AI hiring laws in 2026: EU AI Act, NYC Local Law 144, Illinois, and Colorado

For a current comparison, see this guide to AI-powered applicant tracking systems.
If the team is comparing platforms, this list of AI recruiting software can help narrow the shortlist.

AI hiring law in 2026 is a mix of anti-discrimination duties, notices, audits, governance, and phased rules that differ by jurisdiction and tool. The EU, New York City, Illinois, and Colorado use different definitions and timelines, so employers must map each system and hiring location separately.

This article is current as of September 15, 2026 and provides general information, not legal advice. I strongly recommend qualified counsel for decisions about covered tools, audits, notices, impact assessments, data, and candidate rights.

Key takeaways

• The EU AI Act is in phased application, with employment-related high-risk rules now scheduled for December 2, 2027.
  Use an interview question generator to prepare role-specific questions before the conversation.
• NYC Local Law 144 already requires covered automated employment decision tools to meet bias-audit, publication, and notice conditions.
• Illinois Public Act 103-0804 took effect January 1, 2026 and addresses discriminatory effects and notice in employment AI use.
• Illinois also has a separate Artificial Intelligence Video Interview Act.
• Colorado replaced its earlier framework with a revised law effective January 1, 2027, and rulemaking is underway in 2026.
• Existing discrimination, privacy, accessibility, and employment laws may apply alongside AI-specific rules.

What is the 2026 AI hiring law status at a glance?

The four jurisdictions differ in scope and timing. Treat this table as an orientation point and review the linked official material for the system and facts at issue.

How does the EU AI Act apply to hiring?

The EU AI Act uses a risk-based framework. Certain AI systems used for employment, worker management, and access to self-employment appear in Annex III and can be classified as high risk, subject to the Act's definitions and exceptions.

The timeline changed in 2026. The European Commission says the Act entered into force on August 1, 2024 and became generally applicable on August 2, 2026, with phased exceptions. Following the AI Omnibus, rules for Annex III high-risk systems, including employment uses, are scheduled to apply from December 2, 2027.

Other provisions arrived earlier or follow separate dates. Prohibited-practice rules began applying in February 2025, and governance and general-purpose AI obligations began in August 2025. Certain transparency rules started in August 2026.

The Commission lists future high-risk obligations such as risk management, data quality, logging, documentation, information for deployers, human oversight, accuracy, cybersecurity, and related controls. Employers should identify if they are a provider, deployer, or another actor and avoid assuming every AI feature has the same classification.

Use the European Commission's AI Act overview and high-risk system guidance page for current dates and guidance.

What does NYC Local Law 144 require?

New York City's Local Law 144 restricts employers and employment agencies from using a covered automated employment decision tool unless it has received a bias audit within one year, a summary of the audit is publicly available, and required notices have been provided.

The Department of Consumer and Worker Protection began enforcement on July 5, 2023. Its materials also explain that candidate or employee notice must be provided ten business days before use under the rule.

A vendor's audit does not remove the employer's responsibility to check coverage, timing, public information, and notice. Read the official NYC AEDT page, law, rule, and FAQs.

What changed in Illinois on January 1, 2026?

Illinois Public Act 103-0804 amended the Illinois Human Rights Act. For recruitment, hiring, promotion, training selection, discipline, discharge, and other listed employment activities, it makes discriminatory effects from AI based on protected classes a civil rights violation and addresses zip codes used as proxies.
Teams comparing recruiting software can use this overview to assess which workflow fits their hiring process.

The Act also makes failure to provide required notice about the use of AI for the listed purposes a violation. It directs the Illinois Department of Human Rights to adopt implementation rules covering circumstances, timing, and means of notice.

Employers should read the current rules and agency material with the Act, especially where definitions or notice details affect a workflow. The official Public Act 103-0804 text states the January 1, 2026 effective date.

What is the Illinois AI Video Interview Act?

Illinois separately regulates employers that ask applicants for recorded video interviews and use AI analysis on those videos for Illinois-based positions. The law requires advance notice, information about how the AI works and the general characteristics it evaluates, and applicant consent before AI evaluation.

It also limits sharing and requires deletion within 30 days after an applicant's request, including instructions to other recipients. Additional demographic reporting applies in the situation described by the statute. See the official Artificial Intelligence Video Interview Act.

What is the current Colorado AI law timeline?

Colorado's AI framework changed again in 2026. The Colorado Attorney General says Senate Bill 26-189 repealed and reenacted the earlier provisions with new requirements for automated decision-making technology used to materially influence consequential decisions.

The revised law takes effect January 1, 2027. It includes requirements for developers and deployers and gives consumers rights to request and correct inaccurate personal data used by covered technology, according to the Attorney General's official summary.

Rulemaking is active in 2026. The Attorney General filed proposed ADMT rules in August and invited comments through the stated rulemaking period. Employers should follow the Colorado Attorney General's AI rulemaking page because final rules may change compliance details before the effective date.

Do not rely on summaries of the earlier June 2026 effective date. The official page now describes the revised 2027 framework.

What should employers do with AI hiring tools now?

Create an inventory before drafting a policy. Include ATS matching, resume scoring, chatbot screening, video analysis, assessments, sourcing, scheduling, background checks, and tools used by agencies on the employer's behalf.

For each system, record:

1. Product, vendor, owner, and contract
2. Hiring stage and locations where it is used
3. Input data, output, threshold, and downstream action
4. People who review or override the result
5. Candidate notice, consent, and accommodation route
6. Validation, bias audit, impact assessment, and accessibility evidence
7. Data retention, sharing, security, and correction process
8. Applicable jurisdictions and counsel's scope analysis
9. Model or configuration change process
10. Monitoring, complaints, incidents, and review date

Recooty provides explainable AI resume scoring and screening, showing reasons a candidate appears to be a strong or weak fit. Employers remain responsible for configuring and using those tools within their legal obligations. Our guide to AI in recruitment covers practical governance questions.

Frequently asked questions about AI hiring law