Why HR Teams Are on the Front Lines
Automated hiring tools reached mainstream adoption faster than lawmakers anticipated. Today, an estimated 75% of large employers use AI-assisted applicant tracking systems, and video interview analysis platforms have processed millions of candidates without candidates' knowledge that AI was evaluating them.
Legislators noticed. The result is a growing body of state law that directly targets the HR technology stack:
- Bias audits — independent third-party tests for discriminatory patterns in AI hiring tools
- Disclosure requirements — notifying candidates and employees when AI is used to make consequential decisions
- Consent requirements — obtaining affirmative agreement before certain AI analysis
- Impact assessments — documenting how AI affects protected groups before and during deployment
- Data deletion rights — honoring requests to destroy AI-collected data within defined windows
Non-compliance carries real risk. Penalties range from $500 per violation per day (NYC) to class action exposure under Illinois' biometric and AI laws. HR leaders who inherited AI tools from IT procurement without compliance review are now in the hot seat.
State-by-State HR AI Requirements
The following states have enacted or significantly advanced laws with direct implications for HR technology and employment AI. Requirements, effective dates, and penalties are shown for each.
Employers using AI to analyze video interviews of Illinois applicants must provide advance notice, explain how the AI evaluates candidates, and obtain written or electronic consent. Candidates may request deletion of their video and AI-analyzed data within 30 days — and the employer must comply. Sharing AI-analyzed video data with third parties is prohibited without consent.
Employers and staffing agencies using an automated employment decision tool (AEDT) to screen candidates or employees for NYC roles must: (1) conduct an annual independent bias audit, (2) publish audit results on their website, and (3) notify candidates at least 10 business days before the AEDT is used. NYC residents may request alternative selection processes.
Colorado's landmark AI Act covers "high-risk AI systems" used in employment decisions, including hiring, promotion, termination, and compensation. Deployers must complete annual impact assessments, implement risk management policies, notify employees and applicants when consequential decisions are made using AI, and provide a meaningful opportunity to appeal or correct errors in data used.
Maryland prohibits employers from using facial recognition technology during job applicant interviews without the express written consent of the applicant. This covers any AI system that identifies or analyzes facial features to assess candidates. Consent obtained as a condition of employment is not valid — meaning employers cannot make the interview conditional on consenting to facial recognition.
California's regulatory environment is the most complex for HR AI. The CPRA grants employees and applicants extensive rights over personal data used in automated decisions. AB 1008 clarifies that biometric data captured by AI tools constitutes personal data. Multiple pending bills would impose bias audit requirements and disclosure obligations for AI used in employment decisions — closely modeled on NYC Local Law 144.
Texas HB 1709 would require employers using AI systems that make or substantially influence employment decisions — including hiring, compensation, discipline, and termination — to disclose AI use to affected individuals and provide information about the AI system's basis for decisions. Texas is also developing broader high-risk AI legislation that would include employment as a covered use case.
Disclaimer: This navigator is for informational purposes only and does not constitute legal advice. Law requirements, effective dates, and enforcement postures evolve rapidly. Consult qualified employment and technology counsel for your specific situation before making compliance decisions.
AI Use Case Compliance Matrix
Not all HR AI tools face the same regulatory exposure. Use this matrix to quickly assess the compliance risk profile for the most common categories of workplace AI.
| HR AI Tool | States Regulated | Key Requirements | Risk Level |
|---|---|---|---|
|
Resume Screening / ATS
Automated applicant ranking, scoring
|
NYC
CO
CA
TX (pending)
|
Annual bias audit (NYC); impact assessment (CO); data subject rights (CA); disclosure (TX) | High |
|
Video Interview Analysis
Emotion AI, facial analysis, voice scoring
|
IL
MD
NYC
CA
|
Consent + notice + 30-day deletion (IL); facial recognition ban (MD); AEDT bias audit (NYC) | High |
|
Employee Monitoring / Productivity Tracking
Keystroke logging, screen capture, location tracking, behavior analytics
|
NY State
CT
CA
DE
|
Pre-hire notice of electronic monitoring (NY, CT, DE); consent and transparency (CA CPRA) | Medium |
|
Chatbot Recruiters
AI-powered initial screening, scheduling, Q&A
|
CA
CO
TX (pending)
|
AI disclosure to applicants (CA, TX); high-risk AI deployer obligations if used for decisions (CO) | Medium |
|
Predictive Analytics for Attrition
Flight risk scoring, engagement prediction
|
CO
CA
|
Impact assessment if used for consequential decisions (CO); data use transparency (CA CPRA) | Medium |
|
Automated Performance Reviews
AI-scored performance, promotion recommendations
|
NYC
CO
CA
TX (pending)
|
AEDT rules apply if used for promotion decisions (NYC); impact assessment (CO); appeal rights (CO) | High |
HR AI Compliance Checklist
Work through these steps to build a defensible HR AI compliance program. Check off items as you complete them — your progress is saved locally in this browser.
Key HR AI Compliance Deadlines
These are the most time-sensitive compliance milestones for HR teams using AI in employment. Dates reflect current law and may shift if bills are amended or effective dates modified.
