Since candidates will always ask for the top of the band, I'd expect either very tight bands and candidates get moved to "more appropriate" openings or bands covering 3 standard deviations so employers can claim the range is in good faith, but still leave room for negotiation.
Maximum salary: $1,000,000 per year.
Legal compliance achieved, while still effectively maintaining confidentiality of salary info.
The range must: "extend from the lowest to the highest salary the employer in good faith believes at the time of the posting it would pay for the advertised job, promotion or transfer opportunity."
It's amazing how some people lazily assume they're so much cleverer than everyone else.
A good heuristic is to assume you're just plain wrong if you think you've discovered a way to weasel out of a law with only five seconds worth of thought.
So unless you can read minds, it'd be hard to prove that the employer doesn't believe this is the salary range.
And besides, 10K to 1M is a pedantically large range to illustrate this dynamic. Realistically a lot of companies could provide a range from $60K to $300K for software developers - both of these are salaries I can attest to firsthand. This isn't as stark as a 100:1 range, but a range of 5:1 is still a wide enough range such that expected salaries are still effectively unknown.
I wonder what it would take to update these laws to require total comp disclosure instead of simply salary disclosure.
This is the wrong target. Large companies are generally fine with these sorts of laws. It's the small companies who now have another of ten million disclosure laws they have to follow, laws which vary from county to county.
Remember that it applies only to salary (not total compensation) and it applies to jobs done in NYC, not jobs done for companies whose headquarters are in NYC.
For my first salary role I took half the advertised pay as I knew less than half of what they wanted.
With this crap I'd just not get the job.
https://www.denverpost.com/2021/06/26/colorado-remote-work-j...
https://www.theatlantic.com/politics/archive/2021/07/remote-...