[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fICc4IdojMFHh1vQlJ7xK18PFYxi9rBVw621TGMAXnms":3,"$fm6Ky0r9HHO8PTXKBgXJeU4fCLm4z6RKRMXFRXG3f560":29},{"success":4,"data":5},true,{"id":6,"slug":7,"title":8,"excerpt":9,"content":10,"category":11,"tags":12,"author":21,"cover_image_url":22,"reading_time_minutes":23,"is_published":4,"published_at":24,"created_at":25,"updated_at":25,"author_avatar":22,"is_featured":26,"meta_title":27,"meta_description":28,"meta_keywords":22},"e75b658a-fb40-4c89-8551-f4f0f03aab77","the-us-now-has-three-state-ai-hiring-laws-none-require-an-independent-audit","The US Now Has Three State AI-Hiring Laws — None Require an Independent Audit","California, Illinois, and Connecticut have each put AI-hiring rules into force in the past year, but none require the independent bias audit many assume is standard. Here is what each law actually demands — disclosure, four-year record retention, and effects-based liability — and what that pattern means for anyone buying or building AI screening tools in 2026.","\u003Cp>If you asked an HR leader in January 2025 what a US “AI hiring law” would require, most would have guessed some version of New York City’s Local Law 144: an independent bias audit, a public report, a mandatory scorecard. That guess would have been reasonable — NYC’s law, in force since mid-2023, was the only real precedent in the country.\u003C\u002Fp>\n\n\u003Cp>It is also, as of this month, the wrong guess almost everywhere else. California’s automated-decision-system rules have been in force for a year. Illinois’s amendment to its Human Rights Act has been in force since January 1. And Connecticut’s Artificial Intelligence Responsibility and Transparency Act (SB 5 \u002F PA 26-15) switched on its first employment provisions on October 1 — five days before this post was written. None of the three mandates an independent bias audit. All three instead build liability around disclosure, documentation, and discriminatory \u003Cem>effect\u003C\u002Fem> — a meaningfully different regulatory bet than the one NYC made, and one employers (and the vendors selling them AI screening tools) should understand is now the US norm, not the exception.\u003C\u002Fp>\n\n\u003Ch2>Three laws, one year, three different mechanisms\u003C\u002Fh2>\n\n\u003Cp>\u003Cstrong>California: liability through record-keeping, not a testing mandate.\u003C\u002Fstrong> The California Civil Rights Council’s amendments to the Fair Employment and Housing Act (FEHA) regulations \u003Ca href=\"https:\u002F\u002Fwww.mcdermottlaw.com\u002Finsights\u002Fcalifornias-new-ai-rules-under-feha-take-effect-october-1-2025\u002F\">took effect October 1, 2025\u003C\u002Fa>. They apply to any employer using an “automated-decision system” — defined broadly enough to cover resume screening, structured interview scoring, and ranking tools — and require retaining ADS-related records (inputs, outputs, decision criteria, and any bias testing performed) for at least four years. Crucially, California does not require a bias audit. It does something more oblique: the regulations make the \u003Cem>presence or absence\u003C\u002Fem> of proactive anti-bias testing admissible evidence in a discrimination claim, as \u003Ca href=\"https:\u002F\u002Fwww.jacksonlewis.com\u002Finsights\u002Fcalifornias-new-ai-regulations-take-effect-oct-1-heres-your-compliance-checklist\">Jackson Lewis’s compliance checklist\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwww.paulhastings.com\u002Finsights\u002Fclient-alerts\u002Fnew-california-regulations-on-employers-use-of-ai-to-make-decisions-go-into-effect-oct-1-2025\">Paul Hastings’s client alert\u003C\u002Fa> both lay out. Run the testing and you have a defense; skip it and your silence can be used against you. It is a liability incentive wearing the clothes of a disclosure rule.\u003C\u002Fp>\n\n\u003Cp>\u003Cstrong>Illinois: liability through a notice requirement with teeth.\u003C\u002Fstrong> HB 3773, amending the Illinois Human Rights Act, \u003Ca href=\"https:\u002F\u002Fwww.manatt.com\u002Finsights\u002Fnewsletters\u002Femployment-law\u002Fai-assisted-hiring-faces-a-new-compliance-landscape-in-2026-california-and-illinois-put-discriminatory-impact-and-transparency-front-and-center\">took effect January 1, 2026\u003C\u002Fa>. It does three things, each independently actionable: it makes it a civil rights violation to use AI that has the \u003Cem>effect\u003C\u002Fem> of discriminating against a protected class, with no intent requirement; it separately bars using ZIP code as a protected-class proxy; and it requires employers to notify applicants and employees whenever AI is used in recruitment, hiring, promotion, discharge, or other employment decisions, in plain language and in the languages the workforce speaks, as \u003Ca href=\"https:\u002F\u002Fwww.warden-ai.com\u002Fillinois-human-rights-act-amendment-hb-3773-guide\">Warden AI’s compliance guide\u003C\u002Fa> details. The notice obligation is the sharpest edge here, because unlike most of these statutes it doesn’t require that the AI be a “substantial factor” in the outcome — simply failing to disclose that AI was used is its own violation, regardless of what the AI did.