United States

NYC Local Law 144 (AEDT)

New York City Local Law 144 of 2021 (Automated Employment Decision Tools), NYC Admin. Code 20-870 to 20-874, with DCWP rules at 6 RCNY 5-300 to 5-304

A New York City law that bars employers and employment agencies from using AI hiring or promotion tools unless the tool had an independent bias audit in the past year, the results are public, and candidates got 10 business days' notice.

BindingLaw/RegulationDeployersReaches beyond its borders
Regulator
NYC Department of Consumer and Worker Protection (DCWP)
Adopted
11 Dec 2021
In force
5 Jul 2023
Sectors
Employment and HR
Penalties
Civil penalty up to USD 500 for a first violation and each extra violation that day; USD 500 to 1,500 for each later violation. Each day of non-compliant use and each missed notice is a separate violation. Heard at OATH; Corporation Counsel can also sue. Private rights under other laws are preserved.
Last verified
19 Oct 2026Official source

Summary

  • Covers automated employment decision tools (AEDTs): software using machine learning, statistics, data analytics or AI that gives a simplified output (score, rank, classification, recommendation) that substantially assists or replaces human judgement in hiring or promotion.
  • Before using an AEDT, the employer must make sure it had an independent bias audit within the last year, and must post a summary of the results and the tool's first-use date on its careers page.
  • NYC-resident candidates and employees must get notice at least 10 business days before the tool is used, including what it assesses and how to ask for an alternative process or accommodation.
  • Employers must also explain their data retention policy, data types and sources, on the website or within 30 days of a written request.
  • The law demands an audit, not a result: it does not say what to do if the audit shows a disparity. Anti-discrimination law still applies.

Who it applies to

  • Employers and employment agencies that use an AEDT "in the city" to assess candidates for hiring or employees for promotion (Admin. Code 20-871).
  • "In the city" means the job is tied to an NYC office at least part time, or is remote but linked to an NYC office, or the employment agency is in NYC (DCWP FAQ I.4).
  • Notice duties protect NYC residents only (Admin. Code 20-871(b)).
  • Vendors are not directly liable. The employer must ensure an audit exists; a vendor may commission one for its tool (FAQ V).
  • Extraterritorial: yes, in practice. An employer or agency based anywhere (including India) is covered if it uses an AEDT to fill an NYC-linked role.
  • Out of scope: sourcing or outreach to people who have not applied for a specific role (FAQ I.6), and simple tools such as spam filters, firewalls, calculators and spreadsheets (Admin. Code 20-870).

Key dates

  1. City Council passes Int. 1894-A
  2. Becomes Local Law 144 of 2021 without the Mayor's signature
  3. DCWP publishes first proposed rule
  4. DCWP publishes second proposed rule
  5. Law takes effect
  6. DCWP adopts final rule (date from secondary sources; notice of adoption is undated)
  7. DCWP enforcement begins
  8. NY State Comptroller audit 2024-N-6 finds DCWP enforcement ineffective
Full date record
Date Event
2021-11-10 Council passes Int. 1894-A
2021-12-11 Enacted as Local Law 144 of 2021 (returned unsigned by the Mayor)
2022-09-23 First proposed DCWP rule; hearing 2022-11-04
2022-12-23 Second proposed rule; hearing 2023-01-23
2023-01-01 Law takes effect
2023-04-06 Final rule adopted (secondary sources; adoption notice undated)
2023-07-05 DCWP enforcement begins
2025-12-02 State Comptroller audit report 2024-N-6 on DCWP enforcement (period July 2023 to June 2025)

Penalties and enforcement

  • Fines (Admin. Code 20-872): up to USD 500 for the first violation and any further violations on the same day; USD 500 to 1,500 for each later violation.
  • Stacking: each day an AEDT is used in breach is a separate violation, and each missed notice is a separate violation.
  • Forum: penalty cases go to the Office of Administrative Trials and Hearings (OATH). The Corporation Counsel can also go to court to force compliance (20-873).
  • Private claims preserved: the law does not limit candidates' own lawsuits or the NYC Commission on Human Rights (20-874).
  • Complaints: anyone can report missing audits, summaries or notices to DCWP online without an account.
  • Comptroller audit (Dec 2025): the State Comptroller found DCWP's enforcement "ineffective", citing weak complaint routing, inaccurate compliance reviews and heavy reliance on employers to self-disclose. DCWP agreed to most recommendations: better routing of AEDT complaints, staff training, written procedures, and interviews and tool demonstrations during investigations. (The osc.ny.gov report page blocked automated access; findings taken from osc.ny.gov search extracts and law-firm summaries. Specific counts not verified.) Expect more proactive enforcement in 2026.
  • Amendments: none to Local Law 144 or the DCWP rule found as of 2026-10-19. One secondary source mentions a 2026 local law ordering a city study of automated hiring tools; not verified.

What it means for an Indian company

  • Indian HR-tech vendors (resume screeners, assessment engines, video interview scorers, ATS ranking features) selling to US employers: NYC customers will ask for a current independent bias audit before go-live and every year. Commission one on pooled customer data so each customer can rely on it (they must contribute data or be first-time users).
  • Do not audit yourself. An auditor who works for the vendor, helped build the tool, or has a financial interest is not independent (6 RCNY 5-300). Use an outside firm.
  • Give customers a publishable summary: audit date, data source, number of "unknown" category records, applicant counts, selection or scoring rates and impact ratios by sex, race/ethnicity and their combinations.
  • Build notice support into the product: configurable candidate notices, a 10 business day timer before scoring, an "alternative process or accommodation" request link, and a data retention statement.
  • Indian IT and GCC employers hiring for New York offices (or recruitment process outsourcing firms acting as employment agencies) are themselves covered if they use AI screening for NYC-linked roles.
  • Demographic data cannot be inferred or imputed for the audit (FAQ III.6); you need real self-reported data or test data with an explanation.

