AI and HR in CA

By VICKY BROWN

Listen to this episode on

Artificial intelligence is already reshaping how businesses operate – especially in areas like hiring, evaluations, and employee management. But if you’re running a business in California, using AI in these areas comes with new and serious compliance obligations.

Over the past year, the state of California passed two major sets of regulations that directly impact how AI can be used in employment. These rules apply to all businesses, not just big tech. And if you’re a small business owner using automated systems to support HR decisions – even simple resume filters or chatbot interviews – these laws could already apply to you.

Let’s take a closer look at what’s changed, what it means, and how you can stay compliant.

The First Wave: California Civil Rights Department (CRD) Rules

As of October 1, 2025, California’s Civil Rights Department has made it clear: if AI or automation results in discriminatory outcomes, the employer is still responsible. These rules fall under the Fair Employment and Housing Act (FEHA), and they mark a significant shift in accountability.

Whether you’re using in-house software or a vendor tool, if the system ends up screening out certain applicants based on age, disability, race, or other protected categories, you can be held liable – even if you didn’t build the tool yourself.

Here’s what’s required:

  • No discrimination – period. If an automated decision-making system (ADS) causes bias, you’re on the hook.
  • Bias audits are strongly encouraged. While not mandatory, conducting audits helps demonstrate good faith if you’re ever challenged legally.
  • Keep your records. You must retain all documentation related to ADS use for four years, including inputs and outputs.

The definition of AI under these rules is intentionally broad. Resume screeners, video interview scoring tools, and algorithm-driven performance reviews can all fall under the category of “automated decision systems.”

…Whether you’re using in-house software or a vendor tool, if the system ends up screening out certain applicants based on age, disability, race, or other protected categories, you can be held liable – even if you didn’t build the tool yourself.

The Second Wave: California Privacy Protection Agency (CPPA) Rules

Starting January 1, 2026, California’s privacy regulators – through the Consumer Privacy Act (CCPA) – will enforce a second layer of requirements. These focus on Automated Decisionmaking Technologies (ADMT), and the lens is data privacy and employee rights.

If you’re using automated tools to make “significant” employment decisions – think hiring, promotions, terminations, or compensation – you’ll need to:

  • Conduct formal risk assessments. These must evaluate how the tool works, what risks it poses, and what you’re doing to mitigate those risks.
  • Provide notice and transparency. Employees and applicants must be informed if automation is being used to make employment decisions. In some cases, they may even have the right to opt out.
  • Disclose how data is used. Individuals can request details on how their data is collected, processed, and factored into decisions.

The bottom line? You can’t just plug in a tool and hope for the best. You need to understand how it works and be ready to explain it.

One More Law – That Didn’t Pass (Yet)

While two major rule sets are already here or coming soon, a third – SB 7, also known as the “No Robo Bosses Act” – was vetoed in October 2025. It would have gone even further in limiting AI in employment, but Governor Newsom opted to wait and see how the current rules play out before adding more layers.

Even so, SB 7 is worth watching. Its journey to the governor’s desk shows that lawmakers are serious about tightening control on AI in the workplace – and it could be revived in a future legislative session.

Whether you’re an entrepreneur jumping into a leadership role, a seasoned business pro with new HR responsibilities, or just starting your HR career – we’ve got the right path to guide you through your HR hurdles.

Check out the Leaders Journey Experience.  This online education platform holds the LJE Masterclass, HR SimpleStart Academy and HR FuturePro Academy.

Not sure where to start – take the quiz!

What California Business Owners Should Do Now

If you’re a founder, first-time employer, or managing a small team, here’s how to stay ahead:

  1. Vet your tools. Ask vendors whether they’ve conducted bias audits and risk assessments. Don’t assume compliance is built-in.
  2. Review your systems. Understand what automated tech you’re already using – even tools baked into your hiring platform or CRM.
  3. Update your policies. Transparency is now a legal requirement. Revise your handbooks and onboarding documents to reflect new employee rights.
  4. Document everything. Keep a record of how decisions are made, what tools are used, and how you’ve addressed potential risks.

Leadership in the Age of AI

AI isn’t going away. In fact, it’s going to become even more embedded in how we lead and grow our businesses. But that doesn’t mean handing over the reins without understanding the risks.

As a small business owner in California, you don’t need to become a tech expert. But you do need to be a responsible, informed leader. That means staying curious, asking questions, and building systems that are fair, transparent, and compliant from the start.

Because in the end, it’s not about whether AI is good or bad. It’s about how we use it – and whether we’re ready to lead with clarity, integrity, and intention.

Spread the word

This website uses cookies to ensure you get the best experience on our site.