Workforce Governance in an Era of Constant Change

Most workforce leaders never applied for the role of AI governance officer. Yet as automated tools became integrated into screening, scheduling, and performance reviews, AI oversight became part of their responsibilities. Today, CHROs, compliance officers, and security leaders must oversee automated decisions while the rules governing them continue to change.

In the last 18 months, influential AI regulatory frameworks changed substantially. In Colorado, three weeks after a federal court stayed enforcement of the Colorado AI Act, a new law was enacted repealing and replacing the previous one, this time narrowing the employer’s disclosure obligations relating to automated decision-making technology in employment.

During this same period, the federal government withdrew EEOC guidance on AI in hiring and deprioritized disparate impact enforcement, but in the courts, a federal judge certified a class of older job applicants and allowed their claim of nationwide age discrimination to proceed against Workday over its AI screening tools.

For workforce leaders, keeping pace with changing regulations has become a central governance challenge.

Compliance Calendars Have Stopped Holding Still

In the past, governance typically involved an annual review of compliance with a stable set of rules. The rapid evolution of state and federal rulemaking about using AI in hiring, employment, performance scoring, and dismissal requires workforce leaders’ sustained attention.

In Illinois, an amendment to the Illinois Human Rights Act requiring employers to notify applicants and employees when AI affects employment-related decisions became effective on January 1, 2026. The state published implementing rules in May, then withdrew them in June without announcing a revised timeline. The statutory provisions are in full effect, but the guidance explaining how to comply is still missing.

California employers covered by the state’s ADMT rules face a January 1, 2027 compliance deadline for pre-use notices and consumer opt-out rights, with initial risk assessments for covered pre-existing processing due by December 31, 2027.

Governance Needs Named Owners

To remain updated and fully compliant with applicable laws and regulations, management must assign responsibilities for oversight of automated tools affecting employment to named individuals. Someone must own inventories of AI tools and how they are used. They or another named staff member must track when the rules require notice or disclosure and know who is responsible for drafting and approving the language.

Nebulous ownership or shared responsibility invites gaps that no one notices until government officials come knocking.

The Durable Requirements Repeat Across Frameworks

The fact that any statute can be amended, repealed, or stayed by a court might suggest a lack of fundamental regularity. However, throughout the recent period of frequent change, a few essential practices have remained consistent:

• Know which automated tools your organization uses.
• Notify people when those tools affect them.
• Document the assessment conducted before your team decided to use that tool.
• Keep a person with authority in the decision loop.
• Hold vendors to the same standards you hold your own organization.

Building on these five constant practices gives an organization what a statute-by-statute, wait-and-see approach cannot. Colorado’s changing framework illustrates the value of this approach. Organizations that already inventory their automated tools and document their review processes are better positioned to adapt as requirements evolve.

Vendor Answers Become Your Compliance Record

Employers remain responsible for how they use third-party tools in workforce decisions. Before adopting automated technology, organizations need to understand what the tools evaluate, how they make decisions, and what happens when data is inaccurate. Three questions that help. What information does the tool evaluate, and what does it exclude? Does someone with decision-making authority review the results before action is taken? What happens if the underlying data is inaccurate? Developing new rules and amending existing regulations define the governance problem facing workforce leaders.

Screening provides a practical example. PostHire continuously monitors primary-source criminal records and provides timely alerts about relevant criminal activity rather than behavioral or financial indicators. These alerts give employers timely information to review, rather than automatically triggering employment decisions.

Employee Trust Does Not Track Effective Dates

Employees typically do not read their state’s weekly official rulemaking publication. They judge their employer’s practice as it applies to them. If no management representative can explain a decision, they read it as arbitrary, whether it complies with regulations or not. In a class action lawsuit filed in early 2026, job applicants allege that Eightfold AI’s hiring platform scored applicants without their knowledge, a practice they claim was akin to consumer reports requiring notice, consent, and dispute rights under federal consumer law.

Human oversight remains an important safeguard when automated tools influence consequential employment decisions. Maintaining a clear and detailed record of those human interactions ensures an organization can document its compliance. That paper trail of human oversight also encourages the workforce’s faith in the fairness and accountability of personnel decisions.

Regulations will continue to evolve, but the foundations of effective workforce governance remain consistent: clear accountability, reliable data, responsible vendors, and human oversight. Organizations that build these practices into everyday operations will be better prepared to adapt, regardless of how the rules change.