AI Hiring Law Comparison 2026: NYC vs. Illinois vs. Colorado
Three of the most consequential AI hiring laws in the country don't say the same thing. NYC wants a public bias audit. Illinois targets specific discriminatory practices. Colorado wants a documented risk-management program. If you hire across state lines, you likely owe compliance under more than one — here's how they actually differ.
Why a Side-by-Side Comparison Matters
Most guides cover one AI hiring law in isolation. But employers rarely hire in only one jurisdiction. A remote-first company with candidates in New York City, an office in Chicago, and a distributed team including Colorado residents can trigger all three laws below on a single hiring cycle — each with different documentation, notice, and audit requirements. Treating them as interchangeable is the most common compliance mistake.
Side-by-Side: The Three Laws
| Dimension | NYC Local Law 144 | Illinois HB 3773 | Colorado AI Act |
|---|---|---|---|
| What it covers | Automated employment decision tools (AEDTs) used to substantially assist or replace hiring/promotion decisions | AI used in hiring, promotion, and discharge decisions, including video-interview analysis and zip-code proxies | Any 'high-risk' AI system used in a consequential employment decision, not limited to hiring |
| Core requirement | Independent bias audit within one year of use, published publicly, plus a summary of results | Prohibits discriminatory use; restricts specific practices like using zip code as a race/ethnicity proxy | Documented risk-management program, impact assessments, and reasonable care to avoid algorithmic discrimination |
| Candidate notice | Notice at least 10 business days before use, with option to request an alternative process | Notice required for AI video-interview analysis; disclosure obligations for automated decision tools | Notice before a consequential decision is made using AI, plus an explanation and appeal right if adverse |
| Effective scope | Employers/employment agencies using AEDTs for candidates or employees within New York City | Employers using covered AI tools for Illinois-based applicants and employees | Developers and deployers of high-risk AI systems affecting Colorado residents |
| Enforcement | Civil penalties per violation, escalating for repeated noncompliance | Enforced through the Illinois Department of Human Rights, civil penalties available | Attorney General enforcement, with an affirmative defense for documented compliance programs |
NYC Local Law 144: Audit-First
NYC's law is the most concrete and audit-driven of the three. Before using an automated employment decision tool on a candidate or employee within the city, an employer must have it independently bias-audited within the prior year, publish a summary of the results, and give candidates advance notice with the option to request an alternative selection process. It says relatively little about the AI's design and everything about proving the outcome isn't discriminatory.
Illinois HB 3773: Practice-Specific Prohibitions
Illinois takes a narrower, prohibition-based approach. Rather than mandating a universal audit regime, it amends the state Human Rights Act to bar specific discriminatory uses of AI in hiring, promotion, and discharge decisions, and separately regulates AI analysis of video interviews. It also restricts using zip code as a proxy for protected characteristics — closing a specific loophole regulators had flagged in earlier AI hiring tools.
Colorado AI Act: Program-Based Risk Management
Colorado's law is the broadest in scope, reaching beyond hiring into promotion, discipline, and termination decisions, and applying to both developers and deployers of high-risk AI systems. Rather than a single audit, it requires an ongoing risk-management program, documented impact assessments, and reasonable care to prevent algorithmic discrimination — with a compliance program serving as an affirmative defense if a claim is later filed.
Building One Compliance Program for All Three
Build to the strictest requirement in each category, then layer in jurisdiction-specific filings.
Multistate AI compliance starts with knowing where you're exposed
RatedWithAI helps teams scan their web properties and candidate-facing tools for the compliance gaps that turn into complaints. Start with a free scan.
Scan Your Site for Free →Frequently Asked Questions
If I already comply with NYC Local Law 144, am I automatically compliant with Colorado's law?
No. NYC's audit requirement will help satisfy part of Colorado's risk-management expectations, but Colorado also requires a documented impact assessment and ongoing program covering decisions beyond hiring, such as promotion and termination — an NYC-only compliance file will have gaps.
Does remote hiring trigger these laws even without a local office?
Generally yes. These laws are keyed to where the candidate or employee is located, not where the employer is headquartered. A fully remote company with candidates in New York City, Illinois, or Colorado is likely covered for that portion of its hiring, even without a physical office there.
Are more states expected to pass similar AI hiring laws?
Yes. This is widely viewed as an early wave rather than a settled landscape — additional states and cities are actively considering automated employment decision tool legislation, and multistate employers should expect the patchwork to keep growing rather than converging on a single federal standard soon.
Do these laws apply to internal promotion and performance-review AI tools, or only external hiring?
It depends on the law. NYC Local Law 144 is centered on hiring and promotion AEDTs specifically. Illinois HB 3773 extends to discharge decisions. Colorado's law is the broadest, covering any consequential employment decision including promotion, discipline, and termination — not just hiring.