Employers using AI in hiring now face a layered compliance landscape: federal guidance from the EEOC, local law requirements in New York City, and state law obligations in Colorado (with more states following). These frameworks overlap significantly — but they're not the same, and a "yes" under one doesn't mean "compliant" under all three.
This guide compares the three major frameworks side-by-side, explains where they align, where they differ, and what employers operating in multiple jurisdictions need to do.
Quick Reference Comparison
| EEOC Guidance | NYC Local Law 144 | Colorado SB 24-205 | |
|---|---|---|---|
| Type | Federal interpretive guidance | Local law (NYC ordinance) | State law (Colorado statute) |
| Legally binding? | Guidance only (courts give weight) | Yes — enforceable law | Yes — enforceable law |
| Effective | May 2024 (guidance published) | July 5, 2023 | June 30, 2026 |
| Geographic scope | Nationwide (employers with 15+ employees) | NYC hiring only | Colorado employees/candidates |
| Key mechanism | Disparate impact / EEO law enforcement | Pre-use bias audit + public disclosure | Pre-deployment impact assessment |
| Bias audit required? | Recommended; evidence in litigation | Yes — independent, annual | Impact assessment required (different from audit) |
| Public disclosure? | No explicit requirement | Yes — website posting required | No public posting requirement |
| Candidate notice? | No explicit requirement | Yes — 10 days before use | Yes — before or with decision |
| Opt-out rights? | No explicit right | Alternative process required | Yes — opt-out and appeal rights |
| Penalties | EEOC charges, litigation, settlements | $500-$1,500/violation/day | Up to $20,000/violation |
| Who enforces? | EEOC + private plaintiffs | NYC DCWP | Colorado AG |
Federal EEOC AI Hiring Guidance
What It Is
The EEOC's AI hiring guidance is interpretive guidance, not a statute. Published in May 2024, it explains how existing federal employment discrimination laws — Title VII, ADA, ADEA, GINA — apply to AI hiring tools.
Because it's guidance (not law), it can't be enforced on its own. But EEOC guidance carries significant legal weight: courts routinely consider it when interpreting federal EEO statutes, and the EEOC cites it in investigations.
What It Requires (In Practice)
- Test AI tools for disparate impact on protected classes before deployment and regularly thereafter
- Validate job-relatedness if disparate impact is found
- Conduct vendor due diligence — get disparate impact data and validation studies from vendors
- Provide accommodations for candidates who can't fully participate in AI-based assessments
- Don't use AI as a "medical examination" — some psychological or behavioral assessments may violate ADA pre-offer rules
What It Doesn't Require (That State/Local Laws Do)
- No mandatory bias audit format or independent auditor requirement
- No public disclosure requirement
- No specific candidate notification requirement before AI use
- No formal impact assessment document
Enforcement Reality
The EEOC investigates charges, issues "cause" findings, and litigates cases. Employers found liable can face class action damages, consent decrees, and reputational harm. The EEOC's 2025 Technology Division has dedicated AI enforcement staff who independently test AI tools.
NYC Local Law 144 (LL144)
What It Is
NYC Local Law 144 is a local ordinance that took effect July 5, 2023. It applies to employers and employment agencies that use Automated Employment Decision Tools (AEDTs) in hiring or promotion decisions in New York City.
Unlike EEOC guidance, LL144 is a binding law with mandatory requirements, specific compliance deadlines, and per-day civil penalties for violations.
What It Requires
Bias Audit (Annual)
- Must be conducted by an independent auditor (not the employer or AI vendor)
- Must analyze selection rates and impact ratios by sex and race/ethnicity categories
- Must include intersectional analysis where statistically feasible
Public Website Disclosure
- Summary of bias audit results must be posted on employer website
- Must include date of audit, distribution date of AEDT, selection rates, and impact ratios
- Must remain posted for at least 2 years
Candidate Notification
- Candidates must be notified at least 10 business days before the AEDT is used
- Notification must state that an AEDT will be used and what it evaluates
- Must include information about the job qualifications and characteristics the tool assesses
Alternative Process
- Employers must provide an accommodation process for candidates who object to AEDT evaluation
- A human-reviewed alternative must be available
What Makes LL144 Unique
- Independent bias audit requirement — you can't self-audit; must use a third party
- Mandatory public website disclosure — EEOC and Colorado don't require public posting
- Narrow demographic categories — LL144 focuses on sex and race/ethnicity; less explicitly on age, disability, religion
- Geographic limitation — only applies to NYC-based hiring; doesn't cover remote workers hired by NYC employers for out-of-state roles (this is an open interpretive question)
Enforcement Reality
The NYC DCWP actively investigates. The first LL144 enforcement action demonstrated that DCWP doesn't wait for complaints — it proactively reviews employer websites and issues violations. Per-violation, per-day penalties add up quickly.
Colorado SB 24-205 (Colorado AI Act)
What It Is
Colorado SB 24-205 is a comprehensive state AI law effective June 30, 2026. It takes a risk-based approach, applying requirements to "high-risk AI systems" — which explicitly includes employment AI. It's the broadest state AI law in the U.S. in terms of scope.
