Ontario became the first Canadian province to mandate AI hiring transparency when Section 8.4 of the Employment Standards Act took effect on January 1, 2026, requiring employers with 25 or more employees to disclose in job postings when artificial intelligence is used to screen, assess, or select applicants. This law arrives alongside a patchwork of AI employment regulations across jurisdictions — from Quebec's automated decision-making rights under Law 25, to NYC's faltering bias-audit regime, to an EU AI Act whose employment provisions face a possible 16-month delay.
Ontario's Section 8.4 Is Live — But Guidance Remains Thin
The AI hiring disclosure requirement comes from Bill 149 (Working for Workers Four Act, 2024), which received Royal Assent on March 21, 2024, and added Sections 8.1–8.6 to Part III.1 of the Employment Standards Act. The implementing regulation is Ontario Regulation 476/24, filed November 29, 2024. The law has been in force since January 1, 2026.
The requirement is straightforward in principle: every employer with 25 or more employees that uses AI to screen, assess, or select applicants for a publicly advertised job posting must include a disclosure statement in that posting. The regulation defines AI broadly as "a machine-based system that, for explicit or implicit objectives, infers from the input it receives in order to generate outputs such as predictions, content, recommendations or decisions that can influence physical or virtual environments" — language tracking the OECD framework.
This breadth is the source of the law's biggest compliance challenge. Multiple major law firms — Osler, Fasken, Hicks Morley — have flagged that employers may struggle to determine whether everyday recruitment tools (LinkedIn Recruiter features, ATS keyword matching, Workday's embedded scoring) fall within this definition.
Enforcement & Penalties
- • Simple disclosure — employers need not provide detailed descriptions of the AI system
- • Fines up to $100,000 for corporations and $100,000 for individuals upon conviction
- • 3-year retention — employers must retain copies of all job postings and application forms
- • No enforcement actions reported as of early 2026 despite the law being in effect for over three months
Ontario's Information and Privacy Commissioner (IPC) and the Ontario Human Rights Commission (OHRC) have been more active. On January 21, 2026, they jointly released non-binding "Principles for the Responsible Use of Artificial Intelligence," covering validity, safety, privacy, human rights, transparency, and accountability. The OHRC has consistently criticized the legislation as too narrow — its February 2024 submission argued the disclosure requirement is "vague," fails to cover discriminatory AI-targeted advertising, and should mandate testing for human-rights compliance before deployment.
Quebec Already Regulates Automated Decisions; Federal AIDA Is Dead
Quebec's Law 25 (formerly Bill 64), fully phased in by September 2024, represents the most substantive AI employment regulation currently in force in Canada. Its core provision, Section 12.1 of the Private Sector Act, governs decisions based exclusively on automated processing of personal information — meaning no meaningful human involvement.
When such processing occurs in hiring, the employer must: inform the individual no later than at the time of the decision; and on request disclose the personal information used, the reasons, principal factors, and parameters behind the decision, and the individual's right to correct data and submit observations for human review.
Quebec's Law 25 — Penalty Structure
C$10M / 2%
Administrative monetary penalties (up to 2% of worldwide turnover)
C$25M / 4%
Penal provisions (up to 4% of worldwide turnover)
C$1,000+
Private right of action (minimum per person)
Human Review
If human meaningfully participates, Section 12.1 is not triggered
At the federal level, AIDA is dead. Bill C-27, which contained the Artificial Intelligence and Data Act as Part 3, died on the order paper on January 6, 2025, when Parliament was prorogued following Prime Minister Trudeau's resignation. The Carney government, elected April 2025, has taken a fundamentally different approach — the first-ever Minister of Artificial Intelligence and Digital Innovation (Evan Solomon) has stated the government won't "over-index" on regulation. Budget 2025 allocated $925.6 million for sovereign AI infrastructure, emphasizing adoption over guardrails.
Most Hiring Platforms Now Embed AI That Employers May Not Recognize
The scale of AI penetration in hiring is staggering. Over 99% of Fortune 500 companies use AI-based tools in their hiring processes, and more than 90% of employers use some form of automated system to filter or rank applications. Yet many employers — particularly those now subject to Ontario's disclosure requirement — may not realize their standard recruitment software qualifies as AI under the broad OECD-aligned definition.
