TL;DR: California’s updated employment rules expand non-discrimination obligations to automated-decision systems used in hiring, promotion, and related workforce decisions, while extending record retention to four years and elevating annual bias audits, according to Holistic AI. The practical lesson is that governance must now cover data, model behaviour, documentation, and accountability across the full decision lifecycle.
NHIMG editorial — based on content published by Holistic AI: One Month until California’s ADS Regulations Come into Effect: Are You Ready?
Questions worth separating out
Q: How should employers govern AI hiring tools that influence employment decisions?
A: Treat them as regulated decision systems, not just software.
Q: Why do automated decision systems create compliance risk even when humans review the output?
A: Human review does not remove risk if the system materially shapes the candidate pool, ranking, or decision options before the reviewer acts.
Q: What do organisations get wrong about bias audits for hiring technology?
A: They often treat audits as a one-time validation instead of an ongoing control.
Practitioner guidance
- Inventory every automated hiring and workforce decision workflow Map systems that screen, rank, assess, or recommend outcomes for hiring, promotion, compensation, and training.
- Retain the full decision evidence chain for four years Preserve applications, personnel files, referral data, selection criteria, ADS inputs, and outputs under formal retention rules so that fairness and compliance claims can be reconstructed later.
- Require documented bias testing before deployment Ask vendors for prior anti-bias testing, then run your own audits using real-world data where possible and keep the methods and results in a defensible record set.
What's in the full article
Holistic AI's full blog covers the operational detail this post intentionally leaves for the source:
- The full breakdown of which HR tools may qualify as ADS under California's definitions, including borderline cases.
- Vendor-facing documentation and audit expectations for bias testing, validation, and design transparency.
- Practical preparation steps for employers and vendors that need to operationalise compliance before October 1, 2025.
- The article's framing of how existing equal opportunity laws interact with the updated California requirements.
👉 Read Holistic AI's analysis of California's ADS regulations and hiring compliance →
California ADS regulations: what HR and IAM teams need to know?
Explore further
Compliance is now a lifecycle problem, not a point-in-time review. California’s ADS rules make it clear that employment automation must be governed across design, deployment, output retention, and audit response. The organisation that treats bias testing as a one-off exercise will miss the operational reality that models, criteria, and data drift over time. Practitioners should therefore manage ADS controls as a continuous governance lifecycle, not a policy checkbox.
A question worth separating out:
Q: Who is accountable when automated applications distort hiring decisions?
A: Accountability usually spans recruiting, fraud, and security leadership because the problem crosses workflow, identity, and risk management. If a regulated process depends on application data, teams should document who owns detection, who owns escalation, and who approves control changes when fraud signals rise.
👉 Read our full editorial: California ADS rules raise the bar for hiring tool governance