What began as a single New York City hiring-tool ordinance is now a multi-state compliance regime: Illinois requires notice, California requires four-year recordkeeping and treats anti-bias testing as evidence, Connecticut's CART Act took effect on 1 October 2026, Colorado's replacement law applies from 1 January 2027, and California's No Robo Bosses Act follows on 1 July 2027. AxiSentinel evaluates employment AI against whichever jurisdiction's rule actually applies to a given hire.
Last verified: 23 October 2026
18 industry-specific mandates and 61 that apply across all industries, worldwide.
Next date for this industry: 1 Nov 2026, Egypt PDPL compliance period ends.
See all 79 mandates →NYC's Local Law 144 was the first hiring-AI ordinance in the country when it took effect in 2023. It is no longer the only rule that matters: Illinois, California, Colorado, and now Connecticut have each added binding obligations of their own, a December 2025 government audit found NYC's own enforcement of the original law is not working as designed, and Illinois itself has since paused its own implementing rules while the underlying statute stays in force.
An annual bias audit is a once-a-year snapshot. AxiSentinel is built for what happens the other 364 days: continuous evidence that a hiring or promotion model still tests the way its last audit said it would.
Coverage is jurisdiction-by-jurisdiction, not federal. AxiSentinel tracks the growing list the same way it tracks every other multi-jurisdiction patchwork.
In force since July 5, 2023; requires an annual third-party bias audit and candidate notice before an automated employment decision tool is used.
In force since October 1, 2025; requires four-year record retention and reasonable accommodation processes for ADS tools, and makes anti-bias testing relevant evidence.
In force since January 1, 2026; AI with the effect of discriminating in employment decisions is a civil rights violation, with mandatory employee notice.
Signed May 14, 2026 after a federal court blocked the original AI Act; takes effect January 1, 2027 with a narrower, notice-based approach.
Signed June 2, 2026, adding Connecticut as the fifth US jurisdiction with binding employment-AI obligations, including notice when AI is used in hiring and employment decisions.
A separate track from employment-decision AI: these laws govern the monitoring tools themselves, and regulators are already reading them to reach AI transcription, chatbot, and performance-management software.
No federal employment-AI statute is in force; existing Title VII disparate-impact theory already applies to hiring algorithms regardless of state law.
In force since January 1, 2026; employers with 25 or more employees must disclose in publicly advertised job postings whether AI is used to screen, assess, or select applicants.
General-purpose AI risk-management frameworks that already apply to any hiring, promotion, or termination model an employer deploys.
From a single hiring model to a national talent-acquisition stack, AxiSentinel evaluates the software and evidence continuously, not just at annual-audit time.
Employers use AI to screen, rank and promote people. Hiring laws in several U.S. states and cities, and the EU AI Act, treat these as high-stakes decisions that need fairness testing, notice and human review.
Hiring AI reads documents from strangers, which makes it an easy target for hidden instructions and data theft. AxiLayer AI works hand in hand with your cybersecurity team to test, monitor and evidence that these AI systems stay secure, under your written authorization.
Explore AI Cybersecurity Request an AI Cybersecurity Readiness Review
Status as of 28 October 2026. General information, not legal advice. Certifications, CE marking and regulated assessments named here are issued by the bodies the law designates.
Nothing about AxiSentinel's core architecture changes for employment AI. What changes is which RegDef packages are switched on and what telemetry the agents capture.
Agents capture hiring, promotion, and termination-model telemetry on the cadence you configure, Always On or scheduled, in full rather than sampled, and never limited to an annual audit cycle.
Every telemetry event evaluated against the applicable jurisdiction's notice and testing requirements, per decision.
Every audit record is linked to the one before it in a signed, tamper-evident evidence chain, verifiable from the first event.
A compliance state change on one hiring model or an entire talent-acquisition stack propagates network-wide as it happens.
Nothing becomes a compliance finding until a qualified AxiLayer AI auditor reviews and signs it.
AXI-Node agents deploy across applicant-tracking, video-interview, and skills-assessment systems, with the .axibatch format available for employers running fully on-prem HR systems.
Tracks human involvement in hiring, promotion, and termination decisions, feeding into AxiSentinel's oversight-gap scoring model.
The same agents generating compliance evidence watch for adversarial resume manipulation, unauthorized model retraining, and undisclosed proxy variables before a re-certified release reaches production.
New rule, jurisdiction, or requirement is added by encoding new RegDef packages. Deployed agents are never rebuilt.
Scoped to your organization during onboarding, not hard-coded into the platform.
A threshold breach becomes a flagged, timestamped, evidence-linked Provisional Alert, reviewed by a qualified AxiLayer AI auditor before anything counts as a finding.
The same architecture monitoring this industry's AI monitors a trading desk's model or a hospital's diagnostic AI. What changes is which RegDef packages are switched on.
Five U.S. jurisdictions have binding employment-AI rules in force or enacted. NYC Local Law 144 has required annual third-party bias audits and candidate notice since 5 Jul 2023. California's FEHA regulations have required four-year recordkeeping since 1 Oct 2025. Illinois HB 3773 has applied since 1 Jan 2026, and Connecticut's CART Act framework took effect on 1 Oct 2026.
Colorado's SB 26-189 takes effect on 1 Jan 2027. Signed on 14 May 2026, it repeals and replaces SB 24-205 with a narrower, notice-based approach: deployers must give notice before a covered system is used in a consequential decision, and a plain-language explanation within 30 days of an adverse outcome. California's No Robo Bosses Act follows on 1 Jul 2027.
An annual bias audit is a once-a-year snapshot, and scrutiny is rising. A December 2025 New York State Comptroller audit of 32 companies found at least 17 instances of potential Local Law 144 non-compliance, where the city had found one. Employers should keep continuous evidence that a hiring model still tests as its last audit said, plus disparate-impact testing and four-year records under California's rules.
An AI hiring audit is a third-party assessment of the tools used to screen, rank, promote or terminate people, testing for disparate impact across protected characteristics and checking notice, recordkeeping and human review against each jurisdiction's rules. NYC Local Law 144 requires an annual third-party bias audit. AxiLayer AI performs these assessments, and a qualified AxiLayer AI auditor reviews and signs every finding.
AxiLayer AI evaluates employment AI continuously with AxiSentinel, against whichever jurisdiction's rule applies to each hire, from New York City and Illinois to California, Colorado, Connecticut and Ontario. Coverage runs from a single hiring model to a national talent-acquisition stack, between annual audits. A qualified AxiLayer AI auditor reviews and signs every finding. Request a briefing to discuss your hiring tools.
Last verified: 23 October 2026. See every mandate for this industry on the AI Audit Mandates Map.
Whether it's a single hiring model or a national talent-acquisition stack spanning New York City, California, Illinois, and Colorado, AxiSentinel evaluates it the same way it evaluates any AI system: on the cadence you configure, Always On or scheduled, with full evidence, and with a human signature before anything counts as a finding.
