If your AI tools discriminate, it’s your liability—not your vendor’s.
On January 1, Illinois started treating AI-powered discrimination in employment the same way it treats every other form of employment discrimination: as a civil rights violation under the Illinois Human Rights Act. The statute targets AI that has the effect of subjecting employees to discrimination based on protected classes. In other words, employers who use AI tools that lead to discriminatory outcomes in hiring, promotion, or termination decisions now face the same legal exposure as if they’d made those decisions without any third-party tools.
The law applies a disparate impact standard, which means intent doesn’t matter. For example, if your résumé screening tool filters out candidates from predominantly Black zip codes, not knowing it was happening doesn’t get you off the hook.
The law also explicitly bans the use of ZIP codes as a proxy for protected classes in AI-driven employment decisions. Legislators called that out by name because algorithmic bias routinely launders race and socioeconomic discrimination through seemingly neutral geographic data.
The compliance obligations are concrete. Under the IDHR’s draft rules, if you’re using AI in employment decisions, you need to notify everyone it touches.
For current employees, that means an annual written notice disclosing the name of the AI product, who developed it, which employment decisions it influences, what personal data it processes, and how to request accommodations. If you adopt a new AI system or substantially change an existing one, you have 30 days to issue an updated notice.
For job applicants, the disclosure goes in the posting itself.
These notices need to be in plain language, available in the workers’ native languages, accessible to employees with disabilities, and posted in physical locations and on your intranet. In addition, you need to keep the records for four years. If a discrimination complaint gets filed, you keep the notices until it’s resolved.
The liability sits with the employer. If you bought a résumé screening tool from a vendor and that tool produces discriminatory outcomes, you’re the one facing the complaint.
This is the part that matters most for HR teams, because most aren’t building AI tools in-house. It’s more likely you’re buying them or subscribing to platforms for candidate screening, skills assessments, video interview analysis, and targeted job advertising. However, most of those vendors can’t tell you with certainty whether their algorithms produce disparate impact across protected classes.
As due diligence, ask your vendor: Has this tool been tested for disparate impact across race, sex, age, disability, and the other classes protected under the IHRA? Can you show me the results?
If they can’t answer that clearly, you’re deploying a tool that could generate a civil rights complaint, and you have no way to evaluate the risk.
If you’re using multiple AI tools across different stages of your hiring process, each one is a potential exposure point: the screening tool, the assessment platform, the interview analysis software, the job ad targeting algorithm. Map them. Know what’s running, who built it, and what data it’s processing. That inventory is the starting point for any compliance conversation with your legal team.
Enforcement runs through the existing Illinois Department of Human Rights complaint process. Once an employee or applicant files a charge, the IDHR has 100 days to determine whether there’s substantial evidence. If there is, the case goes to the Illinois Human Rights Commission for adjudication. After that, the complainant can take it to the circuit court.
Penalties include civil fines between $16,000 and $70,000 per violation, actual damages, attorney’s fees, back pay, and reinstatement. These are the same remedies available for any Illinois human rights complaint.
No enforcement actions have been reported yet. But the core requirement is already in effect, and employees can file complaints today. Waiting for final rules before taking compliance seriously could leave you exposed.
If you have employees in Illinois, this applies to you. The law spans nearly every stage of employment, including recruitment, hiring, promotion, renewal of employment, selection for training, discharge, discipline, tenure, and the terms and conditions of employment. If AI touches any of those decisions for Illinois-based workers, you’re covered.
The IDHR’s draft rules also extend obligations to your agents, including third-party recruiters acting on your behalf.
The federal picture is still unclear. The current administration has signaled it may challenge state AI laws, but it hasn’t changed them. For now, Illinois law stands, and other states are moving in a similar direction.
If you haven’t audited which AI tools are operating in your employment process, start there. If you haven’t issued notice to your employees and applicants, you’re already behind. And if you’re relying on your vendors to tell you everything is fine, that’s not a compliance strategy.
Bryan Driscoll is a non-practicing lawyer, HR consultant, and legal content writer who uniquely blends legal insight and HR expertise. Offering innovative HR solutions and engaging content, Bryan's mission is to empower businesses towards growth. His approach is straightforward, informative, and assertive.
