URAC Health Website Accreditation — Frequently Asked Questions

Last updated: April 2026

14 detailed answers to the most common questions about URAC Health Website Accreditation — what it covers, who needs it, how the process works, and what gaps organizations most commonly discover during preparation. Questions answered by IHS, led by Thomas G. Goddard, JD, PhD, former Chief Operating Officer and General Counsel of URAC.

What is URAC Health Website Accreditation?

URAC Health Website Accreditation is a voluntary program that recognizes organizations delivering evidence-based health information online against nationally verified standards. It addresses the accountability gap in consumer health content: organizations publish material patients use to make real clinical decisions — but without external review, readers have no basis for trusting that content is accurate, unbiased, or responsibly managed.

The program covers six domains: content quality grounded in reliable scientific evidence; editorial and advertising policy with clear separation of commercial and editorial content; conflict of interest management for contributors and editorial staff; consumer personal information protection with consent requirements; website privacy and security procedures; and linking policy governed by a quality oversight committee. Accreditation is valid for three years (URAC).

Who needs URAC Health Website Accreditation?

Any organization publishing health content for consumer or patient decision-making should evaluate this program. Priority candidates:

  • Health plans and managed care organizations — member portals, wellness content libraries, disease management resources, and benefits education content
  • Hospitals and health systems — patient education portals, condition-specific resources, and post-discharge content
  • Care management companies — condition management programs, health coaching platforms, and population health content tools
  • Health insurers — plan comparison tools, formulary explainers, and coverage education content
  • Healthcare associations — member-facing and public health education content
  • Health publishers and content platforms — organizations distributing health content at scale to consumers or patient populations

The program is not limited to large health systems. Any organization whose consumer-facing health content could influence patient decisions — and whose reputation depends on that content being trustworthy — has a stake in independent verification.

Is URAC Health Website Accreditation required by law or payers?

The program is voluntary — no federal statute mandates it. However, health plans operating in regulated markets where URAC Health Plan Accreditation is required may find that Health Website Accreditation strengthens their overall quality posture with state regulators and employer purchasers. Some payer contracts reference URAC standards for consumer-facing digital health content. Organizations should evaluate specific payer and regulatory requirements in their markets before treating the program as optional.

What are the six domains URAC Health Website Accreditation evaluates?

URAC's standards address every layer of how health content is produced, published, linked, protected, and made accessible:

  1. Content quality — health content must be grounded in reliable scientific evidence, with identified authors or reviewers, and must not make claims of therapeutic effect without scientific support
  2. Editorial and advertising policy — paid advertising must be clearly visually and contextually distinguished from editorial health content
  3. Conflict of interest management — a policy governing editorial team and author financial relationships must be accessible to users, not just internal compliance staff
  4. Consumer personal information protection — organizations must not collect personal health information without obtaining consumer consent
  5. Website privacy and security — specified security procedures for protecting consumer data must be documented and operational
  6. Linking policy and quality oversight — a quality oversight committee must evaluate and approve external links from health content; ad hoc linking is a standards violation

Health equity and accessibility for diverse populations are also addressed — including language accessibility, reading level appropriateness, and accommodation of users with disabilities.

What is the URAC Health Website Accreditation process?

URAC defines three formal steps: obtain standards from the URAC store, request a consultation with the URAC team for guidance, and execute the application agreement. In practice, successful accreditation requires significant preparation work before submission.

The full process as IHS structures it: gap assessment against all six domains; policy development across editorial, privacy, security, conflict of interest, and linking requirements; operational implementation to generate the compliance evidence reviewers will examine; and a submission package compiling policies and procedures in the format URAC's clinical and committee review process requires.

URAC's review involves a nurse or pharmacist clinical review followed by the Accreditation Committee decision. Organizations may receive requests for additional documentation during the review period.

Who reviews the application at URAC?

Two stages. First, a nurse or pharmacist conducts clinical review — evaluating whether content standards and editorial practices align with evidence-based requirements. This reviewer has clinical expertise and evaluates the substance of editorial policies, not just their existence. Second, the URAC Accreditation Committee makes the final accreditation decision. Requests for additional documentation or clarification may come from either stage.

The clinical review stage is where organizations without a genuine evidence-based editorial infrastructure encounter the most difficulty. Policies written to satisfy a checklist — but not operationally implemented — are identifiable at this stage.

How long does URAC Health Website Accreditation take?

