The wild west of remote technical recruitment has officially ended in Ontario. The provincial government has moved from a stance of suggestion to one of strict enforcement through the Working for Workers Acts (specifically Bills 149 and 190).
For CTOs, Engineering Managers, and HR Directors in Ontario, these bills have created a dual-front challenge. On one hand, you have a legal obligation to be more transparent than ever before. On the other, that very transparency is being weaponized by a new generation of AI-powered imposters and proxy candidates who use your disclosures as a roadmap to game your systems.
To navigate this landscape, you must understand the distinction between Bill 149 (which focuses on what you say to the public) and Bill 190 (which dictates how you operate your hiring funnel).
Bill 149: Transparency
Introduced as part of the Working for Workers Four Act, Bill 149 was the first major blow to the black box of recruitment. Its primary goal was to level the playing field for candidates by mandating salary and AI transparency.
1. Salary Range Mandate
The era of ‘Salary: Competitive’ is over. Under Bill 149, any publicly advertised job posting must include a salary or a salary range. For tech roles, where compensation can fluctuate wildly based on equity and bonuses, the law is specific: the range spread cannot exceed $50,000 unless the top end is over $200,000.
In the context of IT recruitment, this has forced a necessary conversation between finance and engineering. You can no longer wait and see what a candidate asks for. You must lead with a market-validated range. Failure to do so doesn’t just invite a Ministry of Labour audit; it causes immediate reputational damage on platforms like Glassdoor and LinkedIn.
2. AI Disclosure Rule
This is where tech leads face the most risk. You must disclose if AI is used to screen, rank, or select candidates. This includes everything from simple keyword filters in your ATS to sophisticated AI-enhanced interview platforms that analyze sentiment or technical logic.
Our Perspective: While transparency is great for candidate trust, it creates a security vulnerability. By disclosing that your AI looks for specific “Senior Architect” keywords, you are effectively handing a cheat sheet to bad actors. This is the core of, what we call the transparency trap—the legal requirement to be open actually makes your hiring more vulnerable.
3. The Canadian Experience Ban
Bill 149 strictly prohibits requiring Canadian work experience in job postings. For a sector that thrives on global talent, this is a positive move, but it requires a shift in how we verify competency. Don’t use local experience as a shortcut for trust. Verify a candidate’s problem-solving logic, regardless of their location.
Bill 190: Operations
If Bill 149 is more about the job post, while Bill 190 (the Working for Workers Five Act) focuses on workflow. It introduces heavy operational requirements designed to end the practice of candidate ghosting and ensure a permanent paper trail of every hiring decision.
1. The 45-Day Notification Rule
This is the most significant operational change in a decade. If you interview a candidate—whether it’s a 15-minute screen or a 5-hour technical loop—you are legally mandated to notify them of your decision within 45 days.
For high-growth startups and enterprise teams, this requires a massive shift in hiring requirements. You can no longer keep a candidate on ice while you wait for a preferred choice to sign. Your ATS must be configured with hard triggers to ensure you remain compliant with the Ontario Employment Standards Act.
2. Mandatory Recordkeeping (The 3-Year Rule)
Bill 190 compliance focuses on what you can prove. You must retain every job posting, every interview note, every AI disclosure, and every candidate communication for a full three years.
In 2026, “He said, she said” is not a defense. If a candidate claims they were discriminated against by an un-disclosed AI filter, you must be able to pull the forensic logs to prove otherwise. This is why we advocate for a centralized, audit-ready recordkeeping system that lives inside a secure ATS like Workable or Greenhouse, rather than in fragmented Slack threads or email inboxes.
3. Vacancy Classification
Every posting must now explicitly state whether it is for a newly created position or an existing vacancy. While this seems like a minor detail, it is designed to prevent phantom job postings. You know, the practice of companies posting roles they have no intention of filling just to build a pipeline or project an image of growth.
Comparing the Two: A Tech Leader’s Cheat Sheet
One bill regulates what you show the world; the other dictates how you manage your internal hiring funnel. Here’s a quick comparison of Bill 149 vs Bill 190 and how each law affects Ontario hiring compliance for tech teams.
| Feature | Bill 149 | Bill 190 |
|---|---|---|
| Primary Goal of Each Law | Market Transparency | Operational Accountability |
| Key Compliance Metric | Salary & AI Disclosures | 45-Day Decision Timelines |
| Main IT Risk | Gaming the AI | Technical Debt & Legal Liability |
| Recordkeeping Requirement | Disclosure Logs | Full 3-year Audit Trail |
| Helpful Resource | AI Disclosure Guide [COMING SOON] | Bill 190 Compliance Checklist |
Your 2026 Hiring Strategy
Understanding the difference between 149 and 190 is only half the battle. The real challenge is integrity.
In the 2026 market, we are seeing a massive surge in candidates who use real-time deepfake video and voice overlays to pass interviews. These imposters rely on the fact that your Bill 149 disclosures have told them exactly what profile to mimic. Once they are in your system, the Bill 190 45-day rule puts pressure on you to move fast, often leading to rushed decisions that bypass proper forensic vetting.
The Cost of the Ghost Hire
A deepfake hire isn’t just a bad cultural fit; it’s a security breach. According to the KPMG 2026 Business Fraud Survey, AI-powered identity fraud has become the #1 threat to Canadian corporate integrity. If an unvetted proxy actor gains access to your codebase, the average cost of the resulting data breach is now estimated at CA$7.91 million.
How to Stay Compliant and Secure
To survive the new hiring norm, your hiring process must evolve from a vibe check to a forensic audit. This is where STACK IT’s methodology comes into play:
- Obfuscated Compliance: We help you meet Bill 149’s AI disclosure rules without revealing the secret sauce of your technical vetting. We provide the transparency the law requires without handing over the keys to the castle.
- Synchronous Sandboxing: To beat the recital problem (where candidates read AI-generated answers), we use live, un-gameable environments that measure cognitive jitter and real-time logic.
- Identity Persistence: We ensure the person you interviewed on Day 1 is the same person logging into your VPN on Day 90, satisfying the recordkeeping mandates of Bill 190 while securing your network.
Moving Forward: Your Action Plan
Compliance in Ontario will only get more complex. With the Canadian Anti-Fraud Centre reporting record-high levels of employment-related identity theft, the check-the-box approach to HR is officially dead.
Your next steps should be:
- Audit your templates: Ensure every job post has a compliant salary range and a vacancy classification.
- Sync your ATS: Set up 45-day alerts to ensure you never miss a Bill 190 notification deadline.
- Upgrade your vetting:Download our [Forensic AI Hiring Playbook] to learn how to identify AI imposters before they hit your payroll.
Hiring in 2026 is about verifying the truth more than ever. Whether it’s Bill 149 or 190, the message from the province is clear: the era of the opaque, slow, and unvetted hiring process is over. It’s time to build a process that is as sophisticated as the talent you’re trying to hire.For a deeper dive into these requirements, visit our Bill 190 Compliance FAQs or book a discovery call with a STACK IT specialist today.
