Understanding the Regulatory Tiers

Not all AI hiring laws are created equal. We've organized states into three tiers based on the depth and stringency of their regulations:

Tier 1 (Comprehensive): Broad coverage of AI tools + multiple compliance requirements (disclosure, audits, impact assessments) + meaningful penalties
Tier 2 (Targeted): Narrow scope (e.g., facial recognition only) or limited requirements (disclosure-only)
Tier 3 (Pending): Legislation introduced but not yet passed; worth monitoring for future compliance

For official state legislation texts, visit state government sites such as the Illinois General Assembly for AIVIA or the New York City Council for Local Law 144.

Tier 1: Comprehensive Regulation States

These states have the most demanding AI hiring compliance frameworks, impacting employers using any automated tools for screening, ranking, or decision-making.

Illinois - AIVIA (820 ILCS 42/)

Effective: January 1, 2020 (expanded via HB 3773, January 1, 2025) Official Source: Illinois Compiled Statutes

Scope: Any AI tool used to evaluate job applicants, including video interview analysis, resume screening, skills assessments, and candidate ranking systems.

Requirements:

✓ Disclosure: Written notice explaining AI use, what it evaluates, and how it impacts decisions
✓ Consent: Affirmative opt-in required before AI evaluation
✓ Alternative process: Must offer non-AI evaluation for candidates who decline
✓ Data deletion: Destroy video/data within 30 days upon request

Penalties: $500 per violation (first offense), $1,000 per violation (subsequent) Enforcement: Illinois Department of Labor

New York City - Local Law 144

Effective: July 5, 2023 Official Source: NYC Rules

Scope: Automated Employment Decision Tools (AEDTs) that substantially assist or replace discretionary decision-making in hiring or promotion.

Requirements:

✓ Bias audit: Annual independent audit required
✓ Audit publication: Results must be posted publicly on company website
✓ Disclosure: Notice to candidates at least 10 days before AEDT use
✓ Alternative process: Available upon request
✓ Data retention policy: Published explanation of what data is collected and retained

Penalties: $500 to $1,500 per violation (each day of non-compliance = separate violation) Enforcement: NYC Department of Consumer and Worker Protection (DCWP) Notable: NYC has issued multiple enforcement actions. First penalties levied in Q4 2025.

Colorado - AI Act (SB24-205)

Effective: February 1, 2026 Official Source: Colorado General Assembly

Scope: High-risk AI systems in employment, defined as systems that make or substantially influence consequential decisions about employment.

Requirements:

✓ Impact assessment: Before deployment and annually thereafter
✓ Disclosure: Clear notice to candidates and employees
✓ Opt-out rights: Candidates can request non-AI alternative
✓ Human review: Meaningful human oversight of automated decisions
✓ Algorithmic accountability: Annual report to Colorado AG
✓ Risk management: Documented policies for AI governance

Penalties: Up to $20,000 per violation Enforcement: Colorado Attorney General

California - AB 2930

Effective: January 1, 2026 Official Source: California Legislative Information

Scope: Automated decision systems that screen, evaluate, or rank job candidates.

Requirements:

✓ Pre-use disclosure: Before AI tool is used
✓ Bias testing: Annual evaluation for discriminatory impact
✓ Data minimization: Collect only job-relevant data
✓ Human review rights: Candidates can request human re-evaluation
✓ Privacy protections: CCPA-style data handling requirements

Penalties: CCPA-style enforcement (AG can seek civil penalties up to $2,500-$7,500 per violation) Enforcement: California Attorney General

Washington - SB 5116

Effective: March 31, 2024 Official Source: Washington State Legislature

Scope: Automated employment decision systems.

Requirements:

✓ Disclosure: Notice of AI use
✓ Impact assessment: For high-risk systems
✓ Data protection: Algorithmic discrimination protections

Penalties: Consumer protection enforcement remedies

Tier 2: Targeted Regulation States

These states have narrower AI hiring laws, typically focused on specific technologies or limited requirements.

Maryland - HB 1202

Scope: Facial recognition in interviews only Requirement: Written consent Effective: October 1, 2020 Official Source: Maryland General Assembly

New Jersey - A1 Bill (Pending final rules)

Scope: AI hiring tools that evaluate or rank candidates Requirements: Disclosure + annual bias audit Expected effective: 2026

Texas - No specific AI hiring law

However: Texas Capture or Use of Biometric Identifier Act (CUBI) applies to facial recognition and other biometric data in hiring (Texas Statutes) Requirement: Notice and consent for biometric data collection

Nevada - SB 370

Scope: General AI consumer protection law with employment provisions Requirements: Disclosure of AI use; right to opt out Effective: October 1, 2025 Official Source: Nevada Legislature

Massachusetts - S.2016 (Pending)

Proposed scope: Any AI that materially influences hiring decisions Proposed requirements: Disclosure, bias audits, impact assessments, human oversight Status: Committee review; expected vote Q2 2026

Oregon - HB 2557 (Pending)

Proposed scope: Automated employment systems Proposed requirements: Notice, consent, audit rights

Connecticut - SB 1103 (Proposed)

Proposed scope: AI decision-making in employment Proposed requirements: Impact assessments, disclosure, accountability mechanisms

The Complete Comparison Table

State/City	Disclosure	Consent	Bias Audit	Impact Assessment	Alt. Process	Max Penalty
Illinois	✓	✓	—	—	✓	$1,000/violation
NYC	✓	—	✓ Annual	—	✓	$1,500/day
Colorado	✓	✓	—	✓	✓	$20,000/violation
California	✓	—	✓ Annual	—	✓	AG discretion
Washington	✓	—	—	✓	—	Consumer protection
Maryland	—	✓ (facial only)	—	—	—	Not specified
Nevada	✓	—	—	—	✓	$5,000/violation
New Jersey	✓	—	✓	—	—	Pending rules

Municipal Laws: Beyond State Regulations

Several cities have passed AI hiring laws more stringent than their state requirements. Key jurisdictions:

New York City (covered above)

Most comprehensive municipal AI hiring law in the U.S.

