AI is now integrated across the full employment lifecycle, not just hiring, which raises liability under federal laws and a growing slate of state and local rules.

Regulators and industry guidance, including the U.S. Commerce Department’s AI-at-work framework, call for limits on Gen AI use, mandatory human verification, bias checks, and preserving a business rationale independent of AI output.

Questions loom over whether vendor-generated AI reports count as consumer reports under FCRA, potentially triggering disclosure and adverse-action requirements while a definitive ruling remains pending.

A practical action plan includes inventorying and curbing Shadow AI, classifying tools by jurisdiction and impact, appointing a human in the loop for AI-informed decisions, conducting adverse-impact audits, establishing notice and accommodation workflows, renegotiating vendor contracts for transparency and data protections, implementing AI-use policies and training, and continuously monitoring regulatory updates.

The Mobley v. Workday case shows liability can extend to third-party AI vendors through an agent theory, meaning employers using vendor AI may be responsible for discriminatory outcomes.

Algorithmic time tracking and surveillance raise wage-hour and NLRA considerations, with potential state restrictions on surveillance (e.g., Maine).

Enforcement is tightening ahead of the 2027 ADMT rule’s effective period, making proactive governance essential to curb discrimination and privacy risks across jurisdictions.

Generative AI introduces risks in ads, interview questions, performance reviews, discipline memos, and termination rationales, including bias, hallucinations, confidentiality, and privacy concerns under CCPA and biometric rules.

Employers retain liability for AI-driven decisions in hiring, onboarding, scheduling, timekeeping, performance, discipline, accommodations, and separation, even when a vendor or AI aids the decision.

State and local AI employment laws are expanding beyond federal baselines in Illinois, NYC, California, and Colorado, with deadlines approaching (Illinois 2026, NYC Law 144, California ADMT rules 2027, Colorado 2027).