Skip to main content
Regulome
Search regulations…⌘K
For providersFree Checker
The Ledger · Saturday, 14 March 2026Issue № 30All issues →

AI Compliance Hub · newsroom

Comparison · 7 min read

CCPA ADMT vs. NYC Local Law 144: Two Models for Automated Decision Regulation

California and New York City both regulate automated decision-making, but with fundamentally different approaches. Here’s how they compare and what it means for businesses operating in both.

CCPA ADMT vs. NYC Local Law 144: Two Models for Automated Decision Regulation
ComparisonIllustration · AI Compliance Hub

California’s ADMT rules and NYC’s Local Law 144 both regulate automated decision-making in employment contexts, but they use fundamentally different regulatory models. Understanding both is essential for employers with California employees and New York City operations.


The Core Regulatory Approach

NYC Local Law 144 takes a technology-first approach: it requires bias audits of specific AI tools (AEDTs) used in hiring, with public disclosure of audit results. The requirement is prescriptive — if you use a covered tool, you must audit it annually and publish the results.

California ADMT rules take a rights-based approach: they give consumers (including employees and job applicants) rights to opt out, access information, and correct errors. Businesses that use ADMT for covered purposes must disclose, provide opt-outs, and conduct risk assessments.


Side-by-Side Comparison

DimensionNYC Local Law 144California ADMT
Regulatory modelMandatory audit + disclosureConsumer rights + risk assessment
Covered contextHiring and promotion decisions using AEDTsSignificant decisions using ADMT (broader)
Who bears the obligationEmployers and employment agenciesBusinesses subject to CPPA
Annual audit requiredYesNo (risk assessment required, not annual audit)
Public disclosure requiredYes (audit results on website)No (privacy notice disclosure, not audit results)
Consumer opt-out rightNo explicit opt-outYes — opt out of ADMT use
Bias testing methodologySpecified (selection rate analysis by protected class)Not specified (business defines risk assessment)
Penalty for violation$1,500/day per violationCPPA enforcement, up to $7,500/violation
Private right of actionNoLimited (for certain violations)

The Employment AI Overlap

Both laws apply to employers using AI in hiring decisions. If you’re a California employer with NYC office positions:

NYC LL 144 obligations:

  • Annual bias audit of any AEDT used for NYC positions
  • Publish audit results on website
  • Notify candidates before AEDT use (10 business days notice)

California ADMT obligations:

  • Disclose ADMT use for hiring in privacy notice
  • Provide opt-out mechanism for California resident applicants
  • Conduct pre-use risk assessment for high-risk ADMT
  • Honor opt-out requests from California residents

The opt-out gap: NYC LL 144 doesn’t give candidates the right to opt out of AEDT evaluation. California ADMT does. An employer operating in both must build an opt-out process for California resident applicants even if they’re not required to offer alternatives in NYC.


What Each Framework Is Good At

NYC LL 144 strengths:

  • Concrete, measurable requirement (selection rate ratios)
  • Public accountability through published audit results
  • Creates market pressure on AEDT vendors to improve fairness

NYC LL 144 weaknesses:

  • Narrow focus (only AEDTs in hiring)
  • No consumer opt-out right
  • Audit methodology is backward-looking (historical data only)

California ADMT strengths:

  • Broader scope (all significant ADMT uses, not just hiring)
  • Consumer agency through opt-out right
  • Principles-based risk assessment allows context-specific evaluation

California ADMT weaknesses:

  • Less prescriptive methodology (harder to know if you’re compliant)
  • Opt-out right creates operational complexity
  • Risk assessment requirements are still being interpreted

The Future Direction

NYC LL 144 represents the first wave: specific technology, specific use case, specific audit requirement. California ADMT represents the second wave: broader scope, rights-based, with flexibility for businesses to define how they assess risk.

Colorado and Virginia are following a third model: comprehensive impact assessments for all high-risk AI, closer to the EU AI Act approach.

Employers using AI in hiring should expect all three models to be relevant over time, as state AI laws proliferate and federal legislation remains uncertain.


Practical Compliance for Both

If you’re subject to both NYC LL 144 and California ADMT:

  1. Conduct your NYC annual bias audit (fulfills NYC requirement; useful evidence for California risk assessment)
  2. Include ADMT disclosure in your California-compliant privacy notice
  3. Build opt-out mechanism for California resident applicants
  4. Use your NYC bias audit results as part of your California risk assessment documentation
  5. Train HR on both frameworks — they have different candidate-facing obligations
CCPA ADMTNYC LL 144Automated DecisionsComparisonEmployment AI
AI Compliance Hub editors
The editorial desk covers AI and cyber regulation across the US, EU, and UK. Tips? editors@aicompliancehub.com
Not legal advice

This article is for informational purposes only and does not constitute legal advice. Always consult qualified counsel before making compliance decisions. Try the free compliance checker →

Keep the Ledger coming.

A weekly edition of new regulations, enforcement actions, and compliance deadlines — delivered every Friday. Free forever. No tracking pixels.

Subscribe free →

Read by 4,000+ compliance teams · Cancel any time