Hiring is the most regulated application of knowledge-work AI. NYC Local Law 144, EEOC guidance, state-level bias-audit requirements, GDPR implications, India's evolving data protection framework, and the general fact that wrongful-termination and discriminatory-hiring lawsuits are expensive. Building HR AI that earns adoption without creating legal exposure is a compliance-first design problem. This post is the stack we actually deploy.
What the regulations actually require
Broadly across jurisdictions: (1) If AI is used in employment decisions, candidates must be informed. (2) Employers are liable for discriminatory impact regardless of intent — the AI can produce disparate impact on protected classes and the employer is responsible. (3) Bias audits are increasingly required (NYC annually, EU forthcoming). (4) Candidates have right to challenge decisions and in some cases to know what data was used.
Practical implication: every HR AI feature gets legal review before launch. Not during. Before. Skip this and you ship a feature you'll need to tear out after an audit or a complaint.
Patterns that work
Resume screening assistance — not decision
AI reads resumes against a job description, flags alignment signals, ranks candidates for reviewer efficiency. The reviewer still reads each promising resume and makes the shortlist decision. The AI is a priority-sorter, not a filter. Logs capture the full ranking, allowing bias audits to check that no protected class is being systematically deprioritized.
Feature restrictions that matter: no features that could serve as proxies for protected classes. Names, addresses, universities (can proxy for nationality, socioeconomic status), employment gaps (can proxy for pregnancy, disability) all require careful handling — often exclusion from the ranking signal even if they appear in the resume.
Interview scheduling and coordination
Low-risk, high-value. Calendar coordination, prep materials, reminder emails. Pure productivity win; avoids decision-making entirely.
Job description quality checks
AI reads JD drafts, flags biased language ('rockstar,' 'cultural fit' without specification, gendered terms), suggests more inclusive alternatives. Directly addresses a known source of applicant-pool bias.
Employee-facing HR Q&A
Policy questions, benefits explanations, leave procedures. RAG over the employee handbook with careful guardrails (no personalized benefits decisions, no representations that could create contractual obligations). High adoption if you get the scope right.
Performance review drafting
Given goals and periodic check-in notes, draft performance reviews for manager editing. Every review is human-edited and signed. AI handles the tedium; manager exercises judgment.
What fails or gets pulled
Video-interview analysis ('reading' candidates from their video). Multiple vendors have been forced to change products or pull features after bias audits revealed discriminatory impact against protected classes. The underlying problem — facial features and vocal patterns correlate with protected-class membership — is not solvable by more data.
Automated decision-making in hiring. Illegal in many jurisdictions without specific consent and challenge rights; exposes the employer to significant liability. Any 'fully automated screening' product is shipping something that can't legally operate in NYC, Illinois, California, most of the EU, or India as drafted.
Performance-management automation at scale. Using AI to identify underperformers for action is a minefield. The AI identifies patterns that may correlate with protected-class status; the employer is liable for the action.
The deployment discipline
Before launching any HR AI feature: (1) legal review, (2) bias audit against the training data or decision outputs, (3) documentation of the human-in-loop flow, (4) audit log design. Every decision logged with the AI's contribution, the human decision, and the rationale. This audit trail is what you'll need when complaints come.
Compliance cost is significant. Budget 20-30% of engineering effort on it. Skipping this is how HR AI products become legal incidents.