How-To Guides

AI Compliance Software: AIVIA AI Impact Assessment Guide

October 3, 2026 · 13 min read

By AICompliant Research Team

The rapid proliferation of Artificial Intelligence (AI) across enterprise functions, particularly in human resources, presents both transformative opportunities and significant regulatory challenges. For organizations utilizing AI in hiring processes, understanding and adhering to state-specific regulations like the Illinois AI Video Interview Act (AIVIA) is paramount. Proactive compliance is no longer optional; it's a strategic imperative. This guide provides a detailed, step-by-step approach to conducting an AI Impact Assessment (AIA) under AIVIA, demonstrating how robust AI compliance software can streamline your efforts and ensure adherence to evolving legal frameworks.

Understanding the Illinois AI Video Interview Act (AIVIA)

The Illinois AI Video Interview Act (AIVIA), codified as Bill HB 2557, became effective on January 1, 2020. This groundbreaking legislation was among the first in the United States to address the use of AI in employment decisions. It specifically targets employers who use artificial intelligence to analyze video interviews of applicants located in Illinois.

AIVIA imposes several critical requirements on employers:

  • Notice and Consent: Before an AI-powered video interview, employers must notify applicants that AI will be used to analyze their interview and obtain their written consent.
  • Explanation: Employers must provide applicants with an explanation of how the AI works and what characteristics it will use to evaluate them.
  • Data Retention Policy: Employers must disclose their data retention policy, including how long the video and AI analysis data will be stored and how it will be deleted.
  • No Exclusive AI Use: The Act prohibits employers from exclusively relying on AI analysis to determine whether an applicant will be selected for an in-person interview. A human must also review the video.

Non-compliance with AIVIA carries significant risks, including penalties of up to $1,000 per violation, enforced by the Illinois Department of Commerce and Economic Opportunity. While this penalty might seem modest compared to those in other jurisdictions, repeated violations or class-action lawsuits can quickly escalate the financial and reputational damage.

AI Impact Assessments and Algorithmic Discrimination Prevention

Beyond mere compliance with AIVIA, conducting thorough AI Impact Assessments (AIAs) is a foundational element of any comprehensive AI risk management framework. AIAs serve as a proactive mechanism to identify, evaluate, and mitigate potential risks associated with AI systems, especially those related to bias and discrimination.

The push for AIAs and robust algorithmic discrimination prevention is a central theme across emerging AI regulations globally and domestically. For instance, the forthcoming Colorado AI Act (Bill SB 24-205), effective June 30, 2026, mandates extensive risk management and impact assessments for developers and deployers of high-risk AI systems, with penalties up to $20,000 per violation, enforced by the Colorado Attorney General. Similarly, the EU AI Act (Bill Regulation (EU) 2024/1689), fully effective for high-risk systems by August 2, 2026, requires exhaustive conformity assessments and risk management systems, backed by staggering penalties of up to $35,000,000 per violation. The NYC AEDT Law (Local Law 144 of 2021), effective July 5, 2023, requires independent bias audits and public posting of results for automated employment decision tools, with penalties up to $1,500 per violation per day, enforced by the NYC Department of Consumer and Worker Protection (DCWP).

These regulations underscore a global consensus: organizations must rigorously evaluate their AI systems for fairness, transparency, and accountability. An AIA is not just a regulatory hurdle; it's a strategic tool for building trustworthy AI and upholding ethical standards.

Step-by-Step AIVIA AI Impact Assessment Guide

Conducting an effective AIA under AIVIA requires a structured, systematic approach. Here’s a practical guide:

Step 1: Define Scope and Identify the AI System

Begin by clearly defining which AI system is subject to the assessment.

  • System Identification: Pinpoint the specific AI-powered video interview tool being used. Include its name, vendor, version, and the specific roles or departments it supports.
  • Purpose of Use: Document the exact purpose for which the AI is used (e.g., initial screening, candidate ranking, personality assessment).
  • Affected Population: Identify the target applicant pool (e.g., all applicants for specific roles, applicants residing in Illinois). AIVIA specifically applies to applicants located in Illinois, so geographic filtering is crucial.

