Artificial intelligence is no longer a future concern for HR teams. It is embedded in resume screening, chatbot interviews, performance scoring, and workforce analytics. But as adoption accelerates, one of the most pressing challenges is not technological — it is legal. With federal AI legislation still unsettled, individual U.S. states are moving ahead with their own rules for AI in employment. For HR leaders, especially those managing distributed or remote workforces, that means a single hiring tool may be legal in one state and require audits, notices, or disclosures in another.

The result is a compliance map that changes faster than many organizations can update their policies. Understanding that map has become a basic requirement for HR executives, not just legal teams.

The new state-by-state reality

The most visible example is New York City's Local Law 144, which requires employers and employment agencies to conduct independent bias audits before using automated tools for hiring or promotion decisions. It also mandates specific notices to candidates. Chicago has its own rules on automated employment decision tools, and Illinois has long regulated AI-driven video interviews, requiring consent and explanations of how the technology works.

Colorado has gone further with a broader AI law that classifies employment as a high-risk use case. Under that framework, companies deploying AI systems that make consequential decisions must implement risk management programs, detailed documentation, and human oversight. Other states have passed narrower laws addressing automated decision-making, while several legislatures are debating broader measures. The pattern is clear: direct regulation is spreading, and the definitions of 'automated decision tool' and 'bias audit' are not identical from one state to the next.

For HR teams, this patchwork creates a practical problem. A vendor may provide a bias audit that satisfies one jurisdiction but not another. Candidate notices may need different language depending on where the applicant is located. A remote hiring process that draws candidates from dozens of states can quickly trigger multiple legal requirements at once.

What HR should review now

The first step is to inventory every AI or algorithm-assisted tool used across the employee lifecycle. That includes applicant tracking systems, resume scoring tools, chatbots, video interview platforms, skills assessments, and performance management software. For each tool, HR leaders should ask whether it makes or materially supports decisions about hiring, promotion, compensation, or termination. If the answer is yes, it likely falls within the scope of at least one state law.

Second, procurement can no longer be separated from compliance. HR and legal teams should demand clear documentation from vendors, including whether the tool has been subject to an independent bias audit, what metrics were used, and whether the audit covers the specific deployment context. A generic audit conducted for a different role or region may not satisfy regulators. Organizations should also review contracts to ensure they can receive audit results and update notices when laws change.

Third, candidate and employee communication needs to become more transparent. Many state laws require individuals to be informed when AI is used in decisions that affect them. That notice should explain what the tool does, how it is used, and how candidates can request an alternative review. Silence may not be a legal option, and poorly designed notices can damage trust even when they are technically compliant.

Fourth, HR teams should build internal governance around adverse impact. Even where a law does not require a full bias audit, federal anti-discrimination laws still apply. If an algorithm filters out a disproportionate share of applicants from a protected group, the employer may be responsible. Regular monitoring and human oversight are becoming standard expectations, not best practices.

Compliance as a distributed workforce issue

Remote and hybrid work adds another layer of complexity. A company headquartered in a state with no AI employment law can still be subject to the laws of the state where a remote employee or candidate lives. That means HR policies must be designed for the broadest applicable standard, or they must include location-specific workflows. Many organizations are choosing the former, treating the strictest state rules as a default baseline to reduce operational friction.

This approach has costs, but it also has advantages. Clearer disclosures, stronger vendor oversight, and routine bias monitoring can improve the quality of hiring decisions and reduce legal risk. As AI regulation continues to evolve, HR teams that treat compliance as a strategic function, rather than a reactive one, will be better positioned to use AI responsibly.

For HR platforms and flexible staffing tools that support recruitment and workforce management, including XMF, the same logic applies: built-in compliance features may soon become as important as usability or reach. Organizations should evaluate whether their tools can adapt to changing state requirements without requiring a manual patchwork of workarounds.

Originally published by XMF, inspired by publicly reported industry news.