NYC Local Law 144 Enforcement: First Violations and What Employers Got Wrong

NYC Local Law 144 Enforcement: First Violations and What Employers Got Wrong

When New York City's Local Law 144 (NYC Admin. Code §§ 20-870 through 20-875) went into full effect on July 5, 2023, many employers took a wait-and-see approach. The law was new. The implementing rules under 6 RCNY § 5-300 had just been finalized. DCWP signaled it would lead with education before penalty proceedings.

That window has closed.

By 2026, the NYC Department of Consumer and Worker Protection (DCWP) has moved from educational outreach to active enforcement — investigating employer websites, responding to candidate complaints, and initiating penalty proceedings against employers who have no compliance program in place. The $375/day first-violation and $1,500/day subsequent-violation penalties (NYC Admin. Code § 20-875) are accruing daily for employers still in a wait-and-see posture.

This article covers what DCWP has found in early enforcement, the three most common violations, what happens if you receive a DCWP inquiry, and how to conduct a self-audit in 30 minutes.

For a full overview of LL144's three requirements, see our NYC LL144 Compliance Guide 2026. For the complete suite of compliance tools, see our bias audit tool, public disclosure page tool, and candidate disclosure notices tool.

DCWP Enforcement Timeline and Current Status

Pre-July 2023: DCWP conducted extensive stakeholder engagement and rulemaking. The final implementing rules at 6 RCNY § 5-300 were published in April 2023. DCWP issued guidance documents and held employer information sessions. The official enforcement posture was educational.

July 5, 2023 – December 2023: LL144 went into full effect. DCWP began receiving employer self-disclosure filings (employers were encouraged, though not required, to file notice with DCWP). DCWP's enforcement resources were primarily directed at large employers and those in industries with heavy AI hiring tool adoption — financial services, tech, staffing agencies, and retail.

2024: DCWP began conducting proactive website audits — reviewing employer websites to check whether required bias audit disclosures were present and compliant. Complaint intake from candidates who had not received required notices increased. DCWP sent initial inquiry letters to employers with no posted disclosure or clearly non-compliant disclosures.

2025: Enforcement escalated. DCWP initiated formal penalty proceedings against employers who had not responded to inquiry letters or had not come into compliance. The agency's enforcement approach expanded to include mid-market employers and not just Fortune 500 companies. Settlement negotiations became more common, with penalties discounted for employers who demonstrated good-faith efforts toward compliance.

2026 and Current Status: DCWP enforcement is active, routine, and not limited to complaints. The agency treats LL144 compliance as a standard employer obligation, similar to its enforcement of consumer protection and wage laws. Employers should assume DCWP will eventually review their compliance — the question is whether they will be compliant when that happens.

The 3 Most Common Violations Found in Enforcement

DCWP's enforcement actions have revealed consistent patterns. The same three violations appear repeatedly across industries and employer sizes.

Violation 1: No Public Disclosure Posted

The single most common violation found in DCWP's enforcement activity is the complete absence of a public bias audit disclosure. Many employers knew they were using AI hiring tools, understood that LL144 required some kind of audit, and may have even started the process of engaging an auditor — but never actually posted the required disclosure on their website.

Why this happens:

• The audit and the posting are two separate steps that different teams often own. The auditor delivers a report to the HR team, who files it away without understanding that a public posting is legally required.
• Employers don't know where to post it. Some create a PDF and email it to candidates on request rather than posting it publicly.
• Employers assume their AEDT vendor handles it. Many vendors conduct their own audits of their tools, but those vendor-level audits do not substitute for the employer's required disclosure — and vendor audit reports are not formatted as compliant LL144 disclosures.

What DCWP looks for: A publicly accessible page on your company website containing the audit date, auditor name and contact information, and selection rate data by demographic group. DCWP reviewers search your careers page, footer links, compliance disclosures, and legal/privacy pages. If no LL144 disclosure is found after a reasonable search, it counts as non-compliant.

How to fix it: Use EmployArmor's NYC LL144 Public Disclosure Page tool to generate a compliant disclosure page with all required fields and host it at a persistent, publicly accessible URL on your company website.