Step 2: Collect Comprehensive Information on the AI System

Gather detailed documentation from the AI vendor and internal stakeholders. This forms the backbone of your assessment.

  • Data Inputs: What data does the AI system consume? (e.g., video footage, audio transcripts, facial expressions, speech patterns, psycholinguistic analysis).
  • Algorithm Description: Obtain a detailed explanation of the AI's underlying algorithms, including how it processes data, makes inferences, and generates scores or recommendations.
  • Training Data: Critically, gather information on the data used to train the AI. This includes its source, size, demographic composition, and any preprocessing steps. Biases in training data are a primary source of algorithmic discrimination.
  • System Output: Understand the specific outputs or metrics the AI system generates (e.g., candidate scores, flags for certain traits, rankings).
  • Vendor Due Diligence: Request transparency reports, previous bias audits, and compliance certifications from the AI vendor. This is also a critical part of your broader AI compliance checklist 2026 for third-party tools.
  • Internal Stakeholder Input: Interview HR teams, hiring managers, and IT personnel to understand their practical experience with the AI tool, any perceived issues, or workarounds.

An AI compliance platform like AICompliant can assist significantly in this stage by providing structured templates for information gathering and vendor questionnaires, ensuring no critical detail is missed. Utilize the platform's features, such as the compliance checker, to systematically record and evaluate vendor responses against AIVIA's requirements.

Step 3: Assess Risk of Bias and Discrimination

This is the core of algorithmic discrimination prevention and aligns with AIVIA's underlying intent to ensure fair hiring practices.

  • Focus on AIVIA's Concerns: While AIVIA doesn't explicitly define prohibited biases beyond general fairness, best practices dictate evaluating for biases related to race, ethnicity, sex, age, disability, and other protected characteristics. Consider how the AI might inadvertently discriminate based on:
    • Facial Analysis: Does the AI interpret facial expressions or features differently across demographic groups?
    • Speech Analysis: Does the AI penalize accents, speech patterns, or vocal characteristics disproportionately affecting certain groups?
    • Socioeconomic Factors: Does the AI indirectly infer socioeconomic status from background, clothing, or environment, leading to disparate impact?
  • Bias Auditing: If the vendor provides bias audit reports, review them thoroughly. Look for statistical disparities in outcomes for different demographic groups. If no such audits exist, consider conducting your own assessment where feasible, using synthetic data or controlled experiments.
  • Disparate Impact Analysis: Evaluate whether the AI's recommendations lead to a disproportionately negative outcome for a protected group, even if the AI doesn't explicitly use protected characteristics as inputs.

Step 4: Evaluate Transparency and Notice Compliance

AIVIA places strong emphasis on transparency and informed consent.

  • Notice Review: Verify that the pre-interview notice provided to applicants clearly states that AI will be used, how it functions, and what characteristics it evaluates.
  • Consent Mechanism: Ensure that explicit, written consent is obtained from each applicant before the video interview begins. Digital consent forms must be legally robust and auditable.
  • Explanation Quality: Assess the clarity and comprehensibility of the explanation provided to applicants regarding the AI's operation and data usage. It should be easily understood by a layperson.
  • Data Retention Policy Disclosure: Confirm that your organization's data retention policy for AIVIA-related data (video and AI analysis) is clearly communicated to applicants and aligns with legal requirements.
  • Human Review Process: Crucially, document and verify the process for human review of video interviews, ensuring that AI decisions are not the sole factor in selection. This demonstrates compliance with AIVIA’s prohibition on exclusive AI reliance.

Step 5: Document Findings and Remediation Plan

The AIA culminates in a comprehensive report and a clear plan for addressing identified risks. This report effectively serves as your AI impact assessment template.

  • Report Structure: Your AIA report should include:
    • Executive Summary
    • AI System Description (from Step 1 & 2)
    • Methodology of Assessment
    • Findings (including identified biases, compliance gaps with AIVIA)
    • Risk Level Assignment (e.g., low, medium, high for each identified risk)
    • Remediation Plan (detailed actions, responsible parties, timelines)
    • Recommendations for future AI governance.
  • Remediation Actions: For each identified risk or non-compliance issue, propose concrete steps. This could involve:
    • Updating applicant notices and consent forms.
    • Modifying the AI system's configuration or parameters.
    • Engaging the vendor for algorithm adjustments or re-training with more balanced data.
    • Revising internal processes for human review.
    • Implementing additional safeguards.
  • Documentation: Maintain meticulous records of the entire assessment process, including all collected information, findings, and the remediation plan. This is vital for demonstrating due diligence to regulators.

