What should US employers know before rolling out AI training? (NIST, Illinois, NYC, Colorado)
By Bodhih Training Solutions, Bengaluru · UpdatedThe short answer
Train employees on how your company may use AI, not only on tools. In the US, the NIST AI Risk Management Framework and its Generative AI Profile give a voluntary structure. HR teams also need the employment rules: Illinois HB 3773 (in force January 1, 2026), New York City Local Law 144 bias audits, and Colorado's replacement AI law from January 1, 2027.
What frameworks should AI training follow?
NIST published the AI Risk Management Framework (AI RMF 1.0) in January 2023. It is voluntary and organized around four functions: Govern, Map, Measure and Manage. In July 2024 NIST added the Generative AI Profile (NIST AI 600-1), which describes risks specific to generative AI, such as confabulation and data privacy, with suggested actions.
You do not need to train every employee on the framework. Use it to decide what each group must know: everyone needs your acceptable-use rules and how to check AI output; managers need to approve uses and spot risk; HR, legal and IT need the governance detail.
Which US laws affect AI in employment decisions?
State and city rules focus on AI used in hiring, promotion and other employment decisions. Summary as reported in 2026:
| Rule | Status | What it asks of employers |
|---|---|---|
| New York City Local Law 144 | Enforced since July 5, 2023 | Independent bias audit within a year of using an automated employment decision tool, a public summary, and notice to candidates |
| Illinois HB 3773 (Public Act 103-0804) | In force since January 1, 2026 | No discriminatory effect from AI in employment decisions, no ZIP codes as a proxy for protected classes, and notice to employees |
| Colorado SB 24-205 | Repealed and replaced in May 2026 before it took effect | Replaced by SB 26-189, effective January 1, 2027: notices, explanations of adverse decisions and human review |
| Illinois AI Video Interview Act | In force | Notice and consent before AI analyzes recorded video interviews |
What should employees learn in AI training?
A practical curriculum by audience:
- Everyone: what data may never go into an AI tool, how to check output for errors and invented facts, and when to disclose AI use.
- Managers: how to approve a new use, how to measure whether it helps, and how to handle mistakes.
- HR and recruiters: which tools count as automated decision tools, notices to candidates, and keeping a human in the decision.
- IT and security: shadow AI, data leakage and prompt injection.
- Leaders: governance, accountability and where AI changes jobs.
How do you roll it out?
Publish a short AI acceptable-use policy first, then train against it. Start with a 4 to 6 hour course for everyone, add role-specific courses for HR, managers and technical teams, and measure before and after on the tasks people actually do. Repeat when your policy or the law changes.
Courses that fit
Responsible AI and Data Privacy course
Lead your team’s AI use safely and lawfully: the 2026 rules, three Scenario Sims and a real AI register entry.
AI course · onlineAI for HR course
Eight HR work products built with AI on your own work, a proctored exam and a credential anyone can verify.
AI course · onlineAI at Work Essentials course
Four hours of hands-on AI literacy for every employee, with a measured before-and-after score.
Related reading
Sources
Checked on 2026-11-12. Laws and prices change; confirm on the official page before you rely on a figure.
More from the Bodhih family
Train managers to approve AI use safely
Responsible AI and Data Privacy for Managers: about 11 hours, self-paced, with a verifiable credential. $119, or company seats.
Questions people ask next
Is the NIST AI RMF mandatory?
No. It is voluntary guidance, widely used as a reference for AI governance programs.
Does NYC Local Law 144 apply if we are based elsewhere?
It applies to the use of automated employment decision tools for candidates and employees in New York City, so check it if you hire there.
Is the Colorado AI Act in force?
The original SB 24-205 was repealed and replaced in May 2026 by SB 26-189, effective January 1, 2027, according to legal trackers. Check the Colorado General Assembly for the current text.
Which Bodhih course covers this?
Responsible AI and Data Privacy for Managers ($119) covers policy, risk and privacy decisions; Applied AI: HR ($199) covers fair, compliant AI use in people decisions.
Is this legal advice?
No. It summarizes public sources as of the date shown. Laws are changing quickly; take advice from employment counsel.