Violation 2: Candidate Notice Timing Wrong

The second most common violation is providing candidate notices too late — or providing them in a form that doesn't meet the content requirements.

The timing problem: NYC Admin. Code § 20-871(c) requires notice at least 10 business days before the AEDT is used. Many employers send notices in their initial application acknowledgment email — but if their AI resume screener processes applications immediately upon receipt, the 10-business-day gap is never actually met. The notice goes out the same day or within hours of the AEDT running, which violates the law even though a notice technically exists.

The content problem: Some employers provide notice that the company "uses technology in its hiring process" without specifying that an AEDT is being used, what type of data it processes, or how candidates can request an alternative selection process. Generic technology disclosure language is not a compliant LL144 notice.

The missing accommodation process: The notice must explain how candidates can request an alternative selection process or accommodation. Many employers have not established any such process, so their notices either omit this element entirely or provide contact information that leads nowhere actionable.

What DCWP looks for: DCWP reviews complaint submissions from candidates who report they received no notice or received notice after being evaluated. When investigating, DCWP requests copies of notice communications, their timestamps, and evidence that 10 business days elapsed before AEDT use. They also review the notice content against the statutory requirements.

How to fix it: EmployArmor's Candidate Disclosure Notices tool generates compliant notices pre-loaded with your AEDT information and delivery timestamps, documents the 10-business-day window, and maintains a delivery audit trail.

Violation 3: Bias Audit Not Truly Independent

The third common violation is subtler: employers have completed a "bias audit" but the auditor does not meet LL144's independence requirements, or the audit does not meet the required statistical scope.

The independence failure: Some employers have used their AEDT vendor's own audit reports. Vendors like to provide bias audit documentation as a selling point — but these are audits conducted by the tool's creator, which is the opposite of independent. A vendor-provided audit report does not satisfy LL144 regardless of how thorough it is.

Other independence failures include using a consulting firm that provided other paid services to the employer within the prior two years, or using an HR analytics vendor that has a financial relationship with the AEDT vendor. The two-year, no-financial-relationship standard is strict.

The scope failure: LL144's implementing rules at 6 RCNY § 5-300 require specific demographic categories, intersectional analysis, and adverse impact ratio calculations. Some auditors — particularly those unfamiliar with LL144's specific requirements — produce reports that analyze aggregate outcomes without the required intersectional breakdown, or that calculate different statistical metrics than the regulations specify. An audit that doesn't include intersectional sex × race/ethnicity categories is non-compliant even if it otherwise appears thorough.

What DCWP looks for: DCWP reviews published disclosures for auditor identity, contacts auditors to verify independence, and evaluates whether the statistical methodology meets regulatory requirements. If the auditor has a prior relationship with the employer or vendor, or if the published results don't show the required demographic breakdown, DCWP treats the audit as non-compliant.

How to fix it: Use an auditor vetted for LL144 compliance. EmployArmor's bias audit tool includes auditor coordination and vets every auditor against LL144's independence requirements. The statistical outputs are specifically formatted to meet 6 RCNY § 5-300.

What DCWP Looks for in an Investigation

Whether triggered by a candidate complaint or DCWP's own monitoring, a typical LL144 investigation follows a pattern:

Step 1: Website Review. DCWP reviews your publicly accessible website for a bias audit disclosure. They check your careers page, footer links, legal/privacy/compliance pages, and any pages linked from job postings. If no compliant disclosure is found, this alone supports a violation finding.

Step 2: Initial Inquiry Letter. DCWP sends a written inquiry identifying the apparent violation and requesting documentation: copies of bias audits, auditor contracts, notice communications to candidates, timestamps, and a written explanation of your compliance program.

Step 3: Documentation Review. DCWP reviews your submitted documentation against LL144's requirements. Common document issues include: audits from non-independent auditors, audits that predate the required annual cycle, notices sent without 10-business-day lead time, and disclosures missing required elements.

Step 4: Findings and Penalty Calculation. If violations are confirmed, DCWP calculates penalties based on the number of violations and the number of days they have accrued. Penalties run from the date the violation began (which may be the date you first used the AEDT without compliance, not the date of the investigation).