Step 6: Implement and Monitor

An AIA is not a one-time event. AI systems evolve, data changes, and regulations are updated.

  • Action Remediation Plan: Execute the remediation actions outlined in your plan within the defined timelines.
  • Continuous Monitoring: Establish mechanisms for ongoing monitoring of the AI system's performance, fairness metrics, and compliance status. This includes reviewing any changes to the AI model, new training data, or updated vendor policies.
  • Regular Review: Schedule periodic re-assessments (e.g., annually, or upon significant system updates) to ensure continued compliance and address new risks.

An AI compliance platform offers an invaluable AI compliance tool for ongoing monitoring. AICompliant's dashboard allows you to track remediation progress, monitor system metrics, and receive alerts on potential compliance deviations, turning a static assessment into a dynamic, living process.

Best Practices for a Comprehensive AI Compliance Checklist 2026

To ensure a robust and future-proof AI risk management framework, consider these best practices beyond the immediate AIVIA requirements:

  • Align with Global Standards: Integrate principles from frameworks like the NIST AI Risk Management Framework (AI RMF 1.0) and ISO/IEC 42001:2023. While not directly enforced with penalties, these voluntary standards provide a gold standard for responsible AI development and deployment, often referenced by regulators and auditors.
  • Cross-Functional Collaboration: AI compliance is not solely an HR or legal function. Involve IT, data science, legal, HR, and ethics committees in the AIA process.
  • Employee Training: Train employees, especially those involved in hiring and using AI tools, on AIVIA requirements, ethical AI use, and the importance of bias detection.
  • Vendor Management Program: Establish a robust vendor management program for AI tools, ensuring that your vendors align with your compliance standards and can provide necessary documentation.

Leveraging AICompliant for Automated AI Compliance

Navigating the complexities of AI regulations like AIVIA and the broader landscape of AI compliance requirements by state can be resource-intensive. This is where a dedicated AI compliance platform becomes indispensable.

AICompliant's platform is engineered to simplify and strengthen your compliance posture. It provides a centralized repository for all your AI system documentation, vendor agreements, and AIA reports. With AICompliant, you can:

  • Automate Documentation: Utilize built-in templates and workflows to generate and manage your AIVIA notices, consent forms, and AI impact assessment templates, ensuring consistency and completeness.
  • Track Compliance Status: The platform's intuitive dashboard provides a real-time overview of your compliance status across all AI systems, highlighting areas of risk and pending actions.
  • Streamline Vendor Management: Manage vendor information, track due diligence, and store vendor bias audits and certifications, providing an efficient US state AI law tracker for third-party tools.
  • Facilitate Risk Management: Implement an AI risk management framework within the platform, linking identified risks to specific remediation tasks and tracking their completion.
  • Audit Readiness: Generate comprehensive reports for internal and external audits, demonstrating your adherence to AIVIA and other relevant AI laws.

By providing tools for automated AI compliance, AICompliant significantly reduces the manual effort and potential for human error associated with managing complex regulatory mandates, allowing your compliance teams to focus on strategic oversight.

AIVIA is an early example of a rapidly expanding body of AI-specific legislation. As organizations deploy AI across various operations, the challenge of managing AI compliance requirements by state will only grow. A dynamic US state AI law tracker is essential.

Consider the diverse and demanding nature of upcoming regulations:

  • The Colorado AI Act (SB 24-205), effective June 30, 2026, requires developers and deployers of high-risk AI systems to exercise reasonable care to avoid algorithmic discrimination, conduct impact assessments, and provide clear transparency. Non-compliance can lead to penalties up to $20,000 per violation.
  • The EU AI Act (Regulation (EU) 2024/1689) sets a global benchmark, with high-risk AI systems facing strict requirements including conformity assessments, quality management systems, and human oversight, with enforcement for high-risk provisions beginning August 2, 2026, and penalties reaching $35,000,000.
  • Even voluntary frameworks like the NIST AI Risk Management Framework (AI RMF 1.0) and ISO/IEC 42001:2023 are being referenced by regulators and are critical for establishing robust, defensible AI governance.