Key Platforms with Embedded AI
Workday + HiredScore — AI-driven candidate grading, auto-resurfaces rejected candidates, auto-dispositions unqualified applicants
SAP SuccessFactors + SmartRecruiters — "Winston Intelligence" AI layer, claims 70% reduction in time-to-hire
HireVue — Used by 60%+ of Fortune 100, 70M video interviews, evaluates word choice, speech patterns, pace, and tone
Eightfold AI — Analyzes 1.6B career profiles; sued in January 2026 over FCRA "consumer report" claims
Paradox "Olivia" — Conversational AI chatbot embedded in Workday and SAP; Compass Group processes 120,000 hires/year through it
As one IAPP expert observed: "Everyone's slapped AI on their product, and it's hard to sometimes tell what might be the artificial intelligence in the product." Even platforms marketed as more human-centric — Greenhouse, Lever — integrate AI through extensive third-party ecosystems.
The AI Governance Gap: Awareness vs. Implementation
Depending on how "AI ethics policy" is defined, somewhere between 12% and 55% of organizations have meaningful governance. The original ~22% figure remains a reasonable approximation for organizations with comprehensive, implemented policies rather than aspirational frameworks.
2025–2026 AI Governance Data
Knostic 2025
Only 25% of organizations have fully implemented AI governance programs
UNESCO/Thomson Reuters 2025
Only 12% have policies ensuring human oversight of AI; fewer than 1 in 5 had conducted privacy impact assessments
SHRM 2026
Only 49% of AI-using organizations have policies regulating workforce AI use; just 13% have hired AI compliance specialists
IAPP 2025
77% say they are "actively building or refining" AI governance — but this measures intent, not completion
How Other Jurisdictions Compare: A Fragmented Landscape
NYC Local Law 144
In effect since July 2023 but a December 2025 Comptroller's audit found enforcement "ineffective." Only two AEDT complaints were received over two years. 75% of test calls to the 311 hotline were misrouted. At least 17 instances of potential non-compliance were found among 32 surveyed companies — DCWP had identified only one.
Illinois HB 3773
Effective January 1, 2026. May prove the most consequential U.S. development. Amends the Illinois Human Rights Act to make it unlawful for employers to use AI that has the effect of discriminating based on any protected class — covering both disparate treatment and disparate impact. Prohibits using zip codes as proxies for protected classes. Unlike NYC, provides a private right of action.
EU AI Act
Classifies all employment AI as high-risk. Prohibited practices already in effect since February 2, 2025 include emotion recognition in candidate interviews and biometric categorization inferring protected traits. However, high-risk employment provisions may be delayed from August 2026 to December 2027. The European Parliament approved this delay in March 2026 with 569 votes.
Colorado AI Act (SB 24-205)
Delayed from February 1 to June 30, 2026, and faces possible replacement. Governor Polis's AI Policy Work Group released a draft "repeal and replace" proposal in March 2026. The original law requires documented risk management programs, impact assessments, pre- and post-decision consumer notice, and provides an affirmative defense for organizations following NIST AI RMF or ISO/IEC 42001 frameworks.
Conclusion: Disclosure Is the Floor, Not the Ceiling
Ontario's disclosure requirement represents the minimum viable regulatory intervention — a transparency mandate with no bias-testing obligation, no algorithmic impact assessment, and minimal guidance on what constitutes compliance. Its significance lies less in what it demands than in what it signals: that AI in hiring has crossed from a technology question into an employment law question.
Three dynamics will shape the next 12 months. First, the definition problem is universal — Ontario's broad OECD-aligned AI definition, Colorado's "high-risk" framing, and NYC's "automated employment decision tool" construct each draw different boundaries around similar technology. Second, enforcement remains the weakest link everywhere — NYC's two-year track record demonstrates that even enacted laws achieve little without institutional capacity. Third, the federal vacuum in both Canada and the United States means provinces and states are writing the rules, producing a fragmented landscape that favors employers sophisticated enough to navigate it and disadvantages workers in jurisdictions without protections.
The gap between what the law currently requires (a sentence in a job posting) and what responsible AI governance demands (bias testing, impact assessments, human oversight) is where legal and reputational risk now concentrates.
This article is for informational and educational purposes only and does not constitute legal advice. The views expressed are those of the author and do not necessarily reflect the views of Mishak Law LLC or LegalTek.ai LLC.








