If your company uses AI in hiring and hires remotely, multiple regulations can now apply to the same tool. Here is the 2026 landscape at a glance.
| Jurisdiction | Law | Effective | Core obligation | Penalty |
|---|---|---|---|---|
| NYC | Local Law 144 | Jul 2023 | Annual independent bias audit + public summary + 10-day notice | $500 first, $500–$1,500/day (proactive since Jan 2026) |
| Illinois | HB 3773 | Jan 2026 | AI-use notice + nondiscrimination | Civil liability |
| Colorado | AI Act (SB 24-205) | 2026 | Impact assessment + notice + appeal + human review | AG enforcement, $50K+ |
| California | ADMT (CCPA regs) | 2027 (scheduled) | Risk assessments + notice + opt-out | CPPA |
| EU | EU AI Act | Aug 2026 (transparency/high-risk) | Risk mgmt + technical docs + transparency + incident reporting | Up to €35M or 7% of global turnover |
Every regime ultimately asks the same question: does your AI tool treat protected groups differently, and can you prove you checked? The statistical analysis — selection rates, impact ratios, four-fifths assessment — is the shared foundation. Once you compute it for NYC, the same numbers feed Illinois disclosure, Colorado's impact assessment, California's future risk assessments, and the EU's documentation requirements.