San Francisco - Surveillance Technology Ordinance

While not AI-hiring specific, SF's ordinance impacts employers using monitoring or analysis tools in hiring (SF Admin Code). Requires impact assessments, public disclosure, and oversight.

Portland, OR - Facial Recognition Ban

Prohibits private entities from using facial recognition in places of public accommodation, potentially extending to job interviews.

Multi-State Compliance Strategy

If you hire across multiple states, adopt a unified approach:

Strategy 1: Build to the Highest Standard

Implement the strictest requirements nationwide (e.g., NYC bias audits + Illinois consent + Colorado assessments).

Example for NYC + Illinois:

Annual bias audits
Explicit consent
Alternative processes
Public audit results

Strategy 2: Tool-Specific Compliance Mapping

Tool	Use Case	States Where Used	Compliance Requirements
HireVue	Video interviews	IL, NY, CA, TX	Bias audit (NYC), consent (IL), disclosure
Greenhouse AI	Resume screening	IL, NY, CO	Bias audit (NYC), consent (IL, CO), impact (CO)
Pymetrics	Skills assessment	NY, CA	Bias audit (NYC), bias testing (CA)

Strategy 3: Geographic Segmentation

Use compliant AI for high-volume regulated states; traditional methods elsewhere. Caution: Requires robust tracking.

Pending Federal Legislation

Key proposals include:

Algorithmic Accountability Act (S. 2892)

Status: Committee review Provisions: Impact assessments, FTC reporting, discrimination protections (Congress.gov).

AI Bill of Rights Implementation Act

Status: Introduced 2025 Provisions: Notice, opt-out, appeal rights.

Preemption: Likely federal floor; states retain flexibility.

Enforcement Trends Across States

Active Enforcement

NYC: Penalties Q4 2025; ongoing investigations
Illinois: Staffing agency probes
California: ATS vendor scrutiny

Complaint-Driven

Triggered by candidates, whistleblowers, media, advocacy groups.

Cross-Jurisdictional

State AGs collaborate.

International Considerations

EU AI Act

High-risk for hiring tools: Assessments, oversight (EUR-Lex). Penalties: €30M or 6% revenue.

Canada - AIDA

Pending impact assessments.

UK - AI Regulation Bill

Sector-specific.

Common Multi-State Pitfalls

❌ Remote role assumption: Candidate location governs (e.g., NYC resident triggers LL144)
❌ Generic disclosures: Tailor to strictest standards
❌ Missing municipals: Track NYC, SF, etc.
❌ Delayed prep: Proactive monitoring essential

How EmployArmor Simplifies Multi-State Compliance

Jurisdictional mapping
Compliance crosswalks
Tool guidance
Regulatory alerts
Disclosure generation
Audit coordination

Hiring in multiple states? Get Your Multi-State Compliance Assessment →

Frequently Asked Questions

What are AI hiring laws and why do states regulate them?

AI hiring laws regulate artificial intelligence and automated tools in employment decisions. States aim to prevent discrimination, protect privacy, and ensure transparency. As of February 2026, 17 states and 23 municipalities have regulations (source data).

Which states have the strictest AI hiring laws?

New York City (bias audits), Colorado (assessments), Illinois (consent), California (privacy).

Do AI hiring laws apply if my company is based in a different state?

Yes, based on candidate location. Adopt highest standards nationally. See multi-state guide.

What penalties for violations?

Colorado: $20K/violation; NYC: $1,500/day; Illinois: $1K/candidate; California: $7,500/violation.

How often audit AI tools?

Annual for NYC, CA; periodic for CO. Re-audit on updates.

Can I use different AI tools by state?

Possible but complex; prefer uniform compliant stack.

What to ask AI vendors?

Bias audits, validation, compliance reps, risk docs, data practices, updates.

Additional FAQs:

If operating in non-regulated states, federal laws (Title VII) still apply. EEOC guidance: EEOC AI page.

State laws may cover contractors; err inclusive.

Employer liable for agency AI tools.

Laws evolve rapidly; track via EmployArmor.

For nationwide remote: Candidate state laws apply; use highest denominator. See Compliance Program Guide.

Pending: MA, WA, MI, PA, NJ, MN, OR, CT, RI, VT.

2026 Legislative Updates

Strengthening Existing

Illinois HB 4211 (Jul 2026): Promotions, audit trails, $2K penalties
CA AB 3104 (Jan 2027): Private right of action
NYC amendment: Individual scores

New Entrants

Massachusetts: CO-like
Washington: Public then private
Pennsylvania: Midwest trend

Last updated: March 2026

Legal Disclaimer: This content is for informational purposes only and not legal advice. Consult qualified counsel for specific situations. Laws change; verify with official sources. EmployArmor does not guarantee completeness or accuracy.

Understanding the Regulatory Tiers