How Federal Agencies Can Use AI in HR Responsibly

Federal agencies can use AI in HR to speed up hiring, answer routine employee questions, forecast attrition and analyze workforce data, but only inside a tight legal frame. Merit system principles, the Privacy Act, labor relations obligations and OMB's AI governance rules mean any AI that shapes hiring, pay or discipline needs testing, human oversight and an appeal path.

Key takeaways

  • OMB Memorandum M-25-21 presumes AI that is a principal basis for decisions about the terms or conditions of federal employment to be "high-impact," which triggers minimum risk management practices.
  • The safest early uses are administrative: drafting, search, employee self-service answers and workforce reporting.
  • Every AI-assisted personnel decision must stay explainable, auditable and appealable under merit system rules.
  • Privacy Act notices, Section 508 accessibility and, where bargaining units exist, union notification belong in the project plan from day one.

Where is AI actually useful in federal HR?

Federal HR offices carry a heavy administrative load: position descriptions, classification reviews, job announcements, qualification checks, benefits questions, retirement counseling and personnel action processing. Much of that work is text-heavy and rules-based, which is where current AI tools perform best. Realistic use cases fall into four groups.

  • Drafting and classification support. Generating first drafts of position descriptions and job announcements from approved templates, then routing them to a classifier for review.
  • Employee self-service. Answering routine questions about leave, benefits enrollment windows, telework policy and payroll schedules from the agency's own published guidance.
  • Workforce analytics. Forecasting retirement eligibility waves, attrition hot spots and skills gaps to inform workforce plans and succession planning.
  • Compliance monitoring. Flagging patterns in hiring and promotion data that warrant a closer look for potential merit system or equal employment concerns.

Notice what is missing: AI that selects, rates or removes employees on its own. Those uses are possible in principle, but they sit squarely in the highest-risk category and are rarely where an agency should start. For a refresher on the full span of HR functions these tools touch, see our overview of the key components and functions of human resource management.

What rules govern AI in federal HR decisions?

Federal HR operates under a layered legal framework that private employers do not face in the same form. Before piloting anything, an HR director should map the project against each layer.

RequirementSourceWhat it means for an AI project
Merit system principles5 U.S.C. 2301Selection and advancement must rest on relative ability, knowledge and skills after fair and open competition. AI ranking logic must be job-related and defensible.
Prohibited personnel practices5 U.S.C. 2302A tool that systematically disadvantages applicants on a prohibited basis can expose the agency to claims even without intent.
Privacy Act of 19745 U.S.C. 552aPersonnel records used to train or feed an AI system must be covered by an appropriate system of records notice and used consistently with its stated purposes.
High-impact AI practicesOMB M-25-21Pre-deployment testing, an AI impact assessment, ongoing monitoring, human oversight and remedies or appeals for affected individuals.
AccessibilitySection 508Any employee-facing AI interface must be usable by employees with disabilities.

M-25-21 is explicit on the HR point: its list of uses presumed to be high-impact includes AI that serves as a principal basis for determining the terms or conditions of federal employment. That covers hiring, pay, performance management and separation decisions. Agencies must also designate a Chief AI Officer and publish an annual inventory of AI use cases, so HR projects will be visible outside the HR office whether or not HR plans for that.

Where employees are represented, changes to conditions of employment can also carry notice and bargaining obligations under the Federal Service Labor-Management Relations Statute. Involve labor relations staff early rather than discovering the issue at rollout. Confirm the specifics for your agency with your general counsel and labor relations office.

How should an agency choose its first AI use case?

Pick the first project the way a careful contracting officer picks a first vendor: low exposure, clear value and easy to reverse. A simple scoring approach works.

  1. Effect on individuals. Does the output influence a decision about a specific person? If yes, the project is likely high-impact and needs the full M-25-21 practice set.
  2. Volume. Is the task repeated hundreds or thousands of times a year? Volume is where the time savings come from.
  3. Verifiability. Can a specialist quickly check the output against an authoritative source, such as a published policy or a classification standard?
  4. Data sensitivity. Does the tool need access to Privacy Act records, medical documentation or investigative files?
  5. Reversibility. If the tool is wrong, can the error be caught and corrected before it harms anyone?

