AI Hiring Laws in 2026: What Recruiters Need to Know Before Using AI Tools
AI hiring laws now apply to ordinary recruiting work such as resume ranking, candidate scoring and automated interviews. The rules differ by location, several deadlines moved during 2026, and many online summaries are already out of date.
This guide summarizes what is in force and what is coming, based on the sources linked below as of October 2026. It is a plain-English overview for recruiters and founders, not legal advice. Always confirm details with counsel.
TL;DR
- NYC Local Law 144 has been enforced since July 5, 2023 and requires bias audits and candidate notice for automated employment decision tools.
- Illinois (HB 3773) and Texas (TRAIGA) took effect January 1, 2026. California’s automated-decision regulations took effect October 1, 2025.
- Colorado’s rewritten AI law applies to decisions made on or after January 1, 2027.
- The EU’s high-risk hiring obligations have been postponed to December 2, 2027, though many summaries still say August 2026.
- Practical steps help in every jurisdiction: inventory tools, give notice, keep humans in the loop, keep records and ask vendors for audit evidence.
Table of Contents
- Snapshot: what applies where
- New York City Local Law 144
- Illinois, California, Texas and Colorado
- The EU AI Act
- A practical compliance checklist
- Questions for AI recruiting vendors
- FAQ
Snapshot: what applies where
The table below summarizes the main rules. Sources are secondary trackers, so verify dates against the official text before relying on them.
| Jurisdiction | Law | Status | Main duty |
|---|---|---|---|
| New York City | Local Law 144 | Enforced since July 5, 2023 | Bias audit, public summary, candidate notice |
| Illinois | HB 3773 | Effective January 1, 2026 | No discriminatory AI use; notice to applicants |
| California | Civil Rights Council ADS regulations | Effective October 1, 2025 | Anti-discrimination rules; four-year records |
| Texas | TRAIGA (HB 149) | Effective January 1, 2026 | No AI built or used with intent to discriminate |
| Colorado | AI Act as rewritten by SB 26-189 | Applies to decisions on or after January 1, 2027 | Disclosure and consumer rights |
| European Union | AI Act, high-risk systems | Obligations from December 2, 2027 | Risk management, transparency, human oversight |
New York City Local Law 144
Local Law 144 requires employers in New York City to audit automated employment decision tools for bias and to tell candidates about their use. According to the NYC Department of Consumer and Worker Protection, the key requirements are:
- The tool must have had an independent bias audit within one year of its use.
- Information about the audit must be publicly available.
- Candidates must receive notice, and the department has clarified that this must be at least 10 business days before the tool is used.
Penalties are $500 for a first violation and $500 to $1,500 for each later violation, and each day of use and each missed notice can count separately, according to a Metaview summary of 2026 and 2027 rules. A study cited in HeroHunt’s guide found that only 18 of 391 covered employers had posted the required audit, so awareness remains low.
Illinois, California, Texas and Colorado
Illinois
HB 3773 amends the Illinois Human Rights Act. As of January 1, 2026, employers may not use AI in ways that discriminate against protected classes, may not use ZIP codes as a proxy for protected classes, and must notify applicants and employees that AI is used. Enforcement runs through the existing civil-rights complaint process.
California
The Civil Rights Council’s automated-decision regulations, effective October 1, 2025, apply to employers with five or more employees. Liability can extend to vendors and consultants acting as agents. Employers must keep records of the system, its selection criteria and its outputs for four years, and anti-bias testing evidence is relevant to a defense.
Texas
TRAIGA took effect January 1, 2026. It prohibits developing or deploying AI with the intent to unlawfully discriminate, a narrower standard than outcome-based tests. The Texas Attorney General has exclusive enforcement, there is no private right of action and a 60-day cure period applies.
