Your hiring manager is using ChatGPT to draft job descriptions. Your team lead is running performance notes through an AI summarizer. Someone in accounting is using an AI tool to analyze employee data. Sound familiar?

AI has entered the workplace quietly and quickly. And while these tools can genuinely improve efficiency, they also introduce a new category of HR and legal risk that most small and mid-size employers are completely unprepared for.

If you're a California employer, the stakes are even higher. California has some of the most employee-protective laws in the country — and regulators are paying close attention to how AI intersects with employment decisions.

AI tools don't operate in a legal vacuum. When AI is used in employment decisions — hiring, scheduling, performance reviews, terminations — it becomes subject to the same anti-discrimination laws that govern human decision-makers.

The problem? AI systems can perpetuate or even amplify bias. A hiring algorithm trained on historical data may systematically screen out women, older workers, or people of color — not because anyone intended it, but because the data it learned from reflected past discrimination.

Under California's Fair Employment and Housing Act (FEHA) and federal Title VII, employers are responsible for discriminatory outcomes regardless of whether a human or an algorithm made the call.

AI-powered applicant tracking systems and resume screeners can inadvertently filter out protected classes. If your AI tool scores candidates based on patterns from your existing workforce, and your workforce lacks diversity, the tool will replicate that gap.

What to do: Audit any AI hiring tool for disparate impact before deploying it. Ask vendors for bias testing documentation. Keep records of how candidates were evaluated.

AI tools that flag "low productivity" based on keystrokes, mouse movement, or response times can disproportionately penalize employees with disabilities, caregiving responsibilities, or different working styles.

What to do: Ensure AI-generated performance data is reviewed by a human manager before any employment action is taken. Document the human review process.

Using AI to write job postings can inadvertently introduce gendered language, age-coded phrasing, or requirements that screen out protected groups. "Rockstar," "digital native," and "fast-paced environment" are all examples of language that can signal bias.

What to do: Always have a human review AI-generated job descriptions for inclusive language before posting.

California's Consumer Privacy Act (CCPA) and Labor Code Section 980 place strict limits on how employers can monitor employees. AI-powered monitoring tools — keystroke loggers, email scanners, productivity trackers — may violate these protections if employees aren't properly notified.

What to do: Provide written notice to employees before implementing any monitoring technology. Consult with an HR professional or employment attorney before deploying surveillance tools.

When employees input sensitive company or client data into AI tools like ChatGPT, that data may be used to train future models or stored on third-party servers. This creates real risk for trade secrets, client confidentiality, and HIPAA compliance in healthcare-adjacent businesses.

What to do: Establish a clear AI usage policy that specifies what types of data employees may and may not input into AI tools.

If you don't have one, you need one. An AI use policy should cover:

• Which AI tools are approved for use at work
• What types of data employees may input into AI systems
• How AI-generated content must be reviewed before use in employment decisions
• Who is responsible for auditing AI tools for bias and compliance

Managers are often the first to adopt new tools — and the least likely to think about compliance implications. Train your supervisors on the risks of using AI in performance management, scheduling, and communication without proper oversight.

If you're already using AI in your hiring or HR processes, conduct an audit. Ask:

• What data was this tool trained on?
• Has it been tested for disparate impact?
• Who reviews the outputs before decisions are made?
• Is there a human in the loop for every employment action?

In any compliance matter, documentation is your best defense. Keep records of how AI tools are used, what decisions they inform, and how human review was applied. If a discrimination claim arises, you'll need to show that a human — not just an algorithm — made the final call.

AI isn't going away. The employers who thrive will be the ones who adopt these tools thoughtfully — with clear policies, proper training, and a commitment to human oversight.

The employers who struggle will be the ones who assumed AI was neutral, skipped the compliance conversation, and found themselves facing a discrimination claim or a regulatory investigation.

You don't have to figure this out alone. If you're unsure whether your current use of AI tools is creating legal exposure, an HR compliance review is a smart first step.

Marlene Solis is the founder of Solis Consulting Management, an HR consulting firm serving California and multi-state employers. She specializes in HR compliance, workplace investigations, and building people-first workplaces.

This article is for informational purposes only and does not constitute legal advice. For guidance specific to your situation, consult a qualified employment attorney or HR professional.