Cookie consent, all-in pricing and ADA accessibility for apartment websites in 2026

Cookie consent, all-in pricing and accessibility are the three compliance fronts an apartment website faces in 2026, and the checker above shows how each one applies in your state. This is educational, not legal advice. Compliance law varies by state and changes quickly, and everything here is current as of September 2026. Confirm the specifics for your markets with your own counsel, and check the site again whenever you add a tracking script, change a mandatory fee or open a property in a new state.

1. Cookies and consent

The biggest misconception in U.S. multifamily marketing is that cookie compliance means blocking every tracker until the visitor clicks Accept. That is the GDPR rule, which we live with in Paris as much as in New York. Most U.S. state privacy laws are opt-out: visitors may decline tracking and tell you not to sell or share their data, though you do not generally have to block analytics until they consent.

Enforcement of that opt-out has tightened. Nineteen states have comprehensive consumer-privacy laws in effect, not counting Florida’s narrower one. Around a dozen of them, including California, Colorado, Connecticut, Texas and Oregon, require websites to honor the Global Privacy Control (GPC), a signal the visitor’s browser sends automatically, and the checker above names each law. California’s updated rules, in force since 1 January 2026, add three requirements. Accepting and declining must be equally easy, closing the banner does not count as consent and a visitor who opts out should be able to see that their choice was honored.

The practical traps for apartment sites are mundane and expensive. An embedded map, a video, a chat widget or an ad pixel can drop tracking cookies the moment the page loads, before the visitor has chosen anything, and several state laws count that as ‘sharing’. Through 2025, a string of six-figure and seven-figure penalties landed on companies whose banners looked fine while their tracking fired regardless.

2. All-in pricing

In December 2025, the FTC and the State of Colorado announced a $24 million settlement with one of the country’s largest apartment operators over advertised rents that left out mandatory fees. The case was brought under existing deceptive-practices law, with no special junk-fee rule required. As of September 2026 no single federal rule forces apartments to advertise an all-in price. The FTC’s 2025 junk-fee rule covers live-event tickets and short-term lodging and leaves long-term leases out, and a broader inquiry into rental-housing fees is still at the early-comment stage.

States, meanwhile, are writing all-in mandates directly into housing law:

• Colorado (HB25-1090), enacted in 2025 and effective 1 January 2026, requires advertised rent to include mandatory recurring fees, with penalties for hidden charges.
• Minnesota requires non-optional fees to be disclosed in any advertisement and a combined ‘Total Monthly Payment’ on the lease, with stiff damages for getting it wrong.
• Massachusetts, as of late 2025, requires a ‘total price’ inclusive of mandatory fees and bars collecting a prospect’s personal information before that price is shown.
• Connecticut’s broad price-transparency law extends all-in pricing to rental advertising: the total price, inclusive of mandatory fees, must appear at least as prominently as any other amount, with carve-outs for add-ons that are optional in fact, disclosed up front.
• Nevada (AB 121) goes further. The single ‘maximum total periodic rent,’ fees included, must appear everywhere the rent is listed—ILS listings, Zillow, Craigslist and social ads—as well as on the lease.

Those five require the advertised price itself to be all-in. Counting narrower rules, more than a dozen states plus Washington, D.C. have enacted some form of rental fee-transparency requirement, all of them in the checker above, and more are introduced every legislative session. California remains the contested case. Industry groups have argued that its 2024 price-transparency law, which bars advertising a price that excludes mandatory fees, does not reach long-term residential leases, and the question is still open. For a multi-state operator, showing the all-in number is the conservative path, and it satisfies the strictest current laws at once.

3. Accessibility

Accessibility is where the legal exposure is largest and the shortcuts are most dangerous. Under the Americans with Disabilities Act, courts have repeatedly treated the website of a business with a physical location (and an apartment community has a leasing office) as an extension of that place, subject to Title III. No government-issued web standard covers private businesses, but WCAG 2.1 AA has become the de facto benchmark that courts and plaintiffs measure against. For housing, the Fair Housing Act adds a second theory, under which an inaccessible leasing site can be argued to deny equal access to housing information. Plaintiffs filed roughly 3,100 federal website-accessibility lawsuits in 2025, up sharply from the year before, with multifamily among the targets and hotspots in New York, Florida and Illinois.

In 2025 the FTC ordered the overlay vendor accessiBe to pay $1 million over claims that its AI tool could make any website WCAG-compliant. The U.S. Department of Justice and accessibility advocates have made the same point more plainly, warning that an automatic overlay does not, by itself, make a site compliant. It sits on top of a broken page without changing how the page is built, and a screen-reader user can tell within seconds. Accessibility is structural: semantic HTML, readable text instead of content trapped in an opaque embed, labeled forms, keyboard operability and sufficient contrast.

On a WP FloorMap site

Every WP FloorMap plan includes tools for all three fronts. The consent manager files each script under a category as you add it, and it recognizes Google Analytics and Tag Manager, Microsoft Clarity, Meta Pixel, Hotjar, LinkedIn and TikTok on sight. A U.S. site ships opt-out under a Consent Mode v2 baseline, an opt-in mode serves European markets, the Global Privacy Control is honored on the server and in the browser, and the cookie table in the privacy policy is assembled from the same cookies and scripts the gating reads. Fees come from your own table or from your Engrain SightMap® expenses data, part of Engrain’s work on fee transparency, and a per-property switch folds every charge marked required into the price renters see. Floor plans, unit cards, filters, search and tour booking render as semantic content, with roles, labels and keyboard operability built into every page section, modal and menu. The brand color is checked for contrast as it is chosen, and no overlay widget ships on the site. Third-party embeds such as virtual tour players, video and map tiles control their own markup, as our accessibility statement notes. Which laws apply to your business, which fees count as mandatory and what your team publishes after launch, from alt text to heading order, remain yours to decide.