Hooray! It's yearly security training day!
Everyone rage clicks next through slides about phishing. Five minutes later, it's congratulations, here's your certificate. You're now "trained."
Next up. GDPR.
Sure, you watched a video. Can anyone remember what PII stands for? No? Does it matter? Not in the least. We got the receipt for the auditors.
Nothing changed. Passwords stay weak and are shared. Data gets shared in random Slack channels. We're compliant anyway until next year.
But accessibility?
At least security gets its periodic slide deck. Accessibility gets a shrug and "we'll fix it later." No training. No certificates. No theater. Just excuses about budgets and timelines.
Same performative bullshit, different legal requirement.
The solution isn't rocket science, but it does require actually giving a shit.
Train people properly. Not a one-hour certificate factory, but ongoing learning. Pair junior devs with accessibility experts. Do code reviews that check accessibility and usability. Make it normal and on-going, not a one-off special yearly event.