evidence: One of these commenters expressed concern that the kinds of bureaucratic organizations subject to the title II regulations lack the internal resources to quickly evaluate the regulatory changes, determine whether they are currently compliant with the 1991 standards, and determine what they have to do to comply with the new standards. The other commenter argued that 18 months is the minimum amount of time necessary to ensure that projects that have already been designed and approved do not have to undergo costly design revisions at taxpayer expense. [...] Having carefully considered these comments, the Department believes that subpart H of this part strikes the appropriate balance by requiring small public entities to comply with the same technical standard as larger public entities while giving small public entities additional time to do so. The Department believes this longer compliance time frame is prudent in recognition of the additional challenges that small public entities may face in complying, such as limited budgets, lack of technical expertise, and lack of personnel. [...] 187 Moreover, because the content and quantity of individualized, password-protected documents or otherwise secured may vary widely, from a one-page utility bill to thousands of pages of medical records, the Department does not believe it is workable to prescribe a set number of days under which a public entity must make these documents accessible. The wide range of possible time frames that commenters suggested, coupled with the comments the Department received on the remediation time frames that were associated with the previously proposed course content exceptions, helps to illustrate the challenges associated with selecting a specific number of days for public entities to remediate content.