\u003C\u002Fp>\n\n\u003Cp>\u003Cstrong>Connecticut: the newest, and the most incremental.\u003C\u002Fstrong> Connecticut’s AI Act employment provisions are staggered, per \u003Ca href=\"https:\u002F\u002Fwww.ropesgray.com\u002Fen\u002Finsights\u002Falerts\u002F2026\u002F06\u002Fconnecticut-enacts-sweeping-ai-law-covering-employment-healthcare-and-online-safety\">Ropes &amp; Gray’s\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwww.hklaw.com\u002Fen\u002Finsights\u002Fpublications\u002F2026\u002F06\u002Fconnecticut-enacts-comprehensive-ai-legislation\">Holland &amp; Knight’s\u003C\u002Fa> analyses. The piece that took effect October 1, 2026 amends the state’s anti-discrimination law so that an employer can no longer point to “the AI did it” as a defense against a discrimination claim, and it adds a new WARN Act disclosure requirement: employers filing mass-layoff notices must now state whether the layoffs are connected to AI or other technology adoption. The heavier obligation — written notice to every applicant and employee before an AI-assisted employment decision is made — is formally on the books now but, per \u003Ca href=\"https:\u002F\u002Fwww.mofo.com\u002Fresources\u002Finsights\u002F260608-connecticut-enacts-sweeping-ai-law\">Morrison Foerster’s summary\u003C\u002Fa>, doesn’t bind tools deployed before October 1, 2027. Connecticut, in other words, chose to regulate the \u003Cem>excuse\u003C\u002Fem> before it regulates the \u003Cem>tool\u003C\u002Fem>.\u003C\u002Fp>\n\n\u003Cp>Zoom out and the throughline is consistent: outside New York City, the pattern two dozen US states have been drafting toward in 2026 (\u003Ca href=\"https:\u002F\u002Fwww.multistate.us\u002Finsider\u002F2026\u002F9\u002F21\u002Fstate-ai-employment-laws-address-monitoring-hiring-and-bias-concerns\">Multistate’s September tracker\u003C\u002Fa> counts roughly 155 AI-in-the-workplace bills considered this legislative session alone) is disclosure-plus-documentation, not audit-and-publish. Colorado’s AI Act, delayed to 2027, and Texas’s narrower TRAIGA statute follow the same pattern — notice and non-discrimination duties, no independent audit mandate. NYC remains, as of this writing, the only US jurisdiction that \u003Ca href=\"https:\u002F\u002Fwww.nycbiasaudit.com\u002F\">requires an annual bias audit\u003C\u002Fa> by a party independent of both the vendor and the employer, with a public summary and a per-day penalty for non-compliance. Everywhere else, the audit is optional risk management rather than law.\u003C\u002Fp>\n\n\u003Ch2>Why lawmakers picked disclosure over audits — and why that's not obviously the weaker choice\u003C\u002Fh2>\n\n\u003Cp>It's tempting to read “no audit mandate” as regulatory softness. That undersells what's actually happening. An audit mandate is expensive to design well and politically easier to pass once, in one city, than to replicate fifty times with the rigor it needs. What California, Illinois, and Connecticut are doing instead is cheaper to legislate and arguably harder to escape: they don't ask “did you pass an audit,” they ask “can you produce four years of records,” “did you tell the candidate,” and “can a plaintiff show a discriminatory effect regardless of your intent.” A vendor whose tool produces a biased outcome doesn't get to argue “we never audited it, so we didn't know” — in California that absence actively counts against them, and in Illinois intent isn't even part of the test.\u003C\u002Fp>\n\n\u003Cp>For an employer evaluating AI screening or interview tools in late 2026, the practical reading is this: the audit question (“has this been independently tested?”) is still worth asking, but it's no longer the only — or even the first — compliance question. The ones a general counsel will actually ask are closer to:\u003C\u002Fp>\n\n\u003Cul>\n\u003Cli>What does this tool score candidates on, and is that scoring applied the same way to everyone?\u003C\u002Fli>\n\u003Cli>What records does it keep, and for how long?\u003C\u002Fli>\n\u003Cli>Does the product tell candidates, unprompted, that they're being evaluated by AI — or does disclosure depend on the employer remembering to add it?\u003C\u002Fli>\n\u003C\u002Ful>\n\n\u003Cp>A tool architecture where disclosure is optional, bolted on by whichever customer happens to configure it, is a liability surface in Illinois today and in Connecticut from 2027. A tool where every employment-facing greeting discloses AI involvement by default, with no configuration path to suppress it, is a materially different risk posture.\u003C\u002Fp>\n\n\u003Ch2>Where NiceHire actually stands — and where it doesn't\u003C\u002Fh2>\n\n\u003Cp>Two things above are true of NiceHire's own product today, and we're stating them narrowly on purpose rather than rounding up to “we're compliant,” because compliance is a legal determination for each customer's own counsel, not a vendor's marketing claim.