AI at Work: What the Law (and the Risk) Looks Like

AI and algorithmic decision-making is now deeply embedded in recruitment, performance tracking, and even disciplinary decisions. But the legal risks around automated decision-making is still evolving, and employers face serious compliance risks.
What does the law say?
Under UK GDPR, employees have the right not to be subject to solely automated decisions that have a significant effect on them. This includes decisions about recruitment (for example, CV screening by AI), disciplinary or capability outcomes, and performance rankings.
Where such processing occurs, employers must:
- Provide meaningful information about the logic involved.
- Offer the right to obtain human intervention.
- Enable the individual to contest the decision.
Key Risks
- Discrimination: biased data can lead to unlawful outcomes.
- Lack of transparency and explainability: AI systems are often ‘black boxes’, making it difficult to explain how decisions are made.
- Lack of documentation: employers may struggle to prove compliance without a proper audit trail.
- Failure to notify or offer human review.
What employers should do
- Audit your use of AI tools in HR processes.
- Ensure there is always a human in the loop.
- Ensure transparency and accountability mechanisms are in place.
- Update internal data protection policies and privacy notices.
- Provide training to HR and senior leadership on AI compliance and ethical considerations.
Boardside can support you in designing ethical and legally compliant approaches to AI in the workplace. Call us on 0330 0949338
Please share Boardside's expertise and insights with colleagues and associates. Thank you.
Working closely with you, we can navigate the hurdles you face, to build a stronger business and to achieve commercial advantage. Call us for an initial conversation on 0330 0949338