Step 5: Settlement or Enforcement Action. Most cases settle. DCWP has shown willingness to negotiate reduced penalties for employers who demonstrate good-faith compliance efforts and come into full compliance during the investigation. Employers who resist or delay face formal enforcement proceedings with full statutory penalties.

How to Self-Audit Your LL144 Compliance in 30 Minutes

You don't need to wait for DCWP. Here's how to check your own compliance right now:

Step 1 (5 minutes): Identify your AEDTs. List every tool your company uses in the hiring process. For each tool, ask: does this tool score, rank, or classify candidates or employees using an algorithm? If yes, it's likely an AEDT. Common examples: AI resume screeners, video interview analysis platforms, predictive hiring scores, AI-powered assessments.

Step 2 (5 minutes): Check for public disclosures. Go to your company website as a stranger would — no internal logins. Search for LL144 disclosure, AEDT disclosure, or automated employment tool on your careers page and compliance/legal pages. If you can't find a disclosure in two minutes of searching, your candidates can't find it either.

Step 3 (5 minutes): Review disclosure contents. If you have a disclosure posted, verify it includes: (a) audit date, (b) auditor name and contact, (c) selection rates by required demographic category, and (d) adverse impact ratios. Any missing element is a compliance gap.

Step 4 (5 minutes): Check audit independence and date. Review your bias audit documentation. Was the auditor independent under LL144's two-year, no-financial-relationship standard? Is the audit dated within the past 12 months? If either answer is no, you need a new audit.

Step 5 (5 minutes): Review your candidate notice process. Pull up your application acknowledgment or first-contact email. Does it clearly state that an AEDT will be used? Does it identify the type of data the AEDT uses? Does it explain how to request an alternative process? Does your process ensure 10 business days between notice and AEDT evaluation?

Step 6 (5 minutes): Document your findings. Write down what you found. Even a brief internal memo documenting your compliance status and any gaps identified is useful — it shows good-faith self-monitoring if DCWP ever investigates.

If you found gaps in any step, use EmployArmor's compliance packet tool to build a complete remediation plan.

What to Do If You Receive a DCWP Inquiry

Receiving a DCWP inquiry letter is not the end of the world — but it requires prompt action.

Do not ignore it. DCWP inquiry letters have response deadlines. Missing the deadline escalates the matter and signals bad faith, which will affect any penalty negotiation.

Engage employment counsel immediately. DCWP investigations involve legal proceedings. Get an attorney familiar with NYC administrative law and employment compliance involved before responding.

Gather all relevant documentation. Collect: your bias audit reports, auditor contracts and independence documentation, candidate notice templates and delivery records, your public disclosure URL and archive, and records of when each AEDT was first used.

Come into compliance during the investigation. DCWP has discretion to negotiate reduced penalties. The single most powerful factor in penalty reduction is demonstrating that you've corrected the violations during the investigation. If you can show that disclosures are now posted, notices are now being sent correctly, and a new audit is underway, this significantly affects the outcome.

Be honest about what you don't have. DCWP investigators have seen every kind of documentation in these proceedings. Attempting to create after-the-fact documentation or misrepresenting your compliance history will make things substantially worse.

Penalty Structure: How Violations Compound Daily

NYC Admin. Code § 20-875 creates a penalty structure that punishes delay:

Penalties run per AEDT, per violation type. An employer with two AEDTs and no compliance program has six simultaneous violations (two tools × three violation types). At first-violation rates: $2,250/day. After initial notice from DCWP, subsequent violation rates apply: $9,000/day.

The "per tool" multiplier is often overlooked. Many employers think of LL144 penalties in terms of $375 or $1,500 per day total. The statute applies per AEDT — each tool is a separate violation unit. A staffing agency using four different AI screening tools with no compliance program faces up to 12 simultaneous daily violations.

The clock starts when the violation began, not when DCWP discovers it. DCWP can calculate penalties from the date you first used the AEDT without compliance. If you've been using an AI resume screener since January 2024 with no bias audit, the violation clock has been running since January 2024. A settlement negotiated in mid-2026 will factor in that 30+ month accrual.

