regulations and Compliance

Kiosk Standards

Kiosk Regulations – Kiosk Standards

Here is our coverage of the regulatory compliance standards which affect and/or come into play for kiosks.  Some are by law, some by suggestion. Some apply to only federal but many are assumed across the board (based on legal activity).  States often have their own set of regulations (think California).  Biometrics in states like Illinois is another consideration.  On our Legal Actions page we track different court cases across self-service.


  • ADA Standards for Kiosks — Providing access for the disabled is the law, not an option. Disabled come in all forms from wheelchair, to hearing to sight to any number of “differences”. These standards apply to digital signage to ATMs to POS checkout to any public access system.
  • ADA for Europe is covered in EN 301-549. EN 301 549 is the European standard that sets out accessibility requirements for information and communication technology (ICT) procured by the public sector. It applies to products as well as services.
  • HIPAA Standards for Privacy & Self-Service — security in healthcare is originating basis but data security extends to all types of public data collection.  Violations can result in millions of dollars in fines.
  • FDA Standards – A 510(K) is a premarket submission made to FDA to demonstrate that the device to be marketed is as safe and effective, that is, substantially equivalent, to a legally marketed device (section 513(i)(1)(A) FD&C Act) that is not subject to premarket approval.
  • PCI & EMV Payment Standards — from out of scope to QSA to devices to much more, payment data must be protected.  October 2015 is the big Liability Shift  and organizations are putting in place their response now.
  • Section 508 — often overlooked but this standard ensures that government online cyber mechanisms communicate effectively with users.
  • UL Standards — an exposition of UL standards which come into play for self-service (kiosks, ATMs, Checkouts) including UL 2361, UL 291
  • Made in America — see DOT for regulations. Many RFPs specify American Made and then you have the DOT doc explaining exactly what is meant by that. A bit like ADA compliant.
  • Environmental Standards for Outdoor — this includes the various standards that come into play for Outdoor or environmental circumstance. This ranges from NEMA rating to IP standards for ingression protection to vandal resistant touch screens.  What is the difference between NEMA 4 and NEMA 4X (besides about $200 in cost).
  • 60601-1 — Medical devices/equipment is held to a higher level of safety than almost all other types of equipment on the market. There are several reasons for this: medical equipment may be used on patients who are not able to respond to hazardous conditions or pain, an actual electrical connection between the equipment and patient may exist, and certain types of medical equipment function as life support so their failure could result in the patient’s death. The medical equipment basic safety and essential performance standards were written to take this into account, so their requirements impact your entire design and documentation process. Here is ISO page and here is ISO Medical Devices related page for ISO 13485.
  • Gaming Regulations – GLI Certification — GLI’s business is to test, review and report on gaming devices and systems against the standards established by relevant gaming jurisdictions worldwide. Each jurisdiction has the authority to set their own standards; however, many use our standards as a starting point in developing their regulations.
  • VPAT —  Consistent with the original VPAT, version 2.4 provides a column for recording conformance to each provision of a standard or guideline relevant to a product or service. Manufacturers or venders declare the degree of conformance using one of four conformance levels: supports; partially supports; does not support; or not applicable.
  • WCAG — Here is the working draft for 2.2. Web Content Accessibility Guidelines (WCAG) 2.2 covers a wide range of recommendations for making Web content more accessible. Following these guidelines will make content more accessible to a wider range of people with disabilities, including accommodations for blindness and low vision, deafness and hearing loss, limited movement, speech disabilities, photosensitivity, and combinations of these, and some accommodation for learning disabilities and cognitive limitations; but will not address every user need for people with these disabilities.

More Regulations and Certification That Come Into Play — Depending

Light Electric Vehicles (bikes, scooters, eg) — UL 2271, 2849 — ISO 13063

Typical Smart City –– from Cherry Creek Colorado 2023

  • Weatherproof, including ability to function in extreme heat and cold;
  • Graffiti resistant including procedures for preventing and rectifying damage from inclement weather, dirt and
    vandals, which shall be the responsibility of vendor;
  • ADA compliant including adjusting height of content and interactive features for users in wheelchairs and
    approach height/reach requirements and accessibility for the visually impaired;
  • Allow for the display of advertising as approved by the CCN BID, when passive, but upon engagement by a
    user, the advertising will be minimized or eliminated to take a secondary position to interactive content;
  • Employ interactive touchscreen technology, be location aware with customized mapping and wayfinding, in
    particular with supporting features for local retail locations;
  • Provide filtering to search by category of activity; include rational sorting protocol including proximity and type;
    include a procedure to ensure all content is up to date, accurate and relevant; and an ability to transfer
    information to user’s mobile devices.
  • Provide surveying capability including the ability to pose questions to users, collect responses and
    disseminate to the CCN BID;
  • Include potential integration of social media, gaming and other applications to encourage use engagement;
  • Have the ability to switch between Spanish and English with the capability of support for other languages at a
    later date