Obligations

References: NYC Administrative Code (Admin. Code) and Rules of the City of New York Title 6 (6 RCNY).

Showing 10 of 10
IDObligationReferenceApplies toControls
NYCLL144-01Identify every tool used in hiring or promotion that meets the AEDT definition and is used for NYC-linked roles (implied scoping step)Admin. Code 20-870; 6 RCNY 5-300Deployer
NYCLL144-02Use an AEDT only if it had a bias audit no more than one year before use; repeat at least yearlyAdmin. Code 20-871(a)(1); 6 RCNY 5-301Deployer
NYCLL144-03Use a truly independent auditor: not employed by you or the vendor, not involved in building or distributing the tool, no material financial interest6 RCNY 5-300 ("independent auditor")Deployer
NYCLL144-04Make sure the audit calculates selection or scoring rates and impact ratios for sex, race/ethnicity and intersectional categories, using historical data (test data only if historical data is insufficient; categories under 2% may be excluded; no inferred demographics)6 RCNY 5-301, 5-302; FAQ IIIDeployer
NYCLL144-05Before use, publish on the careers page (or via a clearly labelled link) the audit date, a results summary with data source, unknown-category count, applicant numbers, rates and impact ratios, plus the AEDT distribution dateAdmin. Code 20-871(a)(2); 6 RCNY 5-303(a), (b)Deployer
NYCLL144-06Keep that summary posted for at least 6 months after the last use of the AEDT6 RCNY 5-303(c)Deployer
NYCLL144-07Tell NYC-resident candidates and employees at least 10 business days before use that an AEDT will be used, with instructions to request an alternative process or reasonable accommodation (by careers page, job posting, mail or email; for promotions, a written policy)Admin. Code 20-871(b)(1); 6 RCNY 5-304(a) to (c)Deployer
NYCLL144-08In the same window, tell them which job qualifications and characteristics the AEDT will assessAdmin. Code 20-871(b)(2); 6 RCNY 5-304(b), (c)Deployer
NYCLL144-09Post the AEDT data retention policy, data types and sources on the careers page, with instructions for written requests; answer requests within 30 days, or explain why disclosure would breach law or an investigationAdmin. Code 20-871(b)(3); 6 RCNY 5-304(d)Deployer
NYCLL144-10Act on audit results under anti-discrimination law (Local Law 144 itself requires no specific action, but NYC, state and federal discrimination law still apply)Admin. Code 20-874; FAQ II.2Deployer

Evidence an auditor will ask for

  • Inventory of hiring and promotion tools with a documented decision on whether each is an AEDT.
  • Current bias audit report, dated within the last 12 months, and the auditor's independence statement.
  • Data description used in the audit (historical or test data, time period, why any categories were excluded).
  • Screenshot or archived copy of the careers page summary and distribution date, with posting history showing 6 months after last use.
  • Candidate notice text and proof of timing (job posting dates, email logs) showing 10 business days before use.
  • Alternative process and accommodation request log.
  • Data retention statement and log of written data requests answered within 30 days.
  • Vendor contract clauses on audit cooperation and data sharing.
  • Record of how adverse impact findings were reviewed under anti-discrimination law.

Common mistakes

  • Assuming the vendor's audit automatically covers you. You may rely on a pooled audit only if you supplied your data or are using the tool for the first time.
  • Letting the audit lapse past 12 months while the tool keeps running; each day counts as a new violation.
  • Using inferred or imputed race and sex data in the audit.
  • Posting notice on the same day the tool starts scoring, instead of 10 business days earlier.
  • Taking the audit summary down as soon as the tool is retired; it must stay up 6 months after last use.
  • Thinking "the human makes the final decision" takes you out of scope. Screening that substantially assists the decision counts (FAQ I.5).
  • Treating low enforcement to date as safety. The Comptroller audit pushed DCWP to investigate more actively.

Glossary

  • AEDT (automated employment decision tool): software that gives a score, rank or recommendation used to substantially assist or replace human decisions on hiring or promotion.
  • Bias audit: an impartial evaluation by an independent auditor of how the tool's outcomes differ across sex and race/ethnicity groups.
  • Selection rate: the share of people in a group who were selected or moved forward.
  • Scoring rate: the share of people in a group who scored above the sample median.
  • Impact ratio: one group's selection (or scoring) rate divided by the rate of the most selected (or highest scoring) group; values well below 1 suggest disparity.
  • Intersectional category: a combined group, such as Hispanic or Latino women.
  • Distribution date: the date the employer started using the AEDT.
  • Business day: a working day, excluding weekends and public holidays.
  • DCWP: the NYC agency that enforces consumer and worker protection laws, including this one.
  • OATH: the NYC tribunal that hears penalty cases.

Key takeaways

  • In force since 1 Jan 2023, enforced since 5 Jul 2023; no amendments found as of 2026-10-19.
  • Four pillars: independent annual bias audit, public summary, 10 business day notice, data retention disclosure.
  • The employer carries the duty, but Indian HR-tech vendors effectively must supply the audit and notice tooling to sell into NYC.
  • Fines are modest per violation but stack daily; the Dec 2025 Comptroller audit signals tougher enforcement.
  • This is the clearest real-world case for SC-AI-038 Independent bias audit.

Official sources

This is general information, not legal advice. Last verified 19 Oct 2026 against the official source. Laws change; confirm the current position with qualified counsel before acting.

Check your readiness

See where your controls stand today with our free compliance gap assessment.

Start the gap assessment

Talk to us about AI Governance

We map NYC Local Law 144 (AEDT) and the other rules that reach you onto one control set, and build the evidence your auditors and customers will ask for.

Explore AI Governance