Whose AI Hiring Law Covers You When You Apply Out of State

What Actually Triggers Each Law

Each statute names its own trigger, and the employer's headquarters is never it. New York City Local Law 144, enforced since July 5, 2023, triggers on the position being located in the city, with notice owed to candidates living there ¹. Illinois' AI Video Interview Act, in force since January 1, 2020, triggers on a position based in Illinois, wherever you sit ². Maryland's facial-recognition consent law, effective October 1, 2020, attaches to the interview: no facial template without a signed waiver ³.

California's automated-decision-system regulations trigger on the employer regularly employing five or more people, wherever they are located, once the system evaluates a California applicant ⁴. That is four different triggers in four laws, and a fifth is due in 2027: Colorado's replacement act will trigger on a 'consequential decision', a category that names employment, made by a covered automated tool ⁵. None of the five checks where the company's main office sits, and a candidate reading only the employer's home-state law will miss every one of them.

Where the Major Triggers Point

Run one concrete case through the table. A candidate living in Ohio applies to a role posted as based in New York City, at a company headquartered in Texas, using a screening tool the company bought from a vendor in California. NYC's law reaches this candidate, because the position is located in the city and the notice duty follows the posting, not the applicant's address ¹.

Texas' own AI law, which uses an intent standard rather than an effects standard, is largely beside the point here, since the trigger question is about the position, not the company's home state. California's regulation could also reach the transaction, since it treats an agent acting on an employer's behalf, including a vendor, as an employer in its own right ⁴. The company's headquarters state supplied none of that coverage. A candidate can be protected by a law the employer's home state never enacted, purely because of where the job was posted or where the candidate lives, and the same case run with the posting moved to a fifth state can lose that coverage entirely without anything else about the candidate changing.

Check Both Addresses Before You Assume

Check two things for every application, not one: the state where you actually live, and the state the posting names as the job's location, which is not always the state the recruiter is emailing you from. Illinois' consent law follows the second one, not the first, so an Illinois resident interviewing for a New York-based role is not automatically covered by Illinois' statute, and an out-of-state resident interviewing for an Illinois-based role is.

Write both addresses down before you rely on any rights table, this one included, because the same posting can trigger different rules for different applicants depending on where each one lives. A coworker applying to the identical opening from a different state may have rights you do not, and the reverse is just as true. Neither address is fixed for you as a person; both change every time you apply somewhere new, which is why this is a per-application check rather than a fact you learn once and carry forward.

Don't Let the Employer's State Fool You

Compliance alerts written for employers ask a different question than yours: which of our postings and tools do we have to bring into scope. Answering that question correctly still leaves the applicant's version unanswered, because the alerts are scoped to what one company must do everywhere it operates, not to what a candidate can expect from one specific application. Reading employer-facing material and assuming it tells you your own rights skips exactly the step that matters: the trigger.

The same detector-and-screening rules employers are told to follow illustrate the point from the other chair. What employers are told about running an AI detector on a resume is written around the same NYC trigger discussed above, position location plus resident notice, and reading it shows you the compliance obligation your application may already be sitting inside, described from the side that has to build it rather than the side that receives it.

The honest limit of that comparison is worth stating plainly: an employer-facing article is written to tell a company what it must do everywhere its postings reach, not to tell any one applicant which of those duties landed on their particular case. Reading it fills in the mechanism the trigger question depends on, but it is not a substitute for checking your own two addresses against the table above.

Should You Track This Per Application?

For the handful of statutes on this list, yes, briefly, because the answer changes with every posting rather than staying fixed for you as a person. It takes one line: the job's stated location, your own state, and whether either matches Illinois, New York City, Maryland, or California.

Whether you're separately entitled to know AI screened a given application at all is the companion question worth checking alongside this one, since the trigger for that right is not identical to the trigger for these jurisdiction rules; a state can owe you the disclosure without owing you the specific alternative-process or human-review rights this article covers, and the reverse can hold too. This area also moves faster than most employment law: Colorado's law has already been amended twice since 2024 before ever taking effect, and Illinois added a second statute in 2024 for a 2026 start ⁵². Recheck the current date and current text before relying on a summary, including this one, more than a few months old, and treat a jurisdiction table as a starting list rather than a final answer for your own application.

Read the evidence >