An employee-facing assistant that answers "When is open season?" from published guidance scores well on all five. A model that ranks applicants for a GS-13 vacancy scores poorly on the first and fourth, which does not rule it out but does mean it should come later, after the agency has built testing and oversight muscle.

What safeguards does federal HR AI need?

The NIST AI Risk Management Framework, which NIST describes as intended for voluntary use, organizes AI risk work into four functions: Govern, Map, Measure and Manage. It pairs well with the mandatory OMB practices. In practice, an HR office should be able to show the following for any AI system that touches personnel decisions.

  • A named owner. One accountable official, not a committee, who signs off on deployment and answers for results.
  • Job-relatedness evidence. Documentation that any screening criteria trace back to a job analysis.
  • Adverse impact testing. Selection rate comparisons across demographic groups before launch and at regular intervals afterward. Our guide on self-auditing an ATS for disparate impact walks through the mechanics.
  • Human review. A trained HR specialist reviews AI recommendations before they become personnel actions, with authority to override.
  • Explanations and appeals. An applicant or employee can learn that AI was used and can contest the outcome through existing channels.
  • Logs. Records of inputs, outputs and human decisions sufficient to reconstruct what happened in a grievance, appeal or audit.

Why do HR-built tools create a special risk?

Many agencies now have access to low-code platforms and enterprise AI assistants that let HR staff build their own workflows. That is useful, but it creates a governance blind spot: a specialist can configure an automated screen in an afternoon without it ever passing through the review a procured system would get. Treat internally built tools exactly like purchased ones for inventory, testing and oversight purposes. We examined this pattern in detail in the HR-built AI agent compliance gap, and the lessons apply with extra force in government.

Frequently Asked Questions

Can federal agencies use AI to screen job applicants?

They can, but applicant screening that serves as a principal basis for hiring decisions is presumed high-impact under OMB M-25-21. That means pre-deployment testing, an impact assessment, ongoing monitoring, trained human oversight and a way for applicants to seek remedies. The screening criteria must also align with merit system principles and be traceable to a job analysis.

Does the Privacy Act apply to HR data used by AI tools?

Yes, when the data comes from a system of records about individuals, which most personnel files are. The agency needs an applicable system of records notice, and the AI use must be compatible with the purposes described in it. Sharing records with a vendor's model or combining datasets in new ways should be reviewed by the agency's privacy office before launch.

What is a good first AI project for a federal HR office?

An employee self-service assistant grounded in published agency guidance is usually the best starting point. It handles high volumes of routine questions about leave, benefits and payroll schedules, its answers can be checked against the source text, and it does not decide anything about an individual. Drafting support for job announcements is another low-risk option.

Do unions need to be involved in HR AI deployments?

Where bargaining units are recognized, changes that affect conditions of employment may require notice and an opportunity to bargain under the Federal Service Labor-Management Relations Statute. The scope depends on the specific change, the agency and current bargaining coverage, so labor relations staff and counsel should review the project before rollout rather than after.

Is the NIST AI Risk Management Framework mandatory?

NIST describes the AI RMF as intended for voluntary use. Its value for federal HR is practical: its Govern, Map, Measure and Manage functions give teams a shared structure for documenting risks, and that documentation maps neatly onto the minimum practices OMB requires for high-impact AI.

Practical next steps for federal HR leaders

  • Inventory every AI or automated tool HR already uses, including ones staff built themselves, and report them to your Chief AI Officer.
  • Classify each use as high-impact or not, using the M-25-21 definitions.
  • Start with one grounded self-service or drafting pilot and measure accuracy against source policy for 60 to 90 days.
  • Write the adverse impact testing plan before you evaluate any screening or ranking tool.
  • Brief labor relations, privacy and Section 508 staff at project kickoff.

Last reviewed: October 2026.

