AI Compliance for HR and Hiring
The most-regulated AI use case in the US: NYC, Colorado, Illinois, EU
Hiring and employment AI is subject to more explicit, enacted regulation than any other AI use case in the United States. NYC LL144 is in active enforcement, with fines of $500 for a first violation and $500-$1,500 for each subsequent violation. Colorado and Illinois have disclosure requirements. The EU AI Act classifies hiring AI as high-risk globally.
Applicable regulations
NYC Local Law 144
Critical RiskScope: Employers using automated employment decision tools for NYC jobs
Annual independent bias audit, publish audit summary on website, notify candidates of AI use 10 days before assessment
Deadline: In force July 2023 ($500 first violation; $500-$1,500 per subsequent violation)
EU AI Act — High-Risk Hiring AI
Critical RiskScope: AI used in recruitment, selection, promotion in EU
Conformity assessment, technical documentation, bias testing, human oversight — all before deploying to EU candidates
Deadline: December 2, 2027 (deferred from August 2026)
Colorado SB 26-189
High RiskScope: Employers using AI employment decision tools in Colorado
Pre-use ADMT notice to candidates and employees, 30-day plain-language disclosure after an adverse consequential decision, data-correction request path, 3-year compliance recordkeeping
Deadline: 1 Jan 2027
Illinois AI Video Interview Act (AIVIA)
High RiskScope: Employers using AI to analyze video interviews in Illinois
Disclose AI use before interview, get written or electronic consent, explain what characteristics AI evaluates, do not share video without consent
Deadline: In force 2020 (separate 2024 law, HB 3773, amends the Human Rights Act — eff. Jan 1, 2026)
Title VII / UGESP — AI Hiring Disparate Impact (EEOC 2023 guidance withdrawn Jan 2025)
High RiskScope: All US employers
AI hiring tools with disparate impact on protected classes may still violate Title VII/UGESP even without active EEOC guidance. Employer responsibility for vendor AI. Federal enforcement priority has been reduced (EO 14281); private-suit and state-law risk remain.
Deadline: Ongoing
GDPR Article 22 — Automated Hiring Decisions
High RiskScope: EU candidates subject to AI-only hiring decisions
Right to human review of automated decisions, right to explanation of factors, right to contest decision
Deadline: Ongoing
What to do first
NYC LL144: immediately check if you have NYC-based employees or candidates — if yes, you need a bias audit now
All US hiring AI: test for disparate impact across race, gender, age, disability before deployment
EU candidates: ensure human review is part of every AI-assisted hiring decision
Illinois AIVIA: add consent language to any video interview process using AI analysis
Colorado (SB 26-189, effective 1 Jan 2027): prepare the ADMT pre-use notice and 30-day adverse-outcome disclosure process — impact assessments are NOT required under this law
Get audit results from your AI hiring vendors — you are responsible for their tool's bias under EEOC guidance
Estimated compliance cost
$15,000–$60,000 initial (NYC audit: $10,000–$30,000) + $10,000–$25,000/year
Proactive compliance typically costs 3–5× less than post-enforcement remediation.
Generate your hr and hiring AI compliance plan
Aegis Firma maps your specific AI systems against all applicable regulations for hr and hiring — and generates prioritized documentation across 169 jurisdictions.