The patchwork of state, federal, and international regulations necessitates a unified and adaptable strategy. An AI compliance tool that centralizes your compliance efforts and provides a holistic view of your obligations across jurisdictions is no longer a luxury, but a necessity.

Conclusion

The Illinois AI Video Interview Act (AIVIA) serves as a critical reminder for employers to meticulously assess their AI systems for fairness and transparency. Conducting a thorough AI Impact Assessment under AIVIA is not just about avoiding penalties; it's about building trust, fostering equitable hiring practices, and future-proofing your organization against the evolving tides of AI regulation.

By following this step-by-step guide and leveraging the capabilities of an AI compliance software like AICompliant, organizations can transform a complex regulatory burden into a streamlined, strategic advantage. Proactive AI compliance automation ensures that your AI systems are not only innovative but also responsible, ethical, and legally sound.

Ready to Streamline Your AI Compliance?

Take control of your AI regulatory obligations with AICompliant. Our platform provides the tools you need to conduct AI Impact Assessments, manage risks, and ensure adherence to evolving AI laws like the Illinois AIVIA.

Explore AICompliant's pricing and solutions today to learn how we can help your organization achieve proactive, automated AI compliance.

Frequently Asked Questions

What are the key requirements of the Illinois AI Video Interview Act (AIVIA)?

The Illinois AIVIA (Bill HB 2557, effective 2020-01-01) requires employers using AI to analyze video interviews of Illinois applicants to: 1) notify applicants that AI will be used and obtain written consent, 2) provide an explanation of how the AI works and what characteristics it evaluates, 3) disclose their data retention policy, and 4) ensure human review, as AI analysis cannot be the sole factor in determining an in-person interview. Non-compliance can result in penalties of up to $1,000 per violation.

How does an AI Impact Assessment (AIA) under AIVIA differ from assessments required by other regulations like NYC Local Law 144?

While both aim to prevent algorithmic discrimination, AIVIA's AIA primarily focuses on specific transparency (notice, consent, explanation) and human oversight requirements for AI used in video interviews for Illinois applicants. In contrast, NYC Local Law 144 (Local Law 144 of 2021, effective 2023-07-05) requires independent bias audits for all automated employment decision tools (AEDTs) and public posting of the summary results, covering a broader range of AI applications in employment and carrying higher daily penalties (up to $1,500 per violation per day).

What role does an AI compliance software play in AIVIA compliance?

An AI compliance software like AICompliant streamlines AIVIA compliance by providing a centralized platform for managing documentation (notices, consent forms, AI impact assessment templates), tracking compliance status, overseeing vendor due diligence, and implementing an AI risk management framework. It helps automate workflows, reduce manual effort, and ensure ongoing adherence to AIVIA's requirements, making it an essential AI compliance tool.

Are there broader implications for AI impact assessments beyond Illinois, considering upcoming state and international laws?

Absolutely. AIVIA is part of a growing trend. Many upcoming regulations, such as the Colorado AI Act (Bill SB 24-205, effective June 30, 2026, with penalties up to $20,000 per violation) and the EU AI Act (Bill Regulation (EU) 2024/1689, with high-risk enforcement by August 2, 2026, and penalties up to $35,000,000 per violation), require comprehensive AIAs for various high-risk AI systems. Adopting a robust AI risk management framework and utilizing an AI compliance platform is crucial for managing these diverse and evolving AI compliance requirements by state and globally.

What are the penalties for non-compliance with the Illinois AI Video Interview Act (AIVIA)?

Employers found in violation of the Illinois AIVIA (Bill HB 2557) can face penalties of up to $1,000 per violation. These penalties are enforced by the Illinois Department of Commerce and Economic Opportunity. While lower than some other AI regulations, repeated violations can quickly accumulate, alongside potential reputational damage.

Check if this regulation applies to your business

Use our free compliance checker to see which AI regulations apply to your company based on location, industry, and AI systems.

Free compliance checker →

← Back to blog

Live