First vs. subsequent violations. "Subsequent" does not mean a second separate investigation — it means a second violation after DCWP has issued a finding or notice about the first. Once DCWP sends a notice, the penalty rate for continuing violations on the same AEDT jumps to $1,500/day.

Use EmployArmor's penalty calculator at /tools/bias-audit to estimate your exposure based on your specific number of tools and days without compliance.

Frequently Asked Questions: LL144 Enforcement

Is DCWP actively enforcing LL144 in 2026?

Yes. DCWP has moved past the initial education-focused phase of enforcement. In 2026, DCWP conducts proactive website audits, processes candidate complaints, and initiates formal penalty proceedings. Employers should assume their compliance will be reviewed at some point and should be prepared.

What triggers a DCWP LL144 investigation?

Investigations can be triggered by: (1) candidate complaints — any job applicant or employee who did not receive required notice can file a complaint with DCWP, (2) DCWP's own proactive monitoring — DCWP reviews employer websites for required disclosures without waiting for complaints, or (3) referrals from other investigations or proceedings.

Can DCWP penalize us even if no candidate was harmed?

Yes. LL144 violations are procedural — the failure to conduct an audit, post a disclosure, or send notices is itself the violation, regardless of whether the AEDT produced biased outcomes. DCWP does not need to show that a candidate was discriminated against, only that the compliance requirements were not met.

What is the statute of limitations for LL144 violations?

The NYC Administrative Code does not specify a short statute of limitations for LL144 enforcement. Violations that have been accruing since the law's effective date (July 5, 2023) can be the basis for penalty calculations in current enforcement proceedings. Consult employment counsel for jurisdiction-specific limitation analysis.

Can we reduce penalties by coming into compliance during an investigation?

Yes. DCWP has demonstrated willingness to negotiate reduced penalties for employers who (1) respond promptly to inquiry letters, (2) come into full compliance during the investigation, and (3) cooperate with the investigation in good faith. Coming into compliance is not just the right thing to do — it is the single most effective penalty mitigation strategy.

Does LL144 enforcement require a candidate complaint, or can DCWP investigate on its own?

DCWP can initiate investigations on its own without any complaint. DCWP staff review employer websites as part of proactive monitoring and can identify apparent violations (such as missing disclosures) without any candidate triggering an inquiry.

What if our AEDT vendor says they've already done a bias audit of their tool?

Vendor-provided audit reports generally do not satisfy LL144's requirements. LL144 requires an employer-level audit conducted by an independent auditor with no relationship to either the employer or the vendor. Vendor self-audits are inherently non-independent, and vendor audit reports are not formatted as LL144-compliant employer disclosures. You need your own independent audit even if your vendor provides audit documentation.

How does LL144 enforcement interact with federal EEOC enforcement?

They are independent. DCWP enforces LL144 as a NYC administrative matter. The EEOC separately enforces Title VII (42 U.S.C. § 2000e) at the federal level. A bias audit that reveals adverse impact may prompt EEOC interest in your tool's outcomes. Conversely, a Title VII investigation may surface your LL144 non-compliance. Satisfying one enforcement regime does not insulate you from the other.

Get Compliant Now — Before DCWP Finds You

DCWP is actively investigating. The penalty clock is running. The fastest path to protection is a complete compliance program covering all three LL144 requirements.

EmployArmor's three purpose-built tools cover each requirement:

• Bias Audit Tool — Independent auditor coordination, statistical analysis, and annual re-audit scheduling
• NYC LL144 Public Disclosure Page Tool — Compliant disclosure page generation and hosting
• Candidate Disclosure Notices Tool — 10-day notice generation, delivery tracking, and audit trail

For a complete compliance package, see our Compliance Packet — a bundled solution that covers all three LL144 requirements plus documentation for potential DCWP inquiries.

Get your free compliance assessment →

Last updated: March 2026. This content is for informational purposes only and does not constitute legal advice. Consult qualified employment counsel for guidance specific to your situation. Statutory references: NYC Admin. Code §§ 20-870 through 20-875 (Local Law 144); NYC Admin. Code § 20-875 (enforcement); 6 RCNY § 5-300 et seq.