What's Happening?
Employment attorney Tara Humma has highlighted the legal risks associated with the use of AI tools in the workplace, particularly when employees inadvertently expose confidential information. Humma, who advises multi-state employers, emphasizes that the law
requires protection of confidential information regardless of the tools used. She points out that AI tools can lead to violations of privacy laws, such as the HIPAA Privacy Rule, which has resulted in significant penalties for breaches. The proliferation of consumer-level AI tools has shifted the focus from technology to compliance, necessitating robust policies to prevent discrimination and protect sensitive data. Humma cites a case where an employer's AI screening software was found to discriminate based on age, leading to legal action and financial penalties.
Why It's Important?
The use of AI in employment decisions poses significant compliance challenges for HR leaders, especially in regulated industries like healthcare and financial services. The potential for AI tools to introduce bias or violate privacy laws can result in costly legal consequences and damage to an organization's reputation. As states like Illinois enact laws governing AI in employment, companies must ensure their policies are comprehensive and specific to avoid discrimination and protect confidential information. The EEOC holds employers accountable for any bias introduced by AI tools, even if they did not develop the technology. This underscores the importance of proactive measures to align AI use with legal requirements and prevent potential violations.
What's Next?
Organizations are expected to develop and implement detailed AI use policies that clearly define what constitutes confidential information and how it should be handled. HR leaders must educate employees on the implications of using AI tools and ensure compliance with evolving regulations. As more states consider legislation on AI in employment, companies should stay informed and adapt their practices to meet new legal standards. Monitoring and training obligations may become more common as part of consent decrees in cases of discrimination, emphasizing the need for ongoing vigilance and policy updates.
