How Often Is a Bias Audit Required in NYC?

How Often Is a Bias Audit Required in NYC?

Your AEDT vendor sent the audit summary eleven months ago. It's sitting in a folder, the notice went out to candidates, and nobody's thought about it since — until someone in HR asks the question every compliance calendar eventually forces: does this expire, and if so, when exactly?

That's the question underneath "how often is a bias audit required in NYC," and it's not academic. Local Law 144 doesn't require a bias audit once and call it done. It requires the audit to stay current — and "current" has a specific, countable meaning that most employers don't discover until they're close to the edge of it. By the end of this article you'll know exactly how the 12-month clock works, what triggers a reset, and what to build so the deadline never sneaks up on you again.

What "Annual" Actually Means Under Local Law 144

Local Law 144 took effect January 1, 2023, with enforcement beginning July 5, 2023 after a delay from an initially announced April 15 date (Epstein Becker Green / Workforce Bulletin, 2023). The law applies to any AEDT — defined broadly as a computational process derived from machine learning, statistical modeling, data analytics, or AI that produces a simplified output (a score, classification, or recommendation) used to substantially assist or replace discretionary employment decisions (Perkins Coie, 2023).

Employers using a covered AEDT on NYC candidates or employees carry three core obligations: an annual independent bias audit; a public summary of the most recent audit results posted on the employer's website, alongside the distribution date of the AEDT; and advance notice to candidates or employees — at least 10 business days before use — with an alternative process or accommodation available (Crowell & Moring LLP, 2023; Epstein Becker Green, 2023).

The word doing all the work here is "annual." It doesn't mean "once, on file forever." It means the audit backing your current use of the AEDT can't be more than a year old. Once it passes that mark, the AEDT is technically operating without a valid audit behind it — even if nothing else about your process changed.

How the 12-Month Clock Starts — and Resets

Think of the clock as starting the moment a completed bias audit becomes the one you're relying on to justify continued AEDT use. From that date, you have roughly a year before that audit needs to be replaced by a fresh one to keep the tool in active use for NYC hiring or promotion decisions.

A few things reset or complicate that clock in practice:

• Continuous use past the one-year mark requires a new audit before the old one's anniversary — not sometime after you notice it lapsed.
• A new AEDT, or a materially different version of an existing one, is widely treated by practitioners as needing its own audit. DCWP has not published guidance defining what counts as a materially different version — a retrained model, a new use case — so treat this as prudent practice rather than a stated rule: handle ambiguous cases conservatively and confirm with counsel or DCWP directly.
• Multiple AEDTs on different acquisition or deployment dates each run their own clock — a resume screener bought in March and a video-interview tool added in September do not share a renewal date.

This is exactly where a single-employer, single-tool mental model breaks down. Most 50–250 employee organizations run more than one AEDT, often from more than one vendor, each on its own anniversary. Without a calendar that tracks each tool's audit date independently, it's easy to keep one current while the other has quietly gone stale — and DCWP does not send a reminder when that happens.

If you're building that view for the first time, a Local Law 144 compliance guide is the place to see how the audit obligation fits alongside notice and posting requirements before you focus narrowly on renewal timing.

What Happens If the Audit Lapses

The honest answer is: nothing happens automatically. There's no system that flags you the day an audit turns 366 days old. The exposure sits quietly until a complaint, an inquiry, or an internal audit surfaces it — which is part of why enforcement has been inconsistent so far.

A December 2025 audit by the Office of the New York State Comptroller reviewed the law's first two years (July 2023–June 2025) and found DCWP's enforcement "ineffective." Of 32 companies DCWP itself reviewed, DCWP found only a small number non-compliant — while the Comptroller's own auditors, reviewing the same companies, found substantially more violations (Office of the NY State Comptroller, 2025). Separately, a 2024 academic study of 391 employers subject to the law found only 18 had posted an audit report and only 13 had posted the required transparency notice (ACM FAccT, Wright & Muenster et al., 2024).

None of that is a reason to treat the deadline casually — it's a reason to treat your own tracking as the only reliable check, since the agency-level backstop hasn't been consistent. Civil penalties under LL144 run up to $500 for a first violation (and each additional violation on the same day), $500 to $1,500 for each subsequent violation, and penalties accrue per violation, per day (Office of the NY State Comptroller, 2025). A lapsed audit that continues for weeks or months before anyone catches it isn't a single fine — it's a daily-accruing one.

An audit that's 13 months old isn't "almost current." Under Local Law 144, it's expired, and every day of continued AEDT use on that basis is a fresh exposure — not a one-time lapse you can quietly backdate.

If you want the full breakdown of penalty mechanics and what a missed renewal actually triggers, what happens if you miss the bias audit deadline walks through it in more detail.

Building a Renewal Calendar That Doesn't Rely on Memory

The operational fix for "how often is a bias audit required" is not a mental note or a calendar invite one person owns. It's a document that survives staff turnover, tracks every AEDT separately, and forces a decision point well before the anniversary date arrives — not on it.

A workable renewal calendar tracks, per AEDT: the date of the last completed audit, the resulting expiry date, the vendor or auditor who performed it, and a lead-time checkpoint (commonly 60–90 days out) where someone is responsible for confirming a new audit is scheduled. That checkpoint matters more than the deadline itself — independent auditors book engagements in advance, and "the audit expires next week" is a much worse position than "the audit expires next quarter and we've already scheduled the renewal."

This is also where the distinction between what we do and what an auditor does matters. WorkforceNewYork's workbooks — including the AEDT annual bias audit expiry & renewal tracker, a Local Law 144 compliance deadline calendar, and a structured annual bias audit renewal reminder worksheet — run the operational side of this: dates, owners, checkpoints, documentation. They do not perform, certify, or sign a bias audit, and they never score any candidate or employee. That work stays with your independent auditor. Consider this operational guidance, not legal advice — for a determination specific to your AEDTs, confirm current requirements with DCWP or your own counsel.

We're also building toward an automated reminder engine and a live vendor audit registry that will surface expiry dates without manual tracking. Those aren't available yet — if you want early access when they ship, join the waitlist.

Your First Action Item

Before you close this article, pull up every AEDT your organization uses on NYC candidates or employees and write down the audit completion date for each one. If you can't find that date in under five minutes, that's the actual answer to "how often is a bias audit required" for your organization right now: you don't have a system, you have a memory.

The Annual Re-Verification & Audit-Expiry Renewal Planner is built to fix exactly that — one row per AEDT, expiry dates calculated automatically from the audit date, and a lead-time checkpoint so renewal is scheduled, not scrambled. Download the planner and put a real date, not a guess, next to every tool you're running.