AI in Hiring: What Employers Need to Know About the New Compliance Rules

If your hiring process uses software that scores, ranks, or filters candidates, you likely have new compliance obligations. Several jurisdictions now regulate automated hiring tools the way the FCRA regulates background checks: with notice, fairness testing, and documentation requirements.

Most employers we talk to don't realize they're using AI at all. It's often built into the applicant tracking system, the job board, or the interview scheduling tool they already pay for. And as with background screening, the employer is usually the one held responsible, not the software vendor.

Three questions to ask about your hiring

1. Are you using AI or automated employment decision tools (AEDTs) in hiring? Resume scoring, candidate ranking, screening chatbots, or assessment and video scoring tools, including features built into your ATS.
2. Are you hiring in multiple states? Or in one of the 20+ states with AI hiring laws enacted or pending?
3. Are you hiring remote applicants? Remote candidates bring their state's rules with them, wherever your company is based.

Where AI shows up in your hiring process

Regulators generally care about tools that substantially assist or replace human judgment in hiring or promotion decisions. Common examples include:

• Resume screening and ranking that scores applicants or decides who a recruiter sees first.
• Job-fit or match scores built into applicant tracking systems and job boards.
• Chatbots that pre-qualify or knock out candidates before a human is involved.
• Video and assessment tools that evaluate speech, responses, or game-based tests.
• Targeted job ads that decide which candidates see an opening.

A good rule of thumb: if a tool produces a score, rank, or pass/fail that affects who moves forward, treat it as in scope until you've confirmed otherwise.

The laws employers need to know

New York City, California, and Illinois already have AI hiring rules in force, and Colorado's takes effect January 1, 2027. These laws generally apply based on where the candidate or employee is, not where your company is headquartered.

Colorado's original 2024 law was far broader. In May 2026 the state repealed and replaced it with a narrower framework, so older guidance you may have seen is out of date. More states, including New York, California, and Massachusetts, have bills pending. New Jersey employers should also review the state's disparate impact rules, which reach automated tools.

Why this will feel familiar

If you run a compliant background screening program, you already know the playbook. AI hiring laws borrow the same building blocks the FCRA has used for decades:

• Notice before you act. FCRA requires disclosure before a background check; AI laws require notice before an automated tool evaluates a candidate.
• A chance to respond. FCRA has the adverse action process; Colorado requires a path for candidates to correct data and request human review.
• Proof of fairness. Background screening relies on accuracy standards; AI laws call for bias testing of the tool's outcomes.
• Records that survive an audit. Both expect you to show your work, not just say you followed the rules.

The difference is that most employers have a vendor managing their screening compliance, but nobody managing their AI compliance.

Five steps to take now

1. Inventory your tools. List every system in your hiring workflow and ask each vendor in writing whether it uses AI or automated scoring.
2. Map where your candidates are. If you hire in New York City, California, Illinois, or Colorado, the local rules likely apply, even for remote roles.
3. Check for a bias audit. For NYC hiring, confirm each covered tool has an independent audit less than a year old, with the summary posted on your careers page.
4. Update your candidate notices. Add AI disclosures alongside your existing FCRA disclosures so candidates see them in one place.
5. Assign an owner. Name the person responsible for AI hiring compliance, the same way someone owns your screening program.

How Greenpoynt can help

Greenpoynt is an AI governance firm led by an ISO 42001–certified CEO. We provide NYC Local Law 144 bias audits, multi-state compliance checklists, and a quick assessment that shows where your hiring process stands. Our pricing and turnaround are built for small and mid-sized employers and staffing firms, not just the Fortune 500.

Sources

• Proskauer: Colorado's AI law gets major rewrite. What now for employers?
• Ethena: AI in hiring, 5 employment laws every HR team should know in 2027

This article is general information, not legal advice. Talk to employment counsel about your specific obligations.