Sources

Related reading

Comments

Post a Comment

Popular Posts

Why Workday Onboarding Breaks Down for Frontline Employees

Image
The Onboarding Gap Nobody Talks About Workday's onboarding module is well-designed for its intended audience: office-based, desk workers with reliable computer access, personal email addresses, and the digital literacy to navigate a web-based portal. For this population, Workday onboarding works well, it automates tasks, routes approvals, collects documents, and creates a reasonably smooth first-week experience. But most organizations using Workday have a substantial population of frontline workers: warehouse employees, retail staff, manufacturing workers, healthcare aides, food service workers, drivers. For this population, the standard Workday onboarding experience frequently fails in ways that are predictable, documented, and, crucially, fixable. Understanding why it breaks down and what actually works is increasingly urgent as labor market competition for frontline talent intensifies. How Standard Workday Onboarding Is Designed Workday's new hire onboarding (delivered throu...
Read more

How to Improve the Customer Experience (CX)

Customer experience is the sum of every interaction a customer has with your company, from the first ad they see to the way a return gets handled years after the purchase. Companies that take this seriously outperform those that treat CX as a support function. The ones that struggle tend to confuse customer satisfaction scores with actual improvements, or fix the wrong things. Here's a practical look at what actually moves CX forward. Start with where customers actually struggle Most CX improvement programs begin with surveys. Surveys are useful but limited, they capture what customers are willing to articulate after the fact, which tends to under-report friction in the middle of an experience and over-index on the most recent interaction. The richer data comes from observing behavior directly: where do customers drop off in a purchase flow? Where do support tickets spike? What search queries are people entering on your site that suggest they can't find what they're loo...
Read more

How Do I Log In and Sign In to Workday HCM

Workday HCM is the system your organization uses to manage everything from your pay stubs and benefits to time off requests and performance reviews. Getting in is usually simple once you know where to go, but first-time login, password resets, and single sign-on setups can trip people up if no one has walked them through it. Here's what you need to know. How to find your Workday login URL Workday doesn't have one universal login page. Each organization has its own tenant, a dedicated instance with a unique URL. Your company's HR department or IT team should have provided the URL when you were onboarded. It usually looks something like your-company.workday.com or wd3.myworkday.com/yourcompany . If you weren't given the URL, check your onboarding email, your company's intranet, or ask HR directly. Some organizations also link to Workday from their internal HR portal. Don't try to guess the URL, there's no central directory, and guessing wrong just takes...
Read more

UKG Union Contract and Overtime Rules for Multi-Site Food Plants

Multi-site food manufacturers running UKG often struggle with one thing: each plant has its own union contract, shift pattern and overtime rules, while the timekeeping system is configured centrally. The fix: document every contract rule precisely, map it to UKG pay rules and work rules, test against real timecards, and handle true exceptions with add-ons rather than core customization. Disclosure: The author works at CloudApper, which makes the UKG add-ons discussed in this article. Why are union contracts so hard to configure in UKG? Federal law sets a floor. Under the Fair Labor Standards Act, non-exempt employees must receive at least one and a half times their regular rate for hours worked over 40 in a workweek. Collective bargaining agreements frequently go further, and food plants often have several agreements across locations. Common contract provisions include: Daily overtime after 8 hours, or after 10 on a four-day schedule. Double time on the seventh consecutive day o...
Read more

Infor HCM Software Engineer Jobs: Salary Factors and Skills

An Infor HCM software engineer's salary depends mostly on the type of employer, the depth of Infor platform knowledge, and location. Engineers who combine general software skills with hands-on experience in Infor CloudSuite HCM, Lawson, Infor ION integrations and payroll logic tend to command more than generalist developers, because that combination is scarce in the job market. What does an Infor HCM software engineer actually do? The title covers several different jobs, and pay follows the job more than the title. Broadly, these engineers build, configure, integrate and support the Infor human capital management stack, which includes core HR, payroll, benefits, talent management and workforce management. Many organizations still run the older on-premises Infor Lawson system alongside or instead of the cloud suite, so experience with both is common. Typical responsibilities include: Building and maintaining integrations between Infor HCM and payroll providers, benefits carrie...
Read more