Timeline depends on existing policy infrastructure and content governance maturity. Organizations with no formal editorial policy framework typically require 6–12 months of preparation before submission. Organizations with existing privacy and content governance documentation in place may move faster. URAC's review and committee decision add additional time after submission. IHS structures engagements to match specific organizational timelines and constraints.

How long is the accreditation valid?

Three years. After three years, organizations must submit for renewal. Ongoing compliance is required throughout the accreditation period — content governance structures, editorial policies, and quality oversight committee activity must remain operational between submission and renewal. Accreditation is not a one-time event; it reflects the organization's continuous operating posture.

What does an editorial policy need to include?

Under URAC standards, an editorial policy must:

  • Identify the author and/or reviewer for health content
  • Prohibit claims of therapeutic effect without competent and reliable scientific evidence supporting the claim
  • Prohibit publication of health content containing false or misleading claims or promoting ineffective or dangerous products
  • Clearly distinguish between paid advertising and editorial content — both in policy text and in how content is presented to users

The policy must be accessible to website users — not only internal staff. Most organizations have informal editorial practices that have never been formalized into a policy meeting these requirements.

What is the conflict of interest requirement?

Organizations must maintain a conflict of interest policy governing the editorial team and all authors of health content. The policy must be easy for users to find — not buried in legal terms or available only to internal compliance staff. Financial relationships between content contributors and commercial interests (pharmaceutical companies, device manufacturers, health product vendors) must be disclosed.

The most common gap: organizations have internal conflict of interest policies covering employees generally, but no mechanism for collecting and disclosing author-level financial relationships in published health content. The policy must extend to freelancers, external reviewers, and advisory board members who contribute to health content.

How does the privacy standard differ from HIPAA?

URAC's privacy standard covers all personal health information collected through the website — not only protected health information as defined under HIPAA. For covered entities, URAC privacy requirements overlap substantially with HIPAA obligations. But URAC applies its requirements to any health-related data collected from consumers interacting with the site, regardless of whether it meets HIPAA's specific definition of PHI.

Practical implication: a health plan with a robust HIPAA compliance program cannot assume that program satisfies URAC's privacy requirements without mapping it to URAC's specific standard language. IHS performs that mapping during the gap assessment and eliminates redundant documentation work where HIPAA and URAC requirements overlap.

What is the linking policy requirement?

Organizations must maintain a written policy governing which external sites are linked from health content. A quality oversight committee must be involved in evaluating and selecting sites to which health content links. Ad hoc linking by individual content authors without committee review is a standards violation — regardless of how credible the linked source appears.

This requirement is frequently underestimated. Organizations assume that linking to recognized medical institutions (Mayo Clinic, NIH, CDC) satisfies the standard. It does not — the process by which linking decisions are made, documented, and reviewed is what URAC evaluates, not the quality of any individual link.

What are the most common gaps organizations discover during preparation?

IHS identifies six recurring gaps across gap assessments:

  1. No formal editorial policy — content has been published without documented author or reviewer attribution, evidence requirements, or false-claims prohibition language
  2. No user-accessible conflict of interest policy — internal policies exist but have never been adapted for user-facing publication or content-level author disclosure
  3. No quality oversight committee for linking decisions — content authors link based on personal judgment with no documented review process
  4. Advertising and editorial content not clearly separated — sponsored content is visually similar to editorial content; users cannot distinguish commercial from independent information
  5. Privacy consent mechanisms inconsistently applied — consent exists at the system level but is not applied to all health-specific data collection points across the site
  6. Security documentation not mapped to URAC requirements — IT maintains technical security capabilities, but no documented procedure satisfies URAC's specific procedural language

None of these gaps are prohibitive. Each represents a policy and operational change, not a technology overhaul. IHS provides templates and drafts for each — and structures implementation to generate the operational evidence reviewers require.

Can URAC Health Website Accreditation be pursued alongside URAC Health Plan Accreditation?

Yes. Health plans pursuing URAC Health Plan Accreditation can pursue Health Website Accreditation alongside it. Coordinating both engagements allows shared documentation infrastructure — privacy and security policies, governance structures, and quality oversight frameworks — to satisfy requirements across both programs without redundant development work. IHS coordinates multi-program URAC engagements to streamline preparation and eliminate duplication of effort.

See our URAC Health Plan Accreditation consulting for details on the health plan program.

Questions Not Answered Here?

Schedule a no-obligation consultation with IHS. We will assess your organization's current content governance posture and give you a clear picture of what URAC Health Website Accreditation requires for your specific situation.

Schedule a Free Discovery Session

Related Resources