass every technical contrast and screen-reader check, but if it is written in dense, impenetrable medical jargon, it is fundamentally inaccessible to the patient who needs it most. Building a great Trust website requires empowering comms teams to edit clinical content ruthlessly for clarity.

6. Multimedia Requires Built-In Guardrails

The way Trusts communicate has evolved. Video content is now a primary tool for patient engagement, ranging from physical therapy exercise demonstrations to messages from the Chief Executive and broadcasts of board meetings.

However, under WCAG 2.2 AA guidelines, multimedia comes with strict legal requirements. Deaf or hard-of-hearing patients must have access to accurate closed captions and transcripts, while visually impaired users may require audio descriptions for visual-heavy content.

The Lesson: Do not rely on editors remembering to upload transcripts. When we build custom CMS solutions for Trusts, we integrate multimedia guardrails. If a user attempts to embed a video, the CMS can be configured to prompt or mandate the inclusion of a transcript file or closed-caption link. By systemising these requirements, you protect the Trust from accidental compliance breaches.

7. Technology Cannot Replace Human Empathy

In the rush to achieve compliance, many Trusts rely entirely on automated testing tools. Automated tools, including our own free Platform81 WCAG 2.2 scanner, are incredibly valuable. They provide a rapid baseline, catching 30 to 40% of mechanical errors like missing alt text and contrast failures in minutes.

However, automated tools do not actually use the website. They cannot tell if your alt text is genuinely descriptive or just a string of keywords. They cannot assess if the logical tab order makes sense to a human being.

The Lesson: The gold standard of public sector accessibility is human-led auditing. Automated tools don’t use screen readers or navigate via keyboard the way real patients with disabilities do. A human expert bridges the gap between technical code-checking and actual human usability. Before embarking on a massive rebuild or presenting a business case to the board, commission a specialist to navigate your site using assistive technologies. It provides the definitive roadmap for what actually needs fixing.

8. Procurement Should Be Painless

Finally, one of the most practical lessons we have learned is that the procurement process itself often stalls vital digital transformation. NHS digital leads are frequently bogged down in red tape, trying to verify the security credentials and framework status of potential digital partners.

The Lesson: Work with pre-vetted specialists. The stakes for NHS data and public-facing infrastructure are too high for generic web agencies. At Platform81, we hold Cyber Essentials Plus, IASME certification, and ISO 9001. Because we are an approved supplier on the Insight UK framework, Trust procurement teams can engage with us rapidly and compliantly, turning a tedious tendering process into a streamlined path to a better website.

9. Experience is the Best Safeguard

When we talk about the complexities of NHS digital compliance, we speak from extensive hands-on experience. We understand the specific pressures Trust communications teams face because we have successfully partnered with multiple healthcare organisations to deliver robust, accessible, and secure digital platforms.

Some of our recent relevant projects include:

• Birmingham & Solihull Mental Health NHS Foundation Trust (BSMHFT): We delivered a full website redesign and CMS build for one of England’s largest mental health trusts, prioritising accessible, trauma-informed navigation for vulnerable service users.
• Sandwell & West Birmingham NHS Trust: We executed a comprehensive website design and build, which prominently featured the Midland Metropolitan University Hospital, the largest new hospital built in Europe in the last 20 years.
• Black Country NHS: We provide an ongoing hosting and maintenance package, ensuring the Trust’s digital infrastructure remains secure, highly available, and fully compliant around the clock.
• Royal Wolverhampton NHS Trust Charity: We designed and built a dedicated charity website tailored to drive fundraising, streamline donations, and boost community engagement for the Trust’s charitable arm.
• UHB Healthcare Data Research: We delivered a specialised website design and build for an internal R&D department, beautifully balancing complex healthcare data presentation with strict accessibility standards.
• MIRHO: We executed a targeted healthcare sector digital website project, ensuring robust legal compliance and a seamless user experience.

Securing Your Digital Front Door

Building and maintaining an NHS Trust website in 2026 is a complex mandate. It requires balancing the rigorous legal demands of WCAG 2.2 and the GDS with the human reality of patients who are often accessing your services in moments of stress, illness, or confusion.

The digital front door is rarely neutral; it is either a reputational asset that reassures patients or a liability that frustrates them.

The first step toward securing that asset is understanding exactly where your current legacy site stands. You cannot fix what you cannot see. By running an initial automated scan, followed by a human-led audit and a strategic remediation plan, you can close the compliance gap and build a platform that truly serves your entire community.

Ready to see where your Trust stands? 

Run your free WCAG 2.2 scan with Platform81 today, or book a discovery call with our NHS digital specialists to discuss how we can support your next compliance, remediation, or rebuild project.