How to Search in Workday: Find Reqs, Reports, People and Tasks

To search in Workday, type into the global search bar at the top of any page, press Enter, then use the category filters on the left of the results to narrow to people, organizations, tasks and reports or other object types. Workday only returns items your security roles allow you to see, so missing results often mean an access issue rather than a typo. How does Workday search work? Workday uses a single global search box rather than separate menus for each module. Everything in the tenant, from a worker's profile to a job requisition to a custom report, is an object that search can find if you have permission to view it. Three points explain most search behavior: Security trimming. Results are filtered by your security groups. A recruiter and a payroll partner typing the same term will see different results. Categories. After you press Enter, results are grouped into categories that appear as filters. Clicking one hides everything else. Related actions. Once you open an...
Read more

ERP Solution Guide: How to Choose the Best ERP for You

What Is an ERP System and Why Does It Matter? An enterprise resource planning (ERP) system is software that integrates the core functions of a business — finance, inventory, procurement, human resources, manufacturing, and customer management — into a single, connected platform. Instead of data living in separate spreadsheets or standalone applications that don't talk to each other, an ERP creates one source of truth for the entire organization. For growing companies, the question is usually not whether they need an ERP but when and which one. Getting this decision right has long-term consequences. A poorly chosen ERP creates more problems than it solves — forcing teams to work around the system, creating data integrity issues, and consuming IT resources in an endless cycle of customization and maintenance. A well-chosen ERP, on the other hand, becomes the operational backbone that lets a company scale without proportionally growing its administrative overhead. Understandin...
Read more

The End of Remote Work: Why Companies Want You Back

Return to Office: The Trend Reshaping the Modern Workplace After years of celebrating the remote work revolution, a powerful counter-movement has taken hold. Amazon, JPMorgan Chase, Goldman Sachs, Disney, and hundreds of other organizations have issued return-to-office (RTO) mandates, some requiring full five-day-a-week presence. The era of near-universal remote work flexibility appears to be giving way to something more complicated, and HR leaders are at the center of navigating it. Why Companies Are Calling Employees Back Collaboration and Innovation: Many executives argue that the serendipitous interactions, the hallway conversation, the spontaneous whiteboard session, that drive breakthrough ideas simply cannot be replicated on Zoom. Studies from Stanford and MIT suggest that in-person collaboration produces measurably higher rates of novel idea generation. Culture and Cohesion: Building and sustaining organizational culture at a distance has proven harder than anticipated. N...
Read more

The Future of Employee Healthcare Key Concerns and Strategies for 2024

In a rapidly evolving professional landscape, employers are grappling with an array of challenges as they plan employee-sponsored healthcare strategies for 2024. A recent survey conducted in the US in August 2023 sheds light on the primary concerns and emerging trends in the realm of employee healthcare. Mental health, healthcare costs, pharmacy expenditures, and transformative technologies are at the forefront of employer considerations, signaling a need for comprehensive and innovative approaches to employee well-being. Rising Mental Health Concerns A staggering seven in 10 employers reported a surge in mental health concerns, marking a significant uptick from the previous year. With 77% of employers experiencing an increase and an additional 16% anticipating future challenges, the mental health landscape is a top priority. The implications of the ongoing pandemic, remote work dynamics, and societal shifts are evident as employers grapple with addressing and supporting the mental ...
Read more

How Digital Marketing Helps Your Business Grow: A Practical Plan

Digital marketing helps a business grow by putting it in front of buyers at the moment they search, compare and decide, then measuring which efforts produce revenue. Search, content, email, paid ads and social channels let even small teams reach targeted audiences, test messages cheaply and shift budget toward what works, something print and broadcast advertising rarely allow. How does digital marketing actually drive business growth? Growth comes from three levers: reaching more of the right people, converting more of them into customers and keeping those customers longer. Digital channels touch all three. Reach. Search engines, professional networks and industry newsletters connect you with people already looking for what you sell. Conversion. Clear landing pages, case examples and easy contact options turn interest into conversations. Retention. Email, customer education content and community channels keep existing customers engaged and open to expansion. The underlying ...
Read more