Illinois has passed a law requiring employers to tell workers and job applicants when artificial intelligence plays a role in hiring, firing, promotion, or discipline decisions. The law takes effect January 1, 2026, and it applies regardless of company size — meaning a five-person shop using an AI resume screener faces the same disclosure duty as a large corporation.
The law amends the Illinois Human Rights Act to prohibit employers from using AI in ways that produce discriminatory outcomes based on race, age, disability, or other protected characteristics. It specifically calls out the use of zip codes as a stand-in for race or national origin, a practice regulators have flagged in lending and hiring algorithms for years. Employers must also notify employees when AI is being used to make employment-related decisions about them.
This isn't Illinois's first move into AI regulation. The state's Biometric Information Privacy Act, passed in 2008, became the model other states borrowed from when facial recognition and fingerprint scanning lawsuits started piling up against employers who used biometric time clocks without proper consent. That law generated years of litigation and multimillion-dollar settlements, much of it against companies that had no idea their timekeeping software counted as biometric data collection.
Illinois joins a short but growing list of jurisdictions writing their own AI employment rules. New York City's Local Law 144, in effect since 2023, requires bias audits for automated hiring tools. Colorado passed a broader AI Act covering high-risk AI systems across industries, though its effective date has been pushed back amid business pushback. California has multiple AI-related bills moving through its legislature covering everything from hiring to deepfakes.
The pattern here is a state-by-state patchwork rather than a single federal standard. Congress has discussed national AI legislation for several years without passing anything comprehensive, which has left states to fill the gap on their own timelines and with their own definitions of what counts as an AI employment decision. A business operating in Illinois, New York, and Colorado could face three different disclosure and audit requirements for the same hiring software.
For small businesses, the practical exposure often comes through vendors rather than in-house tools. Many small employers don't build their own AI hiring software — they use applicant tracking systems, scheduling tools, or HR platforms that have quietly added AI features like resume ranking or automated interview scoring. Under laws like Illinois's, the employer using the tool bears responsibility for disclosure and non-discrimination, not just the software vendor.
This means the practical first step is an audit, not a purchase. Business owners should ask their HR software providers directly whether any AI or automated decision-making features are active in recruiting, scheduling, performance review, or termination workflows. Several major HR platforms have added AI scoring or ranking features by default in the past two years, sometimes without prominent notice to customers.
The cost of compliance so far looks more like paperwork than technology spending — updating employee notices, reviewing vendor contracts, and documenting how AI tools are used. But the BIPA precedent suggests litigation risk can escalate quickly once plaintiffs' attorneys start testing a new law's boundaries in court.
Watch for three things over the next several months: whether Illinois issues implementing regulations or guidance clarifying what counts as an employment decision, whether other states introduce similar bills before their 2026 legislative sessions, and whether major HR software vendors add compliance features or disclosure templates in response. Early litigation filed under the law, if any emerges, will also signal how aggressively it gets enforced.
The bottom line: small businesses operating in Illinois should review any hiring, scheduling, or HR software for AI-driven features before January 2026, and businesses in other states should expect similar disclosure requirements to arrive on a rolling, state-by-state basis rather than through a single national rule.