How do we regulate the algorithm?

AI learns patterns from historical data and uses them to make predictions or generate new outputs. If the specific data reflects past inequalities, the algorithm may replicate or even amplify them. This is severely concerning in recruitment, where AI tools may inadvertently favour
certain demographics. 

This could constitute unlawful discrimination under the Equality Act 2010 and employers would remain liable for any discriminatory outcomes. Therefore, this places a clear duty on employers to audit AI tools for bias, understand how decisions are generated, and ensure human oversight remains central.

There is no doubt that there is a lack of transparency when using AI due to the systems being difficult to interpret. In turn, this raises privacy concerns and is problematic, especially due to large amounts of personal data being processed. Employers tend to use AI tools to influence recruitment, performance assessments or disciplinary outcomes where this lack of clarity becomes a significant legal concern.

In particular, employees have the right to understand how decisions affecting them are made. This expectation is reinforced by UK GDPR which requires employers to provide clear privacy notices, explain the core logic behind automated decision making; and offer the right to request human involvement where decisions have significant effects. If an employee disputes an outcome, employers will need to demonstrate how AI contributed to the decision and why it was fair. Relying on opaque technology without being able to justify its outputs risks undermining both legal compliance and employee trust.

Fairness in processes

Employers must be aware that even if AI tools are used, for instance, to flag performance concerns or detect misconduct, disciplinary decisions must still comply with the ACAS Code of Practice, which emphasises fairness, transparency and the right to respond. 

In particular, employers must ensure that human decision makers review AI-generated data, employees can challenge or contextualise findings and that decisions are not solely automated. 

A failure to follow a fair process could render a dismissal unfair, regardless of the technology involved. 

Generative AI in the workplace

Employers should communicate clear policies to their employees around the use of generative AI in the workplace. The policy should clearly define the purpose and scope of AI use, including specifying approved tools and acceptable use cases. It should also outline the rights and obligations of employees, ensuring transparency regarding monitoring, data security, and the handling of sensitive information. The policy should include provisions to manage risks associated with generative AI tools, such as prohibiting the input of commercially sensitive or proprietary data into publicly accessible AI systems and ensuring that employees understand the limitations of AI outputs, including potential inaccuracies, biases or hallucinations. 

Employers should establish clear guidelines on who is permitted to use AI tools, the purposes for which they may be used, and the types of data that can be input into these systems. Additionally, the policy should require employees to review AI-generated outputs for accuracy and compliance with company standards.

The UK has not yet introduced a standalone AI law, although regulatory expectations are increasing. Regulators such as the ICO have already issued guidance on AI and data protection, and employment tribunals are beginning to encounter AI‑related disputes. 

Employers should conduct thorough due diligence on AI systems and they should consider conducting AI impact assessments before deployment, audit systems regularly for bias or inaccuracies and provide relevant training. Most importantly, employers should update any relevant polices on recruitment, monitoring and data protection and ensure that human oversight is prevalent in all employment decisions. 

Overall, AI is rapidly becoming part of everyday workplace decision making, but its adoption brings legal responsibilities that employers cannot overlook. Ensuring fairness, transparency and accountability is essential, particularly as tribunals and regulators begin to scrutinise algorithmic processes more closely. 

Employers who take time to understand how their systems operate and embed strong governance and human oversight will be better equipped to manage risk while still benefiting from innovation.

Find out more about Woodfines Solicitors by visiting our website here.