AI Risks in HR: Where to Keep a Human in the Loop

The biggest risks of using AI in HR are biased or unexplainable decisions, privacy breaches, legal exposure and the loss of trust when employees feel processed rather than heard. The balance comes from matching the level of automation to the stakes: automate routine, low-impact tasks and keep a named person accountable for decisions that change someone's job or pay.

Key takeaways

  • Risk depends on the decision, not the technology: answering a policy question is not the same as rejecting a candidate.
  • Bias, opacity, privacy and over-reliance are the four risks that show up most often.
  • Laws such as New York City's Local Law 144 already require bias audits and notices for some hiring tools.
  • Human review only works when reviewers have time, context and authority to overrule the system.
  • Employees should always have a clear path to reach a person.

What are the main risks of AI in HR?

  • Bias: models trained on past decisions can repeat past patterns, disadvantaging groups that were underrepresented or treated unfairly before.
  • Opacity: if no one can explain why a candidate was ranked low or a shift request was denied, the decision is hard to defend and hard to correct.
  • Privacy and security: HR data includes health, pay, performance and family details. Feeding it into tools without controls creates exposure.
  • Over-reliance: people begin to accept recommendations without checking, so errors pass through unnoticed.
  • Trust and experience: employees dealing with leave, conflict or termination expect a human response. A chatbot at those moments damages the relationship.

Which HR tasks should be automated, and which should stay human?

Use stakes and reversibility to decide. The table below is a starting point to adapt with legal counsel.

TaskStakesSuggested approach
Answering policy and benefits questionsLowAutomate, with easy handoff to a person
Scheduling interviews and remindersLowAutomate
Drafting job descriptions or lettersLow to mediumAI drafts, person edits and approves
Screening or ranking applicantsHighAI assists, person decides, audit outcomes
Performance ratings and promotionHighHuman decision, AI only for summarizing evidence
Pay changesHighHuman decision with analytics support
Investigations, discipline, terminationHighestHuman only
Accommodation and leave conversationsHighestHuman only

Screening is where most legal attention sits. Techniques such as the ones in our guide to blind candidate ranking can reduce bias, but they do not remove the need for outcome monitoring.

What do laws and frameworks require?

New York City's Local Law 144 prohibits employers and employment agencies from using an automated employment decision tool unless it has had a bias audit within the past year, the audit results are public and candidates receive notice. Other states and countries have added their own rules; our overviews of state AI employment laws in Colorado, Illinois and NYC and the EU AI Act's treatment of employment AI cover the details.

Where no specific law applies, the NIST AI Risk Management Framework offers a voluntary structure for identifying, measuring and managing AI risk across a system's lifecycle. It is a sensible baseline for any HR AI program.

How do you make human oversight real?

"Human in the loop" fails when the human is a rubber stamp. Make it meaningful:

  • Give reviewers the reasons, not just the score.
  • Give them time. A recruiter approving hundreds of AI rejections an hour is not reviewing.
  • Give them authority to overrule the system without needing to justify it to the tool owner.
  • Track override rates. Near zero suggests rubber-stamping; very high suggests the model is not useful.
  • Offer an appeal path so employees and candidates can ask for a human review.

Questions to ask any HR AI vendor

  • What data trains and feeds the model, and is our data used to train it for others?
  • What bias testing has been done, and will you support an independent audit?
  • How does the tool explain an individual result?
  • Can we configure where the tool stops and a person takes over?
  • What logs are kept, and for how long?

Frequently Asked Questions

Can an employer be liable for a biased AI tool it bought from a vendor?

Generally, yes. Employers remain responsible for their employment decisions, including those made with vendor tools. A vendor's assurance does not replace your own testing. Ask for audit results, monitor outcomes by group after launch and make sure contracts address audits, data use and cooperation if a complaint arises.

How do you keep the human touch while using AI in HR?

Use AI to remove administrative work so HR staff have more time for conversations that matter. Keep sensitive moments, such as leave, conflict, discipline and termination, entirely human. Make it easy for any employee to reach a person, and tell employees when they are interacting with an AI tool.

What is the first step in reducing AI risk in HR?

Build an inventory. List every tool that uses AI in HR, including features inside your HCM and recruiting systems, what decisions each one touches and who owns it. Without that list you cannot assess risk, meet audit or notice requirements, or answer an employee who asks how a decision was made.

Next steps

  1. Inventory all AI features used across HR and recruiting.
  2. Classify each by stakes using the table above.
  3. Set review, logging and appeal requirements for high-stakes uses.
  4. Check local laws, such as NYC's AEDT rule, for audit and notice duties.

Last reviewed: October 2026.

Sources

Comments

Popular Posts

Why Workday Onboarding Breaks Down for Frontline Employees

How to Improve the Customer Experience (CX)

How Do I Log In and Sign In to Workday HCM

UKG Union Contract and Overtime Rules for Multi-Site Food Plants

Infor HCM Software Engineer Jobs: Salary Factors and Skills

ERP Solution Guide: How to Choose the Best ERP for You

The End of Remote Work: Why Companies Want You Back

How to Search in Workday: Find Reqs, Reports, People and Tasks

New Apple Watch Health Features Will Be Available This Year, but Blood Pressure and Blood Sugar Sensors Will Not Be Available Until Next Year

Dollar General Store Walkout: Lessons for Retail HR