By Johannes Sundlo, AI & Future of Work Advisor. I help leaders and HR teams turn AI into adoption that sticks, through keynotes, workshops and change programs.
Ethical AI in HR is not a poster on the wall. It is a set of choices about how you screen candidates, rate performance, and watch how people work. Get those choices right and AI makes the team fairer and faster. Get them wrong and you carry the legal, reputational, and human cost. This playbook keeps things practical: the principles that matter, where they bite in real HR work, and a short list of governance steps you can adopt without slowing everything down.
The principles that matter
Most ethical AI frameworks land on the same five ideas. You do not need to memorize a standard to use them. You need to know what each one asks of you in plain terms.
- Fairness and bias. The system should not disadvantage people based on protected traits like gender, age, ethnicity, or disability. Models learn from past data, and past hiring data often carries old patterns. Without checks, the tool repeats them at scale.
- Transparency. People affected by a decision should be able to understand, in everyday language, that AI was involved and roughly how it works. Candidates and employees do not need the source code. They do need an honest account.
- Privacy. Collect the minimum personal data the task needs, use it only for that purpose, and protect it. AI makes it tempting to hoover up everything. Resist that.
- Human oversight. A person stays accountable for the outcome and can intervene, override, or reject the system’s output. The AI advises. A human decides.
- Accountability. Someone owns each AI use case by name. When a decision is questioned, there is a clear answer to “who is responsible and how do we review this.”
How the principles apply to real HR uses
Hiring and screening
This is where the risk is highest, because the stakes for the individual are high and the volume is large. A resume screener trained on past hires can quietly favor the profiles you already employ. Before you trust a tool, ask the vendor how it was tested for bias across groups, and ask to see the results. Keep a human reviewing borderline and rejected candidates rather than auto-filtering. Tell applicants when AI is part of the process. None of this slows good hiring. It protects it.
Performance management
AI can summarize feedback, surface patterns, and draft reviews. It should not assign a rating on its own. Performance touches pay, promotion, and exits, so the manager owns the judgment and can explain it without pointing at a score. Use AI to reduce the busywork around reviews, not to outsource the verdict.
Workplace monitoring
Productivity and activity tracking is the area most likely to erode trust. The test is proportionality: is what you measure necessary for a legitimate purpose, and do people know about it. Continuous surveillance dressed up as analytics tends to fail both the legal and the cultural test. Be specific about what you track, why, and for how long, and tell people plainly.
A short governance set HR can adopt
You do not need a committee of twelve. You need a few habits that hold up under scrutiny. This is the operational core of AI adoption that survives contact with reality.
- Keep an inventory. List every AI tool touching HR decisions, what it does, what data it uses, and who owns it. You cannot govern what you have not written down.
- Run a quick risk check before adoption. For each use, ask who is affected, what could go wrong, and how a person can step in. High-stakes uses like hiring get more scrutiny than a meeting-notes summarizer.
- Demand evidence from vendors. Ask how the model was tested, what data it was trained on, how bias is monitored, and where your data goes. A serious vendor has answers. Put the key ones in the contract.
- Define the human checkpoint. For each use, name who reviews outputs and when, and make sure they have the authority and time to override.
- Be transparent with people. Tell candidates and employees when AI is involved and give a route to ask questions or contest a decision.
- Review on a schedule. Re-check high-risk tools at set intervals. Models drift and data shifts, so a tool that was fair last year may not be this year.
Write this down as one short policy page rather than a thick manual nobody reads. The point is that someone can pick it up and act on it.
The EU AI Act, at a high level
If you operate in or hire into the EU, the AI Act is the regulation to know. It sorts AI systems by risk, and several common HR uses land in the high-risk category: tools used for recruitment and selection, and tools that influence decisions on promotion, task allocation, or termination. High-risk does not mean banned. It means obligations.
In practice, high-risk HR systems come with expectations around risk management, data quality, documentation, human oversight, and transparency to the people affected. Much of that overlaps with the governance set above, which is the useful part: build the habits once and you cover both the ethical case and a large share of the compliance case. The Act also bans a few specific practices, such as inferring emotions in the workplace, so check current guidance before deploying anything that reads sentiment or affect. This is not legal advice. When a use case sits in the high-risk zone, loop in legal early rather than after launch.
Where to start
Pick your highest-stakes AI use, usually hiring, and run it through the governance set this week. Write the inventory entry, name the human checkpoint, and ask your vendor the hard questions. One real use case done well teaches you more than a policy written in the abstract, and it sets the pattern for everything else in AI for HR.
If you want help turning these principles into habits your team will keep, here is how to think about AI adoption that sticks →