For detailed analysis of what "high-risk" means, see: What Counts as High-Risk AI in Employment Under Colorado Law
What It Requires
Pre-Deployment Impact Assessment
- Must be completed before deploying a high-risk AI system
- Must assess training data, purpose, risk of algorithmic discrimination, mitigation measures
- Must be updated annually or when significant changes occur
- See our: Colorado AI Impact Assessment Template
Candidate/Employee Notification
- Must notify affected individuals before or at the time of a consequential decision
- Notification must include the type of AI used and the purpose
- Must include contact information for questions
Opt-Out and Appeal Rights
- Individuals have the right to opt out of certain AI-assisted decisions
- Individuals have the right to appeal adverse decisions and request human review
- Employers must have documented processes for both
Transparency with Regulators
- The AG can request impact assessments during investigations
- Must maintain records sufficient to demonstrate compliance
What Makes Colorado Law Unique
- Opt-out and appeal rights — neither EEOC nor LL144 provide individual opt-out rights
- Covers all employment decisions (not just hiring) — promotions, compensation, termination
- Risk-based "substantial factor" standard — covers AI that influences but doesn't solely determine decisions
- No public disclosure requirement — unlike LL144, you don't have to post impact assessments publicly
- Developer obligations too — the law also applies to the AI developers (vendors), who must provide employers with documentation and notify of material changes
Enforcement Reality
The Colorado AG Phil Weiser has been vocal about AI enforcement priorities. Enforcement begins June 30, 2026. A 60-day cure period applies after notice of a violation — but the cure period doesn't help if you haven't done the pre-deployment impact assessment at all.
Where the Frameworks Overlap
Despite differences, all three frameworks share a core set of concerns:
1. Disparate Impact on Protected Groups All three are fundamentally concerned with AI that produces discriminatory outcomes, whether measured as disparate impact (EEOC), impact ratios (LL144), or algorithmic discrimination risk (Colorado).
2. Vendor Accountability All three reject the argument that using a third-party vendor transfers liability. Employers are responsible for the AI they deploy.
3. Job-Relatedness All three frameworks implicitly or explicitly require that AI hiring tools measure characteristics that are genuinely predictive of job performance.
4. Disability and Accommodation The EEOC guidance is most explicit, but Colorado law and LL144 both contemplate accommodation needs for AI assessment tools.
For Employers Operating in Multiple Jurisdictions
If you hire in both NYC and Colorado (and have 15+ employees), you're subject to all three frameworks simultaneously. Here's the practical approach:
Build toward the most demanding requirement in each category:
| Compliance Element | Most Demanding | Framework |
|---|---|---|
| Bias audit format | Independent auditor, annual | LL144 |
| Public disclosure | Website posting required | LL144 |
| Candidate notification | 10 business days before use | LL144 |
| Impact assessment documentation | Formal pre-deployment assessment | Colorado |
| Opt-out/appeal process | Documented formal process | Colorado |
| Demographic categories analyzed | Race, sex, age, disability, national origin | EEOC |
| Employment decisions covered | Hiring through termination | Colorado + EEOC |
Practical recommendation: A program that fully satisfies Colorado impact assessment requirements AND LL144 bias audit/disclosure requirements will be well-positioned on EEOC compliance — because the EEOC's evidentiary standards largely overlap with the testing Colorado and NYC require.
Where Indeed Usage Fits In
If you use Indeed's AI candidate ranking features in NYC hiring, you're potentially subject to LL144. For Colorado hiring, you may be subject to SB 24-205. And at the federal level, EEOC standards apply regardless of geography.
For a detailed breakdown:
Federal AI Hiring Laws: The Broader Picture
EEOC guidance is one piece of the federal landscape. For a complete overview:
Summary: Your Compliance Checklist
If you use AI in hiring anywhere in the U.S.:
- Inventory all AI hiring tools
- Test each for disparate impact on protected groups (EEOC)
- Document vendor due diligence (EEOC)
- Have accommodation processes in place (EEOC + Colorado + LL144)
If you hire in New York City:
- Commission an independent bias audit (LL144)
- Post bias audit results on your website (LL144)
- Implement 10-day pre-use candidate notice (LL144)
- Establish a human-review alternative process (LL144)
If you hire in Colorado:
- Complete pre-deployment impact assessments for high-risk AI (Colorado)
- Implement candidate notification at decision time (Colorado)
- Establish opt-out and appeal processes (Colorado)
- Schedule annual impact assessment reviews (Colorado)
Related Resources
- EEOC AI Hiring Guidance 2026
- NYC Local Law 144: Full Compliance Guide
- Colorado AI Act: Full Employer Compliance Guide
- Colorado AI Impact Assessment Template
- What Counts as High-Risk AI in Employment Under Colorado
- Does Indeed Use AI to Rank Candidates?
- Does Indeed Trigger NYC Local Law 144?
- Federal AI Hiring Laws Overview
- Illinois AIVIA Compliance Guide
Check your compliance across all jurisdictions: Get Your Free Assessment →
Legal Disclaimer: This content is for educational purposes and is not legal advice. Employment laws vary by jurisdiction, and compliance is highly fact-specific. Always consult with qualified legal professionals for advice specific to your situation and AI tools. EmployArmor does not provide legal services.
Last updated: April 2026