\u003C\u002Fp>\n\n\u003Cp>First: every AI screening greeting NiceHire's platform generates — across every interview language it ships and on both a candidate's first attempt and a reconnect after a dropped session — discloses that the interviewer is AI, and that disclosure cannot be suppressed by a custom greeting template. Second: every candidate screened through NiceHire is scored against the same fixed set of criteria — technical fit, communication, and cultural fit, each out of 100 — against a configurable passing threshold, rather than against criteria that drift session to session.\u003C\u002Fp>\n\n\u003Cblockquote>What we won't say, because the record doesn't support it: that this makes the product “unbiased” or “audit-ready” in the NYC Local Law 144 sense.\u003C\u002Fblockquote>\n\n\u003Cp>We have not commissioned an independent bias audit of the kind NYC requires and Illinois and Connecticut do not. Consistent criteria is a mechanism, not an outcome guarantee — it tells you the same rubric was applied to everyone, not that the rubric itself is free of disparate impact, which is exactly the thing an independent audit is built to test and a vendor's own description of its product is not. If your organization operates in a jurisdiction where an audit matters — NYC, or simply out of caution — that's a step you, or a third party you choose independently of your vendor, still have to take.\u003C\u002Fp>\n\n\u003Ch2>The practical takeaway\u003C\u002Fh2>\n\n\u003Cp>The US AI-hiring compliance landscape didn't converge this year, it diverged into a second recognizable pattern. NYC's audit model is more than three years old now and still alone. California, Illinois, and — as of five days before this post — Connecticut have each built a parallel track around disclosure, documentation, and effects-based liability: cheaper to pass, harder to argue your way out of, and now the default for any employer hiring across state lines. If you're buying or building AI hiring tools in 2026, the diligence question isn't “has this passed an audit.” For most of the country, it's “can this tool prove, in writing, four years from now, what it told every candidate and why it scored them the way it did.” That's a lower bar to clear on paper and, done honestly, a harder one to fake.\u003C\u002Fp>","Compliance",[13,14,15,16,17,18,19,20],"AI hiring compliance","California FEHA","Illinois HB 3773","Connecticut AI Act","AI in hiring","bias audit","HR tech regulation","employment law 2026","NiceHire Team",null,7,"2026-10-06T00:27:58.018+00:00","2026-10-06T00:27:58.769172+00:00",false,"Three State AI-Hiring Laws, No Audit Mandate: CA, IL, CT Compared","California, Illinois, and Connecticut AI-hiring laws all skip the independent bias audit NYC requires. Here is what disclosure-based regulation actually demands in 2026.",{"success":4,"data":30},{"posts":31,"count":73,"hasMore":4},[32,34,49,60],{"id":6,"slug":7,"title":8,"excerpt":9,"category":11,"tags":33,"author":21,"cover_image_url":22,"reading_time_minutes":23,"published_at":24},[13,14,15,16,17,18,19,20],{"id":35,"slug":36,"title":37,"excerpt":38,"category":11,"tags":39,"author":21,"cover_image_url":22,"reading_time_minutes":47,"published_at":48},"73e63698-b636-41e1-8c33-98178f10f0af","no-robo-bosses-act-human-in-the-loop-2026","California Just Told Employers: A Human Has to Actually Decide","California's new No Robo Bosses Act bars AI-only firing and discipline decisions. Here is what it actually requires, why an earlier version was vetoed, how it differs from NYC and Illinois AI-hiring law, and what any employer running automated hiring or performance tools should check now.",[40,41,42,43,44,45,46],"AI regulation","California SB 947","No Robo Bosses Act","AI hiring law","compliance","HR tech","automated decision systems",8,"2026-10-04T00:27:46.583+00:00",{"id":50,"slug":51,"title":52,"excerpt":53,"category":11,"tags":54,"author":21,"cover_image_url":22,"reading_time_minutes":47,"published_at":59},"e9054a4f-74e8-4d0c-97a9-bcb10a585447","illinoiss-ai-hiring-law-took-effect-in-january-its-own-compliance-rules-didnt","Illinois's AI Hiring Law Took Effect in January. Its Own Compliance Rules Didn't.","HB 3773 made AI-caused hiring discrimination a civil rights violation on January 1, 2026. The notice rules meant to define compliance were withdrawn in June and never refiled. Here's what's actually binding right now, and what isn't.",[43,15,55,56,57,40,58],"employment discrimination","HR compliance","disparate impact","hiring trends","2026-10-03T00:28:37.906+00:00",{"id":61,"slug":62,"title":63,"excerpt":64,"category":11,"tags":65,"author":21,"cover_image_url":22,"reading_time_minutes":71,"published_at":72},"3e54cabb-8ad7-468c-aa08-a600613d011c","ai-hiring-vendor-liability-2026","The Hiring Software Is Now a Legal Party to the Decision","A federal court let disparate-impact claims against Workday proceed on an agent theory, Illinois made undisclosed AI use its own civil rights violation, and a California bill requiring human corroboration sits on the governor's desk today. Three separate mechanisms, one direction: the software is now a legal party to the hiring decision.",[66,67,68,69,15,41,56,70],"AI hiring","employment law","vendor liability","Mobley v Workday","algorithmic discrimination",9,"2026-09-30T00:25:30.211+00:00",21]