Illinois AI Video Interview Act — Full Compliance Required
Notice, consent, and 30-day data deletion obligations for AI-analyzed video interviews have been in effect since 2020. If you haven't audited your video interview vendors for AIAA compliance, do so immediately — private right of action means candidates can sue.
NYC Local Law 144 — Bias Audits & Notices In Effect
All AEDTs used for NYC employment decisions must have completed their initial bias audit and be providing 10-business-day candidate notices. Annual bias audit renewal deadlines are rolling based on your last audit date.
Colorado SB 205 — High-Risk AI Obligations Begin
Colorado's AI Act takes effect June 30, 2026 (delayed from February 2026 by SB 25B-004). HR teams deploying high-risk AI in employment contexts must complete impact assessments, implement risk management policies, and establish notice and appeal workflows before this date.
California Employment AI Bills — Legislative Session Closes
Multiple California bills targeting AI in hiring and promotion decisions are advancing in the 2025–26 legislative session. If enacted, they could create NYC-style bias audit requirements for California employers by late 2026 or 2027.
Texas HB 1709 — Potential Employment AI Disclosure Law
Texas is advancing HB 1709 and related high-risk AI legislation. If passed, disclosure requirements for AI in employment decisions could take effect in Texas with a short implementation window — potentially 90–180 days from enactment.
NYC Local Law 144 — Annual Bias Audit Renewal
NYC requires a new bias audit every 12 months. If your organization completed its initial audit in mid-2023, your first renewal was due mid-2024, and renewals continue annually. Late or missing audits can result in per-day penalties.
Tools to Help You Stay Compliant
These AI Laws by State tools are purpose-built for HR compliance teams navigating the state AI law landscape.
Frequently Asked Questions
As of 2026, the states with the most direct AI-in-hiring regulation are Illinois (AIAA — video interview AI consent and data deletion), New York City (Local Law 144 — annual bias audits for automated employment decision tools), Colorado (SB 205 — high-risk AI impact assessments effective June 30, 2026), Maryland (ban on facial recognition in hiring), and California (multiple bills covering automated decision-making and workplace monitoring). Texas HB 1709 adds disclosure requirements for AI systems making employment decisions. Additional states including Connecticut, Virginia, and Washington have introduced or are actively debating similar legislation. Use our Bill Comparator to compare requirements side by side.
Yes. NYC Local Law 144 applies to any employer or employment agency that uses an automated employment decision tool (AEDT) to screen candidates for positions located in New York City, regardless of where the employer is headquartered. If you use an AI-powered applicant tracking system, resume screener, or interview analysis tool to make hiring decisions for NYC-based roles, you must comply — including conducting annual independent bias audits, publishing audit results, and notifying candidates before using the AEDT. Remote roles where employees will perform work in NYC are also covered.
Under NYC Local Law 144, an automated employment decision tool (AEDT) is any computational process — including machine learning, statistical modeling, data analytics, or AI — that substantially assists or replaces discretionary decision-making in screening employment candidates or employees for promotion. This includes AI resume screeners, video interview analysis software, automated ranking or scoring systems, and predictive analytics used in hiring or promotion decisions.
Human review that is cursory or perfunctory does not remove a system from AEDT classification. If a hiring manager is presented with an AI-ranked list of candidates and typically accepts the top recommendations without independent evaluation, the underlying system is likely an AEDT. The NYC Department of Consumer and Worker Protection has issued guidance clarifying scope — consult DCWP guidance for full details.
Colorado SB 205, the Colorado AI Act, takes effect June 30, 2026 (delayed from February 2026 by SB 25B-004). It requires developers and deployers of high-risk AI systems — which includes AI used in employment decisions such as hiring, promotion, termination, and compensation — to comply with several obligations:
- Perform annual impact assessments documenting the AI's purpose, known risks, data inputs, and bias mitigation measures
- Implement a written risk management policy aligned with the NIST AI Risk Management Framework or equivalent
- Provide notice to individuals subject to consequential decisions made with AI assistance
- Offer a meaningful opportunity to appeal AI-influenced decisions and correct errors in data used
- Make available information about the types of data used to train the AI system
Employers deploying high-risk AI in HR contexts are classified as "deployers" with specific obligations distinct from (and in addition to) developer obligations. Use our Colorado AI Laws page for the full statutory analysis.
Yes. The Illinois Artificial Intelligence Video Interview Act (AIAA) applies whenever an employer uses AI to analyze video interview footage of candidates applying for positions in Illinois — regardless of whether the AI analysis is performed by a third-party vendor or in-house tool. The employer bears the compliance obligation, not the vendor.
Employers must: (1) notify candidates before the interview that AI will be used to analyze the video, (2) explain how the AI works and what characteristics it evaluates, (3) obtain the candidate's written or electronic consent, and (4) destroy all video footage and AI-analyzed data within 30 days of a candidate's request. Sharing AI-analyzed video data with third parties is prohibited unless the candidate explicitly consents.
If your ATS or video interview platform uses any AI to assess tone, sentiment, facial expressions, word choice, or other characteristics, the AIAA applies. Contact your vendors to determine exactly which AI features are active during candidate interviews.