Colorado
Colorado’s original AI Act was delayed more than once. According to Metaview and HeroHunt’s state-by-state guide, SB 26-189, signed in May 2026, rewrote the law. It removed the duty to prevent algorithmic discrimination, the mandatory impact assessments and the deployer risk-management program, and replaced them with a disclosure-and-rights model enforced by the Attorney General. Its duties apply to consequential decisions made on or after January 1, 2027. A federal court order in April 2026 also limits enforcement for a period tied to a pending ruling, so watch for updates.
The EU AI Act
The EU AI Act treats AI used in recruitment and candidate evaluation as high-risk. Many articles still say the high-risk obligations begin on August 2, 2026. According to Metaview, Regulation (EU) 2026/1744, adopted July 8, 2026 and in force since July 27, 2026, moved the start date for high-risk hiring obligations to December 2, 2027.
Systems already on the market before that date are covered only if their design is subject to significant changes afterward. Penalties for breaching the Act’s prohibited practices can reach 7% of worldwide annual turnover or €35 million, whichever is higher. This is a single secondary source for the new date, so confirm it against the Official Journal before you plan around it.
If you recruit in the EU, the practical impact is on vendors: expect providers to offer risk documentation, transparency information and human-oversight features before the deadline.
A practical compliance checklist
- Inventory every AI tool in your hiring process. Include sourcing rankings, resume screening, chatbots, interview scoring and assessments.
- Decide where decisions are automated. A tool that only suggests is different from one that rejects candidates. See our guide to AI candidate screening software.
- Give notice. Tell candidates when AI is used, in clear language and early enough to meet local rules.
- Keep a human in the loop. Have a person review rejections and be able to override outputs.
- Request bias-audit evidence. Ask vendors for audit results or documentation, and get them in writing.
- Keep records. Store criteria, outputs and decisions. California requires four years for covered systems.
- Offer accommodations. Give candidates a way to request an alternative to automated steps.
- Review annually. Laws and deadlines are still changing, and this article will be out of date in months.
For a broader view of what to automate and what to leave to people, see what AI recruiting agents actually automate.
Questions for AI recruiting vendors
- Does the product score, rank or reject candidates, or only organize information?
- Do you have an independent bias audit, and can we see the summary?
- What data does the tool use, and does it infer protected characteristics?
- Can recruiters see and override the reasoning?
- How long do you store candidate data, and how can candidates opt out?
- Who is responsible if a regulator asks for records?
Evaluation matters at the interview stage too. Our guide to AI interview software covers what structured reporting should include. ConnectDevs’ AI interviewer produces a structured report for each interview that a recruiter reviews, but it does not replace your own compliance review of how you use it.
FAQ
Is it legal to use AI in hiring?
Generally yes, but a growing set of laws governs how. Requirements include notice, bias audits, records and human oversight, depending on where candidates and employers are located.
What is NYC Local Law 144?
It is a New York City law, enforced since July 5, 2023, that requires employers using automated employment decision tools to have an independent bias audit, publish a summary and give candidates notice.
When does the EU AI Act apply to hiring?
Reports indicate high-risk hiring obligations now begin on December 2, 2027, after a 2026 regulation postponed the earlier August 2026 date. Confirm the current date with official sources.
Do these laws apply to small companies?
Some do and some do not. California’s regulations apply to employers with five or more employees, while NYC’s law applies to covered employers and agencies using tools for NYC candidates. Check each law’s scope.
Do I have to tell candidates I use AI?
In several places yes, including NYC and Illinois. Even where it is not required, clear notice builds trust. Gartner found only 26% of candidates trust AI to evaluate them fairly.
Who is liable, the employer or the vendor?
Usually the employer remains responsible, and in California liability can also extend to vendors acting as agents. Ask vendors for contractual commitments and documentation.
Conclusion
You do not need to avoid AI to stay compliant. You need to know which tools influence decisions, tell candidates, keep people in charge and keep records. Start with an inventory this month, because the rules will keep moving.
Want to see how an AI interview report works in practice? Book a demo and walk through it with your own role.









